last executing test programs: 1m55.325381222s ago: executing program 3 (id=1124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r2}, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd25, 0x4, {0x2}}, 0x14}}, 0x800) setreuid(r3, r3) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xf5}], 0x1, 0x22, 0x0) syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000340)="93", 0x1, 0x4000014, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a91831178f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aae", 0xc9}], 0x1}}], 0x1, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b480bca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd05f31fce448f082fde6de33abb00000010003732f110056daba2d324c65e7bec6c00752f9e5f12e7e3c05dcda8d7a0845a5cd34add37e17c7e7f7487bd03d29744e423", 0x57}], 0x0) sendto$inet(r6, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m55.145455424s ago: executing program 3 (id=1126): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[], 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.high\x00', 0x2, 0x0) dup(r4) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1m54.676021015s ago: executing program 3 (id=1129): r0 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m54.553386793s ago: executing program 3 (id=1130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x3, 0xc5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) pread64(r0, &(0x7f0000000300)=""/187, 0xbb, 0x9) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockname$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x262}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100033060000000000000000fe80000000000000c4000000efa73bb2758c6a1ebc480380000000bbac1e0001000000000000000000000000000007ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d232000000ac1e0101000000000000000000000000fcffffffffffffff00000000000000000b000000000000000500000000000000fcffffffffffffff000000000000000001000000000000000c000000000000000000000000000000ff7f0000000000000000000000000000b8ad000000000000050000000000000001000000000000000000000002000400b00000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xb4, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x2}, @free_buffer={0x40086303, r3}, @acquire={0x40046305, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x72890bf0}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 1m54.552575573s ago: executing program 3 (id=1131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x62d00, 0x87) r2 = open_tree(r1, &(0x7f00000002c0)='./file0\x00', 0x1800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002380)={0x20, 0x0, r4, {0x5, 0x4, 0x9, 0x5}}, 0x20) ftruncate(r1, 0x3) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002400)={0x4, &(0x7f00000023c0)=[{0x3ff, 0x0, 0x0, 0x5}, {0x4, 0x8, 0x1, 0x2}, {0x1, 0x7f, 0x7, 0x1}, {0x800, 0x8, 0x9, 0x58a}]}, 0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002440)={0x0, 0x1, {0x5, @struct={0x5, 0x941}, 0x0, 0x7, 0x6, 0x101, 0xc, 0x7, 0x20, @struct={0x101, 0x4309}, 0x8, 0x3, [0x3, 0x8, 0x7, 0x6, 0x3, 0x100000000]}, {0xe, @struct={0x1, 0x4}, 0x0, 0x0, 0x4, 0x9, 0x5, 0x8001, 0x0, @struct={0xfffffffd, 0x1}, 0x7fff, 0x1000, [0x5, 0x10000, 0x85, 0x8, 0x627, 0xa5f]}, {0x6, @usage=0x9, 0x0, 0x2, 0x2, 0x401, 0x6, 0x8000, 0x490, @usage=0x2, 0x5, 0x3, [0x401, 0x18, 0x12, 0x4, 0x2, 0x7ff]}, {0x7, 0x5, 0x3}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002840)={r8, 0x3, 0x3}) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000002c40)=0x101, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) r9 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000002c80)) recvfrom$unix(r2, &(0x7f0000002cc0)=""/4096, 0x1000, 0x100, &(0x7f0000003cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) fgetxattr(0xffffffffffffffff, &(0x7f0000003d40)=@known='trusted.overlay.opaque\x00', &(0x7f0000003d80)=""/91, 0x5b) sendto(r7, &(0x7f0000003e00)="14223defe48147c4f2e4f1d9fc0c443dacf06e8a4506", 0x16, 0x20000001, &(0x7f0000003e40)=@llc={0x1a, 0xfffe, 0x9, 0x8, 0x7, 0xf8}, 0x80) close_range(r1, r3, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000003ec0)) mount$9p_fd(0x0, &(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40), 0x0, &(0x7f0000003f80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@msize={'msize', 0x3d, 0xe964}}], [{@fowner_lt={'fowner<', r5}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r10, 0x7, &(0x7f0000004040)={0x1, 0x4, 0x0, 0x8000000000000001, r6}) fstat(r10, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000004340)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004300)={&(0x7f0000004140)={0x184, 0x2d, 0x8, 0x70bd2b, 0x25dfdbff, {0x10}, [@typed={0x8, 0xd8, 0x0, 0x0, @u32=0x3}, @generic="206ef993471c2318599fe233d0916f9a07707c6efb4a8c13021c003740afb8a101e13f4e6635bac827c3c93787bc3c023e2795c278c514213cfa39754437173c20533049161feb58f6baad883bf5e33e76f4c1a86c69edf8d8812dd88d16cbb7153f3d4d8c63af8af8d0", @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @uid=r11}]}, @nested={0xe2, 0xfe, 0x0, 0x1, [@nested={0x4, 0x14e}, @nested={0x4, 0x137}, @generic="a5afebedc448d141759dc5fb7682a5d9f79be0927dd2be63bd75f8ba10ce3f32c5dd253077d1a8505375ebe26d0080df547faaedae64b535ca2320484a7fc15c633749a7b4f30c788ac7b478af160ce04ee6b883a0c4081ac77bc5ef313e9f2aff1061a33c7fdc748da9879091393970944ae0f31c3288b4ad451eec3ed5bf00cff32236790ed29476487797eb5e96a47b850f831f90721f2fc6d4e9fada4a4cda89edd581aafcd20d6b46a3f8b2210907197c65bb7b7394f4a02b7b1e9128f369a08e16b57ac6e0c81cd153e66e", @nested={0x4, 0x141}, @nested={0x4, 0x11e}]}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x2}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000004380)={0x4, 0x10, 0x3}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000043c0), 0x10000, 0x0) 1m54.484058257s ago: executing program 3 (id=1132): unshare(0x4040400) r0 = socket$nl_route(0x10, 0x3, 0x0) fchown(r0, 0x0, 0xee01) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00001a00"/16], 0x10}}, 0x0) unshare(0x400) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 1m54.429987871s ago: executing program 32 (id=1132): unshare(0x4040400) r0 = socket$nl_route(0x10, 0x3, 0x0) fchown(r0, 0x0, 0xee01) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00001a00"/16], 0x10}}, 0x0) unshare(0x400) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 1m39.41755443s ago: executing program 4 (id=1398): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000205"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, 0xffffffffffffffff, 0x98b2f000) 1m37.106825312s ago: executing program 4 (id=1436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fstat(r3, &(0x7f0000000040)) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) fstat(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x0, @local}, 0x4a, {0x2, 0x0, @private=0xa010101}, 'syz_tun\x00'}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000008c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffffffffc3f, 0x1000000, &(0x7f0000000340)='J'}) 1m37.103637452s ago: executing program 4 (id=1438): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020100030e00000000000000fcdbdf2505000600001000000a004e2000000400fe800000000000000000000000000004000000000000000005000500320000000a004e2200000001fc000000000000000000000000000000010100000000000002001000"], 0x70}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020100030e00000000000000fcdbdf2505000600001000000a004e2000000400fe800000000000000000000000000004000000000000000005000500320000000a004e2200000001fc000000000000000000000000000000010100000000000002001000"], 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) dup(r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r5, &(0x7f0000003840)=ANY=[@ANYBLOB="0a0088a80180c2000002aaaaaaaaaabb86dd6d89cbdf001011fffc010000000000000000000000000000ff020000000000000000000000000001"], 0x4a) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'vlan1\x00', 0x8}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'vlan1\x00', 0x8}) 1m37.001484919s ago: executing program 4 (id=1439): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) fsetxattr$security_ima(r1, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "35a010b00277b8"}, 0x8, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x14, r3, 0x1, 0x70bd26, 0x25dfdb7b}, 0x14}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000300)='f2fs\x00', 0x2000000, &(0x7f0000000340)='802.15.4 MAC\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000400)='./file1/file0\x00', 0x0, 0x1085489, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m36.98692647s ago: executing program 4 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x5) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xe, 0x7, 0x7, 0x81}, 0x15, [0x10001, 0x40000, 0x4, 0xf, 0x639, 0x4, 0x4, 0x6, 0x10, 0x9, 0x80000100, 0xb, 0xb0f, 0x4, 0x6, 0x2, 0x4, 0x4cb6, 0x0, 0x1, 0xa, 0x7, 0x8, 0x3, 0x10, 0x4, 0xb2f2, 0xb, 0x0, 0x9, 0x2, 0x2d, 0x0, 0x8, 0x1, 0x0, 0x5743393a, 0x1, 0x2e, 0x8000, 0x2, 0x2, 0x8, 0xf, 0x10000, 0xfffffffe, 0x3, 0x101, 0xc, 0x6, 0xc601, 0xa, 0x1, 0x5, 0x5, 0x6, 0x5, 0x6, 0xfffff2e0, 0x4, 0x9, 0x8, 0x3, 0x100], [0x6, 0xc37, 0x7, 0x4, 0x5, 0x214, 0xd25, 0xf, 0x7, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1, 0x8, 0x2, 0x9, 0x6, 0xcbdb, 0x6, 0x4, 0xfc, 0xe3, 0x11, 0xa39a, 0x8, 0x73, 0x2, 0x0, 0x3, 0xa, 0x40, 0x4, 0x4, 0x0, 0x0, 0x6, 0x8001, 0x7, 0xf075, 0x3, 0x7, 0x3, 0x7d1b, 0x5, 0x5, 0x6, 0x6, 0x2, 0x2, 0x8, 0x69e, 0x6, 0x8246, 0x9, 0xacf, 0xedb, 0xe771, 0x0, 0x10000, 0xe0f9, 0x4, 0xd314], [0x5, 0x6, 0x9, 0x6, 0x6, 0x0, 0x2, 0x0, 0x1, 0x8, 0xffff, 0x401, 0x3, 0x7f, 0xfffffff2, 0x672, 0x5, 0x0, 0x3, 0x6, 0x80000000, 0x80000002, 0x6, 0x0, 0x2, 0x4, 0xf46, 0xffffffff, 0x8, 0x3ff, 0x6, 0x0, 0x8001, 0x33, 0x5, 0x4, 0x6, 0x4, 0x1, 0x3ff, 0x80000001, 0x0, 0x2, 0x6, 0x20000000, 0x10001, 0x10001, 0x628e, 0x7, 0x2, 0x7, 0x7fffffff, 0xe, 0x1, 0xffffffff, 0xb, 0x46, 0xa5f, 0xfff, 0x2, 0x7, 0xf, 0x1, 0x3db1], [0x0, 0x3, 0x1, 0xfffffff8, 0x3, 0x7fff, 0x4, 0x12, 0x2, 0x4, 0x9, 0x2, 0x9, 0x2, 0x3fe, 0xd, 0x1, 0x401, 0x3, 0x7ff, 0x5, 0x4, 0x4, 0xd, 0x1, 0x8, 0x80000001, 0x7f97, 0x401, 0x80000000, 0xd191, 0xe, 0x3141, 0x200, 0x5, 0x80, 0xd4, 0x9, 0x0, 0x8000, 0x1, 0x0, 0x101, 0x6, 0x8, 0x24, 0x5, 0x9, 0xffffffff, 0x80000000, 0x5c6, 0x5, 0x1, 0x9, 0xf1, 0x81, 0x9, 0x4, 0x3, 0x4, 0x1f8c, 0xffffffff, 0x5, 0x8]}, 0x45c) (async) r2 = socket$inet(0x2, 0x2, 0x1) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0), 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r6, 0xffffe000) mlock(&(0x7f0000aa4000/0x1000)=nil, 0x1000) 1m36.932467204s ago: executing program 4 (id=1441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r2, &(0x7f0000000140), 0x48) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m36.887658006s ago: executing program 33 (id=1441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000240), 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r2, &(0x7f0000000140), 0x48) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.693644277s ago: executing program 0 (id=3000): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x7709, 0x4000000000000) 3.693005427s ago: executing program 0 (id=3001): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_usb_ep_write(r1, 0x2, 0xe2, &(0x7f0000000200)="13774c736765f2be74b5efb3ab7c647c823191fb9f4d6e59d78e519276da00f69d13327d29638ff11f99311b8f7ed12f6272092c44ae21aa33ff4f30212d00a8db231f6920c5a862af9f18eec0bc4af35b7b7435ee2230b96c8b81da148bdd00b93efada7baa798bfc644db936ef5a26c20818825c2e62764c9a4e1dfa9d611deb169023c09a45af9493d3939b631846bebb3457ea69a71e29a469854564107c9a22d824ae07279268c5c61a5dbb77cf954d189ce9bb12afa3b3765d2b4521385010f1b7bce09775b6df7860919bcff968a3c45cf737fda55e787a5227bed175aa54") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000002, 0x2000011, r2, 0xffffd000) socket(0x25, 0x1, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmmsg$unix(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r7, &(0x7f0000000000)=""/72, 0x48) getpeername(r6, 0x0, &(0x7f00000001c0)) write(r3, &(0x7f0000000400)="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", 0x1f000) 3.2050454s ago: executing program 0 (id=3002): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x80010, 0xffffffffffffffff, 0x870dc000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000003c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) fchown(r2, 0xee00, 0x0) r3 = geteuid() fsetxattr$system_posix_acl(r2, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x5, r3}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x2) r4 = dup(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x8011) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x2ac}], 0x1}}], 0x1, 0x4000001) r6 = dup(r5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@volatile}]}) read$FUSE(r6, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r6, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xa}, 0x8) 1.186193932s ago: executing program 2 (id=3022): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000440)}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) prctl$PR_MCE_KILL(0x26, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 1.185891252s ago: executing program 2 (id=3023): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe6c000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, 0x0, 0x0, 0x70000, &(0x7f0000000000)={[{@uuid_on}, {@uuid_auto}, {@verity_on}, {@uuid_off}, {@index_on}, {@redirect_dir_off}, {@index_on}], [], 0x2c}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.185418252s ago: executing program 2 (id=3024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) read$FUSE(r3, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f0000000100)={0x78, 0xfffffffffffffffe, r4, [{0x5, 0x8, 0x13, 0x1, './binderfs/binder0\x00'}, {0x2, 0x6, 0x3, 0xaef2, '[$/'}, {0x1, 0xebc, 0x0, 0x7}]}, 0x78) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000008c0)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffffffffc3f, 0x1000000, &(0x7f0000000340)='J'}) 1.121712247s ago: executing program 2 (id=3025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x8, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1.121394547s ago: executing program 2 (id=3026): syz_usb_connect(0x1, 0x70, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x1a, 0x2, 0x53, 0x8, 0x2040, 0xc61a, 0xf496, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x10, 0x8, 0x10, 0xde, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0x10, 0x9, 0xe0, 0x7d, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x3, 0x1000, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x1}}]}}, {{0x9, 0x4, 0xaf, 0x3, 0x1, 0x2, 0x6, 0x0, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4c51}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x9c2f, 0x0, 0xe}, {0x6, 0x24, 0x1a, 0x6, 0x3f}}], [{{0x9, 0x5, 0x1, 0x1, 0x20, 0xc9, 0x9b, 0x1}}]}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="0277a19bfa87e5630bf7b77e67119d0fb003"]}, {0x0, 0x0}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x0, 0x0}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) eventfd2(0xffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000001b80)=0x7ff, 0x8) r3 = eventfd2(0x0, 0x80801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8503, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r3, 0x1ff, 0x2, r3}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) fsopen(0x0, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x4, 0x98, 0x1, {0x22, 0xd0a}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x4, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x4, 0x91}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x8, 0x79, 0xa0, 0x0, 0x9}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x458}}]}) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x1200, &(0x7f0000000140), 0x62}, 0x2}], 0x1, 0x40000406, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x2409c8c9, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000440)={0xc7, 0x0, 0x1}) sendto$inet6(r9, &(0x7f0000000040)="b5", 0x1, 0x6d91fb6102dc990c, 0x0, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r10, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0xffffffff, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 678.770426ms ago: executing program 1 (id=3049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x14, 0x21, 0x205, 0x70bd2b, 0x24dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x20, 0x70bd25, 0x25dfdbfe, 0xa, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x50) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 670.831407ms ago: executing program 1 (id=3051): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x66053000) 670.271446ms ago: executing program 5 (id=3052): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) write(r5, &(0x7f0000000200)="89", 0xffe3) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 627.213009ms ago: executing program 1 (id=3053): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)={0x10, 0x10, 0x821, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 626.975269ms ago: executing program 1 (id=3054): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r4}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 626.565249ms ago: executing program 1 (id=3055): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1/file0\x00', &(0x7f00000007c0)='anon_inodefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}, {@verity_require}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r3 = openat$cgroup_procs(r0, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025bd7000ffdbdf256900000000000300", @ANYRES32=0x0, @ANYBLOB="0000d400000000000000060004ffffffe200d40002000000000000002a3162c7c97270efbf4d8c380dbd1fdedf58189d0e334144ecf12e5a3c54019aa3016de4df62ed068fed99"], 0x20}, 0x1, 0x0, 0x0, 0x20040101}, 0x4801) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r6, 0x0, 0x4040140) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="1300f900141e73cfbd577cc7bd1f7dbb1071f4000500f900e60000009200fc006a0f773fe1e14293e6e324ca7e9bfa9907d187b00c3b0be09162025a3972a553805039ab659f9aaa8634b334354cb48dfcb265e92f948e077c407fd764cb16acb1f3a01efe252323bc10c5dace36e4b139f859d558a6b908b49a183394edec0ce71c43d8c47a2ff31557719eea62bb7c2eeec11ee8648443f8571e6f3ee66be30895e18104f928b0"], 0xcc}}, 0x1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40200241}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="e0540b0725227325cca2da890c6934bf0068aae116", @ANYRES16=r5, @ANYBLOB="000229bd7000fcdbdf258100000008000300", @ANYRES32=r7, @ANYBLOB="14003300a4000100703aea25a63d080211000000060066004888000006006600c5600000060066000008000049003300e0a807000802110000010802110000010bef194487defe040e0080c00c000501086c8502a4a4833aa42d1a0100101ab70000000000000600100003000000060009000000040000000a000600ffffffffffff0000040067000600660000600000"], 0xac}, 0x1, 0x0, 0x0, 0x4801}, 0x400c000) write(r0, &(0x7f0000000100)="8babdeed6e7ca459ec5dfcbeb54a731175852522887f0321c308af97f9cd20af46135519bb05fd08fb0b00398d526a7b00c0ff37ab95aac1e0949404d05e8d8d5cf037c3d702c1b23b10eced84a714460de187c026eabc03b02c4bcc51971301abb2c0efa5d674f0660d2471ba42e373", 0x70) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x804, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = eventfd2(0xffffffff, 0x1) read$eventfd(r8, &(0x7f0000000040), 0x8) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xffffffff, 0x4289df35, 0x6, 0x4, 0x8, 0xffffffffffffffff}, {0x4, 0x5, 0x5, 0x6, 0x96e, 0x2}], ['\x00', '\x00', '\x00', '\x00']}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x803, 0x0) 625.65558ms ago: executing program 1 (id=3056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x89) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x400, 0x1}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0xfff) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, &(0x7f00000003c0)={0x24, 0x8, 0x80}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r3, 0x5) r4 = accept4(r3, &(0x7f00000002c0)=@x25, 0x0, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20044014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty, 0xfffffffe}, 0x1c) sendto(r5, &(0x7f0000001400)="6923bf7afdad78526d73a67312e8bf8260adb9aefe9ee5cfaaf3b6b15a03a4a20ed5d72ab9511c6ef1d727f39a1209d5fa8754eb", 0xfffffffffffffe64, 0x40011, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close_range(r0, 0xffffffffffffffff, 0x0) 569.577823ms ago: executing program 2 (id=3057): ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x8, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace$poke(0x420f, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, r0, 0xaa6d3000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setresuid(0x0, 0xee01, 0x0) setns(r6, 0x24020000) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="003605000000a734d181ed"], 0x0}, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x48d, 0x0, 0x8}, {0x267, 0x0, 0x5}, {0x660, 0x0, 0xffffffffffffff1a}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000007000/0x2000)=nil, 0x2000}, 0x1}) 569.274103ms ago: executing program 5 (id=3058): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x3}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000400)={0xfffffffe, 0xffff8000, 0x6, 0x9357, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x10001, 0x4}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xc) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 563.076723ms ago: executing program 5 (id=3059): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x1, 0x3, 0x1}}, 0x14) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x10000002}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d6664fab1d2c72c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) creat(&(0x7f00000014c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) (async) read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="99742dbd7000fbdbdf2515000000400001802c0004001400010002004e20ac14141d00000000000000001400020002004e21ac14143700000000000000000d0001007564703a73797a3270"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, r7, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r10, 0x8948, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$BLKRRPART(r11, 0x125f, 0x0) 529.009526ms ago: executing program 5 (id=3060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000500fff3c00e1400", 0x26}], 0x1}, 0x0) syz_usb_connect(0x1, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0xf8, 0x28, 0xe5, 0x8, 0x12d1, 0x1402, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x40, 0xf3, 0x80, 0x0, [{{0x9, 0x4, 0xae, 0xd0, 0x0, 0x3d, 0xb5, 0xaf, 0x7, [@generic={0x2, 0xe}]}}, {{0x9, 0x4, 0xfc, 0xfc, 0x4, 0x33, 0x69, 0xfe, 0x6, [], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x6a, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x7, 0x7f, 0xa}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0xf, 0x0, 0x40}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x4, 0x1, 0x53, [@generic={0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x8c, 0x9, 0x2, 0xce, 0x8f, 0xc7, 0x8d, [@hid_hid={0x9, 0x21, 0xb12, 0x7f, 0x1, {0x22, 0x792}}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x3, 0xf8, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xeb, 0x6, 0x81}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) 178.579499ms ago: executing program 0 (id=3061): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8481, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}) (async) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000002d40)={0x2020}, 0x2020) 121.539013ms ago: executing program 0 (id=3062): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@private=0xa010102, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x33, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x2) (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 120.931492ms ago: executing program 0 (id=3063): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="00000000000000a90000", 0xa}], 0x2}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x40, 0x7, 0x10}}, 0x50) lchown(&(0x7f00000001c0)='./file0/../file0/file0\x00', r5, r6) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdlo=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x442, 0x9c) read$FUSE(r10, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xa5, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x200, 0x0, 0x0, 0x20000, 0x1, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r11 = dup(r1) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r11, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="f9ffe3c0000000", @ANYRESHEX=r11, @ANYBLOB=',ignoreqv,k']) r12 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r12, &(0x7f0000003800)={0x2020}, 0x2020) 16.806369ms ago: executing program 5 (id=3064): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0xfffffdf2, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3d}, @fda={0x66646185, 0x3, 0xffffffffffffffff, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=3065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000000)={0x2, 0x100000001}) kernel console output (not intermixed with test programs): ice strings: Mfr=0, Product=0, SerialNumber=0 [ 129.044783][ T1351] usb 3-1: USB disconnect, device number 52 [ 129.804393][ T385] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 129.954401][ T385] usb 3-1: Using ep0 maxpacket: 8 [ 129.960832][ T385] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.969185][ T385] usb 3-1: config 179 has no interface number 0 [ 129.975499][ T385] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 129.986742][ T385] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 129.998193][ T385] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 130.008323][ T385] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.021689][ T385] usb 3-1: config 179 interface 65 has no altsetting 0 [ 130.028621][ T385] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 130.037730][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.249088][ T385] usb 3-1: USB disconnect, device number 53 [ 130.438162][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 130.438181][ T36] audit: type=1400 audit(1759923753.226:509): avc: denied { setopt } for pid=5432 comm="syz.5.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.714446][ T385] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 130.814984][ T5445] rust_binder: Failed copying into alloc: EFAULT [ 130.815005][ T5445] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 130.821461][ T5445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 130.829764][ T5445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:884 [ 130.850393][ T5447] 9pnet: Could not find request transport: fC [ 130.874493][ T385] usb 6-1: Using ep0 maxpacket: 8 [ 130.881963][ T385] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.890382][ T385] usb 6-1: config 179 has no interface number 0 [ 130.896789][ T385] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 130.908088][ T385] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 130.919544][ T385] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 130.929778][ T385] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.942388][ T5453] rust_binder: 5452 RLIMIT_NICE not set [ 130.943155][ T385] usb 6-1: config 179 interface 65 has no altsetting 0 [ 130.955701][ T385] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 130.964822][ T385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.186184][ T385] usb 6-1: USB disconnect, device number 6 [ 131.206197][ T5487] rust_binder: Failed copying into alloc: EFAULT [ 131.206224][ T5487] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 131.212835][ T5488] rust_binder: Failed copying into alloc: EFAULT [ 131.220903][ T5487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 131.221546][ T1351] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 131.227763][ T5487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:180 [ 131.244914][ T5488] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 131.254173][ T5488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 131.262539][ T5488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:180 [ 131.297236][ T5495] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1720'. [ 131.316187][ T5497] rust_binder: Error while translating object. [ 131.316236][ T5497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.322707][ T5497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185 [ 131.352833][ T5503] netlink: 'syz.5.1723': attribute type 63 has an invalid length. [ 131.370160][ T5503] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1723'. [ 131.381168][ T5503] rust_binder: Write failure EFAULT in pid:188 [ 131.381227][ T5503] rust_binder: Write failure EFAULT in pid:188 [ 131.402673][ T5509] rust_binder: 191: no such ref 1 [ 131.414007][ T5509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 131.414296][ T5509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 131.414430][ T1351] usb 3-1: Using ep0 maxpacket: 8 [ 131.424848][ T1351] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 131.452182][ T1351] usb 3-1: config 0 has no interface number 0 [ 131.461339][ T1351] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 131.470637][ T1351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.478722][ T1351] usb 3-1: Product: syz [ 131.482921][ T1351] usb 3-1: Manufacturer: syz [ 131.487621][ T1351] usb 3-1: SerialNumber: syz [ 131.492994][ T1351] usb 3-1: config 0 descriptor?? [ 131.512916][ T5512] rust_binder: Write failure EFAULT in pid:193 [ 131.601722][ T5521] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1728'. [ 131.619211][ T5521] overlayfs: failed to clone upperpath [ 131.799119][ T1351] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 131.805622][ T1351] usb 3-1: No streaming interface found for terminal 6. [ 131.812692][ T1351] usb 3-1: Failed to create links for entity 5 [ 131.818934][ T1351] usb 3-1: Failed to register entities (-22). [ 131.826992][ T1351] usb 3-1: USB disconnect, device number 54 [ 131.917372][ T5557] binder: Unknown parameter 'context甜责[7' [ 131.952422][ T5561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.965097][ T5563] binder: Unknown parameter '' [ 132.518248][ T5577] overlay: Unknown parameter 'dont_appraise' [ 132.524944][ T5577] binder: Unknown parameter '00000000000000000006' [ 132.632953][ T5586] x_tables: duplicate underflow at hook 1 [ 134.361598][ T5669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5669 comm=syz.5.1784 [ 134.368720][ T5674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5674 comm=syz.5.1784 [ 134.386727][ T5669] netlink: 'syz.5.1784': attribute type 15 has an invalid length. [ 134.494636][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 134.504246][ T5683] fuse: Bad value for 'fd' [ 134.583808][ T5689] 9pnet_fd: Insufficient options for proto=fd [ 135.192304][ T36] audit: type=1326 audit(1759923757.976:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.215717][ T36] audit: type=1326 audit(1759923757.976:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.239134][ T36] audit: type=1326 audit(1759923757.986:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90c6f8d710 code=0x7ffc0000 [ 135.262511][ T36] audit: type=1326 audit(1759923757.986:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90c6f8d710 code=0x7ffc0000 [ 135.285846][ T36] audit: type=1326 audit(1759923757.986:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.309173][ T36] audit: type=1326 audit(1759923757.986:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.332549][ T36] audit: type=1326 audit(1759923757.986:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.355890][ T36] audit: type=1326 audit(1759923757.986:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.372378][ T5712] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1800'. [ 135.379457][ T36] audit: type=1326 audit(1759923757.986:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.2.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f8eec9 code=0x7ffc0000 [ 135.436346][ T5724] overlayfs: failed to clone upperpath [ 135.651027][ T5739] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 135.660921][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 135.660939][ T36] audit: type=1400 audit(1759923758.446:606): avc: denied { relabelto } for pid=5738 comm="syz.0.1808" name="rnullb0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 135.705265][ T36] audit: type=1400 audit(1759923758.446:607): avc: denied { associate } for pid=5738 comm="syz.0.1808" name="rnullb0" dev="tmpfs" ino=804 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 135.940857][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 136.088435][ T5750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1813'. [ 136.154336][ T5754] fuse: Bad value for 'fd' [ 136.200555][ T36] audit: type=1400 audit(1759923758.986:608): avc: denied { read write } for pid=5757 comm="syz.0.1817" name="rnullb0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 136.226771][ T36] audit: type=1400 audit(1759923758.986:609): avc: denied { open } for pid=5757 comm="syz.0.1817" path="/dev/rnullb0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 136.253373][ T36] audit: type=1400 audit(1759923758.986:610): avc: denied { map } for pid=5757 comm="syz.0.1817" path="/dev/rnullb0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 136.289999][ T5768] tmpfs: Unknown parameter ':;2⊿HDO崪k瘗婀:蹣M薱k?3俓7o+Y;W` z鍯U\狸v蜾"揑頬:sU暪Br?璉碨榇Y,8' [ 136.869090][ T5784] overlayfs: failed to clone upperpath [ 136.887493][ T5786] 9pnet_fd: Insufficient options for proto=fd [ 137.181035][ T5823] 9pnet_fd: Insufficient options for proto=fd [ 137.333746][ T36] audit: type=1400 audit(1759923760.116:611): avc: denied { nlmsg_write } for pid=5846 comm="syz.5.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 137.436586][ T5855] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 137.446425][ T36] audit: type=1400 audit(1759923760.236:612): avc: denied { relabelto } for pid=5854 comm="syz.5.1850" name="ptp0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auth_cache_t:s0" [ 137.472935][ T36] audit: type=1400 audit(1759923760.236:613): avc: denied { associate } for pid=5854 comm="syz.5.1850" name="ptp0" dev="tmpfs" ino=477 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auth_cache_t:s0" [ 137.841879][ T5868] netlink: 'syz.1.1854': attribute type 27 has an invalid length. [ 138.164193][ T5888] netlink: 'syz.0.1860': attribute type 4 has an invalid length. [ 138.172129][ T5888] netlink: 'syz.0.1860': attribute type 2 has an invalid length. [ 138.275332][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 138.286040][ T5895] devpts: called with bogus options [ 138.670712][ T36] audit: type=1326 audit(1759923761.456:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.1.1866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x0 [ 138.838353][ T36] audit: type=1400 audit(1759923761.626:615): avc: denied { ioctl } for pid=5907 comm="syz.0.1868" path="/dev/rnullb0" dev="tmpfs" ino=804 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 138.909316][ T5919] netlink: 'syz.5.1873': attribute type 11 has an invalid length. [ 139.179457][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.193201][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.200925][ T5938] bridge_slave_0: entered allmulticast mode [ 139.212865][ T5938] bridge_slave_0: entered promiscuous mode [ 139.224186][ T5945] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1880'. [ 139.247259][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.260576][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.269414][ T5938] bridge_slave_1: entered allmulticast mode [ 139.284866][ T5938] bridge_slave_1: entered promiscuous mode [ 139.297436][ T5945] IPv4: Oversized IP packet from 172.20.20.170 [ 139.303896][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 139.310194][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 139.326753][ T5945] IPv4: Oversized IP packet from 172.20.20.170 [ 139.333211][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 139.339493][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 139.356416][ T5945] IPv4: Oversized IP packet from 172.20.20.170 [ 139.362857][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 139.369169][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 139.390571][ T5953] /dev/rnullb0: Can't lookup blockdev [ 139.401538][ T5945] IPv4: Oversized IP packet from 172.20.20.170 [ 139.532903][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.540074][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.547444][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.554526][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.652851][ T5938] veth0_vlan: entered promiscuous mode [ 139.670473][ T5938] veth1_macvtap: entered promiscuous mode [ 139.883847][ T5998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.039663][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 140.050417][ T6013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.050550][ T6013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13 [ 140.312177][ T6025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.321288][ T6025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 140.800421][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 140.800441][ T36] audit: type=1400 audit(1759923763.586:619): avc: denied { map } for pid=6055 comm="syz.1.1917" path="/552/cpuacct.usage_sys" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 140.845837][ T6071] overlay: ./file0 is not a directory [ 140.862012][ T6076] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1925'. [ 140.871253][ T6077] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1925'. [ 140.952529][ T6084] netlink: 'syz.0.1927': attribute type 10 has an invalid length. [ 141.020057][ T36] audit: type=1400 audit(1759923763.799:620): avc: denied { mounton } for pid=6096 comm="syz.2.1932" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 141.020150][ T6097] incfs: mount failed -22 [ 141.098935][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1936'. [ 141.266615][ T6118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6118 comm=syz.5.1939 [ 141.373318][ T36] audit: type=1326 audit(1759923764.149:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.1940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04b38eec9 code=0x0 [ 141.688548][ T6131] rust_binder: Error in use_page_slow: ESRCH [ 141.688578][ T6131] rust_binder: use_range failure ESRCH [ 141.694789][ T6131] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 141.700330][ T6131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 141.709607][ T6131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:40 [ 141.719757][ T6131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.729317][ T6131] rust_binder: Error in use_page_slow: ESRCH [ 141.735940][ T6131] rust_binder: use_range failure ESRCH [ 141.741990][ T6131] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 141.747691][ T6131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 141.755878][ T6131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:40 [ 141.890877][ T6150] /dev/rnullb0: Can't lookup blockdev [ 142.044335][ T63] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 142.204373][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 142.218657][ T63] usb 1-1: config 6 has an invalid interface number: 63 but max is 0 [ 142.222352][ T36] audit: type=1400 audit(1759923764.999:622): avc: denied { watch watch_reads } for pid=6200 comm="syz.1.1969" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 142.226852][ T63] usb 1-1: config 6 has no interface number 0 [ 142.255358][ T63] usb 1-1: config 6 interface 63 has no altsetting 0 [ 142.265542][ T63] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=ff.ab [ 142.280664][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.289017][ T63] usb 1-1: Product: syz [ 142.293222][ T63] usb 1-1: Manufacturer: syz [ 142.297922][ T63] usb 1-1: SerialNumber: syz [ 142.507379][ T63] ftdi_sio 1-1:6.63: FTDI USB Serial Device converter detected [ 142.516047][ T63] ftdi_sio ttyUSB0: unknown device type: 0xffab [ 142.523646][ T63] usb 1-1: USB disconnect, device number 18 [ 142.530179][ T63] ftdi_sio 1-1:6.63: device disconnected [ 142.687136][ T6212] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1973'. [ 142.826873][ T6223] netlink: 'syz.2.1978': attribute type 40 has an invalid length. [ 142.980439][ T6237] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 142.988558][ T6237] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 143.023683][ T6242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.076329][ T6242] rust_binder: Error in use_page_slow: ESRCH [ 143.082821][ T6242] rust_binder: use_range failure ESRCH [ 143.088891][ T6242] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 143.094450][ T6242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 143.102453][ T6242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:46 [ 143.149499][ T6247] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1988'. [ 143.167863][ T6248] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1988'. [ 143.257065][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1994'. [ 143.320872][ T6267] netlink: 'syz.0.1995': attribute type 4 has an invalid length. [ 143.328704][ T6267] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1995'. [ 143.354718][ T6269] binder: Unknown parameter '' [ 143.371490][ T6271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.371888][ T6271] /dev/nbd0: Can't lookup blockdev [ 143.372016][ T6272] /dev/nbd0: Can't lookup blockdev [ 143.392032][ T6272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.424030][ T6277] tipc: Started in network mode [ 143.435452][ T6277] tipc: Node identity ac14140f, cluster identity 4711 [ 143.442352][ T6277] tipc: New replicast peer: 255.255.255.255 [ 143.448589][ T6277] tipc: Enabled bearer , priority 10 [ 143.458958][ T6277] binder: Unknown parameter 'obj_role' [ 143.597300][ T6288] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.605315][ T6288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.620110][ T6290] binder: Bad value for 'max' [ 143.714139][ T6297] devpts: called with bogus options [ 143.724848][ T6299] netlink: 'syz.0.2007': attribute type 32 has an invalid length. [ 143.733435][ T6299] /dev/rnullb0: Can't lookup blockdev [ 143.786664][ T6311] devpts: called with bogus options [ 143.836723][ T6320] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 143.844424][ T36] audit: type=1400 audit(1759923766.619:623): avc: denied { relabelfrom } for pid=6319 comm="syz.2.2015" name="TCP" dev="sockfs" ino=31151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 143.869993][ T36] audit: type=1400 audit(1759923766.629:624): avc: denied { relabelto } for pid=6319 comm="syz.2.2015" name="TCP" dev="sockfs" ino=31151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0" [ 143.879587][ T6327] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2009'. [ 143.901480][ T6323] overlayfs: failed to clone upperpath [ 143.932020][ T36] audit: type=1400 audit(1759923766.709:625): avc: denied { write } for pid=6332 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 143.950059][ T6306] SELinux: security_context_str_to_sid (syste_u軬泄 : [ 143.959580][ T36] audit: type=1400 audit(1759923766.709:626): avc: denied { setopt } for pid=6333 comm="syz.5.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.134791][ T6362] bridge0: port 3(veth1_macvtap) entered blocking state [ 144.142288][ T6362] bridge0: port 3(veth1_macvtap) entered disabled state [ 144.149658][ T6362] veth1_macvtap: entered allmulticast mode [ 144.156620][ T6362] veth1_macvtap: left allmulticast mode [ 144.162279][ T6363] netlink: 'syz.5.2028': attribute type 15 has an invalid length. [ 144.304362][ T384] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 144.313713][ T6392] overlayfs: failed to clone upperpath [ 144.348205][ T36] audit: type=1400 audit(1759923767.129:627): avc: denied { read write } for pid=6396 comm="syz.5.2039" name="ptp0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auth_cache_t:s0" [ 144.375056][ T36] audit: type=1400 audit(1759923767.129:628): avc: denied { open } for pid=6396 comm="syz.5.2039" path="/dev/ptp0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auth_cache_t:s0" [ 144.444371][ T1351] tipc: Node number set to 2886997007 [ 144.465597][ T384] usb 1-1: No LPM exit latency info found, disabling LPM. [ 144.480572][ T384] usb 1-1: config 64 has an invalid interface number: 174 but max is 2 [ 144.488926][ T384] usb 1-1: config 64 has an invalid interface number: 252 but max is 2 [ 144.497274][ T384] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 144.506314][ T384] usb 1-1: config 64 has an invalid interface number: 140 but max is 2 [ 144.514759][ T384] usb 1-1: config 64 has no interface number 0 [ 144.521007][ T384] usb 1-1: config 64 has no interface number 1 [ 144.527233][ T384] usb 1-1: config 64 has no interface number 2 [ 144.533431][ T384] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 144.544617][ T384] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 144.555747][ T384] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 144.566107][ T384] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 144.577293][ T384] usb 1-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 144.588122][ T384] usb 1-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 144.599161][ T384] usb 1-1: config 64 interface 174 has no altsetting 0 [ 144.606072][ T384] usb 1-1: config 64 interface 252 has no altsetting 0 [ 144.612950][ T384] usb 1-1: config 64 interface 140 has no altsetting 0 [ 144.622137][ T384] usb 1-1: string descriptor 0 read error: -22 [ 144.628416][ T384] usb 1-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 144.637728][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.647861][ T384] usb-storage 1-1:64.174: USB Mass Storage device detected [ 144.715687][ T384] usb-storage 1-1:64.252: USB Mass Storage device detected [ 144.777127][ T384] usb-storage 1-1:64.140: USB Mass Storage device detected [ 144.857124][ T384] usb 1-1: USB disconnect, device number 19 [ 145.295539][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2052'. [ 145.433700][ T6463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.487083][ T6468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.489667][ T6470] 9pnet_fd: Insufficient options for proto=fd [ 145.559575][ T6483] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2067'. [ 145.628889][ T6475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.628970][ T6475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.637642][ T6475] rust_binder: Error in use_page_slow: ESRCH [ 145.644208][ T6475] rust_binder: use_range failure ESRCH [ 145.650355][ T6475] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 145.656702][ T6475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 145.664950][ T6475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:104 [ 145.675542][ T6484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.685021][ T6475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.692105][ T6488] rust_binder: Error in use_page_slow: ESRCH [ 145.699005][ T6488] rust_binder: use_range failure ESRCH [ 145.705289][ T6488] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 145.710918][ T6488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 145.719396][ T6488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:104 [ 145.786676][ T6506] : renamed from bond_slave_0 [ 145.815954][ T6509] overlayfs: failed to clone upperpath [ 146.104997][ T6550] overlayfs: failed to resolve './file1/file0': -2 [ 146.246909][ T6554] netlink: 'syz.1.2093': attribute type 46 has an invalid length. [ 146.265834][ T6557] netlink: 'syz.1.2094': attribute type 58 has an invalid length. [ 146.589290][ T6561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.589469][ T6561] rust_binder: Error in use_page_slow: ESRCH [ 146.596152][ T6561] rust_binder: use_range failure ESRCH [ 146.602301][ T6561] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 146.607887][ T6561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 146.616045][ T6561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113 [ 146.653731][ T6565] rust_binder: Write failure EINVAL in pid:115 [ 146.728675][ T6574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.735145][ T6574] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 146.741607][ T6574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 146.749648][ T6574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:119 [ 147.569463][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 147.569485][ T36] audit: type=1400 audit(1759923770.349:632): avc: denied { write } for pid=6656 comm="syz.0.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.647325][ T36] audit: type=1400 audit(1759923770.429:633): avc: denied { create } for pid=6663 comm="syz.2.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 147.684867][ T36] audit: type=1326 audit(1759923770.469:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.5.2135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x0 [ 147.776647][ T6679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=6679 comm=syz.2.2136 [ 147.782130][ T6680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=6680 comm=syz.2.2136 [ 148.012039][ T6713] batadv_slave_1: entered promiscuous mode [ 148.029610][ T6717] batadv_slave_1: left promiscuous mode [ 148.056653][ T6725] netlink: 'syz.1.2153': attribute type 4 has an invalid length. [ 148.176756][ T6755] netlink: 'syz.2.2162': attribute type 10 has an invalid length. [ 148.185185][ T6755] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2162'. [ 148.194705][ T6755] bridge_slave_1: left promiscuous mode [ 148.201109][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.209254][ T6756] netlink: 'syz.2.2162': attribute type 10 has an invalid length. [ 148.217292][ T6756] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2162'. [ 148.514528][ T36] audit: type=1326 audit(1759923771.289:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.571779][ T36] audit: type=1326 audit(1759923771.289:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.622071][ T36] audit: type=1326 audit(1759923771.289:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.694352][ T36] audit: type=1326 audit(1759923771.289:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.737981][ T36] audit: type=1326 audit(1759923771.289:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.802406][ T36] audit: type=1326 audit(1759923771.289:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.882235][ T36] audit: type=1326 audit(1759923771.289:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6768 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261ff8eec9 code=0x7ffc0000 [ 148.995850][ T6806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.005960][ T6806] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 149.044856][ T6812] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2179'. [ 149.111951][ T6806] rust_binder: Error in use_page_slow: ESRCH [ 149.111979][ T6806] rust_binder: use_range failure ESRCH [ 149.124430][ T6806] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 149.135200][ T6806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 149.156891][ T6806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:151 [ 149.157430][ T6824] GUP no longer grows the stack in syz.5.2184 (6824): 200000005000-200000008000 (200000004000) [ 149.234398][ T6824] CPU: 1 UID: 0 PID: 6824 Comm: syz.5.2184 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8 [ 149.234439][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.234466][ T6824] Call Trace: [ 149.234474][ T6824] [ 149.234482][ T6824] __dump_stack+0x21/0x30 [ 149.234528][ T6824] dump_stack_lvl+0x10c/0x190 [ 149.234560][ T6824] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.234589][ T6824] ? futex_lock_pi_atomic+0xdd/0xc70 [ 149.234618][ T6824] dump_stack+0x19/0x20 [ 149.234650][ T6824] fixup_user_fault+0x63d/0x6d0 [ 149.234682][ T6824] fault_in_user_writeable+0x76/0xe0 [ 149.234711][ T6824] futex_lock_pi+0x258/0xa10 [ 149.234739][ T6824] ? futex_unqueue+0x136/0x160 [ 149.234765][ T6824] ? __cfi_futex_lock_pi+0x10/0x10 [ 149.234804][ T6824] ? __cfi_futex_wake_mark+0x10/0x10 [ 149.234835][ T6824] ? futex_setup_timer+0xb4/0xd0 [ 149.234859][ T6824] ? __cfi_futex_wake_mark+0x10/0x10 [ 149.234891][ T6824] ? mas_find+0x358/0x5f0 [ 149.234913][ T6824] ? __kasan_check_write+0x18/0x20 [ 149.234952][ T6824] do_futex+0x25c/0x500 [ 149.234977][ T6824] ? __cfi_do_futex+0x10/0x10 [ 149.235001][ T6824] ? __vm_munmap+0x2c7/0x370 [ 149.235027][ T6824] __se_sys_futex+0x28f/0x300 [ 149.235053][ T6824] ? __x64_sys_futex+0x110/0x110 [ 149.235079][ T6824] ? __kasan_check_write+0x18/0x20 [ 149.235116][ T6824] __x64_sys_futex+0xe9/0x110 [ 149.235142][ T6824] x64_sys_call+0x227f/0x2ee0 [ 149.235178][ T6824] do_syscall_64+0x58/0xf0 [ 149.235206][ T6824] ? clear_bhb_loop+0x50/0xa0 [ 149.235230][ T6824] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.235268][ T6824] RIP: 0033:0x7f5385b8eec9 [ 149.235296][ T6824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.235317][ T6824] RSP: 002b:00007f5386a86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.235346][ T6824] RAX: ffffffffffffffda RBX: 00007f5385de5fa0 RCX: 00007f5385b8eec9 [ 149.235365][ T6824] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 149.235382][ T6824] RBP: 00007f5385c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.235398][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.235412][ T6824] R13: 00007f5385de6038 R14: 00007f5385de5fa0 R15: 00007ffcac8970b8 [ 149.235432][ T6824] [ 149.236691][ T6826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.345888][ T6830] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 149.484459][ T6830] rust_binder: Read failure Err(EAGAIN) in pid:153 [ 149.534671][ T6828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.735210][ T6846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6846 comm=syz.1.2192 [ 150.414538][ T6888] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2204'. [ 150.442743][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.454369][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.462286][ T6874] bridge_slave_0: entered allmulticast mode [ 150.468989][ T6874] bridge_slave_0: entered promiscuous mode [ 150.475665][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.482901][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.490098][ T6874] bridge_slave_1: entered allmulticast mode [ 150.496596][ T6874] bridge_slave_1: entered promiscuous mode [ 150.502677][ T6900] netlink: 'syz.0.2206': attribute type 13 has an invalid length. [ 150.511018][ T6900] erspan0: refused to change device tx_queue_len [ 150.736423][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.743531][ T6874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.750916][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.757995][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.790668][ T6905] __vm_enough_memory: pid: 6905, comm: syz.0.2208, bytes: 18014402804453376 not enough memory for the allocation [ 150.843140][ T6914] binder: Bad value for 'max' [ 150.866526][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.890468][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.897716][ T6917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.905497][ T6917] rust_binder: Error in use_page_slow: ESRCH [ 150.924535][ T6917] rust_binder: use_range failure ESRCH [ 150.930600][ T6917] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 150.945549][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.960691][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.964382][ T6917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 150.967920][ T6917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:189 [ 151.012194][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.028384][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.036477][ T6838] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2189'. [ 151.058755][ T6838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2189'. [ 151.078569][ T6874] veth0_vlan: entered promiscuous mode [ 151.105369][ T13] bridge_slave_1: left allmulticast mode [ 151.114630][ T13] bridge_slave_1: left promiscuous mode [ 151.122798][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.132704][ T13] bridge_slave_0: left allmulticast mode [ 151.138668][ T13] bridge_slave_0: left promiscuous mode [ 151.144401][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.222692][ T6874] veth1_macvtap: entered promiscuous mode [ 151.244517][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 151.258491][ T13] tipc: Left network mode [ 151.267861][ T13] veth1_macvtap: left promiscuous mode [ 151.273441][ T13] veth0_vlan: left promiscuous mode [ 151.373797][ T6951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.373952][ T6951] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 151.394393][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 151.408704][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 151.419841][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.429667][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 151.439330][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.448146][ T10] usb 1-1: config 0 descriptor?? [ 151.858147][ T10] wacom 0003:056A:5002.000F: hidraw0: USB HID v0.06 Device [HID 056a:5002] on usb-dummy_hcd.0-1/input0 [ 151.970019][ T6994] netlink: 'syz.5.2236': attribute type 1 has an invalid length. [ 151.991026][ T6996] incfs: Error accessing: ./cgroup. [ 151.996380][ T6996] incfs: mount failed -20 [ 152.057157][ T10] usb 1-1: USB disconnect, device number 20 [ 152.394368][ T384] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 152.545518][ T384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.556522][ T384] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 152.570115][ T384] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 152.579540][ T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.592525][ T384] usb 2-1: config 0 descriptor?? [ 152.604104][ T7001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.614509][ T384] usbhid 2-1:0.0: can't add hid device: -22 [ 152.620573][ T384] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 152.814310][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.823404][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.829605][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 152.829626][ T36] audit: type=1400 audit(1759923775.609:667): avc: denied { watch } for pid=7024 comm="syz.2.2248" path="/450/file0" dev="tmpfs" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.844633][ T63] usb 2-1: USB disconnect, device number 19 [ 152.894505][ T7032] binder: Bad value for 'defcontext' [ 152.913298][ T7036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 152.913335][ T7036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:16 [ 152.923691][ T7036] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 152.932807][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 153.041722][ T7046] fuse: blksize only supported for fuseblk [ 153.095441][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.106422][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 153.119295][ T10] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 153.128434][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.137179][ T10] usb 1-1: config 0 descriptor?? [ 153.142450][ T7015] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 153.150578][ T10] usbhid 1-1:0.0: can't add hid device: -22 [ 153.156701][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 153.179196][ T7051] usb usb8: usbfs: process 7051 (syz.1.2257) did not claim interface 0 before use [ 153.188726][ T7051] binder: Unknown parameter 'defcontext01777777777777777777777' [ 153.255753][ T7060] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 153.263559][ T7060] netlink: 'syz.1.2259': attribute type 2 has an invalid length. [ 153.271955][ T7060] tmpfs: Bad value for 'huge' [ 153.353173][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.362466][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.371644][ T337] usb 1-1: USB disconnect, device number 21 [ 153.400130][ T7066] rust_binder: 43: no such ref 0 [ 153.654355][ T384] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 153.815457][ T384] usb 2-1: No LPM exit latency info found, disabling LPM. [ 153.823538][ T384] usb 2-1: config 64 has an invalid interface number: 174 but max is 2 [ 153.832143][ T384] usb 2-1: config 64 has an invalid interface number: 252 but max is 2 [ 153.840559][ T384] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 153.849739][ T384] usb 2-1: config 64 has an invalid interface number: 140 but max is 2 [ 153.858136][ T384] usb 2-1: config 64 has no interface number 0 [ 153.864508][ T384] usb 2-1: config 64 has no interface number 1 [ 153.870687][ T384] usb 2-1: config 64 has no interface number 2 [ 153.877381][ T384] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 153.894322][ T384] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 153.917855][ T384] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 153.928641][ T384] usb 2-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 153.946632][ T384] usb 2-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 153.957867][ T384] usb 2-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 153.976979][ T384] usb 2-1: config 64 interface 174 has no altsetting 0 [ 153.983899][ T384] usb 2-1: config 64 interface 252 has no altsetting 0 [ 153.992149][ T384] usb 2-1: config 64 interface 140 has no altsetting 0 [ 154.002236][ T384] usb 2-1: string descriptor 0 read error: -22 [ 154.008616][ T384] usb 2-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 154.017876][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.032086][ T384] usb-storage 2-1:64.174: USB Mass Storage device detected [ 154.077705][ T384] usb-storage 2-1:64.252: USB Mass Storage device detected [ 154.133237][ T384] usb-storage 2-1:64.140: USB Mass Storage device detected [ 154.214373][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 154.233025][ T1351] usb 2-1: USB disconnect, device number 20 [ 154.265177][ T7111] 9pnet_fd: Insufficient options for proto=fd [ 154.281345][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2276'. [ 154.364377][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 154.370726][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.381071][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.390110][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.399426][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.409651][ T10] usb 1-1: config 0 descriptor?? [ 154.629710][ T10] usb 1-1: USB disconnect, device number 22 [ 154.689649][ T7125] 9pnet_fd: Insufficient options for proto=fd [ 154.808960][ T7147] /dev/rnullb0: Can't lookup blockdev [ 154.834817][ T7150] overlayfs: failed to resolve '/秛9v顏': -2 [ 155.151927][ T7162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.151950][ T7163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.168956][ T7162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.170951][ T7165] fuse: Bad value for 'user_id' [ 155.184391][ T7162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 155.186803][ T7165] fuse: Bad value for 'user_id' [ 155.204880][ T7169] 9pnet_fd: Insufficient options for proto=fd [ 155.212011][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 155.488280][ T36] audit: type=1400 audit(1759923778.269:668): avc: denied { relabelfrom } for pid=7200 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.508257][ T36] audit: type=1400 audit(1759923778.269:669): avc: denied { relabelto } for pid=7200 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.834372][ T337] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 155.985458][ T337] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 155.995430][ T337] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.006825][ T337] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.016018][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.024057][ T337] usb 2-1: Product: syz [ 156.028257][ T337] usb 2-1: Manufacturer: syz [ 156.032900][ T337] usb 2-1: SerialNumber: syz [ 156.038338][ T337] usb 2-1: config 0 descriptor?? [ 156.043625][ T7207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.051150][ T7207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.259147][ T7207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.267410][ T7207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.280222][ T7214] net_ratelimit: 86 callbacks suppressed [ 156.280250][ T7214] sock: sock_set_timeout: `syz.0.2310' (pid 7214) tries to set negative timeout [ 156.346726][ T7217] rust_binder: Write failure EFAULT in pid:237 [ 156.385542][ T7223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2094 sclass=netlink_route_socket pid=7223 comm=syz.5.2314 [ 156.432804][ T36] audit: type=1326 audit(1759923779.209:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.456563][ T36] audit: type=1326 audit(1759923779.209:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.480535][ T36] audit: type=1326 audit(1759923779.209:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.504170][ T36] audit: type=1326 audit(1759923779.209:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.527950][ T36] audit: type=1326 audit(1759923779.209:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.551864][ T36] audit: type=1326 audit(1759923779.209:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.575391][ T36] audit: type=1326 audit(1759923779.209:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x7ffc0000 [ 156.680706][ T337] Error reading MAC address [ 157.031662][ T7237] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 157.038815][ T7237] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 157.046028][ T7237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 157.194682][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.211304][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.218810][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.226304][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.233732][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.242539][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.250015][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.257509][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.264995][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.272468][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.279928][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.287422][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.294901][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.303509][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.310991][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.318578][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.326202][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.333690][ T10] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 157.341990][ T10] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 157.544802][ T7244] /dev/rnullb0: Can't lookup blockdev [ 157.713412][ T7270] /dev/rnullb0: Can't lookup blockdev [ 157.854353][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 157.867026][ T7281] syzkaller0: entered allmulticast mode [ 157.872856][ T7281] syzkaller0: entered promiscuous mode [ 157.879723][ T7281] syzkaller0 (unregistering): left promiscuous mode [ 157.886425][ T7281] syzkaller0 (unregistering): left allmulticast mode [ 158.005848][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.014361][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.024580][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.035616][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 158.043638][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.052811][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.060869][ T10] usb 1-1: Product: syz [ 158.065080][ T10] usb 1-1: Manufacturer: syz [ 158.069755][ T10] usb 1-1: SerialNumber: syz [ 158.283022][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 158.290997][ T10] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 158.298830][ T10] usb 1-1: 2:1: All rates were zero [ 158.307498][ T10] usb 1-1: USB disconnect, device number 23 [ 158.325203][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.609190][ T384] usb 2-1: USB disconnect, device number 21 [ 158.712575][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 158.712606][ T36] audit: type=1400 audit(1759924041.495:715): avc: denied { setopt } for pid=7317 comm="syz.1.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.914399][ T36] audit: type=1326 audit(1759924041.705:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7317 comm="syz.1.2350" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ca5f8eec9 code=0x0 [ 158.979339][ T7332] /dev/rnullb0: Can't lookup blockdev [ 159.105442][ T7340] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 159.199429][ T7350] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 159.206652][ T7350] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 159.291888][ T7357] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2364'. [ 159.354154][ T7361] fuse: Bad value for 'group_id' [ 159.359229][ T7361] fuse: Bad value for 'group_id' [ 159.382667][ T36] audit: type=1326 audit(1759924042.165:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7362 comm="syz.2.2367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90c6f8eec9 code=0x0 [ 159.843962][ T36] audit: type=1400 audit(1759924042.625:718): avc: denied { write } for pid=7393 comm="syz.5.2376" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.912464][ T7404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.912538][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 159.919260][ T7404] rust_binder: Error in use_page_slow: ESRCH [ 159.928529][ T7404] rust_binder: use_range failure ESRCH [ 159.936165][ T7404] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 159.942520][ T7404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 159.950780][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:282 [ 159.960451][ T7407] fuse: Unknown parameter 'grp呦 [ 159.960451][ T7407] 5o00000000000000000000' [ 160.170156][ T7422] rust_binder: Write failure EINVAL in pid:298 [ 160.192094][ T7426] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2386'. [ 160.207957][ T7426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7426 comm=syz.0.2386 [ 160.626599][ T7439] /dev/rnullb0: Can't lookup blockdev [ 160.695424][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'. [ 160.704985][ T7442] rust_binder: Write failure EINVAL in pid:310 [ 160.804144][ T7450] netlink: 'syz.2.2396': attribute type 32 has an invalid length. [ 161.372869][ T7487] tc_dump_action: action bad kind [ 161.378061][ T7486] tc_dump_action: action bad kind [ 161.490095][ T7506] __vm_enough_memory: pid: 7506, comm: syz.0.2415, bytes: 18014402804453376 not enough memory for the allocation [ 161.754129][ T337] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 161.773572][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.773598][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.780146][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.786828][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.793613][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.800185][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.807889][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.814409][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.820873][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.828196][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.850295][ T7525] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 161.873323][ T36] audit: type=1400 audit(1759924044.656:719): avc: denied { relabelto } for pid=7522 comm="syz.1.2421" name="file0" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 161.900186][ T36] audit: type=1400 audit(1759924044.656:720): avc: denied { associate } for pid=7522 comm="syz.1.2421" name="file0" dev="tmpfs" ino=153 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 161.933414][ T337] usb 1-1: Using ep0 maxpacket: 8 [ 161.940013][ T36] audit: type=1400 audit(1759924044.726:721): avc: denied { unlink } for pid=6874 comm="syz-executor" name="file0" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 161.955989][ T337] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 161.975664][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.990216][ T337] usb 1-1: config 0 descriptor?? [ 161.995328][ T36] audit: type=1326 audit(1759924044.776:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca5f8eec9 code=0x7ffc0000 [ 162.021242][ T36] audit: type=1326 audit(1759924044.786:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ca5f8eec9 code=0x7ffc0000 [ 162.049992][ T36] audit: type=1326 audit(1759924044.786:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.1.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ca5f8eec9 code=0x7ffc0000 [ 162.110966][ T7541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.196138][ T337] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 162.423363][ T10] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 162.574417][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.585496][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.595338][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 162.604689][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.613529][ T10] usb 2-1: config 0 descriptor?? [ 163.099352][ T10] logitech-djreceiver 0003:046D:C52F.0011: ignoring exceeding usage max [ 163.111847][ T10] logitech-djreceiver 0003:046D:C52F.0011: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 163.229589][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 163.245425][ T7546] /dev/rnullb0: Can't lookup blockdev [ 163.252952][ T45] usb 2-1: USB disconnect, device number 22 [ 163.281360][ T7571] netlink: 'syz.5.2437': attribute type 58 has an invalid length. [ 163.293560][ T7571] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 163.312511][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2437'. [ 163.424922][ T337] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.435324][ T337] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 163.445602][ T337] asix 1-1:0.0: probe with driver asix failed with error -71 [ 163.454176][ T337] usb 1-1: USB disconnect, device number 24 [ 163.777091][ T7573] binder: Unknown parameter 'gre0' [ 163.798462][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 163.798482][ T36] audit: type=1400 audit(1759924046.586:770): avc: denied { map } for pid=7575 comm="syz.1.2439" path="socket:[35129]" dev="sockfs" ino=35129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.931194][ T7593] binder: Bad value for 'max' [ 163.967256][ T7597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.969908][ T7597] rust_binder: Error in use_page_slow: ESRCH [ 163.982973][ T7597] rust_binder: use_range failure ESRCH [ 163.989564][ T7597] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 163.995234][ T7597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.005272][ T7597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:317 [ 164.016885][ T7603] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 164.020544][ T7602] /dev/rnullb0: Can't lookup blockdev [ 164.095044][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2450'. [ 164.147862][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 164.236421][ T7628] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2458'. [ 164.312883][ T337] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 164.462831][ T337] usb 1-1: Using ep0 maxpacket: 32 [ 164.469128][ T337] usb 1-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.479133][ T337] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 164.489183][ T337] usb 1-1: config 1 interface 0 altsetting 254 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 164.500886][ T337] usb 1-1: config 1 interface 0 altsetting 254 endpoint 0x88 has invalid wMaxPacketSize 0 [ 164.502797][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 164.511056][ T337] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x88 has invalid maxpacket 0 [ 164.528478][ T337] usb 1-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 164.541654][ T337] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.549000][ T337] usb 1-1: New USB device found, idVendor=7fff, idProduct=a4a1, bcdDevice= 0.40 [ 164.558076][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.566197][ T337] usb 1-1: SerialNumber: syz [ 164.572235][ T7609] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.580062][ T337] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 164.663113][ T10] usb 2-1: too many configurations: 244, using maximum allowed: 8 [ 164.671708][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 37 [ 164.680444][ T10] usb 2-1: can't read configurations, error -22 [ 164.754624][ T36] audit: type=1400 audit(1759924047.547:771): avc: denied { append } for pid=7641 comm="syz.5.2462" name="file0" dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.783329][ T7609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.783706][ T7609] rust_binder: Error in use_page_slow: ESRCH [ 164.790251][ T7609] rust_binder: use_range failure ESRCH [ 164.796353][ T7609] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 164.801891][ T7609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.810160][ T7609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:319 [ 164.819572][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 164.820330][ T45] usb 1-1: USB disconnect, device number 25 [ 164.983092][ T10] usb 2-1: too many configurations: 244, using maximum allowed: 8 [ 164.991694][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 37 [ 165.000265][ T10] usb 2-1: can't read configurations, error -22 [ 165.007085][ T10] usb usb2-port1: attempt power cycle [ 165.310373][ T7653] netlink: 'syz.2.2466': attribute type 2 has an invalid length. [ 165.355220][ T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 165.362201][ T7656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.363866][ T7657] rust_binder: Error in use_page_slow: ESRCH [ 165.370346][ T7657] rust_binder: use_range failure ESRCH [ 165.376441][ T7657] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 165.382010][ T7657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 165.390073][ T7657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:321 [ 165.403011][ T10] usb 2-1: too many configurations: 244, using maximum allowed: 8 [ 165.424319][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 37 [ 165.432979][ T10] usb 2-1: can't read configurations, error -22 [ 165.471908][ T7674] overlayfs: failed to clone upperpath [ 165.501801][ T7678] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2475'. [ 165.511036][ T7678] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2475'. [ 165.562591][ T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 165.583223][ T10] usb 2-1: too many configurations: 244, using maximum allowed: 8 [ 165.591873][ T10] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 37 [ 165.600636][ T10] usb 2-1: can't read configurations, error -22 [ 165.622641][ T10] usb usb2-port1: unable to enumerate USB device [ 166.571822][ T7711] /dev/rnullb0: Can't lookup blockdev [ 166.782244][ T337] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 166.932209][ T337] usb 1-1: Using ep0 maxpacket: 8 [ 166.938332][ T337] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.946805][ T337] usb 1-1: config 179 has no interface number 0 [ 166.953135][ T337] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 166.964419][ T337] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 166.975842][ T337] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 166.985955][ T337] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.999322][ T337] usb 1-1: config 179 interface 65 has no altsetting 0 [ 167.006292][ T337] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 167.015434][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.225124][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.234022][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.242127][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.250641][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.258824][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.267767][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.280363][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.289880][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.299119][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.312234][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.323712][ T10] usb 1-1: USB disconnect, device number 26 [ 167.339547][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 167.350689][ T7717] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 167.615883][ T7752] overlayfs: failed to clone upperpath [ 167.633812][ T7755] netlink: 'syz.1.2499': attribute type 22 has an invalid length. [ 167.666477][ T7757] __vm_enough_memory: pid: 7757, comm: syz.1.2504, bytes: 18014402804453376 not enough memory for the allocation [ 167.691322][ T7759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 167.691355][ T7759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:140 [ 167.844726][ T7763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.951944][ T337] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 168.101915][ T385] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 168.112201][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 168.118504][ T337] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 168.127410][ T337] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.139451][ T337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.149925][ T337] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.162101][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.170167][ T337] usb 2-1: Product: syz [ 168.175433][ T337] usb 2-1: Manufacturer: syz [ 168.180267][ T337] usb 2-1: SerialNumber: syz [ 168.263298][ T385] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 168.270923][ T385] usb 1-1: can't read configurations, error -61 [ 168.389697][ T337] usb 2-1: 0:2 : does not exist [ 168.398270][ T337] usb 2-1: USB disconnect, device number 27 [ 168.404271][ T385] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 168.409322][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.563460][ T385] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 168.571147][ T385] usb 1-1: can't read configurations, error -61 [ 168.577629][ T385] usb usb1-port1: attempt power cycle [ 168.708746][ T7776] overlay: ./file0 is not a directory [ 168.901276][ T7780] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 168.921724][ T385] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 168.953526][ T385] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 168.961291][ T385] usb 1-1: can't read configurations, error -61 [ 169.091683][ T385] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 169.113436][ T385] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 169.121057][ T385] usb 1-1: can't read configurations, error -61 [ 169.127546][ T385] usb usb1-port1: unable to enumerate USB device [ 169.433380][ T36] audit: type=1400 audit(1759924052.218:772): avc: denied { mounton } for pid=7784 comm="syz.1.2515" path="/53/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.936660][ T7854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2536'. [ 170.955851][ T7854] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2536'. [ 170.971204][ T7854] netlink: 'syz.0.2536': attribute type 4 has an invalid length. [ 171.046238][ T7856] fuse: Bad value for 'fd' [ 171.122390][ T7870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.122637][ T7870] rust_binder: Error in use_page_slow: ESRCH [ 171.133297][ T7870] rust_binder: use_range failure ESRCH [ 171.139530][ T7870] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 171.145446][ T7870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.163532][ T7870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:362 [ 171.167096][ T7871] binder: Binderfs stats mode cannot be changed during a remount [ 171.184387][ T7873] rust_binder: Error in use_page_slow: ESRCH [ 171.184410][ T7873] rust_binder: use_range failure ESRCH [ 171.184437][ T7870] binder: Binderfs stats mode cannot be changed during a remount [ 171.190421][ T7873] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 171.204174][ T7873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.212304][ T7873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 171.235644][ T7877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7877 comm=syz.0.2543 [ 171.258265][ T7877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7877 comm=syz.0.2543 [ 171.306620][ T7883] /dev/rnullb0: Can't lookup blockdev [ 171.383963][ T7895] overlay: filesystem on ./bus not supported as upperdir [ 171.391428][ T7891] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2549'. [ 171.400417][ T7891] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2549'. [ 171.409494][ T7891] netlink: 'syz.5.2549': attribute type 6 has an invalid length. [ 171.417284][ T7891] netlink: 'syz.5.2549': attribute type 5 has an invalid length. [ 171.425057][ T7891] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2549'. [ 171.465394][ T36] audit: type=1400 audit(1759924054.248:773): avc: denied { watch_reads } for pid=7907 comm="syz.5.2554" path="/341/file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.502076][ T7911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.526408][ T7914] rust_binder: Error while translating object. [ 171.544815][ T7914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.551170][ T7914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 171.560963][ T7916] netlink: 'syz.5.2558': attribute type 19 has an invalid length. [ 171.571672][ T7919] rust_binder: Error in use_page_slow: ESRCH [ 171.578049][ T7919] rust_binder: use_range failure ESRCH [ 171.578262][ T7916] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2558'. [ 171.591054][ T7919] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 171.605942][ T7919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.624376][ T7919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372 [ 171.639742][ T7925] incfs: Error accessing: ./file0. [ 171.654158][ T7925] incfs: mount failed -20 [ 171.971004][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 172.120913][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 172.127197][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.137498][ T9] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.150505][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.157163][ T9] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 172.166238][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.175252][ T9] usb 2-1: config 0 descriptor?? [ 172.181145][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 172.580825][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 172.710793][ T9] usb 1-1: device descriptor read/64, error -71 [ 172.733181][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.742033][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.754691][ T385] usb 2-1: USB disconnect, device number 28 [ 172.799490][ T7953] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 172.950856][ T9] usb 1-1: device descriptor read/64, error -71 [ 172.997855][ T7973] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 173.130698][ T385] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 173.190679][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 173.291692][ T385] usb 2-1: config 1 interface 0 has no altsetting 0 [ 173.299730][ T385] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 173.308991][ T385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.317040][ T385] usb 2-1: Product: syz [ 173.321247][ T385] usb 2-1: Manufacturer: syz [ 173.325853][ T385] usb 2-1: SerialNumber: syz [ 173.330824][ T9] usb 1-1: device descriptor read/64, error -71 [ 173.555867][ T385] usb 2-1: USB disconnect, device number 29 [ 173.570589][ T9] usb 1-1: device descriptor read/64, error -71 [ 173.614630][ T7991] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2584'. [ 173.672045][ T7995] netlink: 'syz.2.2587': attribute type 11 has an invalid length. [ 173.690615][ T9] usb usb1-port1: attempt power cycle [ 174.060515][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 174.091540][ T9] usb 1-1: device descriptor read/8, error -71 [ 174.180255][ T8003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:200 [ 174.181770][ T8011] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2593'. [ 174.200503][ T8011] gretap0: entered promiscuous mode [ 174.208088][ T8011] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2593'. [ 174.217139][ T8011] 0{X功: renamed from gretap0 [ 174.225253][ T9] usb 1-1: device descriptor read/8, error -71 [ 174.232243][ T8011] 0{X功: left promiscuous mode [ 174.237305][ T8011] 0{X功: entered allmulticast mode [ 174.243816][ T8011] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 174.480355][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 174.501507][ T9] usb 1-1: device descriptor read/8, error -71 [ 174.631850][ T9] usb 1-1: device descriptor read/8, error -71 [ 174.648932][ T8035] tipc: Enabling not permitted [ 174.654684][ T8035] tipc: Enabling of bearer rejected, failed to enable media [ 174.714879][ T8036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8036 comm=syz.2.2600 [ 174.740348][ T9] usb usb1-port1: unable to enumerate USB device [ 175.157662][ T8048] netlink: 'syz.5.2606': attribute type 16 has an invalid length. [ 175.169375][ T8048] netlink: 'syz.5.2606': attribute type 3 has an invalid length. [ 175.178786][ T8048] netlink: 64054 bytes leftover after parsing attributes in process `syz.5.2606'. [ 175.367269][ T8064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.422588][ T8064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.502013][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.517787][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.740062][ T337] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 175.902947][ T337] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.912102][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.920139][ T337] usb 2-1: Product: syz [ 175.924358][ T337] usb 2-1: Manufacturer: syz [ 175.929073][ T337] usb 2-1: SerialNumber: syz [ 176.400797][ T36] audit: type=1400 audit(1759924059.190:774): avc: denied { accept } for pid=8105 comm="syz.2.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.512636][ T10] usb 2-1: USB disconnect, device number 30 [ 185.127085][ T8127] rust_binder: Write failure EFAULT in pid:381 [ 185.170382][ T8139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8139 comm=syz.5.2636 [ 185.398656][ T8167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8167 comm=syz.0.2646 [ 185.412245][ T8167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2646'. [ 185.457669][ T385] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 185.481202][ T8176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.481806][ T8176] rust_binder: Error in use_page_slow: ESRCH [ 185.488495][ T8176] rust_binder: use_range failure ESRCH [ 185.494547][ T8176] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 185.500139][ T8176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.508187][ T8176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:404 [ 185.591562][ T8178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.601478][ T36] audit: type=1400 audit(1759924068.392:775): avc: denied { compute_member } for pid=8177 comm="syz.0.2650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.608257][ T8178] rust_binder: Error in use_page_slow: ESRCH [ 185.628466][ T8178] rust_binder: use_range failure ESRCH [ 185.628700][ T385] usb 2-1: Using ep0 maxpacket: 8 [ 185.634541][ T8178] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 185.634567][ T8178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.634594][ T8178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:406 [ 185.635198][ T8178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.642476][ T385] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.671857][ T36] audit: type=1400 audit(1759924068.452:776): avc: denied { read } for pid=8182 comm="syz.0.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.691239][ T385] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.723747][ T385] usb 2-1: config 1 interface 0 has no altsetting 0 [ 185.732372][ T385] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 185.746240][ T385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.754342][ T385] usb 2-1: Product: syz [ 185.758576][ T385] usb 2-1: Manufacturer: 效 [ 185.763120][ T385] usb 2-1: SerialNumber: syz [ 185.775960][ T36] audit: type=1400 audit(1759924068.562:777): avc: denied { create } for pid=8191 comm="syz.5.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 185.975661][ T385] usbhid 2-1:1.0: can't add hid device: -71 [ 185.981729][ T385] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 186.000902][ T385] usb 2-1: USB disconnect, device number 31 [ 186.030385][ T8202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.030806][ T8202] rust_binder: Error in use_page_slow: ESRCH [ 186.037337][ T8202] rust_binder: use_range failure ESRCH [ 186.043424][ T8202] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 186.049133][ T8202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 186.057188][ T8202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423 [ 186.348459][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2661'. [ 186.367742][ T8213] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2661'. [ 186.534964][ T8221] 9pnet: Could not find request transport: f [ 187.111298][ T385] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 187.133557][ T8246] cgroup: none used incorrectly [ 187.162204][ T8250] netlink: 'syz.5.2674': attribute type 11 has an invalid length. [ 187.171324][ T8250] tipc: Started in network mode [ 187.176260][ T8250] tipc: Node identity ac14140f, cluster identity 4711 [ 187.183154][ T8250] tipc: New replicast peer: 255.255.255.255 [ 187.189292][ T8250] tipc: Enabled bearer , priority 10 [ 187.209110][ T36] audit: type=1400 audit(1759924070.002:778): avc: denied { execute } for pid=8251 comm="syz.5.2675" path="/file1" dev="ramfs" ino=37203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 187.278255][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.289283][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.299099][ T385] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 187.308210][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.316799][ T385] usb 1-1: config 0 descriptor?? [ 187.411913][ T8265] rust_binder: Failed copying into alloc: EFAULT [ 187.411943][ T8265] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 187.422015][ T8265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 187.425101][ T36] audit: type=1326 audit(1759924070.212:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8269 comm="syz.2.2682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90c6f8eec9 code=0x0 [ 187.430438][ T8265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:265 [ 187.560881][ T8278] rust_binder: Error while translating object. [ 187.570278][ T8278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.576498][ T8278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 187.617558][ T8282] incfs_lookup_dentry err:-36 [ 187.636929][ T8282] incfs_lookup_dentry err:-36 [ 187.642529][ T8282] incfs_lookup_dentry err:-36 [ 187.661573][ T8284] /dev/rnullb0: Can't lookup blockdev [ 187.688024][ T8286] rust_binder: Write failure EFAULT in pid:280 [ 187.723990][ T385] hid (null): global environment stack underflow [ 187.738173][ T385] hid-steam 0003:28DE:1142.0012: global environment stack underflow [ 187.746203][ T385] hid-steam 0003:28DE:1142.0012: item 0 4 1 11 parsing failed [ 187.754385][ T385] hid-steam 0003:28DE:1142.0012: steam_probe:parse of hid interface failed [ 187.763119][ T385] hid-steam 0003:28DE:1142.0012: probe with driver hid-steam failed with error -22 [ 187.770457][ T8288] 9pnet_fd: Insufficient options for proto=fd [ 187.789934][ T8290] netlink: 'syz.5.2690': attribute type 4 has an invalid length. [ 187.798178][ T8290] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2690'. [ 187.925641][ T385] usb 1-1: USB disconnect, device number 35 [ 188.067103][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 188.217036][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 188.224015][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 188.234052][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 188.245277][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.254367][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.262485][ T10] usb 2-1: Product: 飾撾懂鏃淬泧釄亞靻半棨鍎惏鑵屼⿰姹顜夌硽陣冯柕椁湜閷撹劃閯愶啂獯笺晛鐮辍癸珮瓿扁儨锒冴剛鐔勮剾閯②澀妤犵柌敫㈩粋釆婂瑣寰帣霔熽獤膦﹄槵椋曧彸澹ａ浞粬飽濊す岵栭榀撪窐冒鐝涘珚顬 [ 188.273628][ T8300] veth1: entered allmulticast mode [ 188.283235][ T10] usb 2-1: Manufacturer: 閼ч銐祼鍡у瓩辏忋Л鞇╊畱飑掞啱顣呿煄猗嗢姩恽欍綍閻冪緬绲庤⿺韲革摌姘併啨澹撫緹戟涙畷隄灝铓佹陳熰’釣掑川璀庮畯獾忊洖鑺恒繅妤嬵境鐑点亖洄瞰勮榘ㄑ﹦榇矏陼磋◤愕炩灘绡レ姛釗蜂浗鍦佱渐鐗瓖釈戧﹣猱嗩剻鑹⑨枴氩拡锜彃陮惦喆鍕帒寮敞洌抽布铻忚粡槌撯丹鍣捐粠鋾寸墭水雵伇顑冪錂勱攳 [ 188.319192][ T10] usb 2-1: SerialNumber: 椐挎嫼鍍磵韹╅牳畹枫洎屻殯岑夅潑鞄╊涵鋱疯倢喽测崅猕潶頀ラ闅栵湝鍖☆榀熱綕姣庣绠存嵖扭餇撮睜罹傚摯洚㈩挬娆㈩柎顠颁厺畀汗錅ゃ拃锍硅陡霙ｍ棜椴惦眻楗欍闺劦缈狀寮堛爭杲绘挧椤唲鍤筹爳钄惧湋悌懱╇搷鏂堢功鍥囥構顭荤栯秹閷典懅閴㈧寲鋭佸【喈硅祤娴魂扯洚炿揣癣枪鍚佽绡勭劜杞柬憛鎮涘í猢古熾嵑顝夈従鎻栵嫹浈熱嚚绠ョ枏鎵烇博 [ 188.352831][ T1351] tipc: Node number set to 2886997007 [ 188.376151][ T8309] tmpfs: Unknown parameter 'э 8lF:sTF/ 餇' [ 188.420415][ T36] audit: type=1326 audit(1759924071.212:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.5.2701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x0 [ 188.450243][ T8323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.450492][ T8323] rust_binder: Error in use_page_slow: ESRCH [ 188.457222][ T8323] rust_binder: use_range failure ESRCH [ 188.463454][ T8323] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 188.468970][ T8323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 188.477071][ T8323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:427 [ 188.500063][ T8325] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2703'. [ 188.518763][ T8326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.564595][ T8297] rust_binder: Write failure EFAULT in pid:289 [ 188.574275][ T10] cdc_ncm 2-1:1.0: bind() failure [ 188.586460][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 188.593560][ T10] cdc_ncm 2-1:1.1: bind() failure [ 188.599915][ T10] usb 2-1: USB disconnect, device number 32 [ 188.739495][ T36] audit: type=1400 audit(1759924071.533:781): avc: denied { mounton } for pid=8331 comm="syz.0.2704" path="/147/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 188.761984][ T8332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.089710][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.106095][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.106904][ T8298] veth1: left allmulticast mode [ 189.120927][ T8336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.133587][ T36] audit: type=1400 audit(1759924071.923:782): avc: denied { bpf } for pid=8339 comm="syz.2.2706" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.336730][ T384] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 189.345543][ T8359] fuse: Unknown parameter '|' [ 189.351630][ T8359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.351743][ T8359] rust_binder: Error in use_page_slow: ESRCH [ 189.358220][ T8359] rust_binder: use_range failure ESRCH [ 189.364226][ T8359] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 189.369740][ T8359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 189.377786][ T8359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:438 [ 189.440937][ T8362] tmpfs: Bad value for 'huge' [ 189.467184][ T8365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.488092][ T384] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.502944][ T384] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.511703][ T384] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 189.521867][ T384] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.530860][ T384] usb 2-1: config 1 has no interface number 1 [ 189.536975][ T384] usb 2-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 189.549890][ T384] usb 2-1: config 1 interface 2 has no altsetting 0 [ 189.561879][ T384] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.571037][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.579268][ T384] usb 2-1: Product: syz [ 189.583538][ T384] usb 2-1: Manufacturer: syz [ 189.588219][ T384] usb 2-1: SerialNumber: syz [ 189.603417][ T8370] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2715'. [ 189.785736][ T8372] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2716'. [ 189.805113][ T384] usb 2-1: USB disconnect, device number 33 [ 189.819134][ T8146] udevd[8146]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.846614][ T385] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 189.997849][ T385] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 190.006016][ T385] usb 1-1: config 0 has no interface number 0 [ 190.012143][ T385] usb 1-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 190.023065][ T385] usb 1-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 190.036237][ T385] usb 1-1: config 0 interface 48 has no altsetting 0 [ 190.043015][ T385] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 190.052087][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.060872][ T385] usb 1-1: config 0 descriptor?? [ 190.267550][ T385] usb 1-1: string descriptor 0 read error: -71 [ 190.275227][ T385] usb 1-1: Cannot read MAC address [ 190.280493][ T385] MOSCHIP usb-ethernet driver 1-1:0.48: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 190.292968][ T385] usb 1-1: USB disconnect, device number 36 [ 190.331532][ T8382] input: syz0 as /devices/virtual/input/input34 [ 190.340355][ T8382] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388861952 i:0 err:EBUSY [ 190.340393][ T8382] rust_binder: Error in use_page_slow: EBUSY [ 190.350915][ T8382] rust_binder: use_range failure EBUSY [ 190.358581][ T8382] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 190.364109][ T8382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 190.372078][ T8382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:300 [ 190.544439][ T8398] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 190.561357][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 190.800852][ T8414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.801012][ T8414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.807830][ T8414] rust_binder: Error in use_page_slow: ESRCH [ 190.814259][ T8414] rust_binder: use_range failure ESRCH [ 190.820480][ T8414] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 190.826007][ T8414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 190.834075][ T8414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:455 [ 190.913866][ T8421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.989425][ T8433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.003159][ T8433] rust_binder: Error in use_page_slow: ESRCH [ 191.003180][ T8433] rust_binder: use_range failure ESRCH [ 191.009273][ T8433] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 191.014761][ T8433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 191.022636][ T8433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:474 [ 191.047149][ T36] audit: type=1400 audit(1759924073.843:783): avc: denied { load_policy } for pid=8435 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 191.047194][ T8436] SELinux: failed to load policy [ 191.816242][ T384] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 191.967649][ T384] usb 2-1: unable to get BOS descriptor or descriptor too short [ 191.975741][ T384] usb 2-1: not running at top speed; connect to a high speed hub [ 191.984267][ T384] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.994407][ T384] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.005580][ T384] usb 2-1: string descriptor 0 read error: -22 [ 192.011871][ T384] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.021064][ T384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.031531][ T384] usb 2-1: 0:2 : does not exist [ 192.063965][ T8481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.273163][ T8487] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 192.296228][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 192.352415][ T8500] netlink: 'syz.2.2761': attribute type 10 has an invalid length. [ 192.360463][ T8500] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2761'. [ 192.410833][ T36] audit: type=1400 audit(1759924084.202:784): avc: denied { accept } for pid=8504 comm="syz.5.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.458095][ T10] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.469222][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 192.477497][ T10] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.40 [ 192.488175][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.496519][ T10] usb 1-1: Product: 媒 [ 192.500678][ T10] usb 1-1: Manufacturer: 褞 [ 192.505260][ T10] usb 1-1: SerialNumber: 些 [ 192.919423][ T8481] rust_binder: Error in use_page_slow: ESRCH [ 192.919450][ T8481] rust_binder: use_range failure ESRCH [ 192.925603][ T8481] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 192.931363][ T8481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 192.939700][ T8481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:488 [ 192.962001][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 192.994450][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 193.016264][ T10] usb 1-1: USB disconnect, device number 37 [ 193.085390][ T8515] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 193.085427][ T8515] rust_binder: Error while translating object. [ 193.103217][ T8515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.109723][ T8515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 193.199442][ T8532] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2772'. [ 193.462691][ T8544] 9pnet_fd: Insufficient options for proto=fd [ 193.502558][ T8549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.565133][ T36] audit: type=1400 audit(1759924085.352:785): avc: denied { nosuid_transition } for pid=8551 comm="syz.0.2780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 193.606220][ T8553] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.608329][ T8553] rust_binder: Error in use_page_slow: ESRCH [ 193.614858][ T8553] rust_binder: use_range failure ESRCH [ 193.623084][ T36] audit: type=1400 audit(1759924085.352:786): avc: denied { transition } for pid=8551 comm="syz.0.2780" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 193.623135][ T8553] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 193.633158][ T36] audit: type=1400 audit(1759924085.352:787): avc: denied { entrypoint } for pid=8551 comm="syz.0.2780" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=177 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 193.698038][ T8553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 193.698097][ T8553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:493 [ 193.720627][ T36] audit: type=1400 audit(1759924085.352:788): avc: denied { noatsecure } for pid=8551 comm="syz.0.2780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 193.856756][ T8563] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2783'. [ 194.385294][ T8567] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2785'. [ 194.394625][ T8567] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2785'. [ 194.422550][ T8569] overlayfs: failed to clone upperpath [ 194.604482][ T384] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 194.624174][ T384] usb 2-1: Warning! Unlikely big volume range (=31667), cval->res is probably wrong. [ 194.633828][ T384] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/31667/1 [ 194.644591][ T384] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 194.654637][ T384] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 194.676810][ T384] usb 2-1: USB disconnect, device number 34 [ 194.996564][ T384] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 195.474428][ T9] rust_binder: 0: removing orphan mapping 0:1144 [ 195.684583][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.696084][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.712376][ T8612] bridge_slave_0: entered allmulticast mode [ 195.726901][ T8612] bridge_slave_0: entered promiscuous mode [ 195.737063][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.752150][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.759307][ T8612] bridge_slave_1: entered allmulticast mode [ 195.765960][ T8612] bridge_slave_1: entered promiscuous mode [ 195.865932][ T329] bridge_slave_0: left allmulticast mode [ 195.871679][ T329] bridge_slave_0: left promiscuous mode [ 195.877519][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.907805][ T8635] overlayfs: failed to clone lowerpath [ 196.023998][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.031130][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.040936][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.048074][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.055423][ T36] audit: type=1326 audit(1759924087.832:789): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.5.2805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5385b8eec9 code=0x0 [ 196.084330][ T329] veth1_macvtap: left promiscuous mode [ 196.138238][ T8612] veth0_vlan: entered promiscuous mode [ 196.150820][ T8612] veth1_macvtap: entered promiscuous mode [ 196.805135][ T8662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.806955][ T8662] 9pnet_fd: Insufficient options for proto=fd [ 196.820585][ T8662] rust_binder: 504: no such ref 1 [ 196.901537][ T8671] fuse: Bad value for 'fd' [ 196.949374][ T8677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.997754][ T8677] rust_binder: Error in use_page_slow: ESRCH [ 197.004309][ T8677] rust_binder: use_range failure ESRCH [ 197.011008][ T8677] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 197.016714][ T8677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.024816][ T8677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:513 [ 197.049299][ T8679] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2817'. [ 197.316516][ T8702] binder: Unknown parameter '2硺捗蚍fФ[z嚛x1繍婎Ig$砐6 a !璾`B慆薳k2 行頊昧稲聕bNb△\棝噲派a胣娇猐2-骋峯w _' [ 197.464717][ T8710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:534 [ 197.500574][ T8712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2826'. [ 197.521431][ T8712] rust_binder: Error while translating object. [ 197.521484][ T8712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.528079][ T8712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 197.708285][ T8725] rust_binder: Error while translating object. [ 197.717458][ T8725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.723650][ T8725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:335 [ 197.836194][ T1351] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 198.131332][ T8760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.132467][ T8760] rust_binder: Error in use_page_slow: ESRCH [ 198.139168][ T8760] rust_binder: use_range failure ESRCH [ 198.145215][ T8760] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 198.150991][ T8760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 198.158915][ T8760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:542 [ 198.184807][ T8763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.194328][ T8763] rust_binder: 544: no such ref 2 [ 198.223137][ T8765] input: syz0 as /devices/virtual/input/input35 [ 198.344559][ T8769] rust_binder: Error while translating object. [ 198.344595][ T8769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.351838][ T8769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 198.381416][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.402584][ T36] audit: type=1400 audit(1759924090.172:790): avc: denied { accept } for pid=8773 comm="syz.0.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.407380][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.424285][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.429547][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.460994][ T8781] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 198.525683][ T8784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.526284][ T8784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:558 [ 198.566866][ T36] audit: type=1400 audit(1759924090.362:791): avc: denied { mounton } for pid=8785 comm="syz.0.2850" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 198.566871][ T8786] /dev/rnullb0: Can't lookup blockdev [ 198.986047][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.997024][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.050713][ T8829] kvm: pic: non byte write [ 199.056016][ T8829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=832 (1664 ns) > initial count (20 ns). Using initial count to start timer. [ 199.061757][ T8840] 9pnet: Could not find request transport: fJ [ 199.079079][ T8829] rust_binder: 28: no such ref 0 [ 199.084148][ T8829] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 199.091277][ T8829] rust_binder: 28: no such ref 2 [ 199.096378][ T8829] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 199.216216][ T384] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 199.376617][ T384] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 199.385238][ T384] usb 1-1: config 0 has no interfaces? [ 199.392389][ T384] usb 1-1: config 0 has no interfaces? [ 199.398787][ T384] usb 1-1: config 0 has no interfaces? [ 199.405010][ T384] usb 1-1: config 0 has no interfaces? [ 199.411271][ T384] usb 1-1: config 0 has no interfaces? [ 199.417506][ T384] usb 1-1: config 0 has no interfaces? [ 199.423710][ T384] usb 1-1: config 0 has no interfaces? [ 199.429948][ T384] usb 1-1: config 0 has no interfaces? [ 199.437051][ T384] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.446200][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.454232][ T384] usb 1-1: Product: syz [ 199.458455][ T384] usb 1-1: Manufacturer: syz [ 199.463075][ T384] usb 1-1: SerialNumber: syz [ 199.468764][ T384] usb 1-1: config 0 descriptor?? [ 199.639919][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'. [ 199.670170][ T8856] netlink: 'syz.1.2874': attribute type 27 has an invalid length. [ 199.676832][ T10] usb 1-1: USB disconnect, device number 38 [ 199.698843][ T13] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 199.712037][ T13] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 199.726278][ T9] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 199.756735][ T8863] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2877'. [ 199.830750][ T8869] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2880'. [ 199.844962][ T36] audit: type=1400 audit(1759924091.632:792): avc: denied { read } for pid=95 comm="acpid" name="event9" dev="devtmpfs" ino=727 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 199.845622][ T8874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2881'. [ 199.871450][ T36] audit: type=1400 audit(1759924091.632:793): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=727 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 199.886529][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.905126][ T36] audit: type=1400 audit(1759924091.632:794): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=727 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 199.907060][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.946692][ T9] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 200.325957][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2892'. [ 200.346293][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 200.405971][ T8923] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 200.417724][ T36] audit: type=1400 audit(1759924092.202:795): avc: denied { relabelto } for pid=8922 comm="syz.5.2895" name="cgroup" dev="tmpfs" ino=2403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 200.486997][ T36] audit: type=1400 audit(1759924092.202:796): avc: denied { associate } for pid=8922 comm="syz.5.2895" name="cgroup" dev="tmpfs" ino=2403 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 200.502224][ T8934] netlink: 'syz.5.2899': attribute type 5 has an invalid length. [ 200.526247][ T36] audit: type=1400 audit(1759924092.242:797): avc: denied { unlink } for pid=4602 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 200.556322][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 200.568450][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.579048][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.602112][ T9] usb 1-1: Product: syz [ 200.619409][ T9] usb 1-1: Manufacturer: syz [ 200.631976][ T9] usb 1-1: SerialNumber: syz [ 200.673909][ T8962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2907'. [ 200.683722][ T8962] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2907'. [ 200.836529][ T10] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 201.059428][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 201.225071][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.233707][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.242343][ T8986] /dev/rnullb0: Can't lookup blockdev [ 201.409971][ T36] audit: type=1400 audit(1759924093.202:798): avc: denied { read write } for pid=8818 comm="syz.0.2863" name="lp0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.433558][ T36] audit: type=1400 audit(1759924093.202:799): avc: denied { open } for pid=8818 comm="syz.0.2863" path="/dev/usb/lp0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 201.559648][ T9003] /dev/rnullb0: Can't lookup blockdev [ 201.775044][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.784202][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.287235][ T9011] 9pnet_fd: Insufficient options for proto=fd [ 202.410732][ T9027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=271 sclass=netlink_route_socket pid=9027 comm=syz.1.2930 [ 202.605755][ T9070] incfs: Backing dir is not set, filesystem can't be mounted. [ 202.614989][ T9070] incfs: mount failed -2 [ 202.986777][ C0] usblp0: nonzero write bulk status received: -71 [ 202.993613][ T10] usb 1-1: USB disconnect, device number 39 [ 203.000484][ T10] usblp0: removed [ 203.036292][ T1351] usb 3-1: device descriptor read/64, error -110 [ 203.286245][ T1351] usb 3-1: device descriptor read/64, error -32 [ 203.483735][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 203.483755][ T36] audit: type=1400 audit(1759924095.272:801): avc: denied { mount } for pid=9120 comm="syz.2.2966" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.484565][ T9121] binder: Bad value for 'max' [ 203.534889][ T9125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.535504][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2967'. [ 203.536701][ T1351] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 203.608606][ T9127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.686198][ T1351] usb 3-1: device descriptor read/64, error -32 [ 203.776247][ T337] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 203.866218][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 203.926198][ T1351] usb 3-1: device descriptor read/64, error -32 [ 203.937298][ T337] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.945986][ T337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.957030][ T337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.966036][ T337] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.977145][ T337] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.988296][ T337] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.997491][ T337] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.005700][ T337] usb 1-1: Product: syz [ 204.010270][ T337] usb 1-1: Manufacturer: syz [ 204.019275][ T337] cdc_wdm 1-1:1.0: skipping garbage [ 204.028621][ T337] cdc_wdm 1-1:1.0: skipping garbage [ 204.034683][ T337] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 204.041095][ T337] cdc_wdm 1-1:1.0: Unknown control protocol [ 204.046709][ T1351] usb usb3-port1: attempt power cycle [ 204.068431][ T9150] netlink: 980 bytes leftover after parsing attributes in process `syz.1.2974'. [ 204.078322][ T9150] 9pnet_fd: Insufficient options for proto=fd [ 204.126175][ T1351] raw-gadget.1 gadget.2: failed to queue resume event [ 204.133142][ T1351] raw-gadget.1 gadget.2: failed to queue reset event [ 204.218864][ T337] usb 1-1: USB disconnect, device number 40 [ 204.255972][ T9157] netlink: 'syz.2.2977': attribute type 4 has an invalid length. [ 204.263847][ T9157] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2977'. [ 204.284892][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.293520][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.302406][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 204.313722][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.322472][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.347627][ T1351] raw-gadget.1 gadget.2: failed to queue resume event [ 204.409836][ T1351] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 204.436344][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.443648][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.452054][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.459479][ T1351] usb 3-1: device descriptor read/8, error -32 [ 204.586550][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.593888][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.601213][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.608969][ T1351] usb 3-1: device descriptor read/8, error -32 [ 204.716213][ T1351] raw-gadget.1 gadget.2: failed to queue suspend event [ 204.723281][ T1351] raw-gadget.1 gadget.2: failed to queue reset event [ 204.757970][ T9183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:586 [ 204.796204][ T1351] raw-gadget.1 gadget.2: failed to queue resume event [ 204.866226][ T1351] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 204.886351][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.893636][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.900966][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 204.908143][ T1351] usb 3-1: device descriptor read/8, error -32 [ 205.006221][ T10] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 205.036403][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 205.043680][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 205.050998][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 205.058107][ T1351] usb 3-1: device descriptor read/8, error -32 [ 205.157968][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 205.167252][ T1351] raw-gadget.1 gadget.2: failed to queue suspend event [ 205.174174][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.182641][ T1351] usb usb3-port1: unable to enumerate USB device [ 205.189875][ T10] usb 1-1: config 0 descriptor?? [ 205.813093][ T9185] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2986'. [ 205.823184][ T9185] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2986'. [ 205.832818][ T9185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.835008][ T337] usb 1-1: USB disconnect, device number 41 [ 206.361816][ T9202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.374080][ T9204] /dev/md0: Can't lookup blockdev [ 206.398666][ T9206] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 206.505208][ T9211] 9pnet_fd: Insufficient options for proto=fd [ 206.589309][ T9213] rust_binder: Write failure EFAULT in pid:601 [ 206.604185][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'. [ 206.672939][ T9217] rust_binder: Write failure EFAULT in pid:605 [ 207.285752][ T36] audit: type=1400 audit(1759924099.072:802): avc: denied { setattr } for pid=9227 comm="syz.0.3002" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 207.345861][ T9232] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 207.392724][ T9235] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 207.409982][ T9235] overlayfs: missing 'lowerdir' [ 207.425878][ T9237] rust_binder: 128: no such ref 1 [ 207.431064][ T9237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 207.441709][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.459433][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.470693][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 207.479871][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 207.488845][ T9239] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 208.038942][ T9244] binder: Bad value for 'max' [ 208.107706][ T36] audit: type=1400 audit(1759924099.902:803): avc: denied { unmount } for pid=8612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 208.157743][ T9257] rust_binder: Error in use_page_slow: ESRCH [ 208.157765][ T9257] rust_binder: use_range failure ESRCH [ 208.163771][ T9257] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 208.169294][ T9257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 208.177359][ T9257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:143 [ 209.212886][ T9285] binder: Unknown parameter 'dcy銕' [ 209.281467][ T9293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 209.282040][ T9293] rust_binder: Read failure Err(EFAULT) in pid:171 [ 209.312421][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.327512][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.504634][ T36] audit: type=1400 audit(1759924101.292:804): avc: denied { module_load } for pid=9307 comm="syz.5.3031" path="/478/file0" dev="tmpfs" ino=2591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 209.504684][ T9308] Invalid ELF header len 1 [ 209.571993][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3034'. [ 209.603077][ T9319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3036'. [ 209.628306][ T36] audit: type=1326 audit(1759924101.422:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.5.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5385b8eec9 code=0x0 [ 209.682782][ T9333] 9pnet_fd: Insufficient options for proto=fd [ 209.694032][ T36] audit: type=1400 audit(1759924101.482:806): avc: denied { create } for pid=9334 comm="syz.5.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.723458][ T9340] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 209.733186][ T9340] overlayfs: failed to resolve './file1/file0': -2 [ 209.820273][ T9363] overlayfs: failed to clone upperpath [ 209.857167][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.865792][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.878491][ T9372] 9pnet: Could not find request transport: fd仪 [ 210.321221][ T9392] netlink: 'syz.0.3063': attribute type 29 has an invalid length. [ 210.329103][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 210.451297][ T9396] 9pnet_fd: Insufficient options for proto=fd [ 210.510162][ T9392] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN PTI [ 210.522827][ T9392] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 210.531280][ T9392] CPU: 1 UID: 0 PID: 9392 Comm: syz.0.3063 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8 [ 210.542864][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.552959][ T9392] RIP: 0010:do_rmdir+0x1e8/0x560 [ 210.558044][ T9392] Code: 01 f0 ff ff 72 0a e8 d7 45 9b ff e9 b9 00 00 00 4c 89 64 24 18 49 83 c4 30 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 fa 9e f1 ff 49 83 3c 24 00 74 75 e8 [ 210.577821][ T9392] RSP: 0018:ffffc90000f2fe20 EFLAGS: 00010203 [ 210.583937][ T9392] RAX: 0000000000000008 RBX: ffff888115871100 RCX: dffffc0000000000 [ 210.591959][ T9392] RDX: ffffc9001151a000 RSI: 00000000000001fc RDI: 00000000000001fd [ 210.600039][ T9392] RBP: ffffc90000f2fef8 R08: ffff8881f6f50b87 R09: 1ffff1103edea170 [ 210.608058][ T9392] R10: dffffc0000000000 R11: ffffed103edea171 R12: 0000000000000045 [ 210.616074][ T9392] R13: 1ffff920001e5fcc R14: ffffc90000f2fe80 R15: 00000000ffffff9c [ 210.617637][ T9404] 9pnet_fd: Insufficient options for proto=fd [ 210.624082][ T9392] FS: 00007f2620d4a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 210.624113][ T9392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.645735][ T9392] CR2: 0000200000c00000 CR3: 000000011972c000 CR4: 00000000003526b0 [ 210.653748][ T9392] Call Trace: [ 210.657059][ T9392] [ 210.658006][ T36] audit: type=1400 audit(1759924102.412:807): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 210.660011][ T9392] ? __cfi_do_rmdir+0x10/0x10 [ 210.686424][ T9392] ? __kasan_check_write+0x18/0x20 [ 210.691592][ T9392] ? getname_flags+0x209/0x710 [ 210.696396][ T9392] __x64_sys_rmdir+0x4b/0x60 [ 210.701033][ T9392] x64_sys_call+0xaf7/0x2ee0 [ 210.705671][ T9392] do_syscall_64+0x58/0xf0 [ 210.708086][ T36] audit: type=1400 audit(1759924102.412:808): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.710122][ T9392] ? clear_bhb_loop+0x50/0xa0 [ 210.736096][ T9392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.737866][ T36] audit: type=1400 audit(1759924102.412:809): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.742034][ T9392] RIP: 0033:0x7f261ff8eec9 [ 210.742061][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.763818][ T36] audit: type=1400 audit(1759924102.412:810): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.767654][ T9392] RSP: 002b:00007f2620d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 210.767683][ T9392] RAX: ffffffffffffffda RBX: 00007f26201e5fa0 RCX: 00007f261ff8eec9 [ 210.787743][ T36] audit: type=1400 audit(1759924102.412:811): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.807774][ T9392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 210.807798][ T9392] RBP: 00007f2620011f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.807814][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.807830][ T9392] R13: 00007f26201e6038 R14: 00007f26201e5fa0 R15: 00007ffe5f53f678 [ 210.831186][ T36] audit: type=1400 audit(1759924102.412:812): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.844613][ T9392] [ 210.844627][ T9392] Modules linked in: [ 210.844802][ T9392] ---[ end trace 0000000000000000 ]--- [ 210.853311][ T36] audit: type=1400 audit(1759924102.412:813): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.875448][ T9392] RIP: 0010:do_rmdir+0x1e8/0x560 [ 210.940026][ T9392] Code: 01 f0 ff ff 72 0a e8 d7 45 9b ff e9 b9 00 00 00 4c 89 64 24 18 49 83 c4 30 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 fa 9e f1 ff 49 83 3c 24 00 74 75 e8 [ 210.960106][ T9392] RSP: 0018:ffffc90000f2fe20 EFLAGS: 00010203 [ 210.966362][ T9392] RAX: 0000000000000008 RBX: ffff888115871100 RCX: dffffc0000000000 [ 210.974535][ T9392] RDX: ffffc9001151a000 RSI: 00000000000001fc RDI: 00000000000001fd [ 210.982583][ T9392] RBP: ffffc90000f2fef8 R08: ffff8881f6f50b87 R09: 1ffff1103edea170 [ 210.990882][ T9392] R10: dffffc0000000000 R11: ffffed103edea171 R12: 0000000000000045 [ 210.999134][ T9392] R13: 1ffff920001e5fcc R14: ffffc90000f2fe80 R15: 00000000ffffff9c [ 211.007182][ T9392] FS: 00007f2620d4a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 211.016372][ T9392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.022987][ T9392] CR2: 000000110c344985 CR3: 000000011972c000 CR4: 00000000003526b0 [ 211.031046][ T9392] Kernel panic - not syncing: Fatal exception [ 211.037439][ T9392] Kernel Offset: disabled [ 211.041772][ T9392] Rebooting in 86400 seconds..