last executing test programs: 6m38.689422781s ago: executing program 1 (id=68): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/wake_lock', 0x102, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00000100050000000033974cabd6c09b6164bef9b8ce00040003000000856315cc3e70a5048510000700000050e688a5982c955fc38d473539ca1c5100002000040000000000e53e863fa673cf2f611c2668aa3252b91334ae16881b592cebe7e5d1ff3ac69ced61d086c5ddc89f1671a6f37076429248d466ccd47401e6d9ae24a4ba322d5a3f337355a144b6fa79bdf2e877cc80340812695f60203dca4ca8892093481edf276e03c9437cd8cb027482c94e56afd700000000"], 0x24, 0x3) (async) setreuid(0xee01, 0xee01) (async) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) fchdir(r3) (async) close_range(r2, r1, 0x0) lgetxattr(&(0x7f00000041c0)='./cgroup\x00', &(0x7f0000004200)=@known='security.selinux\x00', 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r0, r6, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sigaltstack(0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 6m38.663674191s ago: executing program 1 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x3, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x6c}}, 0x4040840) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 6m38.578896792s ago: executing program 1 (id=71): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}], [{@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '&@\\'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_user}, {@subj_user}]}}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) (rerun: 32) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, &(0x7f0000000380)) (async) r4 = getpgrp(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) (async, rerun: 32) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0x42800, 0x0) (async, rerun: 32) r7 = socket$nl_audit(0x10, 0x3, 0x9) (async) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) poll(&(0x7f0000000440)=[{r5, 0x40}, {r0, 0x128}, {r5, 0x200}, {r6, 0x1046}, {r7, 0x22}, {r8, 0x13}, {r0, 0x1010}], 0x7, 0x2) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000004c0)={'pim6reg\x00', &(0x7f0000000480)=@ethtool_pauseparam={0x13, 0x5, 0x2, 0x77f}}) setfsgid(r2) (async) syz_usb_connect(0x5, 0xeb3, &(0x7f0000000500)={{0x12, 0x1, 0x180, 0x7, 0x28, 0x9e, 0x20, 0x411, 0x150, 0xb1d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea1, 0x4, 0x0, 0x2, 0x0, 0x39, [{{0x9, 0x4, 0xdf, 0x3, 0xc, 0xc8, 0xe1, 0x21, 0x33, [], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0x7, 0x7f}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x10, 0xc, 0x1, [@generic={0x7a, 0x11, "e0b2c8b9b5c6b55d24e1b1b6fbaabb831a47fc111e3ea87cc9c7c9052e7a9a951a33f194514d8585fbe18c38ed9008a3e54f018aa67ee3239bceeb63db9b214a9e58e1198f7ffd230193a5da14ebea1acc5d35fbaa5151cc5c41cab588d54787f5169a4438d3c1204aa651826eef79aebaf11be64fb559f0"}, @generic={0xf3, 0x22, "bb16bcdaec163c83397b2a4211c647b4fdc3f91f575a88eddbffc4905de7f84247ca81ec1ceadc9b15cab03d513ad6c66792f1ed722b2187911f09958198159e38b111f62e4b9b0000a470a1f7524ff4193267f3a82679ac48b7ba3127f1b037fde2694b6da085a135b2411f9ed0d24b622dba1c462c2a3619c1c1d8806fdbadd436eec2ca5313247b5f38cf8d4fa0150c8a3f80630c644f24ff1b88603fc56d6d5b9b49fd5da5a9980665d674fb8b8328ae371f0566bfd9e790c7dedade83cd1092de73c10377036d101d4b9d438fd65f1d5331ed0777cd6d62030f33a1ed5f3960bded07884fc15d2baf1d9651ac85a8"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0x7, 0x8}}, {{0x9, 0x5, 0x9, 0x14, 0x40, 0x7, 0x30, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x73, 0xcf}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x4c, 0x10, [@generic={0x9, 0xe, "8b636c32d806b2"}, @generic={0x33, 0xd, "856c93dff45eb6f582c92785afb88f0b1f3491e78416b55b6d487aa76e0bdbe4b6fc489ed260808fdc3e74fbf4e33cac59"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x2, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xbc18}, @generic={0xf3, 0x21, "a73672dc2baf0519892631dd9830e6c7b899c3120e06ad31c7adf420ad661d11f43b8572d21c27da39c8b7e3dc27ab026de0a678b47fa37707fa480131c49a917026a61a2f8057ecb65d0a5ffbe1a5836b06702db2a656bb281cbfbee08ed2a780ba5a729faaf76cf192c83b85a3921097c4ce373a46ded79108d7ea174089d5325b8f3d8dd3ce9b2b7fa5615a7f6726280c50891cb4a1c7e641beda2070c5c9175d8052207f3e87a2d3bd0747ce2e43d0458816d0b1b65c11b81b9fc15ad0fde8633b46f9da2dd794f8a523e69474aa3b20468b8e79368ed8cca82bbabfac87ba7a0e2e0986f0160ec2c094ff31d6ee68"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x2, 0x1, 0xfb, [@generic={0x64, 0xa, "23b40f75f0b9c879cddf95c28e8ccfff30332da4d3af4675492094eb571455276bfd0b20c01193802b4c10d90b097ba31e24d4f22d14ada27f42b418657ba0b0a8664db22cc7f155e88c77765b391d380c330ca24b0e9476de16d5c0f9d3ce9deab8"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x40, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}, @generic={0x2f, 0xa, "3b47d159db54144b8c94c3a59c4e36381c6993706dc894f1ea09147398c9326dcf968728ba06e8ec986b2c48c5"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x6, 0xec, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x9}, @generic={0x5, 0x22, "30fd96"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x1, 0xfb, 0x8, [@generic={0x32, 0xb, "63c5cd79baea0cca579636a6091a957cdb8632f6c90935e6c7fb2ef20ac46ac826cc0b65093f5da899cbdb494313d196"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0x5, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x258, 0x6d, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xb, 0x5}]}}]}}, {{0x9, 0x4, 0xf, 0x76, 0x8, 0x29, 0x73, 0x7a, 0x5, [], [{{0x9, 0x5, 0x1, 0x8, 0x400, 0x7, 0x3, 0x4, [@generic={0x4b, 0x11, "e6df94e2e77ccd29a3b9a51f29951532d30dbfec3c21d0b0ced892abb3856af00f8bd69c728d29a33e6b1d13cf08cb452f1af539f69bc545a7f00bc1ebded64edb30de65276f61c6d5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xb624}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x7, 0xf8, 0x1, [@generic={0x6e, 0xd, "f3540de584d679da1d6b02cd370a239e9bd961f0b4d360e880d421643c9c124986711e6ca0b3a186688ebfbac3e32d2094dd57cb2d2d24c6922608407ae265041ec94965f5570a5595828ad8ea7a3ffea776ed9dc7bbd440a35946340ed078ad80833d39f893f1fc09a00db2"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x3, 0x7, 0xcc}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0xc6, 0x5, 0x81}}, {{0x9, 0x5, 0x4, 0x1e, 0x3ff, 0x2, 0x4, 0x7, [@generic={0x64, 0x21, "42ddb5c02fbdb716b2ff9333957a7e503bb5e27bfd8268684bb1cd6381f87a8704af8d0c5fa1189af4d8fb74ecc568e4c7faf43108824bb06aa7506ea9b8a65893ab76aaa4a0bbb32a37aa67833dbb257f880ddec27fe3c4801d2bd8aef1443c8c5e"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x2, 0x10, 0x3}}, {{0x9, 0x5, 0x6, 0x774fbe2a7dce2473, 0x200, 0x1, 0x0, 0x7, [@generic={0xc9, 0xc, "5e7626874d3dab8e16cf24e59cb44e2170c8fea41a39fa5e597cb2552d3501eff4c5d208fd0cfe6f36c1f2954d443af0f067945a51bac859cefee177862a918220d27c7ec5154c8f41fc09d664f36e4d7dc6d3006c8011b12a804bcb330bbb18ffea17f6d84b393f236fa9a052ebb6ceb35133bde75a551d1ca7029d46c38055aa1b719847ae103cbd8f4e5fcec862358ef333cf02de706022403b474f77709c3d05e84d3b058959c487f44f9eb6f8d16419813d7b9c6565b3c11f07ffb61cedbb38b0f4248b77"}, @generic={0x6f, 0x21, "62d87e45d08025e7227c088d1ece5bcbe6bb1a7ac96b0656dfa9f9760d382cfeb2261dd8960322edb6d56e95e9ecfba1ea6a6c7bbcbcc75ac8664044434de179e69bb30ca912262826cd14769bd2397c09f5b06b58eb4f48cbd607fd3693672e95e0f0ce7316af479fab177246"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x4, 0x6, 0x8, [@generic={0xe9, 0xf, "cbafa369d115e1b39492746ef190adb7ff6c1a270bae4942d1607640564b323f88f75f8aa5700cad450bdc26620e29c536129b7e22103451afad8be73cb2462012928b3cfa64d081575f142f5ab76e78130e83b8a1964e4fdf6ff0f6e093ae9294d739542e9cf999493c9e583a6bfe68b8ba195c703d44b1a33f458903d94e6e371f5e6b74fee39768cdf5029556c017c39cc579d6aea64d52b21c66cbd7745dcabd94492e59981e58ac510e6b84afc92dec5f813de485a01532887fda401d0e013164592b7f92171181e1b3e594ae02eafb0e722ee5f8bb7321be9492ecc505e935369ee95696"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc0, 0x17}]}}]}}, {{0x9, 0x4, 0x13, 0x81, 0x8, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0x1, 0x3ff, 0xff, 0xb, 0x0, [@generic={0xa5, 0xd, "cbb151315a86117f568a2f0df312fe0c4dac8e50cc22931feb72b6598f0ae6cef2e1b9bef980c1dbadaf4700c551be94a94cb9a09ce68261d890161ada5102c76cadfad4ff020d0eec386741a207223cdbd52023d3af1c6c733294c5ff10d8cb0330732d42a250d35f9d3b8edf083931ae930c593e5fab072b593fe77a2111eaf88b06cc6b1831b2403c189c54d1b189414efc9aa52f4f3d7ecc4fc87cb36614c80d8f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xb}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x36, 0x54, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xc0, 0xc0, 0x2, [@generic={0x62, 0x22, "ebe63e92c25f1655bb92680acf8bad8abf32dffbbd977cd0212f5f23e3419184b0982ab6c5aa32f17d3c238b1e6fc01827dfeecff725db6304b6f9feab790de57001564c2c76cf24d8a1feaa818bea4ac0325879d42e441da1ac567883e7df76"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7fff}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x17, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}, @generic={0x71, 0x10, "84b188af05230a2bc4026a0a09db8c7a088b79d651318682f227158329b9144bebb6ee2b560810827a5c1e1f89ff1dea7a98193110139e0aaaab789c08700466dda8223697c066b049a8714e215e0f87ae8eb0e648ab2e8cbe7dd5b92361dc2945a80971232470d7336b8774e00090"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x8d, 0x6, 0x4, [@generic={0xfa, 0x22, "c92ffd239b1607cae9da3b3ab3ba51bc5b1a1079d35f0e46e0ae0ef62124ac07b48648c93c183e907689449d4aa45bea2f22113cac1abf8e6cf2d04d57deef18fba947b9158307a6172705e4233d0d306d379c9e84f42246c3fe9581e5daa278fbbf7dfce45d90da5f63f2a5e513540395e159e620bc2c168e4a22d6c4d89fc477b5aef01b062caa2258d9ff2dc333e7978e0f1cfbf104c3552581e82ae3d128a99c0a9d7e42c192f9577dbcd3746855fc5169790506a24ebc9c243de87b0e3c573b1137bd187dd3a3b4d1e7e0c7a1990f0707e9638ccbc50626ab4cb3dd48401d925ec6d41260e85ddcfbbb63c1133608fda8618076926b"}, @generic={0xa0, 0xc, "2e3f34a3e4de1eca74b4ebfde308a35cc12953e0642c9bb863139001e4e5accef87ea62fe994773526ce7d051bfd88b1bdad85f3434afeae92cdd6711319c8348b2dcd93c797647fc1c46ca47b9cfc90c45121cba1f4fa2a88c2d0d967ecb76f83ed8a3ad01e258953f3cefa994242701f281514d99c430303215c933963957c40d18c6597c3f1b7a53a9ade8801fe27e85d1a168b4eebbfe9076a3f425b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x438, 0xa8, 0x4, 0x4}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0xdb, 0x9, 0x6}}]}}, {{0x9, 0x4, 0x5f, 0x2, 0x4, 0xe8, 0x51, 0xf1, 0xa, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xa, 0x3, 0xed, 0x1, 'n'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0xc, 0xb, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x1, 0xc8, 0x3, "93675d99df65"}]}, @uac_control={{0xa, 0x24, 0x1, 0x80, 0xc}, [@mixer_unit={0xa, 0x24, 0x4, 0x3, 0x7, "387f56525d"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x2, 0x4, 0x9, 0x9, 0x5}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0xe, "43cf529291de"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x3, 0xbc, 'O!'}]}], [{{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xd4, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}, @generic={0xf2, 0x22, "80505ceecf1be3de93026bdd459c4ced5cfff4011c13f0ef12a1d9e97c6122f795c4e0684087a19130c350f111158bd5b46705eda6f707a37c5b359c2bc6bf8763b9d1c001c9d9f26de4d6d0e4d61322171a038db907dd4cf1fbb82494bd7cc4b7c7527b34bf0e5bb82e6113cc167cce935a132a3e6d8b6e59de3ea15cba0bc8a423046429f821e5b1a1f53ea3d79820b9d59d55221a187998161e92ba117b9849fd67b8f22f3edaa179825fa9cd23ea060653ef851ac4f8750a471b918e3ac7934bf0d796d8e9571ea4fe8d94898bba6a0aca1ace6b3e341f98b42a64b10dcc263a38c970c9a9f32d953ae7892d7845"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x5, 0x7, 0x2}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x8, 0x9, 0x8, [@generic={0x98, 0x0, "2529167d4e90c0e5f496a659b8e169c9c064c1e7ae2b66e3ad601991ec86d9bc8cf8acf3144fed3a2f0b75a02838796c0ba8a91d4615331092babc7fc79fc1aedc61e378c240c13a5b0b244749a2c215c84078d24edeb883795a733464f360ac0b55ce174753874a5b99b1ee9872f4ea214c9000810ea8aa93156f1dea4990c8b0b186bdf96a84d779b843605d326b96201087849283"}, @generic={0xf7, 0x4, "5e7b23fe2238d6c99194df6cb8aafd25b599561d807ba882cfbe2ebc4beae93ec7626706bdf58fcbf1832b71b058f96f0aab26423f7c315d3ff5291642a5858a010ae09755f9f61605d14f1eadb39186d04410a9d3f0dc876c475a89fbba82aac9a565daea857fe3ca9fd3ac3de36cf5773161743e4ba4e74b3c136d8d010548e716741d5fee9a42865ad307f14d7a89688f73502769c4959f4a29fe27587fbb3be4495045f50aa2152711aecdac6eda419a9759c205705804a1a39c93c5d879661307d95504a70245bd7020527ad8e14f9648361c8e9fab0d580b5c638be00557caba0523a4229828ac384c1d4d69dc4448ec456e"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0xa, 0x0, 0x9, [@generic={0x6e, 0x6, "d990aec7aad7f9f4189c61586d1450d763638154e6f42218388ed8c8593b1da1ef339ae98d0ad00f6266386492e4ae31079efb954925712590c18a62f5a9e6f6970aaf2aced1a5325eab4691366229f539efa1437ecfca8bf851a61d03684375e6d69a8bb219eba2b7919ed6"}]}}]}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x310, 0x8, 0xd0, 0x6, 0x20, 0x9}, 0x5, &(0x7f0000001400)={0x5, 0xf, 0x5}, 0x3, [{0x93, &(0x7f0000001440)=@string={0x93, 0x3, "4ca642422677c8c1042f0ee5f31e8ab23e01b29edc8ef52930de8ce63d6480fc8bc45a716272632269b956a8bb66f5cce4ec2a8a21aad0bd304443ec8de277f5c0f57f2b290e22bf75e20ba957d28c7523da9a6479f2ec97008187c6472faaf7fc4c8498e8f667fa7627440ceb82836dc1acf44905987bdf12a312b042117f7efe229f31099d9154a2e6ca2767e340798f"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x809}}]}) (async) sendto(r6, &(0x7f00000015c0)="f3ad13de77b604ab858cc01ac4432a4974199c6e56e145b1f45967d415d093ffe14acd2453e22bbf6c24c492c12e45c92eaf59654fe3526d0580d92d79cba3200e530c0bab5d8891c490ae580058802a45b1dfdbc3637fb0dc02fa7cf9e16c5167c54bfc958d58b743d7b75c47b668b8fb0fd82cc76941112cb65feec67dd60f3b8bd97c47ff3ebbb3b8592d0ccf7dba6933a13bbe2dc4227b6dd62e8849e58f2a763cce3a5b9232026426677827c91a7824074e042930adaf0e7a37ab8fe0d1", 0xc0, 0x2000c810, &(0x7f0000001680)=@isdn={0x22, 0x6, 0xf, 0x5, 0x1}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x28080, 0x50) (async, rerun: 64) ioctl(r7, 0x7, &(0x7f0000001740)="04bcce0d796378ad12516b1fe82b513092b4851c2324eeb02447641479b2231338de84740b020549038dfbadefdb585b4f8900fe1d5be96ebb97b6754f15999b7eba8b1acfac747a058e2c1d74622682df81e0cfc1c6695fcfd8eb3a24c6eefa7da8be4a8c022e61c48d6c5e72e9e4e48bd5e70e6368f0b7d9018d890d9488d0527e") (rerun: 64) read$FUSE(r0, &(0x7f0000001800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000003840)={0xa0, 0x0, r9, {{0x0, 0x2, 0x3ff, 0x5, 0x7, 0x3, {0x6, 0x6f2c, 0x9, 0xfc, 0x3, 0x3, 0x81d, 0x40, 0x3, 0x1000, 0xc8, r1, r2, 0x7, 0x4}}, {0x0, 0x10}}}, 0xa0) (async, rerun: 64) write$FUSE_ENTRY(r0, &(0x7f0000003900)={0x90, 0x0, r9, {0x3, 0x3, 0x5, 0x8, 0x8, 0x80000001, {0x0, 0x10001, 0x6, 0x0, 0x5, 0x4, 0x4, 0x6, 0x5d3e, 0x2000, 0x8, r1, r10, 0x0, 0x2}}}, 0x90) (rerun: 64) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f00000039c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x6, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x81, 0xe, 0x8, 0x75}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xaa}, @acm={0x4, 0x24, 0x2, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0xac, 0x64}}, {{0x9, 0x5, 0x3, 0x2, 0x7b7, 0xb, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000003c80)={0xa, &(0x7f0000003a40)={0xa, 0x6, 0x250, 0xb, 0x4, 0x4, 0xff, 0x3}, 0x1a0, &(0x7f0000003a80)={0x5, 0xf, 0x1a0, 0x5, [@generic={0xe1, 0x10, 0xa, "c11292d9c902cc5d977bd9e25413454ef74bf4fde12a4d8b69c9507f4e1ce0d44994874fa81aae049bc501a5556e73477a9411bb6230bf9bdd6d6b313dfe07d853cc3e545762d4cbf24b3833b4446aff59051dec48c8618d295752c191e72373b7b525a21622a88181d9685c5713f80cee2fe083f141a7ace127986a8ba9ad7308b545e6da15f00e1407f7f6ef06e9d672f2981d502f5b4d8042eca2851f14af14cb02ab8f76b4f9374a6e7812eb59b4506b952a05dfa343f81bdf6cad343eef0fa4cbccb9537c326441a79b2025d9160d5699f884a554f7141c2fc10624"}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x6, 0xf0f, 0xa3f9}, @generic={0x97, 0x10, 0x1, "fcc7612f1bf7371de1049f815b404c003fea4b709d966162dd90c9a7282337db81ac84c102505ad20ef0d9e7af4c9760a0f98c3fcb5c0c2f366b362193f7877327d259ac16c650af2063b301cfde2967df5c288df132ebbb68ed2e54a78feef69060d2a5a2d0141c9e4ee7c45934c33f653058d95d05a425da0b363717c08eaa6c182a1513750ca5f29824a4b61f91c85519870d"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x5, 0xf00f, 0x2, [0xff0000, 0xff00]}]}, 0x1, [{0x31, &(0x7f0000003c40)=@string={0x31, 0x3, "45c2f665661e7b05e0deeeeecf2510a006ca66053c2bd445682a39e56cd92905cfe5c727b99c295286e0c757ebef98"}}]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000003cc0)=@x86={0x2, 0x2c, 0x80, 0x0, 0xe30, 0x2, 0x6, 0x4, 0x7, 0x5, 0x1, 0x3, 0x0, 0x310, 0x147, 0x1a, 0x1, 0x2, 0x0, '\x00', 0x4d, 0x7}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000003d00)) (async) r11 = openat$cgroup_ro(r6, &(0x7f0000003d40)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r11, 0x4048ae9b, &(0x7f0000003d80)={0x3, 0x0, {[0x0, 0x9, 0x21, 0x7, 0x3, 0x0, 0x7fffffffffffffff, 0x1]}}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f0000003e00)) (async) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000004000)={0x0, &(0x7f0000003e40)=[@set_irq_handler={0xbe, 0x20, {0x20, 0x2}}, @code={0xa, 0x3e, {"0f01cb430f090f080f01d13e40ab66b8f1000f00d845c170130166ba4000ed643e460fc75b0166ba4000b03fee"}}, @cpuid={0x14, 0x18, {0x4, 0x6}}, @in_dx={0x82, 0x20, {0x2f7, 0x3}}, @wrmsr={0x1e, 0x20, {0x482, 0x4}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x4b7}, @cpuid={0x14, 0x18, {0x1, 0x9}}, @cpuid={0x14, 0x18, {0x8a, 0x6}}, @in_dx={0x82, 0x20, {0x3bb6, 0x2}}, @wr_drn={0x6e, 0x20, {0x3}}, @wr_drn={0x6e, 0x20, {0x3, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}], 0x196}) ioctl$KVM_SMI(r12, 0xaeb7) (async, rerun: 64) ioctl$KVM_GET_IRQCHIP(r11, 0xc208ae62, &(0x7f0000004040)={0x2, 0x0, @ioapic={0xeeee8000, 0xfff, 0xae4, 0x400, 0x0, [{0x5, 0x0, 0x2, '\x00', 0x46}, {0x7, 0x8, 0x6, '\x00', 0x5}, {0x2, 0xa, 0x89, '\x00', 0xd}, {0x3, 0x8, 0x7, '\x00', 0x5}, {0x3, 0x7, 0x4, '\x00', 0xb}, {0x12, 0x1, 0x1, '\x00', 0xa}, {0x65, 0xd, 0xdd, '\x00', 0x3}, {0x2, 0x54, 0xe7, '\x00', 0x6}, {0x6, 0x7, 0xa, '\x00', 0x6}, {0xb, 0x4e, 0x5, '\x00', 0x6}, {0xe, 0x88, 0x9, '\x00', 0x61}, {0x8, 0x5, 0x28, '\x00', 0xb3}, {0x9, 0x2, 0x1, '\x00', 0x8}, {0x5, 0x9, 0x36, '\x00', 0x9}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x2, 0x2, '\x00', 0xc3}, {0x3, 0x3, 0x9, '\x00', 0x4}, {0x44, 0x9, 0xeb, '\x00', 0x2}, {0x9, 0x9, 0x7}, {0x2, 0x3, 0xff, '\x00', 0x7}, {0x8, 0x4, 0x2}, {0x5d, 0x6, 0xf9}, {0x81, 0x77, 0x6, '\x00', 0x40}, {0x1, 0xa, 0x27, '\x00', 0x7}]}}) (rerun: 64) 6m38.569895952s ago: executing program 1 (id=73): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010600000000000000ee1566655a001800018014000200766574683000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x44800) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000004400)=0x9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r4 = dup(r0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000180)) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)={0xd, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x0, r6}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000001c0)={@loopback, @empty, @private=0xa010100}, 0xc) epoll_create(0x20000d8) 6m38.224366714s ago: executing program 1 (id=76): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300ff0009210000000122050009058103"], 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xadf6, 0xfffffffd, 0x0}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00150000000008ffffff2e00000097"], 0x18}], 0x1}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="0900003ed4a7ee007f0b0000000000000000008000000000ad010000000000000600000000000000cd090000000000000000c0ff000000008e0b00000000000000020000000000009b09000000000000000800000000000007040000000000000900000000000000a4030000000000000900000000000000e402000000000000feffffffffffffffd80900000000000001000000000000005150ca78e1cd2fcd9e30f67e3d996ebe27a91a1cf4e70fc0a8170462b1d23ba3d908607e544caf7b0c4d4e5bea89414ae85c6a4040e5a55fca939bef8fc2f5a4169a26ebaefad2390b5973413c"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f23f835c00000a00f23f8660f2263b9f30b00000f323666420f3a428ce80c000000003e3e6767450f01cf6536d0260f68f8f822d1b7900000c0fe", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="670f01db0f781d0faf81000036670f01d12ef30f5f880800b80f00edaed8d8b9410300000f32640f01df2e0f781ab821048ec0", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r6, 0x4068aea3, &(0x7f0000000580)) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000009c00)={0x0, 0x0, &(0x7f0000009bc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000203010200000000000000000a000009090002000000000202"], 0x20}, 0x1, 0x0, 0x0, 0x40008d5}, 0x10) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20231f0000000204a7ea351e73d5faffffbfa3027c59ccb7000000adc9df"], 0x0, 0x0, 0x0, 0x0}, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x0, 0x331}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) clock_adjtime(0xa00000000000000, &(0x7f0000000380)={0x3ff, 0x1dcd64ff, 0x5, 0xb, 0x0, 0x7, 0x5, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1, 0x81, 0xa0, 0x40000000002, 0x0, 0x6, 0x6, 0x9, 0x8001, 0x4, 0x0, 0x7, 0x0, 0x8}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') pread64(r7, 0x0, 0x0, 0xc2a) 6m38.222784554s ago: executing program 1 (id=77): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$system_posix_acl(r4, &(0x7f0000000cc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) (async) fsetxattr$system_posix_acl(r4, &(0x7f0000000cc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) 6m38.221891824s ago: executing program 32 (id=77): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080), 0x4) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$system_posix_acl(r4, &(0x7f0000000cc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) (async) fsetxattr$system_posix_acl(r4, &(0x7f0000000cc0)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) 3m51.852255089s ago: executing program 2 (id=3201): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000021000080"]) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f83afdeefa000000000000ffd2acb165fe580cd5"], 0xfdef) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 3m51.8384369s ago: executing program 2 (id=3202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x5452, &(0x7f0000000000)) (async) splice(r0, &(0x7f0000000100)=0x7, r0, &(0x7f0000000200)=0x2f7f, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r3, 0xdfe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x80) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x0, 0xfffffffffffffffe, 0x100000010}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 3m49.814183711s ago: executing program 2 (id=3235): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000d0005110004600000a60c6eec00be00443cfffe800000000000"], 0xfdef) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x5000, 0xf, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xf000, 0x3000, 0xa, 0xfe, 0x2, 0x7, 0x3, 0x0, 0x0, 0x1, 0x0, 0x77}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xb8, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0xeeee2000, 0xa, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xdf}, {0x1000, 0x0, 0xa, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x1a, 0xa8}, {0x33326000, 0xd000, 0xb, 0x20, 0x0, 0xb4, 0x9, 0x1a, 0x0, 0xfc, 0x86, 0xfe}, {0x4000, 0xeeee8000, 0x10, 0x0, 0x1, 0x8, 0x0, 0x81, 0x0, 0x4, 0x0, 0xff}, {0xeeee8000, 0xeeef0000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe, 0x0, 0x0, 0x0, 0x10}, {0xffff1000, 0x9}, {0x1, 0xffee}, 0x40000007, 0x0, 0xffff1000, 0x40020, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x8]}) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000100)=ANY=[]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5416, &(0x7f0000001100)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9, 0x4}) r6 = inotify_init() writev(r0, &(0x7f0000002200)=[{&(0x7f0000001200)="7a7cc8ab7f445d3d1189f730dd4058c358f69b0aa5cf0c009a33f8ea0cb55e8aca38b49b18e8a468fe125675864555804dff219ffbed95cabb37eb5963a0afebf0a5e6545b66b888dea2cc9f5562d2874a6bf0f6830f255d3232af080541ad95c5d5a0714bb04e980ca5648fafd7ad4aff7e92b5397ebaa824fcb704c3394cb712c8d0c4dfd4f90ff005e6371ae1a8ee6e48b205de943a5206f104cc9942cce48c2c8662e849c36989ac01c67063019b278b177bd087ecc5258a3113e29aa338b011e43ecf34e154c8d50fc7e18af3681d1cadb9444dad677d7043a80bfb8768b4f197ff2ff4e431dd881aa3f8e460d7e59e4054090091185dbbe578db8a8171c3b23f3a52db94f1a0eb92f88697a8b1b4539527bc894e2c62f6df5f99399cf75e92704986dda93eff8de362f39d5c38f2f4fc39d48e1c3b0e463ffdb7584cab577426a1eb558457167483dc051fce6d3b608821fa6cc8b3807f105eacbe9e8857d4d7432ca7db85cb8a4e71b5247116ca072b1a988263c253b94a8e8fb1af8d0f372708b738d7dd59a70c7f389f1e394a7804253890b4bf03038c21af112e066a19eb81b7f1706e118b1129e370602427fda99ef30c850f055399ef3b8f6b1fdb6fd3abc1189e5ad0eec9bba3e55caa22d97750e0791eb4363d90a98795be601a37c841213e4f73620593428bbc25fd9de0fff21ed2d93f8167a461849450d8583e280ffc583b36e41314acd1776e856bfd74a1c2fb1c3e3d550d882294a175c09169c8712acff655783a73fa4d85d8a4f81444b6d414053a152e6ee2e93db65baf69c7e9839ed62909558a102630f9021e57350bbf108c4dd22a47157ff648ea040b076658a9d93c77afed9f0482f77ff2de7c1339a776b9c4745b2713af3c4f7fa343033dea61d5aa2ed1d4e431fd8c31d722f54c02931444006f20e88a0edf30cc608cf1199362d0a3e183819879715b106e90dc4ea2a0c093166b900526fac76ef44f41a491b56ae249c6e8da6a9e6d250d297bc0c35788f28cf4ef9c6e72f39d5624da890fb91c75ab8b30842da9cc3da6d65c90556566d12c8457a0b12a2343e83be13b63ec822e15c5852f776370b9f997e81d60c11627f74674af1e964f3c44d6a350e4144d1def1316fcbf926e4aad161e924c679820456f82b539ca3cf844389a05f28e55b8265243c122559c0373c87b9bfc910f8231159298f3ab4259a9119fb1b078e0cab0dfbe31ab9c7f2bc891b4840cd01cd749273cfbe089ef3b655abd77a7039d2767f8834ca1314cb877d21f78f9a814a8e62a20908971b2d2c3777aa418079821058fee56c66f6752c6cc54a49912722f4f9f220aef4e499f3d166c621a2cef32493bdca6d02d25e20677b204f84afff971fa7676eaa2c576dc4501591a6a63072b2c1329e7e67719d6e7d99a8d13453e25bcb937ef46944df49846caa2e07690b49de57cc8aed3c237f5c0f041b7867269a430a50be7371b7b113543ee4e8ad1cadca21ed2f70ea01dbef4588722a5f6a585d27717f65aaf6ceb6591f451fadbab029480531aca2e161612d9875932b73cbba31b19617eacffcc03b28010a6bb53a8831803f120e41ca52ddeee058568ed458034f23c05489cf260aad9840a90d296ac15a0d99e33f1396fc2b2bc310b0a51353aa8519b13a2fa70f6a203fd9fb80c5a1a92a8c8e8de828706f2ea32e03784853740ca7b6fb81e752de110c260ce54221989e12dc5b376bee21bdfa14a5a5cea19f64fd169e6436214daa379d0cd562c73021b79e86b2948946e5f6ad32813b7220917b3d7a5c8006dfc5db627c1a65533a94a5603ded0e7e86b63748dfb45a20b76901cc712789952a5ac9acf38527e9b43790c4445f7d2f99a764117c5ba791191c69465c5f8470311a4975081d509ff20e3330185c87cbbf65b23275f03a245ab765db369f75275c50988477cc2eb1b7f8a1b7743e8ea647396379d02c858a1ae532e64bac0f612f33b23747c03423fc66087b35fba85ac1172a44fff544be6e0dcd1e36b8b3f61510875585e4e12589044550edb1e966d87b1852fb44ba44ec5d50172f97d33387ed2b5e2bff5b631d3c0f543006ca381fdfde80b880b4f02a2781d922070ee65e5b8070843dda88c4a4207483b05bc5cbcee4b5ffbeee6b6e5b5ee3d5fe6ce619c0680706216697d91716a79a3f96c99806f8d06c6e3b14481f2e993194b3302155a95bdc8d8ec72399c73233fc57d929da5a50ccaaec8693d09efe98a4650ec64fe7e6c44d8e360f809df6b4c9f92d51757e2bc0d3b0df845b531289acc931e9c6decd8c5457f6bf47e3994a82ae7942d4b7cf1ecad67f602b6a69689792cd8b2fe680279a4e72a99bdf34b22ae187d349832c8f94e7b59362110f39ec44c7afe0c4d505193d59f00aa0be7f97d65c6bb83bfb214026a2cba0ef055dbdfd0177d2d6cd9d73863a83fe5b91e17275b223d043ba2284029a86ed809923661177d05088dbaa23520f0dc41ac0ecc8f33a02217c4115a791850dde555aa43acfc5f5fba8e036b5508795ead9dccbfe7ecc04ccee6b8f4e84eaa480ce0229818274eaa42d05c5ae8fc3b26aeb89c0ad82d4fe1b6a4f01ab2f1e2c10a055967a1d9573516767362f722cb85b7f15b12d2dbbe4bcfd2a680fbfaec78abe084334d0c8f33cd7ea363626eb6429cb810f981b5fe8110fae71d6750f6fb11464c0d427d8c40c71bb4446b48aa700ffbeb8d5c72c64ef4152ebcf3b679f02d22b9436ab22a21cce9b39d034d9b3d6a2296bc1b8043d52234ad53f4d980155e5e74df4cf32bd043cb3c74ff1de9b6d586333dc54343aeb4cb6ea22fd911fb6d4a73de0e394f5e6179b7a66a80f008f58b684dbb0e29efaa578c0fee1b01ccad24179a0bf184a99770225f6dd1a89532f431c8da198310e5e9434e10a3ce4e6020974af31f6b9301b1a6aeaa19216a3d50e18f3b9a254b924e5867aaeb9fb44340d80df83d1307e8bfe8cec33e3c24c953415f24fd96468076716148ad078073f45041e03377c5cc3f35bdea798c5de225837da0e68cfec0d4458615a7efa92c30d25b2c84ca5917cec2bf09da8a926e3585118bd41a32e5d3e5630cd486b45ff88532dd48d6c5cc605a06a053af82cf986e58d63fc9820488f7efabfb93516e93bd6250391cb0c1faf9f2d35fceff4ff3069fc6e120774c35b7eadcf620a05c6b10ac699df64116b744138a5a72cfefb96d22f68b6ee79029730521c4b71119e92a2c9a350d363cfaa920e48d1babd7951e9500d2ac08684a8425ca998bb78587cf1199f196b17dbfc17bb2b8e3b3087e38bea6155d70cea4d9e7d75388fa73d08643a6b89f2dd84cf18d889ac7e060520c684099602bccfa1a61e6141b227a7497ed5b835c51d484e2c66ac20bb51d40b4372ea18046ac85341d0b94c1993e04bd9ca5ee91cfce1c2f2e8350cd9e61c83bab897b6581fd07e874b1eb9c9597c89d26ebe30a31a85935dd85d8593ea5ba0b580e9c94a69773e156018dcb5a6353ccbc6566729700a7ec595d613d2f097f8c3e174fbb2caaa9186143ca5bdf469c01481c5321e8920179223286662f9c48f96c1f30ebea57447337ca044ba0f1a9fdd7d521ad3ad144c77653bd012134afa645addd0b2f6ae94e9df965a37a094c756a892ba3efd3a5be8442b450613eb9c59454dda04b7ceb62f155c4b451fe7b5c46f8f573bee9864a4468c75c7d85db1d4151d0a74984655cdfa88967750478ed1859c543f89bee5a87328fa94e16ac3d7206df94423a18d3f26a38106bd5b58aa757993481f75333df372dfeffe92094f936ca39231e2784d91a220511de3ad534e99c834e41e6d5abb3ed1066e9d927c12382298ba719bb7e8a8d58cc33f5fceb8c866161e5cc30cbcf8eebae7fe6d16ca2f265326c462e01014d0b6960dcdab9c3e2a8d2fb6d68213ccd5cca14cbad8c1d368507bb786586f6b93bc628227ad7b5f6f5b84bb14b148b79871a396001d3179ea3b1c3c8337271e60e70b5f112f67fc98ecd2a64dc22fdc864f36d10eb3b4baaa2f0248b8f9a7a6354adcd4e662f314a1eb602c1ffec4bc893a40a6b9e53d266dc04e75c8b6c081fd97567b008b7765e06e4442e86406cc4353f0b220dedeb05cdab421f142420be472fd5e6bdd6649c911101fc9385ab4dec18e90e7330bdb4090325d13a0a32bf2772d06f633ab1d6f712700fb40c74e2036564eba216cd49c84f495b47bcbfcf108adb81c6834580d3fe108ae025409542760ce72d2a8d0ccc0de619ea3c5f91272ab33d82775a33c1344f9b75b252ceeb6c329b8863342864a6dae3e1190dd963f492b1f2997028682e60f155eb5e50f7e080337a8874499c8d2c2c074da157d4ea6e051c66398936a459af2291d4af1618ef41302a453af6387642c61fec59a7ab8f6e59088f6d9235f29eadc221e193f1f5c6ba855f1d3576fb75f9c9f19668844d074373747fa0ae48afd3df2a0a410d250df6b595828e71ce93cc80a6103e3f8b808d96198ef5a15100a356d8712086e99a7b11b404e70dfc63ede849609eeb9446546c253173f3897016a2d28e3dad4dedb1b50b59207c78ccef5d96db5707dd5104fbdc1041633ea3e27a4c691d273618f3cc62d9c20e16e37d4a5e5101182c978f85c3c28dc4601af922695e91114a4736b9419357e05bd3758fd457e0caa608cf7100b877a58cb08f95071d3f4ccdba73161b9ab310471b70df78b71d2ad57c1f060ed5ab82595df8d7db8c0553d14072bf589fbca2ea88b123dedf1976f5c9faf30ded0df1a5de6402ed4823bc763cfb763f15744ead5724a47c5ca7bb13709e6f7c55d681284689844278b1a2e54edb5a12183163767c2145c5387af6ff3804757f234fb8d5aab5c9480a03ac4f77bcd941bb7f192ce19b1eba2d1eedd54fc9ad5cd3bbe9cffc5038b0dc04a857339926d202355a4f15dd1fc1ac04a55d56a52813113e64aafe0d5c22cb1b632aeb3fef00aabc838352c803389399f30df3ef5768f3eac30aaa6928974b6aeb269fc74d39cdc5b3969b252be191d06180ae82e88f39a6c8f010e0e971d7bd44b5491f9dbac807c000d36c4f6417a81bce933db897ef98c39a2741b175bb2e2a1203a7ac12dbe3929b4399576903b6b89154b7ccf31ad30c3e5f3a03f2ca4c4c127d2c2f1c7193e7d587f872db503db66d69d66b9ea743d440034383f5733c28ee8df912b919e202ad2f942bdb166320a801b515e449bc8b13980ef5f4db516a372f6249b0755cc5fb9bc9a123efb5921ba87f4c46d3f171b8daa4bdff4d1e13b390d529ca9249b65fc8c541cf196151b09aa70ea672b07e0923f4072903b929b3540c3baaa2820cf8777fb36c610aa6e4b882587ef64b0e8427a9a074581a828e8805a35c5001e727f792b2893636ff327a0bec7eacc04f24ac3ef8ba1f3e1e4f31638d41b0b61e95df6d76c5c9df9b96b944fbaefc2b4664e34db9b9813edf33c15fa09159fdafa718729f0277d35ac1a1886a6ea09f44ac956603b5fb140100c70df9604afb2ee0b3ef0f5bd294f355e2ee2de793161f97641c008f1b9d0a71e180f10552b78bf0b0e2bb3a129e12a40d9408e8659b3b5fa60770b8e16a34601ac10eb4a1eba713c4bcecd50e52473432236f37bd6701a45f9eb7ea46ab2ccf161fbe61bb229ec8dc7f201aa70932845100527ea11371fde94d08ba80bc46a08bf4b926d8d626fb2b68ba40a4f9b962b7c98b5ef95a58b6ad40c7be700d591ea191c314fd1078f0204563ce9346ef", 0x1000}, {&(0x7f0000002440)="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", 0x1000}], 0x2) inotify_add_watch(r6, &(0x7f00000003c0)='./file0\x00', 0xa30) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r7, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0200ff7f", 0x4, 0x0, 0x0, 0x2}]) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000001040)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f00000011c0)={0x8080000, 0x9000, 0x8}) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x700, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40004) 3m49.679386382s ago: executing program 2 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}]}) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0]) mount$binder(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000240)={[{@stats}, {@stats}, {@stats}]}) 3m49.611392552s ago: executing program 2 (id=3239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4211, r2) close_range(r0, 0xffffffffffffffff, 0x0) 3m49.530524922s ago: executing program 2 (id=3243): r0 = syz_io_uring_setup(0x7e70, &(0x7f0000000a80)={0x0, 0xc0ae, 0x0, 0x2, 0xdf}, &(0x7f0000000b00), &(0x7f0000000b40)) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r2, &(0x7f00000085c0)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000005a00)=""/4085, 0xff5}], 0x5}, 0x7381}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000001980)=""/235, 0xeb}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f00000008c0)=""/82, 0x52}, {&(0x7f0000001a80)=""/65, 0x41}], 0x8, &(0x7f0000001b80)=""/180, 0xb4}, 0x1}, {{&(0x7f0000001c40)=@l2tp, 0x80, &(0x7f0000005000)=[{&(0x7f0000001cc0)=""/37, 0x25}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/117, 0x75}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/4095, 0xfff}, {&(0x7f0000004e40)=""/97, 0x61}, {&(0x7f0000004ec0)=""/255, 0xff}, {&(0x7f0000004fc0)=""/52, 0x34}], 0x9, &(0x7f00000050c0)=""/47, 0x2f}, 0x6}, {{&(0x7f0000005100)=@generic, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005180)=""/9, 0x9}], 0x1}}, {{&(0x7f0000005200)=@nfc_llcp, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005280)=""/96, 0x60}, {&(0x7f0000005300)=""/127, 0x7f}, {&(0x7f0000005380)=""/200, 0xc8}, {&(0x7f0000005480)=""/30, 0x1e}], 0x4}, 0x10000}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005500)=""/181, 0xb5}, {&(0x7f00000055c0)=""/118, 0x76}, {&(0x7f0000005640)=""/24, 0x18}, {&(0x7f0000005680)=""/135, 0x87}, {&(0x7f0000005740)=""/56, 0x38}], 0x5, &(0x7f0000005800)=""/243, 0xf3}, 0x1}, {{&(0x7f0000005900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000005980)=""/62, 0x3e}, {&(0x7f00000059c0)=""/28, 0x1c}, {&(0x7f0000008840)=""/4098, 0x1002}, {&(0x7f0000006a00)=""/28, 0x1c}, {&(0x7f0000006a40)=""/209, 0xd1}, {&(0x7f0000006b40)=""/95, 0x5f}], 0x6, &(0x7f0000006c40)=""/55, 0x37}, 0xff}, {{&(0x7f0000006c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006d00)=""/231, 0xe7}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/235, 0xeb}, {&(0x7f0000007f00)=""/238, 0xee}], 0x4, &(0x7f0000008040)=""/197, 0xc5}, 0x8}, {{&(0x7f0000008140)=@nfc, 0x80, &(0x7f0000008280)=[{&(0x7f00000081c0)=""/17, 0x11}, {&(0x7f0000008200)=""/21, 0x15}, {&(0x7f0000008240)=""/50, 0x32}], 0x3, &(0x7f00000082c0)=""/50, 0x32}, 0x2e}, {{&(0x7f0000008300)=@nl=@unspec, 0x80, &(0x7f0000008500)=[{&(0x7f0000008380)=""/172, 0xac}, {&(0x7f0000000980)=""/193, 0xc1}], 0x2, &(0x7f0000008540)=""/95, 0x5f}, 0x800}], 0xa, 0x40000120, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3m49.489758013s ago: executing program 33 (id=3243): r0 = syz_io_uring_setup(0x7e70, &(0x7f0000000a80)={0x0, 0xc0ae, 0x0, 0x2, 0xdf}, &(0x7f0000000b00), &(0x7f0000000b40)) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r2, &(0x7f00000085c0)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000005a00)=""/4085, 0xff5}], 0x5}, 0x7381}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000001980)=""/235, 0xeb}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f00000008c0)=""/82, 0x52}, {&(0x7f0000001a80)=""/65, 0x41}], 0x8, &(0x7f0000001b80)=""/180, 0xb4}, 0x1}, {{&(0x7f0000001c40)=@l2tp, 0x80, &(0x7f0000005000)=[{&(0x7f0000001cc0)=""/37, 0x25}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/117, 0x75}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/4095, 0xfff}, {&(0x7f0000004e40)=""/97, 0x61}, {&(0x7f0000004ec0)=""/255, 0xff}, {&(0x7f0000004fc0)=""/52, 0x34}], 0x9, &(0x7f00000050c0)=""/47, 0x2f}, 0x6}, {{&(0x7f0000005100)=@generic, 0x80, &(0x7f00000051c0)=[{&(0x7f0000005180)=""/9, 0x9}], 0x1}}, {{&(0x7f0000005200)=@nfc_llcp, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005280)=""/96, 0x60}, {&(0x7f0000005300)=""/127, 0x7f}, {&(0x7f0000005380)=""/200, 0xc8}, {&(0x7f0000005480)=""/30, 0x1e}], 0x4}, 0x10000}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005500)=""/181, 0xb5}, {&(0x7f00000055c0)=""/118, 0x76}, {&(0x7f0000005640)=""/24, 0x18}, {&(0x7f0000005680)=""/135, 0x87}, {&(0x7f0000005740)=""/56, 0x38}], 0x5, &(0x7f0000005800)=""/243, 0xf3}, 0x1}, {{&(0x7f0000005900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000005980)=""/62, 0x3e}, {&(0x7f00000059c0)=""/28, 0x1c}, {&(0x7f0000008840)=""/4098, 0x1002}, {&(0x7f0000006a00)=""/28, 0x1c}, {&(0x7f0000006a40)=""/209, 0xd1}, {&(0x7f0000006b40)=""/95, 0x5f}], 0x6, &(0x7f0000006c40)=""/55, 0x37}, 0xff}, {{&(0x7f0000006c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006d00)=""/231, 0xe7}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/235, 0xeb}, {&(0x7f0000007f00)=""/238, 0xee}], 0x4, &(0x7f0000008040)=""/197, 0xc5}, 0x8}, {{&(0x7f0000008140)=@nfc, 0x80, &(0x7f0000008280)=[{&(0x7f00000081c0)=""/17, 0x11}, {&(0x7f0000008200)=""/21, 0x15}, {&(0x7f0000008240)=""/50, 0x32}], 0x3, &(0x7f00000082c0)=""/50, 0x32}, 0x2e}, {{&(0x7f0000008300)=@nl=@unspec, 0x80, &(0x7f0000008500)=[{&(0x7f0000008380)=""/172, 0xac}, {&(0x7f0000000980)=""/193, 0xc1}], 0x2, &(0x7f0000008540)=""/95, 0x5f}, 0x800}], 0xa, 0x40000120, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m41.211528251s ago: executing program 5 (id=4231): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lseek(r1, 0x4, 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0xc08, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0]) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000007c0)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x402c1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)="d6976d1a0a08772151", 0x9}], 0x1}}], 0x1, 0x24004044) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xce, 0x0, r4}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=0x0]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000011000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file1\x00') syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r10 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r10, r9, 0x0, 0xffffffff) 2m41.165774561s ago: executing program 5 (id=4232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}}, 0x20040880) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000000)=""/78, 0x4e) getdents(r1, &(0x7f0000000200)=""/251, 0xfb) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x2a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x6, 0x9, 0x0, 0x8a, 0xc, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x7800, 0x4, 0xbaca}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', r3, 0x29, 0x67, 0x3, 0x3, 0x46, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0x8001, 0xfe7a}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2, {0x2, 0x4e20, @remote}, 'wg0\x00'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m41.101573731s ago: executing program 5 (id=4233): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) pread64(r0, &(0x7f0000001200)=""/4087, 0xff7, 0xd23) 2m41.024461912s ago: executing program 5 (id=4235): ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000000)=0x6b65) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) sendmmsg$sock(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x40000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000240)) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000280)={0x8, 0x2, {0x4, @struct={0x3, 0x3}, 0x0, 0x6, 0x2, 0x4, 0x6, 0x6, 0x400, @usage=0x6, 0x9, 0x33, [0x2, 0xb, 0x10001, 0x8, 0x100000000000, 0x2]}, {0x4, @struct={0x4f, 0xfffff989}, 0x0, 0x4, 0x7, 0xffffffffffffffff, 0x1, 0xe, 0x82, @usage=0x8000, 0x0, 0x3ff, [0x1770, 0x1, 0xb, 0x76c7, 0x9f, 0x8ddb]}, {0x40, @usage=0x1, 0x0, 0x9, 0x7fffffff, 0x5, 0x5, 0x10, 0x420, @usage=0x8001, 0x0, 0x5, [0x5, 0xfffffffffffffffd, 0x7, 0x8, 0x3]}, {0x80000001, 0x401, 0x9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000680)={r2, 0x3ff, 0x2}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000a80)={0x6, 0x5, 0x5, 0xffff}) r3 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x280, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000b00)={0x6, 0x0, [{0x1, 0xc383, 0x3, 0x7, 0x0, 0x7, 0x1}, {0x40000006, 0x6, 0x5, 0x0, 0x2, 0xf682, 0x80000000}, {0x80000008, 0xe, 0x1, 0x7, 0x10, 0xff, 0x1}, {0xd, 0x9d, 0x6, 0x1, 0x67, 0x6, 0x8}, {0xc0000001, 0xa, 0x1, 0x80, 0xffffffff, 0x80, 0xfffffff7}, {0xc0000001, 0x80000001, 0x7, 0x6, 0x6, 0x80, 0xc}]}) r5 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$security_ima(r5, &(0x7f0000000c00), &(0x7f0000000c40)=@md5={0x1, "cab8d52f903fc95c1164844ba56347fa"}, 0x11, 0x2) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000c80)={0xffffffffffffffff, 0x9}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000cc0)) r6 = accept(r1, &(0x7f0000000dc0)=@x25={0x9, @remote}, &(0x7f0000000e40)=0x80) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xb8, 0x2, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x61}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6bd0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x60, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x20}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2a}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x16}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000031c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x4e23, 0x4, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x73, r7, r8}, {0xfff, 0x2, 0x0, 0x1000, 0x0, 0x6, 0x6}, {0x6, 0x2, 0x8, 0x1000}, 0x18079318, 0x6e6bb8, 0x1, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x2, 0x3, 0x0, 0x8, 0x0, 0x7fffffff}}, 0xe8) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000032c0), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, &(0x7f0000003300)={{0x2, 0x1, 0x6, 0x0, 0x0, 0x9}, 0x1ab, [0x3ff, 0x7fff, 0x9, 0xdc, 0x3, 0x0, 0x5, 0x2, 0x0, 0x800, 0x2, 0x3, 0x5, 0x0, 0x0, 0x80000000, 0x5, 0x9, 0xd, 0x6, 0x9, 0x7d, 0x3, 0x0, 0x1, 0x4b10, 0xfff, 0x10001, 0xffffff01, 0x1, 0x1, 0x0, 0xb, 0x79f5d4a3, 0x9, 0x2, 0x5, 0x8, 0x400, 0x5, 0xffffffc0, 0xffff, 0x101, 0xff, 0x2, 0x6, 0x7, 0x2, 0x7, 0x81, 0xd, 0x1, 0x9, 0x7fff, 0xfffffffc, 0x7ff, 0x7, 0x0, 0x4, 0x8000, 0xf1, 0x8561, 0x3, 0x1, 0xffffffff, 0x2, 0x0, 0x6, 0xbf, 0x5, 0x3, 0x8065, 0x3, 0x7, 0x9, 0x0, 0xfffff138, 0x8, 0x1, 0xb, 0x3f02, 0x5, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x80000001, 0x400, 0xfe2, 0xd, 0x1, 0x58, 0xffffffff, 0x7, 0x74, 0x7, 0x5, 0x5, 0x7, 0x0, 0xffff8f23, 0xca4, 0xdd3, 0x9, 0x4, 0x800, 0xc1, 0x2, 0x1d7cddc3, 0x200, 0x10, 0x2b5, 0x8, 0x0, 0x2, 0x9, 0x3, 0x496b, 0x80, 0x7, 0x0, 0xffffff40, 0xab, 0xd27, 0x6, 0x5, 0x117, 0x4, 0x800, 0x0, 0xffffffff, 0x5, 0x9, 0x8, 0x40000000, 0x7a7, 0x5, 0x2, 0x7fffffff, 0x6, 0x1dac, 0xb, 0x292dc00, 0x0, 0x3ff, 0x1b, 0x3, 0x3, 0x4, 0x8, 0x7f, 0x6, 0x0, 0x80, 0x7ff, 0x4, 0x2e, 0x4, 0x1000, 0x69, 0x0, 0x0, 0x5a21, 0x6ac, 0x0, 0x5, 0x7, 0xd09b, 0xff, 0x2, 0xc4, 0xad6, 0x8001, 0x5, 0x5, 0x9, 0x559, 0xb, 0x76, 0x1, 0x0, 0x7, 0x86e, 0x9, 0x2, 0x4, 0x600, 0x7, 0x3, 0x7, 0x0, 0x0, 0x2, 0x10, 0x4, 0xffffffff, 0x6, 0x0, 0x9, 0x0, 0x2, 0x81, 0x80000000, 0xa, 0x1ff, 0x5, 0x1ff, 0x1ff, 0x9, 0xcf, 0x4, 0x80, 0x9, 0xe7, 0x2, 0x101, 0x100000, 0x2, 0x1, 0x8, 0x800, 0x800, 0xfffffffb, 0x101, 0x40, 0x3, 0xffffffff, 0x8, 0x152, 0x7, 0x9, 0x8, 0xffffff04, 0x3, 0xffffff01, 0x8001, 0x6be6, 0xfffffff8, 0x9d2, 0xd4a5, 0x53c, 0x4, 0x0, 0x7, 0x3, 0xc30, 0x4, 0xb, 0x3, 0x4, 0x8, 0x2, 0x3, 0xa, 0x3, 0x5, 0x3, 0x9, 0x11ff, 0xe, 0x3, 0x6, 0x9, 0x4, 0x80000000, 0x6170, 0x7fffffff, 0x8, 0x3, 0x9, 0x10001, 0x4, 0xe, 0x7, 0x81, 0x3, 0x551d1686, 0x400, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x7, 0x800, 0x2, 0x0, 0x88, 0x3cd, 0x2, 0xa, 0x1, 0xfffffffc, 0x3, 0x1000, 0x2, 0xff000000, 0x50, 0x10001, 0x400, 0x5, 0xfffffffb, 0xb, 0x9, 0x5, 0x2, 0x0, 0xe248, 0x200, 0xf3, 0x7, 0x8, 0x80000001, 0x3, 0x1, 0x0, 0x3, 0x3, 0x4, 0x7, 0x6, 0xc33e, 0x4, 0xffffff64, 0x4, 0x6, 0x10, 0x1ff, 0x3, 0xf, 0xf, 0x7, 0xe3, 0x17a, 0x5, 0x9, 0x5, 0x2, 0x1, 0x10001, 0x7, 0x1, 0x1, 0xff, 0x6, 0x4, 0x13, 0x1, 0x15, 0x1, 0x0, 0x7f, 0x6, 0x1, 0x10, 0x1, 0x5, 0x44d, 0x6, 0x4fd6, 0x7, 0x8, 0x0, 0xc8, 0x3, 0xffff, 0xd1, 0x9, 0x3ff, 0x7ff, 0x2, 0x900, 0x9, 0x8, 0x81, 0xc, 0xf, 0xd, 0xb, 0x59, 0x80, 0xffffffff, 0xb8b, 0x2, 0x6, 0x81, 0xff, 0x0, 0x8, 0x684f, 0x200, 0x8, 0x9, 0x1, 0x5, 0x9, 0x4, 0xff, 0x2, 0x4, 0x4, 0x1ff, 0x5, 0x6, 0xffffff09, 0x5, 0x4, 0x8, 0xf79, 0x0, 0x3, 0x7fff, 0x10001, 0x0, 0x7, 0x81, 0x9, 0x7, 0xab51778, 0x84, 0x8000, 0x57, 0x9, 0x3, 0x0, 0x8001, 0xfffffff9, 0x8, 0x10, 0x8001, 0x8fbf, 0xbc, 0x0, 0x3, 0x3, 0x8000, 0x270b, 0x100, 0x80000001, 0x7c5, 0x8, 0x7, 0x8, 0x0, 0x8001, 0x2, 0x6, 0x6, 0x2, 0x8, 0xffff8a73, 0x7019, 0xfffffffe, 0x7ff, 0x400000, 0x3, 0xbf3d, 0x8, 0x4, 0xa, 0x80, 0x7, 0xb1a3, 0x5, 0xc9, 0x58, 0x3, 0x8, 0x40, 0x2, 0x8, 0x2, 0x1, 0x8000, 0xc8000000, 0x7, 0x8, 0xda6, 0x1, 0xf, 0x5, 0x6, 0x5a, 0x3, 0x3, 0x3, 0x1000, 0x7, 0x80000000, 0x5, 0xd734, 0x5e179d56, 0x566, 0xffffffff, 0x5, 0xc3, 0x2, 0x0, 0x7609461d, 0x6, 0x4, 0x5, 0x100, 0x1, 0x5, 0x1, 0x4, 0x8c, 0x7, 0x9, 0x9, 0x2e6f, 0x80000001, 0x3, 0x6, 0x7, 0x5, 0x6, 0x0, 0x90, 0x28000000, 0x5, 0x800, 0x2db, 0x9, 0xe, 0x1541497d, 0x714, 0xfffffffe, 0xa0, 0x80000, 0x8, 0x6, 0x2, 0x81, 0xf8000000, 0x3, 0x6, 0x7, 0x3, 0x70, 0x401, 0x3, 0x0, 0x7, 0xe, 0x196, 0x3, 0x7, 0x6, 0x4, 0x7, 0x6, 0x2, 0x7, 0x3, 0x5, 0x8000, 0xe8, 0x5, 0x401, 0x10000, 0x5, 0x6, 0x1, 0x5, 0x8477, 0x8, 0x0, 0xe0000, 0x0, 0x5b45, 0x1, 0xd, 0x101, 0x2, 0x6, 0xf, 0x9, 0x6, 0x3, 0x3, 0x356, 0x8, 0x8001, 0x1, 0xc, 0x2773, 0xe9, 0x6e, 0x8001, 0x7, 0x7ff, 0x9, 0x984, 0xfffffffb, 0x740000, 0x8, 0x8, 0x101, 0x2, 0xffffff8c, 0x1, 0x40, 0x3, 0x4, 0x8, 0x6, 0xffff0000, 0xe7da, 0x4, 0xf, 0x0, 0x1, 0x5, 0x80000001, 0x40, 0xb, 0x0, 0x9, 0x7, 0x6, 0xfff, 0x5, 0xe6, 0xffff70db, 0x5, 0xc5ea, 0x2, 0x8, 0x7fffffff, 0xb, 0xfffffff7, 0x2, 0x8, 0x9, 0x0, 0x3e30, 0x38000, 0x8, 0x3, 0x70, 0x257888fe, 0x8, 0x7fff, 0x6, 0xfff, 0x3, 0x7, 0x1, 0x4, 0x7, 0x7, 0x70, 0xffffffff, 0xffffff81, 0x7, 0x3, 0x3, 0x5, 0x1, 0x1, 0x3, 0x8, 0x5, 0x800, 0xc9b3, 0xfe, 0x467, 0x0, 0x3, 0x0, 0xfffffffd, 0x5, 0x6, 0xcd8, 0x8, 0x3f7, 0x7, 0x7, 0x2, 0x1808, 0x0, 0x3, 0x2, 0x2, 0x800, 0x2, 0x49, 0x8, 0x10000, 0x10001, 0x3, 0x3, 0x8, 0x6, 0x80000000, 0x7, 0x80000000, 0xc43, 0xfffffc1b, 0x4, 0x8, 0x81, 0x3b9d1b73, 0x8, 0x7f, 0x1, 0x2, 0x40, 0x4, 0x4, 0x9, 0x2, 0xc04, 0x8, 0x7ff, 0x7, 0xffffffff, 0x3, 0x4, 0x0, 0xf, 0x9, 0x88, 0x2, 0x6, 0x512, 0x0, 0x6, 0xffff, 0x3, 0x8, 0x1, 0xf0, 0x8, 0x7fff, 0x8, 0x2794, 0x4, 0x0, 0x6, 0x9, 0xfffffffd, 0x7ff, 0xf9, 0x3, 0x3, 0x1, 0x6, 0x1, 0xf17312c8, 0x6, 0x2, 0xb, 0xd63a, 0xa62, 0xfffffe01, 0x9, 0xfffffff7, 0x2, 0x7fff, 0x80000001, 0x80000000, 0xea2c, 0x8, 0x0, 0xfffffffc, 0x6, 0x6, 0x4, 0x7, 0x6, 0x6, 0xb, 0x4, 0x401, 0x8000, 0x9, 0x0, 0x3ff, 0x5, 0x7fffffff, 0x10, 0x4, 0x80000001, 0x8, 0x4, 0x61, 0x2, 0x9, 0x8, 0x20000000, 0x8, 0x4, 0x4, 0x8, 0x10000, 0x1, 0x8, 0x8001, 0x4, 0x7, 0xb, 0x101, 0x402, 0x80000000, 0x3, 0x1, 0x6, 0x2, 0x70c, 0x9, 0xff, 0x225c, 0x0, 0x6, 0x8f, 0x3, 0x2, 0x4, 0x7, 0xfffffff6, 0x19, 0x1, 0x101, 0x6, 0x520, 0x6041, 0xd, 0x6, 0x87, 0x4, 0x4, 0x7fff, 0x100, 0x0, 0x100, 0x175e00, 0x2, 0xff, 0x4, 0x5bb, 0x40, 0x9, 0x6, 0x4, 0xffffffbe, 0x7, 0x52e, 0x1, 0x2, 0x7, 0xffffffff, 0x6, 0x7, 0x0, 0xb, 0x8, 0x20000, 0xfffffffa, 0x9, 0x401, 0x2, 0x32, 0xce, 0x1, 0x1, 0x8, 0x3ff, 0x7ff, 0xb, 0xd1, 0x9, 0x7, 0x8, 0x3, 0x0, 0x7, 0x5aa728a, 0x10, 0xfff, 0x4, 0xa5a, 0x3, 0x4, 0x80, 0x800, 0x1000, 0x2, 0x101, 0xffff, 0x7, 0x0, 0xe, 0x1, 0x100, 0x424aeedb, 0x2569, 0x80000000, 0x5, 0x3, 0x10001, 0xfffff4bb, 0x80000000, 0x2, 0x1000, 0x404b89d9, 0x779, 0x4, 0x8, 0x4, 0x3ff, 0x1, 0xfffffff8, 0x3, 0x893, 0xff, 0xc9, 0x559, 0x7, 0x3ff, 0x10, 0x7, 0x4, 0xf, 0x3, 0x4, 0x4, 0x9, 0xbc, 0x1, 0x5, 0x3, 0x6, 0x0, 0x1, 0xb, 0x5, 0x6, 0x1, 0x7, 0xce2000, 0xe18, 0x1, 0xea, 0x6c, 0x5, 0x58, 0x7, 0x9, 0x8, 0x4, 0xc000000, 0x46b7, 0x1, 0x0, 0x5, 0x1, 0x5, 0x81, 0x2fc15114, 0x1ff, 0x9, 0x0, 0x99c5, 0x26, 0x9, 0x0, 0x3d39, 0xc, 0x9, 0x2, 0x9, 0x1, 0x7, 0x7, 0x4, 0x3, 0x80000000, 0x8, 0xfffffffc, 0x847c, 0x4, 0x504, 0x0, 0x9, 0xdc7d, 0x9, 0x3, 0x3, 0x3, 0x1, 0x8, 0x71, 0x8000, 0x8, 0xdfbb, 0x2, 0x4, 0x1, 0xe, 0x8, 0xe1a0, 0xffffff3a, 0x3ff, 0x4, 0x9, 0x2f54, 0x5, 0x4, 0x0, 0x4a, 0xe, 0x5, 0xf7b, 0x1, 0x7, 0x8b05, 0x5, 0x7ff, 0xb]}) sendmsg$802154_raw(r9, &(0x7f0000004440)={&(0x7f0000004340)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f0000004400)={&(0x7f0000004380)="b9e4166164b2b6bb0ef8701a8fd10f306f578c4cc3af2c9a9be4340b6bb205ba28c7ca645cfd6c82f784034fe447f578ebefb436c5942151e1da67e90f42587d333478e9f67ce5db6a26f531f45ebe98487d", 0x52}, 0x1, 0x0, 0x0, 0x40000}, 0x20048040) ioctl$BLKDISCARD(r9, 0x1277, &(0x7f0000004480)=0x7) socket$nl_generic(0x10, 0x3, 0x10) 2m41.022809482s ago: executing program 5 (id=4237): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xfffffffe, 0x7, 0x2, 0x2, 0x3}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r1, 0x5bc7000) 2m41.020602482s ago: executing program 5 (id=4239): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000300)={&(0x7f000064d000/0x4000)=nil, 0x4000}) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="74bf9c1996138b90e612fbbf2e4513efd70ac410dc3339ebc01f1cff248a4e95dc65eea9735e7a8b6f4966205799769010493aee2e185daeef03de8461949a4522fd7366dfb9d6d65a299ce715f520bba8981238f78b089557b1ab7173c7651e1fff159c3ab8", 0x66}, {&(0x7f0000000000)="e86ee0146c42c4", 0x7}, {&(0x7f0000000100)="c2e48f6f8958e6ddbb949d582d263c7889e32cf1ff7c796175c03133db31c98e3f6106ad26fbd5e00acf2412b87a5184ee3254fd69e223319f52de4647022189aa1f47ac2f5c3c663332", 0x4a}, {&(0x7f0000000180)="d69f192a820977f52b20d4d7868d870ae2d47a0ead6136f8984a2ad060a869b3d59227d65c35142644d1053f3984f8cb95fdf95a25c52d7c9837cb714e7bb992a627b0c57d03e94375afb22b4918c799bcd64f4daad1d55a3a3a87080561dc7a04bb37f43745a12eab4005802cbd8c5c14d59e8d778fea46c8a7d3b6d4d2a12ed864fd4a9a", 0x85}, {&(0x7f0000000240)="9d54a3", 0x3}], 0x5) 2m25.920072368s ago: executing program 34 (id=4239): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000300)={&(0x7f000064d000/0x4000)=nil, 0x4000}) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="74bf9c1996138b90e612fbbf2e4513efd70ac410dc3339ebc01f1cff248a4e95dc65eea9735e7a8b6f4966205799769010493aee2e185daeef03de8461949a4522fd7366dfb9d6d65a299ce715f520bba8981238f78b089557b1ab7173c7651e1fff159c3ab8", 0x66}, {&(0x7f0000000000)="e86ee0146c42c4", 0x7}, {&(0x7f0000000100)="c2e48f6f8958e6ddbb949d582d263c7889e32cf1ff7c796175c03133db31c98e3f6106ad26fbd5e00acf2412b87a5184ee3254fd69e223319f52de4647022189aa1f47ac2f5c3c663332", 0x4a}, {&(0x7f0000000180)="d69f192a820977f52b20d4d7868d870ae2d47a0ead6136f8984a2ad060a869b3d59227d65c35142644d1053f3984f8cb95fdf95a25c52d7c9837cb714e7bb992a627b0c57d03e94375afb22b4918c799bcd64f4daad1d55a3a3a87080561dc7a04bb37f43745a12eab4005802cbd8c5c14d59e8d778fea46c8a7d3b6d4d2a12ed864fd4a9a", 0x85}, {&(0x7f0000000240)="9d54a3", 0x3}], 0x5) 24.259353538s ago: executing program 6 (id=7272): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}}, 0x14}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) open(0x0, 0x0, 0x90) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000f3ffff054d564b"]) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}}, 0x60040) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, 0x52, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 24.174641019s ago: executing program 6 (id=7274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x2050, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000000000/0x4000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) 23.832596933s ago: executing program 6 (id=7276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@userxattr}, {@redirect_dir_nofollow}]}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.120063918s ago: executing program 6 (id=7308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname(r2, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f00000001c0)=0x80) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 21.019462679s ago: executing program 6 (id=7313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) (async) close(r2) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0xfffffff8}) 20.892886371s ago: executing program 6 (id=7317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x8000000, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x4008) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="1b", 0x1}, {0x0}], 0x2}}], 0x1, 0x24008804) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x17c, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) tee(r1, r0, 0x0, 0x0) 20.784629221s ago: executing program 35 (id=7317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x8000000, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x4008) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="1b", 0x1}, {0x0}], 0x2}}], 0x1, 0x24008804) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x17c, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) tee(r1, r0, 0x0, 0x0) 10.626207049s ago: executing program 3 (id=7354): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x4}, 0x2) sendmsg$netlink(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)={0x2f0, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x2e0, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x2d4, 0xc, 0x0, 0x1, [@nested={0xfb, 0x138, 0x0, 0x1, [@generic="29c0f4448835304180062d5c29f127cb71ed61c4198bade4f7975c0a8cdc65e647fc5c472b3fbab2af1a1a6e8b9c7e1b38f7cb300d395c1303012f0460bbf27fd87944a1e4604cc94320a1172faabad82fa10494e4de978394e5ec2b61691b9d28eebb1565bcfe6564564cc8ba1ebe1567a88e194416", @generic="db3a12d0f0485b7296bb5ad133faf31e824fc72223e9cebd6997ad67df7a0d90f8ef287f01d5558e345260a610475f315f6d3361eb55b68997ee00cb2bea07f8b204b0a21f0a954751e4673705facb4670e92c9d7b59a532f65d18fd3a7b58845e1d5ade9ae38ec6232027f2d30b7af6a8abc97c85fbc0787b988e8103fa19a33f"]}, @typed={0x8, 0x111, 0x0, 0x0, @pid=r3}, @generic="0a9354dfe4c898a64039f29ba49943afa1e75e8386ca16014ea29460ccf839d756055d90d9de69b467748584de", @generic="98e5f27a514299362c4a314acfa9abeb92100a181724ef9ad21094ea3deb240899cd6748363264592484240a33f180edd38bd7e49c96749f6cb01c8ea9817e8d2b9d89d5686b25405e227dc45a57d5a33e286133a04d3492185036b82b998b08914d07614d8b06ed0ad2a722d12b58bdd3e2a2a666d33ae3f0d8de59ebe3cc6eb5705f9ba003ab3604c4ab9253bc88d2182b91d4754f6929e7c49f61fce9ce5e3a1a4f64889159b482e6b02649cac71f9aea6bf9b780b030c67de35e34843fa7fc7a454034", @generic="d526b7e7b78f94d22e478e6177eb38d1a4337f9f83d6177313518fb1260f085259ef540c0a3036c1cadade2ab49303721552a4c4652db32b572f7ea131be3eb57dab95279b0d", @typed={0x8, 0xc0, 0x0, 0x0, @u32=0x5b5}, @nested={0x7f, 0xd4, 0x0, 0x1, [@generic='u', @generic="49ebeda22d206a677ba7b7685b32e36bb8e9e8dffbaee8aad900b777ab09b70efda1224e46ad99a8fceba92af0cebc2501a47d31ce733c3a81dddad8f10118bc480a588fa2d4ddb9cf80f23a3d2dfd801a1e9042dd980e7cb29e00b6a2919d59b4ff0fae67ee2bb0ab29fdc236dd6b69ebd1dff6121922f500fa"]}, @typed={0xc, 0xc, 0x0, 0x0, @u64=0x80000000}]}]}]}, 0x2f0}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, &(0x7f0000000000)) 9.049212224s ago: executing program 0 (id=7355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0xfffffff8, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), 0x50, 0x0, &(0x7f0000000240)="b421459ab5e02318601884dfbd8fa9f96b7c4b4daf83c071e12363466ec63aa7ce1ca7caad1b7b8ad33c3cbf07856a13d2598125a5fde41c1803b6baaa58bf30d6f3ec062cde869b36a767168ab334be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 9.047873004s ago: executing program 4 (id=7356): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xfff9, [0x5, 0xffffffff], 0xb}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200181, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/\x00') ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x6, 0x3, 0x3, 0x0, 0x1, "dfed6df317d12368"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xfff9, [0x5, 0xffffffff], 0xb}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200181, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/\x00') (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x6, 0x3, 0x3, 0x0, 0x1, "dfed6df317d12368"}) (async) 9.047246934s ago: executing program 3 (id=7357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) fadvise64(r0, 0x5, 0x8, 0x0) 7.473581019s ago: executing program 0 (id=7358): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000100)=[@exit_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) 7.471662939s ago: executing program 4 (id=7359): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0xa, 0x4e23, 0xaea9, @mcast2, 0x6}, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0) (async, rerun: 32) fcntl$setlease(r0, 0x400, 0x3) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet(0x2, 0x3, 0x2) (rerun: 64) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000002300)=ANY=[@ANYBLOB="66e4a3ead4c1490ef232228f2aa6396d6f64653d30303030303030303037c1e62c61756469742c6f626a5f747970653d7b2b7d2c6673757569643d36363038336562622d636462302d623937392d343436342d61623438326230302c7365636c6162656c2c0000000000000000"]) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x810) (async) capset(&(0x7f0000000100)={0x20080522}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c000100070c1000000000000000", 0x56}], 0x1) (async) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) (async) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 7.471068269s ago: executing program 3 (id=7360): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r2, 0x6, 0x3f, &(0x7f0000000080)="78d5bf5e9c5746e7a2d55a0f207e1dca83ad90c1359f50f41f2f3957736e2c6141331bc0b4272fe47890f82ed0039f3cb74ca70933a31a3389881ddcd27657", 0x32, 0x2, 0xdd8, 0x8, 0x7fff, 0x1, 0x4, 'syz0\x00'}) (async) r4 = memfd_create(&(0x7f0000000180)='syz0\x00', 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0), 0x2) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) (async) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000003c0)={r7, r2, 0x200, 0xa9, &(0x7f0000000300)="746b249f938c6bd21c7eb9bcf0ee15abb6a2220270ce9cf8de74946084672cbddc5bfd44a3db2f131eced95c958efc682cbe6e2e8835ae5010efc9cd71a3b54e29cc7e78c2ac165308610372885eb3fade65c356f888f995a7bde3b07a375f9d41ef2a58c9a45c399a823fde82cce8465f72b3b6f7fd3ef5ab27bd4051623af51298a681c8c349d118912740a73ce58afee9bc9881cc48786693ec81c3d7877cdc06f4c17c53e33744", 0x5, 0x0, 0x6, 0x7160, 0x5, 0x2, 0x3ff, 'syz0\x00'}) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000480)=0x208003, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000004c0)=0x10000, 0x4) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r10, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d1f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x411}, 0x4000800) (async) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000640)={0x6428, 0x80000000, 0x2, 0x0, 0x0, [{{r0}, 0x7c6}, {{r3}, 0x9}]}) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r11, &(0x7f0000002740)={0x10, 0x0, r12}, 0x10) r16 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r16, &(0x7f0000002b40)={&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002800)="2bca31c87614530795689f48faa7ae525b668e9d16ae2f7f084a5400e7d741e87b44c2615c0759e9d4e5c6c84dc0d7ba3f19420564eab6aae22bdd53e74843cf2bbab71a2837a1ba815504f4369be49a9298aa83edf73f20247595d461fb9363ee8129c81dea72e276613b194ac266d19a0d293b4881a7f02e733db0ee3cf2646b66b654333b1693650355e27b13b8f8ce2948b046d0644c0ecf037196654c411b35cee874962ddb78bf76187a7f7259f07cf42e3575fcd5084c7e55e83137831c", 0xc1}, {&(0x7f0000002900)="a609ed693074d6d36287eac10a28c10e82e15a0dfa6da788de297945a7e6fbe2307649df3dc71a7c752ec53c2cfae9d7aeb5231a6ba45c39151ff0c49d21f85690f667d9c365eb0f347993da46363b8ad967c9c1b966aaef5201856ba98bf045e23601aa5bd37945956db85a5721cbf2385f2edc61247a452405ecd1eb7fbc5bf3e5e14e9a3d04a77baab94a326f6039faf68c639bdc9bb22bdf121670b34a57356593401058ec79d4f2b47b67bcf22c7d5caae4c345444331953d181be991aff54b839d9de1c66b484e6b46e8c3b0a9274d9a5b781abff41ea23a2c03be89d41d4a762124f242e95942b1ab687285", 0xef}, {&(0x7f0000002a00)="98fab50ea20cc16fbe813e88ea45c207d695b622acbddf1fdf2f0be93237b5297f27f1a24b343d31899591f8c27c1fc68e269de3a559da41e0ecbd97d2987a633126a5da0a3a508d2f17d8918b029ae93b30ba3ec0a52939c870b995cac24d4dff1d6e45653704e3eb151b8cf6d412ced00f289a08efde99", 0x78}], 0x3, &(0x7f0000002ac0)=[@rights={{0x1c, 0x1, 0x1, [r2, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r15, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r13, r14}}}], 0x60, 0x4}, 0x8800) read$FUSE(r11, &(0x7f0000002b80)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000004bc0)) (async) r17 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$KVM_XEN_HVM_CONFIG(r17, 0x4038ae7a, &(0x7f0000004d40)={0x10, 0x34, &(0x7f0000004c00)="84129df6a1543bbe2682fb218b7f462fa73ea9e61cf384b9c2e61f93ccc0c17897bf447d3894a8d761bce5a4648470cc3ab630914419c7beefa5f63edd9a78b66ddbcb7dd022e61857de6795ca", &(0x7f0000004c80)="603a1ca55d91e74e5232c0b96c8a2a530229727cca00f593554a09bd97f1d6bea249422046f159c57e0ab11b50ed113e170fb688762a7898de45dcf96e443297070e407003abee42097032518b1c56ae61b3a7a344d03296f0db3bfceeb9e2db7afa8fa2ce22b0586dd5500662d9d8ce6d2ca3f84c2f3ad6a319ad80100576dc5f9d7bf383339a9599680e5b1ebdb800b1b81e54", 0x4d, 0x94}) (async) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000004d80)=0x2a10, 0x4) modify_ldt$write(0x1, &(0x7f0000004dc0)={0x64, 0x20000000, 0x4000, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r18, &(0x7f0000005400)={&(0x7f0000004e00), 0xc, &(0x7f00000053c0)={&(0x7f0000004f00)={0x498, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb3, 0x4, "d1101b7d14a608fd190beb1e4b2eba29d8b30ee0cba7a650e9db58c07923be5f3cf156dc709a240ffe7ca94aafb61ad7fce4e076f9dd35d1d38e6cb0d9edbf53356a39c4f1454c01278a0c3c0f0757308dee59a5c14c23a044119809a63e52e28a1a035de822aaf465277eae920ec16f6dfcea3450a45c9dfdd71206e8bcd3d3b01c46e6478beb416a6724f82779dbef52fca14c3de5e3a8d203d889da6dbadaa40873777e60efc023ded20821bcc7"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "8b1797816071f87dfd8d28b5ec6f784b8b010c4a12c71975979c9c569c6220e08deb756d3aa050773e3582166f08957c685ae50b04f1030a12e9026c2b8c3c9a8d21a31bb454cf1c5242eed3c67994c7283e0e86607315f22d5f0352a033cbd5827c58047be5c3edb85a5e2125e349b66ec0"}, @ETHTOOL_A_BITSET_MASK={0xa0, 0x5, "d9c13a52bf24f1710a02326b1d39614a616e382c9c173af8051d9114f4a6262f23f5543905ca55ae585db80e6df572f01c2f8d2f7829fc0e447051b78dc05f5d6ae48971c3a6b0dc57f495630cd0606d5ab0b527f7269f28c8e882457be995ce36e94a3ada13baaefd1cb31041045e9372dc83c23075f84585691a97d25d92c91f013488c731709f77a48bbf8b42398be743a78b3b46c840f0f521ea"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5c, 0x5, "5e922111b37e5fa12f86656dd4a7d511a6d4f66fcbf4914c9081f73b584e4fc52071561589eade4f34d28c645d577eae4ccab4b8e4c81667684d62b5751abb41ab99d4660b43b40ce9b947533c3f096d5ebf805600a26ceb"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "6ae58b2af09192f1e28fcd4f9dcb8f8f4b470b588ca3d3c7645483dffbb75677c4fa8c41a0aa4607413e58f5"}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '},*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x657593df}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '])\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*\'{\\&:@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#!\xbe:%{[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ']$:!+\xef\xb7.##%@\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "ca159760551ed26fe3929bee3d2b1bbba1d987a14246f9fe712e5e065c9be6dbc7bf6ddda75cd2c6731fd15a0f1ee9d2a7b8bdcb162254a490d7879a4cffa1bd310759b24659f29e4691ef687c33d334ad6676718b5283d138b11fc0585a0f946d30992ef0a9c2bf004dc2b2b18c100598577b5acc28707fec3e36f8f5cdb890646dfc238cda0fdabf0ee9790998ddbd360a705e2c94bede0626c54ce8a11c4022d9cbf236de1a9d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x8040014}, 0x0) 5.761817115s ago: executing program 0 (id=7361): pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x460c0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x10, r3, 0x94ce7000) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0xe, 0x0, 0xc}) write$cgroup_int(r3, &(0x7f0000000040)=0x5, 0x12) dup(r2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0001183c0001800c00028005000100000000002c0001801400030afe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c000280050001000000007f0000000000000000fc000000000000be000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c0001801400030000000000000000000000000000000001140004"], 0xc8}}, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) open(&(0x7f00000000c0)='./file0\x00', 0x200100, 0x3c) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x85b83000) 5.759729125s ago: executing program 4 (id=7362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x1, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x82, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2b, 0x3de8, 0x885520, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) fsopen(&(0x7f0000000000)='mqueue\x00', 0x1) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14008000"/20], 0x14}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) ioctl$FIONCLEX(r5, 0x5450) 5.759382245s ago: executing program 3 (id=7363): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2=0xa010100}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x7c}}, 0x0) r3 = signalfd(r1, &(0x7f0000000180)={[0x8]}, 0x8) mknodat(r3, &(0x7f00000001c0)='./cgroup\x00', 0x1000, 0xfffffffe) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000010000100000100dffddbdf25070000f616000000"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) setresuid(r0, r0, r0) 3.907315813s ago: executing program 0 (id=7364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x3c, 0x0, &(0x7f00000001c0)=[@request_death, @acquire_done={0x40106309, 0x1}, @acquire_done, @register_looper], 0x50, 0x0, &(0x7f0000000240)="b421459ab5e02318601884dfbd8fa9f96b7c4b4daf83c071e12363466ec63aa7ce1ca7caad1b7b8ad33c3cbf07856a13d2598125a5fde41c1803b6baaa58bf30d6f3ec062cde869b36a767168ab334be"}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000500)) (async) r3 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r3, 0x200}], 0x1, 0x6) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (rerun: 32) 3.905723193s ago: executing program 4 (id=7365): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570f8ff643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa3) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100097394712a2bc000000000000f9ffffffffffffff"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0xc0) getdents(r4, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r6, r5, 0x0, 0xfffffffc) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x95, 0x7ff, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0xd1, 0x0, 0xd, [0x9]}, @timestamp_prespec={0x44, 0x14, 0x4f, 0x3, 0x5, [{@broadcast, 0x6a5f}, {@private=0xa010102, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x5a, 0x1, 0x8, [{@remote, 0x9}]}, @lsrr={0x83, 0x13, 0xab, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102]}, @ssrr={0x89, 0x7, 0x3a, [@loopback]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, 0x0, 0x24) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.905443473s ago: executing program 3 (id=7366): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) (async, rerun: 32) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) (rerun: 32) write$binfmt_register(r1, &(0x7f00000002c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\xe5y7l', 0x3a, '^\\$\\', 0x3a, './file1'}, 0x2f) (async) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) 2.033609181s ago: executing program 0 (id=7367): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000389e10af9705a4f6b3a034e2021060000000603244602dd"]}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.028367101s ago: executing program 4 (id=7368): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0xffff, 0x4) fadvise64(r0, 0x81, 0x9, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x0, 0x34, 0x17, {0x17, 0x22, "af84fea25e7379abfebc56c8f9d1574be914c9cd3b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x80, @string={0x80, 0x3, "f8058c3a23ee789634f4a2443fcc85b3c43926223330200127f4b316899f79492e2eabaecd1a1cda8f2a8ecc5f035c07fc39f0de9028cd3fda62ef38bded22c74bd472c7ac11d01a061a86ca3f2a0db0cece6b92e26bfa2c9cc7d7a4a018e4c7b425c43deffe7a785cfed4fa0af08b15df2a2ecb212801d5e664abb0a485"}}, &(0x7f0000000180)={0x0, 0x22, 0x19, {[@main=@item_4={0x3, 0x0, 0xa, "226cefa7"}, @local=@item_012={0x0, 0x2, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "5331c1d6"}, @local=@item_012={0x1, 0x2, 0x4, "95"}, @main=@item_012={0x1, 0x0, 0x9, '*'}, @local=@item_4={0x3, 0x2, 0x2, "3f027ff3"}, @global=@item_4={0x3, 0x1, 0x0, "d417f670"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6fa, 0xff, 0x1, {0x22, 0xb15}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0xac, "9441b701cc9f4cdbc16a43f37fc78586594bac487a671b10706b01f785e5939f8474226eefac1c7452d079b53c40cee0a04df0a11c914ae6f8de6116ecaa13836b24c790fbb49817075f94619d7e4c8d2475a77551e8588f7fb00062122964b01a4e835073b5563de69bd7cacb51949f151d2e229c0cecbecae66e315d71a2e5837ff1aeac99116d367a7c06163abc9e244d4a7643721c665b145872ea54a61b76571c4648e35a70a49ec120"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x1, 0x60, "f368b23ed727d3351ada56c94b29ab241f5c8602546c5574b56bc23d06d5fb1b042249a39d8179101d263af7bf0fdc0164a7023d0d2ea35e7d4117cf2fdcbfd1b0762999163c432f4c6659c33707008d79c6f68a923e8a6ee50468cafaf79a0d"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x1}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000001300)=0x7fff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 2.027200121s ago: executing program 3 (id=7369): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x260040, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x400) 730.58µs ago: executing program 0 (id=7370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=7371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'dvmrp0\x00', {}, 0x4}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0xffffffff, 0x3, 0x0, 0x4, 0x1, 0x1, 0x82000}}) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) (async) shutdown(r5, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x4, 0x0, 0x25}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) kernel console output (not intermixed with test programs): 'FZ' [ 231.181772][ T36] audit: type=1400 audit(1762309786.815:855): avc: denied { unmount } for pid=9939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 231.646988][T10959] netlink: 'syz.3.3581': attribute type 29 has an invalid length. [ 231.654885][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3581'. [ 231.784500][T10984] /dev/rnullb0: Can't lookup blockdev [ 231.832743][T10997] rust_binder: Write failure EFAULT in pid:227 [ 231.912677][T11006] overlay: Bad value for 'xino' [ 231.924199][ T36] audit: type=1400 audit(1762309787.555:856): avc: denied { relabelto } for pid=11005 comm="syz.4.3599" name="file0" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 232.089810][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 232.240965][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.253897][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 232.262985][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.271881][ T10] usb 6-1: config 0 descriptor?? [ 232.324353][T11021] 9pnet: Could not find request transport: xen [ 232.437537][ T36] audit: type=1400 audit(1762309788.065:857): avc: denied { rmdir } for pid=7985 comm="syz-executor" name="file0" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 232.474172][T11025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3606'. [ 232.483390][T11025] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3606'. [ 232.492407][T11025] netlink: 'syz.4.3606': attribute type 5 has an invalid length. [ 232.500181][T11025] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3606'. [ 232.800941][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 232.807005][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 232.817657][ T10] usb 6-1: USB disconnect, device number 13 [ 233.071474][T11042] fuseblk: Bad value for 'group_id' [ 233.076746][T11042] fuseblk: Bad value for 'group_id' [ 233.091672][T11044] netlink: 'syz.4.3612': attribute type 4 has an invalid length. [ 233.105823][T11044] netlink: 'syz.4.3612': attribute type 4 has an invalid length. [ 233.406106][T11071] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 233.406130][T11071] rust_binder: Read failure Err(EFAULT) in pid:239 [ 233.468410][T11086] 9pnet_fd: Insufficient options for proto=fd [ 233.490008][ T36] audit: type=1400 audit(1762309789.115:858): avc: denied { accept } for pid=11089 comm="syz.5.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.510668][ T36] audit: type=1400 audit(1762309789.125:859): avc: denied { read } for pid=11089 comm="syz.5.3628" name="msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 233.533359][ T36] audit: type=1400 audit(1762309789.125:860): avc: denied { open } for pid=11089 comm="syz.5.3628" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 233.559696][T11103] netlink: 'syz.4.3632': attribute type 27 has an invalid length. [ 234.005533][T11115] rust_binder: 249: no such ref 4294967294 [ 234.046607][T11118] netlink: 'syz.5.3639': attribute type 12 has an invalid length. [ 234.076913][T11122] syz.0.3641: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 234.093204][T11122] CPU: 1 UID: 0 PID: 11122 Comm: syz.0.3641 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 234.093236][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.093275][T11122] Call Trace: [ 234.093283][T11122] [ 234.093293][T11122] __dump_stack+0x21/0x30 [ 234.093329][T11122] dump_stack_lvl+0x10c/0x190 [ 234.093359][T11122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 234.093390][T11122] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 234.093421][T11122] dump_stack+0x19/0x20 [ 234.093448][T11122] warn_alloc+0x1bc/0x2a0 [ 234.093477][T11122] ? __cfi_warn_alloc+0x10/0x10 [ 234.093505][T11122] ? kasan_save_track+0x4f/0x80 [ 234.093527][T11122] ? __kasan_kmalloc+0x96/0xb0 [ 234.093550][T11122] ? __kmalloc_cache_noprof+0x24c/0x490 [ 234.093572][T11122] ? do_sock_setsockopt+0x26d/0x400 [ 234.093605][T11122] ? __x64_sys_setsockopt+0x1b8/0x250 [ 234.093637][T11122] ? x64_sys_call+0x2adc/0x2ee0 [ 234.093670][T11122] ? do_syscall_64+0x58/0xf0 [ 234.093700][T11122] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.093724][T11122] __vmalloc_node_range_noprof+0x135/0x1420 [ 234.093762][T11122] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 234.093796][T11122] ? kasan_save_alloc_info+0x40/0x50 [ 234.093828][T11122] ? __kasan_kmalloc+0x96/0xb0 [ 234.093853][T11122] ? __kmalloc_cache_noprof+0x24c/0x490 [ 234.093874][T11122] ? futex_setup_timer+0xb4/0xd0 [ 234.093896][T11122] vmalloc_user_noprof+0x77/0x90 [ 234.093927][T11122] ? xskq_create+0xdb/0x2a0 [ 234.093962][T11122] xskq_create+0xdb/0x2a0 [ 234.093996][T11122] xsk_init_queue+0xb6/0x120 [ 234.094029][T11122] xsk_setsockopt+0x43f/0x6f0 [ 234.094061][T11122] ? __cfi_xsk_setsockopt+0x10/0x10 [ 234.094092][T11122] ? do_futex+0x309/0x500 [ 234.094115][T11122] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 234.094144][T11122] ? security_socket_setsockopt+0x33/0xd0 [ 234.094167][T11122] ? __cfi_xsk_setsockopt+0x10/0x10 [ 234.094207][T11122] do_sock_setsockopt+0x26d/0x400 [ 234.094238][T11122] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 234.094272][T11122] __x64_sys_setsockopt+0x1b8/0x250 [ 234.094305][T11122] x64_sys_call+0x2adc/0x2ee0 [ 234.094338][T11122] do_syscall_64+0x58/0xf0 [ 234.094377][T11122] ? clear_bhb_loop+0x50/0xa0 [ 234.094400][T11122] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.094422][T11122] RIP: 0033:0x7f1523f8f6c9 [ 234.094445][T11122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.094465][T11122] RSP: 002b:00007f15229e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.094488][T11122] RAX: ffffffffffffffda RBX: 00007f15241e5fa0 RCX: 00007f1523f8f6c9 [ 234.094505][T11122] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 234.094520][T11122] RBP: 00007f1524011f91 R08: 0000000000000004 R09: 0000000000000000 [ 234.094534][T11122] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.094547][T11122] R13: 00007f15241e6038 R14: 00007f15241e5fa0 R15: 00007fff8f48cc88 [ 234.094565][T11122] [ 234.094578][T11122] Mem-Info: [ 234.393787][T11122] active_anon:43114 inactive_anon:1252 isolated_anon:0 [ 234.393787][T11122] active_file:9747 inactive_file:14607 isolated_file:0 [ 234.393787][T11122] unevictable:1536 dirty:49 writeback:0 [ 234.393787][T11122] slab_reclaimable:6083 slab_unreclaimable:78170 [ 234.393787][T11122] mapped:24335 shmem:37043 pagetables:1130 [ 234.393787][T11122] sec_pagetables:0 bounce:0 [ 234.393787][T11122] kernel_misc_reclaimable:0 [ 234.393787][T11122] free:1474242 free_pcp:3008 free_cma:0 [ 234.448947][T11122] Node 0 active_anon:172356kB inactive_anon:5008kB active_file:38988kB inactive_file:58428kB unevictable:6144kB isolated(anon):0kB isolated(file):0kB mapped:97340kB dirty:196kB writeback:0kB shmem:148172kB shmem_thp:6144kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:8432kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no [ 234.498844][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3644'. [ 234.508314][T11122] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB [ 234.566804][T11122] lowmem_reserve[]: 0 3921 3921 [ 234.571840][T11122] Normal free:2938516kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172356kB inactive_anon:5008kB active_file:38988kB inactive_file:58428kB unevictable:6144kB writepending:196kB present:5242880kB managed:4016120kB mlocked:6144kB bounce:0kB free_pcp:4612kB local_pcp:3480kB free_cma:0kB [ 234.611183][T11122] lowmem_reserve[]: 0 0 0 [ 234.616568][T11122] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 234.653591][T11122] Normal: 131*4kB (UME) 144*8kB (ME) 281*16kB (UME) 152*32kB (ME) 110*64kB (ME) 74*128kB (UME) 57*256kB (UME) 33*512kB (UM) 58*1024kB (UM) 18*2048kB (UM) 678*4096kB (UM) = 2932380kB [ 234.672978][T11122] 62646 total pagecache pages [ 234.677882][T11122] 1253 pages in swap cache [ 234.696475][T11122] Free swap = 119268kB [ 234.700892][T11122] Total swap = 124996kB [ 234.705145][T11122] 2097051 pages RAM [ 234.708995][T11122] 0 pages HighMem/MovableOnly [ 234.715653][T11122] 351537 pages reserved [ 234.719960][T11122] 0 pages cma reserved [ 234.726571][T11122] Memory allocations: [ 234.730843][T11122] 0 B 0 init/main.c:1370 func:do_initcalls [ 234.738355][T11122] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 234.748001][T11122] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 234.755951][T11122] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 234.764097][T11122] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 234.772329][T11122] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 234.781723][T11122] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 234.789700][T11122] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 234.797607][T11122] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 234.805773][T11122] 0 B 0 init/initramfs.c:101 func:find_link [ 234.915764][T11168] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3657'. [ 235.059835][T11182] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 235.155336][T11184] __vm_enough_memory: pid: 11184, comm: syz.5.3663, bytes: 18014402804453376 not enough memory for the allocation [ 235.402503][T11199] rust_binder: Error while translating object. [ 235.402549][T11199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.408793][T11199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 235.445163][T11201] rust_binder: Error while translating object. [ 235.454435][T11201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 235.460906][T11201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:273 [ 235.508299][T11209] TCP: TCP_TX_DELAY enabled [ 236.020577][T11236] overlayfs: failed to clone lowerpath [ 236.026539][T11236] overlayfs: failed to clone lowerpath [ 236.052966][T11242] fuse: blksize only supported for fuseblk [ 236.362411][T11264] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.3693'. [ 236.694444][ T36] audit: type=1326 audit(1762310052.323:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11274 comm="syz.3.3698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f248218f6c9 code=0x0 [ 236.700910][T11279] overlay: ./file0 is not a directory [ 236.757252][ T36] audit: type=1400 audit(1762310052.383:862): avc: denied { append } for pid=11278 comm="syz.5.3699" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.800968][T11289] rust_binder: Failed copying remainder into alloc: EFAULT [ 236.800997][T11289] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 236.808245][T11289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 236.816699][T11289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:303 [ 236.911384][T11299] overlayfs: failed to clone upperpath [ 237.069211][ T71] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 237.199136][ T71] usb 6-1: device descriptor read/64, error -71 [ 237.439094][ T71] usb 6-1: device descriptor read/64, error -71 [ 237.442251][T11309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3710'. [ 237.468595][T11317] overlayfs: failed to resolve './bus': -2 [ 237.679013][ T71] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 237.828957][ T71] usb 6-1: device descriptor read/64, error -71 [ 238.068920][ T71] usb 6-1: device descriptor read/64, error -71 [ 238.170072][T11343] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=277 sclass=netlink_xfrm_socket pid=11343 comm=syz.4.3718 [ 238.179035][ T71] usb usb6-port1: attempt power cycle [ 238.400697][T11350] netlink: 'syz.0.3721': attribute type 11 has an invalid length. [ 238.420205][T11352] overlayfs: missing 'lowerdir' [ 238.438620][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3723'. [ 238.457264][T11356] 9pnet_fd: Insufficient options for proto=fd [ 238.518783][ T71] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 238.539830][ T71] usb 6-1: device descriptor read/8, error -71 [ 238.669887][ T71] usb 6-1: device descriptor read/8, error -71 [ 238.741805][T11367] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 238.782328][ T36] audit: type=1326 audit(1762310054.414:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.3731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5698f6c9 code=0x7ffe0000 [ 238.908692][ T71] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 238.929746][ T71] usb 6-1: device descriptor read/8, error -71 [ 239.079943][ T71] usb 6-1: device descriptor read/8, error -71 [ 239.163552][T11378] netlink: 'syz.4.3734': attribute type 2 has an invalid length. [ 239.171599][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'. [ 239.188710][ T71] usb usb6-port1: unable to enumerate USB device [ 239.525361][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 239.731955][T11402] 9pnet_fd: Insufficient options for proto=fd [ 240.056341][ T36] audit: type=1326 audit(1762310055.684:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11450 comm="syz.4.3761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e5698f6c9 code=0x0 [ 240.622553][T11467] /dev/loop0: Can't lookup blockdev [ 240.799731][T11486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11486 comm=syz.0.3772 [ 241.168148][ T476] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 241.329194][ T476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.340121][ T476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.350013][ T476] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 241.359080][ T476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.367668][ T476] usb 6-1: config 0 descriptor?? [ 241.664627][T11560] 9pnet_fd: Insufficient options for proto=fd [ 241.774780][ T476] lenovo 0003:17EF:6047.0012: unknown main item tag 0x0 [ 241.798125][ T476] lenovo 0003:17EF:6047.0012: item fetching failed at offset 3/5 [ 241.808125][ T476] lenovo 0003:17EF:6047.0012: hid_parse failed [ 241.814347][ T476] lenovo 0003:17EF:6047.0012: probe with driver lenovo failed with error -22 [ 242.108916][T11574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3804'. [ 242.125620][T11495] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 242.378792][ T36] audit: type=1326 audit(1762310058.014:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.0.3819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1523f8f6c9 code=0x0 [ 242.468686][T11626] /dev/loop0: Can't lookup blockdev [ 242.480704][ T36] audit: type=1326 audit(1762310058.114:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11622 comm="syz.0.3819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1523f8f6c9 code=0x0 [ 243.580963][T11651] overlayfs: failed to clone lowerpath [ 243.587079][T11651] overlayfs: failed to clone lowerpath [ 243.602853][ T36] audit: type=1400 audit(1762310059.235:867): avc: denied { write } for pid=11652 comm="syz.3.3829" name="/" dev="configfs" ino=2293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.766554][ T36] audit: type=1400 audit(1762310059.395:868): avc: denied { execmod } for pid=11663 comm="syz.0.3833" path="/454/cgroup.controllers" dev="tmpfs" ino=2506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.817472][T11667] netlink: 'syz.0.3834': attribute type 4 has an invalid length. [ 243.825257][T11667] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3834'. [ 243.953577][ T460] usb 6-1: USB disconnect, device number 18 [ 243.980181][T11670] rust_binder: Write failure EFAULT in pid:313 [ 243.980233][T11671] rust_binder: Write failure EFAULT in pid:313 [ 244.215993][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3841'. [ 244.282638][T11693] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3842'. [ 244.317597][T11703] netlink: 1143 bytes leftover after parsing attributes in process `syz.0.3844'. [ 244.377773][T11721] fuse: Unknown parameter 'rootmodFYku000000000040000' [ 244.857491][T11728] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 244.974761][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 245.007187][T11745] netlink: 'syz.0.3859': attribute type 27 has an invalid length. [ 245.016549][T11745] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 245.047216][ T71] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 245.073112][T11754] overlayfs: failed to clone upperpath [ 245.187153][ T71] usb 6-1: device descriptor read/64, error -71 [ 245.437093][ T71] usb 6-1: device descriptor read/64, error -71 [ 245.509476][T11773] /dev/rnullb0: Can't lookup blockdev [ 245.697034][ T71] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 245.757920][T11790] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3873'. [ 245.775108][T11790] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3873'. [ 245.824436][T11799] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 245.832243][ T71] usb 6-1: device descriptor read/64, error -71 [ 245.851796][ T36] audit: type=1400 audit(1762310061.485:869): avc: denied { map } for pid=11809 comm="syz.0.3880" path="socket:[44149]" dev="sockfs" ino=44149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.029350][T11833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3885'. [ 246.076942][ T71] usb 6-1: device descriptor read/64, error -71 [ 246.112017][T11846] netlink: 'syz.3.3892': attribute type 27 has an invalid length. [ 246.187002][ T71] usb usb6-port1: attempt power cycle [ 246.526938][ T71] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 246.547969][ T71] usb 6-1: device descriptor read/8, error -71 [ 246.603612][T11868] netlink: 'syz.4.3900': attribute type 4 has an invalid length. [ 246.612087][T11868] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3900'. [ 246.678016][ T71] usb 6-1: device descriptor read/8, error -71 [ 246.824265][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'. [ 246.927040][ T71] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 246.950107][ T71] usb 6-1: device descriptor read/8, error -71 [ 247.077940][ T71] usb 6-1: device descriptor read/8, error -71 [ 247.187049][ T71] usb usb6-port1: unable to enumerate USB device [ 247.828800][T11934] overlayfs: failed to clone upperpath [ 247.857140][T11938] incfs: Backing dir is not set, filesystem can't be mounted. [ 247.864835][T11938] incfs: mount failed -2 [ 247.888880][T11944] rust_binder: Write failure EFAULT in pid:328 [ 248.453403][T11954] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 248.468834][T11955] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 248.921460][T11980] netlink: 'syz.0.3940': attribute type 16 has an invalid length. [ 248.929359][T11980] netlink: 'syz.0.3940': attribute type 2 has an invalid length. [ 248.937113][T11980] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.3940'. [ 249.966910][ T956] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.966930][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 250.226904][ T460] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 250.342832][T12044] 9pnet_fd: Insufficient options for proto=fd [ 250.388017][ T460] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 250.397232][ T460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.405667][T12045] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 250.405927][ T460] usb 6-1: config 0 descriptor?? [ 250.622419][T12038] fuse: Bad value for 'fd' [ 250.753288][ T460] usb 6-1: string descriptor 0 read error: -71 [ 250.761718][ T460] usbhid 6-1:0.0: can't add hid device: -71 [ 250.767992][ T460] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 250.779111][ T460] usb 6-1: USB disconnect, device number 23 [ 251.666908][ T460] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 251.816980][ T460] usb 6-1: Using ep0 maxpacket: 16 [ 251.823231][ T460] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.834286][ T460] usb 6-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 251.843424][ T460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.852034][ T460] usb 6-1: config 0 descriptor?? [ 252.064520][ T460] wacom 0003:056A:006B.0013: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 252.074903][ T460] wacom 0003:056A:006B.0013: hidraw0: USB HID v0.02 Device [HID 056a:006b] on usb-dummy_hcd.5-1/input0 [ 252.087046][ T460] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:006B.0013/input/input21 [ 252.102413][T12104] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 252.102431][T12104] rust_binder: Error while translating object. [ 252.103327][ T460] usb 6-1: USB disconnect, device number 24 [ 252.125086][T12104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.125109][T12104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 252.134999][T12104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.144616][T12106] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 252.151263][T12106] rust_binder: Error while translating object. [ 252.159993][T12106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.166231][T12106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 252.263968][T12113] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 252.421761][T12123] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3990'. [ 252.530739][T12141] 9pnet_fd: Insufficient options for proto=fd [ 252.596927][ T460] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 252.747999][ T460] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.758211][ T460] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.772441][ T460] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 252.781979][ T460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.790000][ T460] usb 6-1: Product: syz [ 252.794177][ T460] usb 6-1: Manufacturer: syz [ 252.798786][ T460] usb 6-1: SerialNumber: syz [ 252.803904][ T460] usb 6-1: config 0 descriptor?? [ 252.809710][ T460] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 253.011497][ T460] usb 6-1: USB disconnect, device number 25 [ 253.796886][ T460] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 253.948064][ T460] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.959016][ T460] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.968756][ T460] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.981681][ T460] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.990754][ T460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.999267][ T460] usb 6-1: config 0 descriptor?? [ 254.334109][T12177] 9pnet_fd: Insufficient options for proto=fd [ 254.410131][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.419733][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.427532][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.435235][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.442698][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.450407][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.457852][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.465388][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.472811][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.480331][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.487865][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.495354][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.502789][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.510346][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.517794][ T460] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 254.525450][ T460] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 254.542519][ T460] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 254.555332][T12199] overlayfs: failed to clone lowerpath [ 254.672597][ T460] usb 6-1: USB disconnect, device number 26 [ 254.696741][T12242] 9pnet: p9_errstr2errno: server reported unknown error @cF S+Jx@PQ[v5o [ 254.831871][T12270] overlayfs: missing 'lowerdir' [ 254.895664][T12292] 9pnet_fd: Insufficient options for proto=fd [ 255.169910][T10611] bridge_slave_1: left allmulticast mode [ 255.175726][T10611] bridge_slave_1: left promiscuous mode [ 255.181461][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.196440][T10611] bridge_slave_0: left allmulticast mode [ 255.202280][T10611] bridge_slave_0: left promiscuous mode [ 255.208050][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.248309][T12307] /dev/rnullb0: Can't open blockdev [ 255.308955][T10611] veth1_macvtap: left promiscuous mode [ 255.314484][T10611] veth0_vlan: left promiscuous mode [ 255.391644][T12318] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4053'. [ 255.536913][ T460] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 255.567904][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4063'. [ 255.696884][ T460] usb 6-1: Using ep0 maxpacket: 16 [ 255.703022][ T460] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.713908][ T460] usb 6-1: config 0 interface 0 has no altsetting 0 [ 255.720570][ T460] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 255.729652][ T460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.738482][ T460] usb 6-1: config 0 descriptor?? [ 255.944986][ T36] audit: type=1400 audit(1762310072.574:870): avc: denied { validate_trans } for pid=12308 comm="syz.5.4050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 255.967230][ T460] usbhid 6-1:0.0: can't add hid device: -71 [ 255.973351][ T460] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 255.981978][ T460] usb 6-1: USB disconnect, device number 27 [ 255.986808][T12369] 9p: Unknown access argument : -22 [ 256.518064][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.527800][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.536457][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.545414][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.548185][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.562308][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.646605][T12405] fuse: Unknown parameter 'system_' [ 256.669661][ T36] audit: type=1326 audit(1762310073.304:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.3.4086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f248218f6c9 code=0x0 [ 256.741689][ T36] audit: type=1326 audit(1762310073.374:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12425 comm="syz.3.4088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f248218f6c9 code=0x0 [ 256.764664][ T460] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 256.779769][T12431] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4089'. [ 256.789206][T12431] veth0_to_batadv: entered allmulticast mode [ 256.795405][T12431] veth0_to_batadv: left allmulticast mode [ 257.289476][T12437] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003' [ 257.334192][T12443] netlink: 39 bytes leftover after parsing attributes in process `syz.0.4094'. [ 257.344700][T12443] fuse: Unknown parameter '0000000000000000000600000000000000000003070' [ 257.353096][ T36] audit: type=1400 audit(1762310073.974:873): avc: denied { map } for pid=12444 comm="syz.5.4095" path="/proc/390/attr/sockcreate" dev="proc" ino=44844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 257.389912][T12449] netlink: 'syz.5.4097': attribute type 29 has an invalid length. [ 257.397855][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4097'. [ 257.408142][T12449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 257.408633][T12449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 257.417825][T12449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:394 [ 257.623767][ T36] audit: type=1326 audit(1762310074.254:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.4101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f248218f6c9 code=0x0 [ 258.480165][ T36] audit: type=1400 audit(1762310075.114:875): avc: denied { watch watch_reads } for pid=12478 comm="syz.5.4106" path="/146/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 258.746878][ T414] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 258.896865][ T414] usb 6-1: Using ep0 maxpacket: 8 [ 258.902970][ T414] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 258.911083][ T414] usb 6-1: config 0 has no interface number 0 [ 258.918475][ T414] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 258.927528][ T414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.935511][ T414] usb 6-1: Product: syz [ 258.939724][ T414] usb 6-1: Manufacturer: syz [ 258.944355][ T414] usb 6-1: SerialNumber: syz [ 258.949534][ T414] usb 6-1: config 0 descriptor?? [ 259.157555][ T414] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 259.164046][ T414] usb 6-1: No valid video chain found. [ 259.170458][ T414] usb 6-1: USB disconnect, device number 29 [ 260.638621][T12506] overlay: ./bus is not a directory [ 260.644525][ T36] audit: type=1400 audit(1762310077.274:876): avc: denied { create } for pid=12505 comm="syz.3.4115" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 260.665221][ T36] audit: type=1400 audit(1762310077.294:877): avc: denied { link } for pid=12505 comm="syz.3.4115" name="file1" dev="ramfs" ino=44948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 260.668402][T12504] /dev/rnullb0: Can't open blockdev [ 260.763193][T12514] netlink: 'syz.5.4117': attribute type 16 has an invalid length. [ 260.771166][T12514] netlink: 64094 bytes leftover after parsing attributes in process `syz.5.4117'. [ 260.783472][T12514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 260.783498][T12514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 261.644327][T12595] overlay: ./file0 is not a directory [ 263.117179][T12682] fuse: Invalid rootmode [ 263.156859][ T460] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 263.308217][ T460] usb 6-1: unable to get BOS descriptor or descriptor too short [ 263.317589][ T460] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 263.327909][ T460] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 263.336792][ T460] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 263.383837][T12720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=12720 comm=syz.0.4184 [ 263.460111][T12729] 9pnet_fd: Insufficient options for proto=fd [ 263.729100][T12743] futex_wake_op: syz.3.4192 tries to shift op by 144; fix this program [ 263.737420][T12744] futex_wake_op: syz.3.4192 tries to shift op by 144; fix this program [ 264.013252][T12749] cgroup2: Unknown parameter '01777777777777777777777' [ 264.719411][ T36] audit: type=1400 audit(1762310081.354:878): avc: denied { write } for pid=414 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47280 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 264.948691][T12784] overlayfs: failed to clone lowerpath [ 264.956429][T12784] overlayfs: failed to resolve 'metacopy=on': -2 [ 265.059706][T12793] overlayfs: failed to clone upperpath [ 265.842845][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.860064][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.876854][T12813] bridge_slave_0: entered allmulticast mode [ 265.883247][T12813] bridge_slave_0: entered promiscuous mode [ 265.890528][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.897641][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.906893][T12813] bridge_slave_1: entered allmulticast mode [ 265.913261][T12813] bridge_slave_1: entered promiscuous mode [ 265.925667][ T460] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.934883][ T460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.965038][ T460] usb 6-1: can't set config #1, error -71 [ 265.980203][ T460] usb 6-1: USB disconnect, device number 30 [ 266.075502][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.082710][T12813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.090015][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.097149][T12813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.102192][T12852] overlayfs: cannot append lower layer [ 266.122408][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.134247][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.145847][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.151774][T12865] devpts: called with bogus options [ 266.152908][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.172244][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.179307][T10647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.203290][T12813] veth0_vlan: entered promiscuous mode [ 266.213645][T12813] veth1_macvtap: entered promiscuous mode [ 266.238391][T12868] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 266.246637][T12868] rust_binder: Write failure EINVAL in pid:483 [ 266.331623][ T36] audit: type=1400 audit(1762310082.964:879): avc: denied { write } for pid=12886 comm="syz.5.4239" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.392506][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4243'. [ 266.448366][T12914] rust_binder: Write failure EFAULT in pid:21 [ 266.589094][T12924] tipc: Started in network mode [ 266.600098][T12924] tipc: Node identity , cluster identity 4711 [ 266.606178][T12924] tipc: Failed to obtain node identity [ 266.612005][T12924] tipc: Enabling of bearer rejected, failed to enable media [ 266.706917][ T460] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 266.858141][ T460] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.866196][ T460] usb 1-1: not running at top speed; connect to a high speed hub [ 266.874698][ T460] usb 1-1: config 13 has an invalid interface number: 90 but max is 0 [ 266.882905][ T460] usb 1-1: config 13 has no interface number 0 [ 266.889115][ T460] usb 1-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 266.902275][ T460] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 266.911345][ T460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.919418][ T460] usb 1-1: Product: syz [ 266.923565][ T460] usb 1-1: Manufacturer: syz [ 266.928214][ T460] usb 1-1: SerialNumber: syz [ 267.141313][ T460] usb 1-1: USB disconnect, device number 20 [ 267.152210][T10715] udevd[10715]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.90/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.257314][ T36] audit: type=1326 audit(1762310083.894:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12957 comm="syz.4.4263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e5698f6c9 code=0x0 [ 267.342620][T12967] overlayfs: failed to clone lowerpath [ 267.349056][T12967] overlayfs: failed to clone lowerpath [ 267.623210][ T36] audit: type=1400 audit(1762310084.254:881): avc: denied { read } for pid=12980 comm="syz.3.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.703910][T12990] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 267.711521][T12990] SELinux: failed to load policy [ 267.716919][T12990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 267.717030][T12990] rust_binder: 12990 RLIMIT_NICE not set [ 267.726380][T12990] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 267.732065][T12990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 267.740160][T12990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:31 [ 267.886753][T13008] /dev/rnullb0: Can't open blockdev [ 267.943708][ T36] audit: type=1400 audit(1762310084.574:882): avc: denied { map } for pid=13009 comm="syz.0.4280" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 267.968288][ T36] audit: type=1400 audit(1762310084.574:883): avc: denied { execute } for pid=13009 comm="syz.0.4280" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 267.989053][T13016] input: syz0 as /devices/virtual/input/input25 [ 268.357433][T13030] overlayfs: failed to clone upperpath [ 268.843475][T13046] netlink: 'syz.4.4291': attribute type 12 has an invalid length. [ 268.876550][T13051] overlayfs: conflicting options: userxattr,redirect_dir=on [ 268.885291][T13051] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 268.898155][ T36] audit: type=1400 audit(1762310085.534:884): avc: denied { watch } for pid=13050 comm="syz.0.4293" path="/18/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.953058][T13061] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 268.966447][T13061] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4296'. [ 268.984911][T13054] fuse: Bad value for 'user_id' [ 268.984911][T13055] fuse: Bad value for 'user_id' [ 268.984930][T13055] fuse: Bad value for 'user_id' [ 268.990036][T13054] fuse: Bad value for 'user_id' [ 269.074060][ T36] audit: type=1400 audit(1762310085.704:885): avc: denied { execute } for pid=13069 comm="syz.0.4298" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.308795][T13092] overlayfs: failed to clone lowerpath [ 269.315953][T13092] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 269.797315][T13097] netlink: 182 bytes leftover after parsing attributes in process `syz.4.4308'. [ 269.927467][T13104] 9pnet_fd: Insufficient options for proto=fd [ 269.933932][T13104] 9pnet_fd: Insufficient options for proto=fd [ 270.062172][T13117] incfs: Options parsing error. -22 [ 270.067499][T13117] incfs: mount failed -22 [ 270.780606][T13166] /dev/rnullb0: Can't lookup blockdev [ 270.847552][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 270.883519][T13183] 9pnet_fd: Insufficient options for proto=fd [ 271.007869][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.036834][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.046619][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 271.056088][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.068265][ T45] usb 1-1: config 0 descriptor?? [ 271.479215][ T45] lenovo 0003:17EF:6047.0015: unknown main item tag 0x0 [ 271.486230][ T45] lenovo 0003:17EF:6047.0015: item fetching failed at offset 3/5 [ 271.494259][ T45] lenovo 0003:17EF:6047.0015: hid_parse failed [ 271.500554][ T45] lenovo 0003:17EF:6047.0015: probe with driver lenovo failed with error -22 [ 271.678793][ T36] audit: type=1400 audit(1762310088.314:886): avc: denied { append } for pid=13133 comm="syz.0.4321" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.682387][T13134] tipc: Enabling of bearer rejected, failed to enable media [ 271.712477][T13134] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 271.712884][ T492] usb 1-1: USB disconnect, device number 21 [ 272.188448][ T36] audit: type=1400 audit(1762310088.824:887): avc: denied { create } for pid=13231 comm="syz.4.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 272.466863][ T45] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 272.617909][ T45] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 272.626082][ T45] usb 1-1: config 0 has no interface number 0 [ 272.632365][ T45] usb 1-1: config 0 interface 41 has no altsetting 0 [ 272.640617][ T45] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 272.649817][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.657903][ T45] usb 1-1: Product: syz [ 272.662135][ T45] usb 1-1: Manufacturer: syz [ 272.666747][ T45] usb 1-1: SerialNumber: syz [ 272.672306][ T45] usb 1-1: config 0 descriptor?? [ 272.710248][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4360'. [ 272.731918][T13241] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4361'. [ 272.764092][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4363'. [ 272.865738][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4367'. [ 272.888280][ T36] audit: type=1400 audit(1762310089.514:888): avc: denied { read } for pid=13255 comm="syz.4.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.965194][T13260] overlayfs: failed to clone lowerpath [ 272.989391][T13260] overlayfs: failed to clone lowerpath [ 273.419243][T13269] /dev/rnullb0: Can't lookup blockdev [ 273.479452][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 274.727563][T13234] rust_binder: Error while translating object. [ 274.727612][T13234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 274.733820][T13234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:88 [ 274.743886][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 274.763723][ T45] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 274.775568][ T45] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 274.786857][ T45] usb 1-1: USB disconnect, device number 22 [ 275.319032][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 275.351762][T13328] rust_binder: Error in use_page_slow: ESRCH [ 275.351783][T13328] rust_binder: use_range failure ESRCH [ 275.357005][T13329] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 275.358056][T13328] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 275.363242][T13329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 275.371346][T13328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 275.379023][T13329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:103 [ 275.397932][T13328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 275.524047][T13338] __vm_enough_memory: pid: 13338, comm: syz.0.4396, bytes: 18014402804453376 not enough memory for the allocation [ 275.876838][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 275.933998][T13372] /dev/rnullb0: Can't lookup blockdev [ 276.027884][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.038791][ T45] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 276.047846][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.056558][ T45] usb 1-1: config 0 descriptor?? [ 276.290267][ T36] audit: type=1326 audit(1762310092.925:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.3.4426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f248218f6c9 code=0x0 [ 276.566907][T13429] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 277.165348][T13434] overlayfs: missing 'lowerdir' [ 278.703275][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 278.709283][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 278.720565][ T45] usb 1-1: USB disconnect, device number 23 [ 279.016955][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 279.167858][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.178814][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.188570][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 279.197633][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.206354][ T45] usb 1-1: config 0 descriptor?? [ 279.620725][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.629310][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.639716][ T45] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 279.646726][ T45] lenovo 0003:17EF:6047.0016: item fetching failed at offset 3/5 [ 279.654788][ T45] lenovo 0003:17EF:6047.0016: hid_parse failed [ 279.661015][ T45] lenovo 0003:17EF:6047.0016: probe with driver lenovo failed with error -22 [ 279.841378][T13436] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 279.842588][ T492] usb 1-1: USB disconnect, device number 24 [ 280.115649][T13466] overlayfs: failed to clone upperpath [ 280.289173][T13471] overlayfs: failed to clone upperpath [ 280.376194][T13478] binder: Unknown parameter 'fscontext?}' [ 280.419585][T13485] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 280.419605][T13485] rust_binder: Error while translating object. [ 280.430309][T13485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.436605][T13485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 280.447054][T13485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.475314][T13490] rust_binder: 141: no such ref 1 [ 280.491851][T13492] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 280.766831][ T460] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 280.883042][T13533] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.890313][T13533] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.897409][T13533] bridge_slave_0: entered allmulticast mode [ 280.903757][T13533] bridge_slave_0: entered promiscuous mode [ 280.910361][T13533] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.917445][T13533] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.924562][T13533] bridge_slave_1: entered allmulticast mode [ 280.927927][ T460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.931165][T13533] bridge_slave_1: entered promiscuous mode [ 280.941976][ T460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.968974][ T460] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 280.978235][ T460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.987609][ T460] usb 1-1: config 0 descriptor?? [ 280.996256][T13542] SELinux: Context system_u:object_r:useradd_exec_t:s0 is not valid (left unmapped). [ 281.026390][ T36] audit: type=1400 audit(1762310097.655:890): avc: denied { relabelto } for pid=13541 comm="syz.4.4471" name="" dev="pipefs" ino=48767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:useradd_exec_t:s0" [ 281.086950][T13533] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.094006][T13533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.101289][T13533] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.108366][T13533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.134010][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.141303][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.152887][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.159939][T10644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.169462][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.176532][T10611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.184220][T10644] bridge_slave_1: left allmulticast mode [ 281.189927][T10644] bridge_slave_1: left promiscuous mode [ 281.195923][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.203806][T10644] bridge_slave_0: left allmulticast mode [ 281.209673][T10644] bridge_slave_0: left promiscuous mode [ 281.215336][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.309077][T13533] veth0_vlan: entered promiscuous mode [ 281.320991][T13533] veth1_macvtap: entered promiscuous mode [ 281.331132][T10644] veth1_macvtap: left promiscuous mode [ 281.336654][T10644] veth0_vlan: left promiscuous mode [ 281.402473][ T460] lenovo 0003:17EF:6047.0017: unknown main item tag 0x0 [ 281.404178][ T36] audit: type=1400 audit(1762310098.035:891): avc: denied { mounton } for pid=13533 comm="syz-executor" path="/root/syzkaller.SAkNtH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=50111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 281.413648][ T460] lenovo 0003:17EF:6047.0017: item fetching failed at offset 3/5 [ 281.448841][ T460] lenovo 0003:17EF:6047.0017: hid_parse failed [ 281.463383][ T460] lenovo 0003:17EF:6047.0017: probe with driver lenovo failed with error -22 [ 281.495826][T13557] loop5: detected capacity change from 0 to 7 [ 281.643764][T13496] tipc: Started in network mode [ 281.648800][T13496] tipc: Node identity 3a9858829f34, cluster identity 4711 [ 281.656057][T13496] tipc: Enabled bearer , priority 0 [ 281.684279][T13495] tipc: Resetting bearer [ 281.702779][T13495] tipc: Disabling bearer [ 281.720013][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.724550][T13568] binder: Unknown parameter 'context[7' [ 281.727668][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.740323][T13559] bridge_slave_0: entered allmulticast mode [ 281.746881][T13559] bridge_slave_0: entered promiscuous mode [ 281.758981][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.769253][ T45] usb 1-1: USB disconnect, device number 25 [ 281.773544][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.782248][T13559] bridge_slave_1: entered allmulticast mode [ 281.788985][T13559] bridge_slave_1: entered promiscuous mode [ 281.809068][T13574] /dev/rnullb0: Can't lookup blockdev [ 281.861009][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.868113][T13559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.875455][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.882544][T13559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.894806][T13591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4485'. [ 281.904033][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.912236][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.935683][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.942852][T10644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.951613][T10638] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.958680][T10638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.980978][T13559] veth0_vlan: entered promiscuous mode [ 281.993803][T13559] veth1_macvtap: entered promiscuous mode [ 282.315454][T13602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 282.328961][T13604] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 282.345433][T13604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 282.356432][T13606] /dev/rnullb0: Can't open blockdev [ 282.411866][T13612] netlink: 'syz.3.4493': attribute type 4 has an invalid length. [ 282.421228][T13612] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4493'. [ 282.431092][T13612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.466672][T13622] /dev/rnullb0: Can't lookup blockdev [ 282.546821][ T485] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 282.609555][T13647] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.617219][T13647] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.624867][T13647] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.632633][T13647] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.634464][T13649] binder: Bad value for 'stats' [ 282.645007][T13647] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.652846][T13647] overlayfs: conflicting options: userxattr,redirect_dir=on [ 282.665128][T13652] overlayfs: failed to resolve './file0': -2 [ 282.716824][ T485] usb 1-1: Using ep0 maxpacket: 32 [ 282.723158][ T485] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 282.736815][ T485] usb 1-1: config 0 has no interface number 0 [ 282.743080][ T485] usb 1-1: config 0 interface 184 has no altsetting 0 [ 282.751514][ T485] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 282.760600][ T485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.769334][ T485] usb 1-1: Product: syz [ 282.773510][ T485] usb 1-1: Manufacturer: syz [ 282.778257][ T485] usb 1-1: SerialNumber: syz [ 282.783557][ T485] usb 1-1: config 0 descriptor?? [ 282.789608][ T485] smsc75xx v1.0.0 [ 282.802891][T13674] rust_binder: Error while translating object. [ 282.802924][T13674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 282.809442][T13674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:41 [ 282.832452][T13676] overlayfs: missing 'lowerdir' [ 283.008190][T13698] rust_binder: Write failure EFAULT in pid:16 [ 283.192338][ T485] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 283.210663][ T485] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 283.211284][ T36] audit: type=1326 audit(1762310099.845:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.220928][ T485] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 283.251420][ T36] audit: type=1326 audit(1762310099.875:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.262260][ T485] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 283.278330][ T36] audit: type=1326 audit(1762310099.875:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.313975][ T36] audit: type=1326 audit(1762310099.875:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.337846][ T36] audit: type=1326 audit(1762310099.875:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.368822][ T36] audit: type=1326 audit(1762310099.875:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.397063][T13732] overlayfs: failed to resolve './file1': -2 [ 283.398793][ T36] audit: type=1326 audit(1762310099.875:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 283.429985][ T36] audit: type=1326 audit(1762310099.875:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13713 comm="syz.6.4526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 284.070276][T13774] overlayfs: failed to resolve './file0/file0': -2 [ 284.139246][T10644] Bluetooth: hci0: Frame reassembly failed (-84) [ 284.145652][T13784] Bluetooth: hci0: Frame reassembly failed (-84) [ 284.153621][T13784] binder: Unknown parameter 'cA6O.́-$8YV"]ind_FCmo/W$p1&U':L87-/R-@ȳE8B$lk#lA0BQsYfLb塯Hпߞ莳 5aM-*Ƿ$ulLɔS:SuZ𮰆)j[ih- [ 284.153621][T13784] NJQ%0(‰~~9KE Y9#Xfu9f}VO}AՎ3R\$eԤY4z' [ 284.456298][ T71] usb 1-1: USB disconnect, device number 26 [ 284.756820][ T71] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 284.906809][ T71] usb 1-1: Using ep0 maxpacket: 32 [ 284.913132][ T71] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.921356][ T71] usb 1-1: config 0 has no interface number 0 [ 284.927490][ T71] usb 1-1: config 0 interface 184 has no altsetting 0 [ 284.935603][ T71] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.944751][ T71] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.952777][ T71] usb 1-1: Product: syz [ 284.956980][ T71] usb 1-1: Manufacturer: syz [ 284.961578][ T71] usb 1-1: SerialNumber: syz [ 284.966975][ T71] usb 1-1: config 0 descriptor?? [ 284.973167][ T71] smsc75xx v1.0.0 [ 285.575852][ T71] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 285.586837][ T71] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.797211][ T71] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 285.808351][ T71] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 285.818095][ T71] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 285.828670][ T71] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 285.838467][ T71] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 285.850347][ T71] usb 1-1: USB disconnect, device number 27 [ 286.011933][T13820] devpts: called with bogus options [ 286.165425][T13831] netlink: 182 bytes leftover after parsing attributes in process `syz.3.4565'. [ 286.207151][ T956] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.207935][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 286.292594][T13837] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4567'. [ 286.301542][T13837] z00X: renamed from gretap0 (while UP) [ 286.311749][T13837] z00X: entered allmulticast mode [ 286.318483][T13837] rust_binder: Error while translating object. [ 286.318542][T13837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 286.324986][T13837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:80 [ 286.400095][T13848] /dev/rnullb0: Can't open blockdev [ 286.413354][T13844] input input26: cannot allocate more than FF_MAX_EFFECTS effects [ 286.460825][T13852] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.329676][T13907] overlayfs: failed to clone upperpath [ 287.395748][T13922] rust_binder: Write failure EINVAL in pid:174 [ 287.497784][T13947] veth0_to_team: mtu greater than device maximum [ 287.522295][T13949] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.4606'. [ 288.062846][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 288.062866][ T36] audit: type=1400 audit(1762310104.695:931): avc: denied { execute } for pid=13959 comm="syz.4.4610" path="/memory.events.local" dev="ramfs" ino=51904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 288.186479][T13976] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4616'. [ 288.206332][T13982] 9pnet_fd: Insufficient options for proto=fd [ 288.454806][ T36] audit: type=1400 audit(1762310105.085:932): avc: denied { accept } for pid=13996 comm="syz.3.4622" path="socket:[52245]" dev="sockfs" ino=52245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.502833][T14013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.510081][T14013] IPv6: NLM_F_CREATE should be set when creating new route [ 288.517331][T14013] IPv6: NLM_F_CREATE should be set when creating new route [ 289.032482][ T36] audit: type=1326 audit(1762310105.665:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14029 comm="syz.4.4637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e5698f6c9 code=0x0 [ 289.807022][T14075] fuse: Bad value for 'fd' [ 289.856558][ T36] audit: type=1326 audit(1762310106.485:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 289.863616][T14078] overlayfs: failed to clone upperpath [ 289.880120][ T36] audit: type=1326 audit(1762310106.485:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 289.910949][ T36] audit: type=1326 audit(1762310106.495:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 289.934795][ T36] audit: type=1326 audit(1762310106.495:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 289.958353][ T36] audit: type=1326 audit(1762310106.495:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 289.981750][ T36] audit: type=1326 audit(1762310106.495:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 290.005185][ T36] audit: type=1326 audit(1762310106.495:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14077 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991ab8f6c9 code=0x7ffc0000 [ 290.723258][T14127] netlink: 'syz.6.4667': attribute type 11 has an invalid length. [ 291.493913][T14145] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.278011][T14178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.529455][T14191] overlayfs: missing 'lowerdir' [ 293.530336][T14283] overlayfs: failed to clone upperpath [ 293.637157][T14293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=14293 comm=syz.3.4727 [ 293.777867][T14297] overlay: ./bus is not a directory [ 293.880075][T14323] netlink: 'syz.4.4739': attribute type 4 has an invalid length. [ 293.888736][T14323] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4739'. [ 293.952732][T14335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8448 sclass=netlink_route_socket pid=14335 comm=syz.0.4742 [ 294.169487][T14344] fuse: Bad value for 'fd' [ 294.248695][T10644] bridge_slave_1: left allmulticast mode [ 294.254380][T10644] bridge_slave_1: left promiscuous mode [ 294.260208][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.264798][T14357] 9pnet_fd: Insufficient options for proto=fd [ 294.273601][T10644] bridge_slave_0: left allmulticast mode [ 294.279501][T10644] bridge_slave_0: left promiscuous mode [ 294.285116][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.351825][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.358944][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.366011][T14347] bridge_slave_0: entered allmulticast mode [ 294.372495][T14347] bridge_slave_0: entered promiscuous mode [ 294.379746][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.396046][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.403327][T14347] bridge_slave_1: entered allmulticast mode [ 294.409973][T14347] bridge_slave_1: entered promiscuous mode [ 294.417013][T10644] veth1_macvtap: left promiscuous mode [ 294.422544][T10644] veth0_vlan: left promiscuous mode [ 294.485390][T14382] fuse: Bad value for 'fd' [ 294.568750][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.575873][T14347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.583200][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.590264][T14347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.631684][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.644745][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.670242][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.677357][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.688155][T10638] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.695279][T10638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.730115][T14347] veth0_vlan: entered promiscuous mode [ 294.743470][T14347] veth1_macvtap: entered promiscuous mode [ 294.839284][T14393] rust_binder: 2: no such ref 2 [ 294.890073][T14395] rust_binder: 2: no such ref 3 [ 295.196614][T14397] netlink: 'syz.0.4759': attribute type 16 has an invalid length. [ 295.204520][T14397] netlink: 10122 bytes leftover after parsing attributes in process `syz.0.4759'. [ 295.381001][T14415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 295.381037][T14415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 295.796488][T14424] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 295.809178][T14426] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=20547 sclass=netlink_xfrm_socket pid=14426 comm=syz.0.4770 [ 296.066816][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 296.238614][T10611] Bluetooth: hci0: Frame reassembly failed (-84) [ 296.245067][T10644] Bluetooth: hci0: Frame reassembly failed (-84) [ 296.251474][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.261236][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 296.270055][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.280231][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 296.294627][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.303779][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.311805][ T10] usb 5-1: Product: syz [ 296.315978][ T10] usb 5-1: Manufacturer: syz [ 296.320603][ T10] usb 5-1: SerialNumber: syz [ 296.532726][ T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 296.535315][T14457] fuse: Bad value for 'fd' [ 296.540656][ T10] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 296.552756][ T10] usb 5-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 296.560046][ T10] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 296.572361][ T10] usb 5-1: USB disconnect, device number 23 [ 296.585838][T10496] udevd[10496]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 296.631417][T14469] netlink: 'syz.0.4786': attribute type 2 has an invalid length. [ 296.722135][T14476] overlayfs: cannot append lower layer [ 297.276797][ T485] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 297.426797][ T485] usb 5-1: Using ep0 maxpacket: 16 [ 297.439078][ T485] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 297.448550][ T485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.458918][ T485] usb 5-1: Product: syz [ 297.463860][ T485] usb 5-1: Manufacturer: syz [ 297.468712][ T485] usb 5-1: SerialNumber: syz [ 297.684614][ T485] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 297.696150][ T485] usb 5-1: USB disconnect, device number 24 [ 297.706761][T10496] udevd[10496]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.234152][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 298.234174][ T36] audit: type=1400 audit(1762310114.865:1048): avc: denied { accept } for pid=14554 comm="syz.4.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.286781][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 298.293966][ T956] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.358234][T14562] input: syz0 as /devices/virtual/input/input27 [ 298.436577][T14566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=14566 comm=syz.0.4828 [ 298.517421][T10644] Bluetooth: hci0: Frame reassembly failed (-84) [ 298.527821][T14574] overlayfs: missing 'lowerdir' [ 298.577317][ T36] audit: type=1400 audit(1762310115.215:1049): avc: denied { mounton } for pid=14578 comm="syz.6.4832" path="/47/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 299.224381][T14613] fuse: Unknown parameter '0xffffffffffffffff' [ 299.327533][T14616] overlayfs: missing 'lowerdir' [ 299.387027][T14628] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 299.747506][ T36] audit: type=1326 audit(1762310116.385:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.0.4859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f991ab8f6c9 code=0x0 [ 300.107092][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4862'. [ 300.526754][ T956] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 300.668451][T14689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13434 sclass=netlink_route_socket pid=14689 comm=syz.0.4871 [ 300.725722][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4875'. [ 300.837489][T14711] overlayfs: failed to clone lowerpath [ 301.251562][T14729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.251720][T14729] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 301.770644][T14735] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4887'. [ 301.898882][T14737] overlayfs: regular lower layers cannot follow data lower layers [ 302.196756][ T485] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 302.264018][T14751] tmpfs: Invalid uid '0x00000000ffffffff' [ 302.346759][ T485] usb 5-1: Using ep0 maxpacket: 16 [ 302.353149][ T485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.364056][ T485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.373807][ T485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.386638][ T485] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.395719][ T485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.404311][ T485] usb 5-1: config 0 descriptor?? [ 302.812516][ T485] microsoft 0003:045E:07DA.0018: item fetching failed at offset 6/34 [ 302.820876][ T485] microsoft 0003:045E:07DA.0018: parse failed [ 302.827029][ T485] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22 [ 303.019618][ T485] usb 5-1: USB disconnect, device number 25 [ 304.305810][T14795] /dev/rnullb0: Can't open blockdev [ 304.331116][T14801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.331143][T14801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.347047][T14804] __vm_enough_memory: pid: 14804, comm: syz.4.4913, bytes: 18014402804453376 not enough memory for the allocation [ 305.220725][T14844] overlayfs: missing 'lowerdir' [ 305.238049][T14847] rust_binder: 77: no such ref 0 [ 305.243096][T14847] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 305.250551][T14847] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 305.257760][T14847] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 305.264873][T14847] rust_binder: 77: no such ref 0 [ 305.559762][T14898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14898 comm=syz.0.4948 [ 305.751846][T14915] incfs: Options parsing error. -22 [ 305.757166][T14915] incfs: mount failed -22 [ 305.769090][T14915] rust_binder: Error while translating object. [ 305.769143][T14915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 305.775389][T14915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 305.808504][T14922] 9pnet_fd: Insufficient options for proto=fd [ 305.877243][T14932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 305.877425][T14932] rust_binder: 14932 RLIMIT_NICE not set [ 305.888346][T14932] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 305.891134][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4961'. [ 305.894022][T14932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 305.911522][T14932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:99 [ 306.050095][T14958] rust_binder: 14955 RLIMIT_NICE not set [ 306.059246][T14958] rust_binder: inc_ref_done called when no active inc_refs [ 306.064894][T14958] rust_binder: inc_ref_done called when no active inc_refs [ 306.164343][T14977] tmpfs: Bad value for 'nr_inodes' [ 306.194755][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4976'. [ 306.360920][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4987'. [ 306.370181][T15012] erspan0: entered promiscuous mode [ 306.426874][T15013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15013 comm=syz.3.4987 [ 306.576748][ T71] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 306.727796][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.738769][ T71] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.747831][ T71] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.756423][ T71] usb 5-1: config 0 descriptor?? [ 307.163278][ T71] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 307.173235][ T71] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input29 [ 307.239982][ T71] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 307.340332][T15027] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 307.407363][T15027] fuse: Unknown parameter 'Q' [ 307.570376][ T492] usb 5-1: USB disconnect, device number 26 [ 307.739113][T15030] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.748367][T15030] gretap0: entered promiscuous mode [ 307.754648][T15032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.763725][T15032] 0{X: renamed from gretap0 [ 307.769912][T15032] 0{X: left promiscuous mode [ 307.774951][T15032] 0{X: entered allmulticast mode [ 307.780861][T15032] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 307.796796][T15032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.805697][T15032] 1{X: renamed from 30{X (while UP) [ 307.812527][T15032] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 307.828512][T15032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.837616][T15032] 0{X: renamed from 31{X (while UP) [ 307.844402][T15032] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 307.860330][T15032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.869251][T15032] 1{X: renamed from 30{X (while UP) [ 307.875933][T15032] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 307.891850][T15032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.900765][T15032] 0{X: renamed from 31{X (while UP) [ 307.907481][T15032] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 307.923368][T15032] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4993'. [ 307.932282][T15032] 1{X: renamed from 30{X (while UP) [ 307.939108][T15032] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 307.955092][T15032] 0{X: renamed from 31{X (while UP) [ 307.961905][T15032] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 307.977983][T15032] 1{X: renamed from 30{X (while UP) [ 307.984712][T15032] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 308.000643][T15032] 0{X: renamed from 31{X (while UP) [ 308.007486][T15032] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 308.023455][T15032] 1{X: renamed from 30{X (while UP) [ 308.030317][T15032] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 308.046278][T15032] 0{X: renamed from 31{X (while UP) [ 308.053103][T15032] 1{X: renamed from 30{X (while UP) [ 308.060005][T15032] 0{X: renamed from 31{X (while UP) [ 308.066762][T15032] 1{X: renamed from 30{X (while UP) [ 308.073472][T15032] 0{X: renamed from 31{X (while UP) [ 308.080352][T15032] 1{X: renamed from 30{X (while UP) [ 308.087593][T15032] 0{X: renamed from 31{X (while UP) [ 308.094485][T15032] 1{X: renamed from 30{X (while UP) [ 308.101403][T15032] 0{X: renamed from 31{X (while UP) [ 308.108336][T15032] 1{X: renamed from 30{X (while UP) [ 308.115654][T15032] 0{X: renamed from 31{X (while UP) [ 308.122614][T15032] 1{X: renamed from 30{X (while UP) [ 308.129938][T15032] 0{X: renamed from 31{X (while UP) [ 308.137257][T15032] 1{X: renamed from 30{X (while UP) [ 308.144196][T15032] 0{X: renamed from 31{X (while UP) [ 308.151024][T15032] 1{X: renamed from 30{X (while UP) [ 308.157870][T15032] 0{X: renamed from 31{X (while UP) [ 308.164598][T15032] 1{X: renamed from 30{X (while UP) [ 308.171657][T15032] 0{X: renamed from 31{X (while UP) [ 308.178785][T15032] 1{X: renamed from 30{X (while UP) [ 308.185556][T15032] 0{X: renamed from 31{X (while UP) [ 308.192340][T15032] 1{X: renamed from 30{X (while UP) [ 308.199423][T15032] 0{X: renamed from 31{X (while UP) [ 308.376739][ T485] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 308.506738][ T485] usb 5-1: device descriptor read/64, error -71 [ 308.746745][ T485] usb 5-1: device descriptor read/64, error -71 [ 308.986762][ T485] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 309.079387][T15056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.086625][T15056] IPv6: NLM_F_CREATE should be set when creating new route [ 309.093861][T15056] IPv6: NLM_F_CREATE should be set when creating new route [ 309.116733][ T485] usb 5-1: device descriptor read/64, error -71 [ 309.129995][T15064] overlayfs: failed to clone upperpath [ 309.356759][ T485] usb 5-1: device descriptor read/64, error -71 [ 309.466834][ T485] usb usb5-port1: attempt power cycle [ 309.648725][T15070] 9pnet_fd: Insufficient options for proto=fd [ 309.810161][ T485] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 309.846355][ T485] usb 5-1: device descriptor read/8, error -71 [ 309.859617][T15089] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 309.869476][ T36] audit: type=1400 audit(1762310127.505:1051): avc: denied { relabelto } for pid=15088 comm="syz.6.5015" name="file0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 309.896487][ T36] audit: type=1400 audit(1762310127.505:1052): avc: denied { associate } for pid=15088 comm="syz.6.5015" name="file0" dev="tmpfs" ino=455 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 309.977847][ T485] usb 5-1: device descriptor read/8, error -71 [ 310.216730][ T485] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 310.237854][ T485] usb 5-1: device descriptor read/8, error -71 [ 310.371697][ T485] usb 5-1: device descriptor read/8, error -71 [ 310.486827][ T485] usb usb5-port1: unable to enumerate USB device [ 311.177511][T15135] __vm_enough_memory: pid: 15135, comm: syz.4.5029, bytes: 18014402804453376 not enough memory for the allocation [ 311.211288][ T36] audit: type=1400 audit(1762310128.845:1053): avc: denied { lock } for pid=15137 comm="syz.4.5030" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.270910][T15140] fuse: Bad value for 'user_id' [ 311.275803][T15140] fuse: Bad value for 'user_id' [ 311.325574][T15152] 9pnet_fd: Insufficient options for proto=fd [ 311.616715][ T36] audit: type=1326 audit(1762310129.245:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.640574][ T36] audit: type=1326 audit(1762310129.245:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.665515][ T36] audit: type=1326 audit(1762310129.245:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.689292][ T36] audit: type=1326 audit(1762310129.245:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.712801][ T492] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 311.720700][ T36] audit: type=1326 audit(1762310129.245:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.744574][ T36] audit: type=1326 audit(1762310129.245:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.768080][ T36] audit: type=1326 audit(1762310129.245:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15125 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x7fc00000 [ 311.848515][T15190] fuse: Unknown parameter 'frĸ-3ه_5A8TL#)OMboLbu' [ 311.868109][ T492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.879954][ T492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.889974][ T492] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 311.904053][ T492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.926621][ T492] usb 5-1: config 0 descriptor?? [ 312.000834][T15222] __nla_validate_parse: 28 callbacks suppressed [ 312.000871][T15222] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5062'. [ 312.086721][T15235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15235 comm=syz.3.5068 [ 312.099836][T15235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15235 comm=syz.3.5068 [ 312.169543][T15257] netlink: 'syz.6.5076': attribute type 5 has an invalid length. [ 312.177372][T15257] netlink: 'syz.6.5076': attribute type 5 has an invalid length. [ 312.185235][T15257] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5076'. [ 312.359619][T15297] netlink: 'syz.3.5091': attribute type 27 has an invalid length. [ 312.368391][T15297] 0{X: left allmulticast mode [ 312.404150][T15299] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 312.544726][T15165] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 312.788406][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5101'. [ 312.835896][T15333] 9pnet_fd: Insufficient options for proto=fd [ 313.054839][ T492] usbhid 5-1:0.0: can't add hid device: -71 [ 313.069232][T15355] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 313.069258][T15355] rust_binder: Read failure Err(EFAULT) in pid:156 [ 313.076808][ T492] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.077892][T15355] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 313.086958][ T492] usb 5-1: USB disconnect, device number 31 [ 313.207759][T15368] overlayfs: failed to resolve './file1': -2 [ 313.219792][T15368] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 314.065229][T15405] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5129'. [ 314.074251][T15405] z00X: renamed from gretap0 (while UP) [ 314.080707][T15405] z00X: entered allmulticast mode [ 314.086873][T15405] binder: Unknown parameter 'maxaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 314.336720][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 314.457621][T15414] /dev/loop0: Can't lookup blockdev [ 314.535922][T15430] overlayfs: failed to clone upperpath [ 314.588263][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.599247][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.610856][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 314.619938][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.629451][ T10] usb 5-1: config 0 descriptor?? [ 315.037175][ T10] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 315.044262][ T10] lenovo 0003:17EF:6047.001A: item fetching failed at offset 3/5 [ 315.052186][ T10] lenovo 0003:17EF:6047.001A: hid_parse failed [ 315.058401][ T10] lenovo 0003:17EF:6047.001A: probe with driver lenovo failed with error -22 [ 315.114253][T15456] 9pnet_fd: Insufficient options for proto=fd [ 315.215061][T15464] netlink: 'syz.6.5148': attribute type 16 has an invalid length. [ 315.222919][T15464] netlink: 'syz.6.5148': attribute type 3 has an invalid length. [ 315.230883][T15464] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.5148'. [ 315.328338][ T45] usb 5-1: USB disconnect, device number 32 [ 315.399524][T15474] veth0_virt_wifi: entered allmulticast mode [ 315.416460][T15474] veth0_virt_wifi: left allmulticast mode [ 315.438312][T15482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=15482 comm=syz.0.5154 [ 315.627677][T15485] cgroup: fork rejected by pids controller in /syz3 [ 315.845789][T15734] syz.4.5162 (15734): /proc/15733/oom_adj is deprecated, please use /proc/15733/oom_score_adj instead. [ 315.867315][T15736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.966610][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5166'. [ 316.005930][T15744] netlink: 'syz.0.5167': attribute type 4 has an invalid length. [ 316.013683][T15744] netlink: 'syz.0.5167': attribute type 6 has an invalid length. [ 316.021420][T15744] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5167'. [ 316.041256][T15746] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5168'. [ 316.106745][ T485] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 316.256742][ T485] usb 5-1: Using ep0 maxpacket: 16 [ 316.263064][ T485] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 316.272316][ T485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.278507][T15750] tmpfs: Unknown parameter 'hu? Q^s' [ 316.281691][ T485] usb 5-1: config 0 descriptor?? [ 316.292409][ T485] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 316.300252][ T485] usb 5-1: Detected FT4232H [ 316.493149][ T485] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 316.501331][ T485] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 316.508927][ T485] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 316.518037][ T485] usb 5-1: USB disconnect, device number 33 [ 316.524712][ T485] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 316.534518][ T485] ftdi_sio 5-1:0.0: device disconnected [ 316.668964][T15791] overlayfs: failed to clone lowerpath [ 317.124192][T15838] rust_binder: Error in use_page_slow: ESRCH [ 317.124214][T15838] rust_binder: use_range failure ESRCH [ 317.130275][T15838] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 317.135886][T15838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 317.144027][T15838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:191 [ 317.446737][ T485] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 317.626714][ T485] usb 5-1: Using ep0 maxpacket: 32 [ 317.632902][ T485] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 317.641220][ T485] usb 5-1: config 0 has no interface number 0 [ 317.647576][ T485] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 317.657591][ T485] usb 5-1: config 0 interface 196 has no altsetting 0 [ 317.665685][ T485] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 317.674775][ T485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.682782][ T485] usb 5-1: Product: syz [ 317.686988][ T485] usb 5-1: Manufacturer: syz [ 317.691583][ T485] usb 5-1: SerialNumber: syz [ 317.696738][ T485] usb 5-1: config 0 descriptor?? [ 317.701940][T15841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.310986][ T485] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 318.319920][ T485] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 318.716387][ T492] usb 5-1: USB disconnect, device number 34 [ 318.738421][ T492] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 318.960874][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 318.960893][ T36] audit: type=1400 audit(1762310136.595:1123): avc: denied { create } for pid=15917 comm="syz.6.5220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 319.528396][T15973] overlayfs: failed to clone upperpath [ 319.866261][T16004] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 320.216909][T16046] overlayfs: failed to clone upperpath [ 320.227189][T16049] overlayfs: failed to clone upperpath [ 320.367538][T16073] overlayfs: failed to clone upperpath [ 320.449131][T16085] erofs: dax options not supported [ 320.651208][T16097] 9pnet_fd: Insufficient options for proto=fd [ 320.668081][T16101] overlayfs: failed to resolve './file1/file0': -2 [ 321.355657][T16169] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 321.366380][T16174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5308'. [ 321.444397][T16193] fuse: Bad value for 'rootmode' [ 321.518136][T16213] 9pnet_fd: Insufficient options for proto=fd [ 321.600727][T16230] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 321.609932][T16230] overlayfs: missing 'lowerdir' [ 322.263675][ T36] audit: type=1400 audit(1762310139.895:1124): avc: denied { create } for pid=16274 comm="syz.6.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 322.290064][ T36] audit: type=1400 audit(1762310139.915:1125): avc: denied { bpf } for pid=16276 comm="syz.6.5346" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.577869][T16351] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=16351 comm=syz.4.5370 [ 323.824279][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.835743][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.843845][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.851808][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.859810][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.869165][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.877239][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.885583][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.893768][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 323.901703][T16383] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 324.793131][T16474] tipc: Enabling of bearer rejected, failed to enable media [ 325.328340][T16486] tipc: Started in network mode [ 325.333319][T16486] tipc: Node identity 4, cluster identity 4711 [ 325.339632][T16486] tipc: Node number set to 4 [ 325.345850][ T36] audit: type=1400 audit(1762310142.975:1126): avc: denied { checkpoint_restore } for pid=16482 comm="syz.3.5407" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.404014][T16489] overlayfs: failed to clone upperpath [ 325.749815][T16518] 9pnet: Could not find request transport: xen [ 325.865351][T16545] 8021q: VLANs not supported on lo [ 325.917469][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5429'. [ 326.048531][T16569] overlayfs: failed to clone upperpath [ 326.065939][T16571] 9pnet_fd: Insufficient options for proto=fd [ 326.130725][T16591] overlayfs: failed to clone upperpath [ 327.095897][T16710] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 327.104799][T16710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 327.113969][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5484'. [ 327.525419][T16731] overlay: ./file0 is not a directory [ 327.638747][T16747] lo: entered promiscuous mode [ 327.643677][T16747] lo: entered allmulticast mode [ 327.649070][T16747] tunl0: entered promiscuous mode [ 327.654119][T16747] tunl0: entered allmulticast mode [ 327.659526][T16747] gre0: entered promiscuous mode [ 327.664480][T16747] gre0: entered allmulticast mode [ 327.670329][T16747] z00X: entered promiscuous mode [ 327.675900][T16747] erspan0: entered promiscuous mode [ 327.681153][T16747] erspan0: entered allmulticast mode [ 327.686943][T16747] ip_vti0: entered promiscuous mode [ 327.692144][T16747] ip_vti0: entered allmulticast mode [ 327.697812][T16747] ip6_vti0: entered promiscuous mode [ 327.703094][T16747] ip6_vti0: entered allmulticast mode [ 327.708738][T16747] sit0: entered promiscuous mode [ 327.713692][T16747] sit0: entered allmulticast mode [ 327.719112][T16747] ip6tnl0: entered promiscuous mode [ 327.724308][T16747] ip6tnl0: entered allmulticast mode [ 327.730108][T16747] ip6gre0: entered promiscuous mode [ 327.735393][T16747] ip6gre0: entered allmulticast mode [ 327.740936][T16747] syz_tun: entered promiscuous mode [ 327.746156][T16747] syz_tun: entered allmulticast mode [ 327.751826][T16747] ip6gretap0: entered promiscuous mode [ 327.757317][T16747] ip6gretap0: entered allmulticast mode [ 327.763220][T16747] bridge0: entered promiscuous mode [ 327.768440][T16747] bridge0: entered allmulticast mode [ 327.774082][T16747] vcan0: entered promiscuous mode [ 327.779430][T16747] vcan0: entered allmulticast mode [ 327.784698][T16747] dummy0: entered promiscuous mode [ 327.789927][T16747] dummy0: entered allmulticast mode [ 327.795378][T16747] veth0: entered promiscuous mode [ 327.800539][T16747] veth0: entered allmulticast mode [ 327.806074][T16747] veth1: entered promiscuous mode [ 327.811430][T16747] veth1: entered allmulticast mode [ 327.817085][T16747] wg0: entered promiscuous mode [ 327.821957][T16747] wg0: entered allmulticast mode [ 327.827284][T16747] wg1: entered promiscuous mode [ 327.832611][T16747] wg1: entered allmulticast mode [ 327.838307][T16747] wg2: entered promiscuous mode [ 327.843178][T16747] wg2: entered allmulticast mode [ 327.848510][T16747] veth0_to_bridge: entered promiscuous mode [ 327.854409][T16747] veth0_to_bridge: entered allmulticast mode [ 327.861551][T16747] veth1_to_bridge: entered promiscuous mode [ 327.867567][T16747] veth1_to_bridge: entered allmulticast mode [ 327.874233][T16747] veth0_to_bond: entered promiscuous mode [ 327.880041][T16747] veth0_to_bond: entered allmulticast mode [ 327.886249][T16747] bond_slave_0: entered promiscuous mode [ 327.892151][T16747] bond_slave_0: entered allmulticast mode [ 327.898375][T16747] veth1_to_bond: entered promiscuous mode [ 327.904163][T16747] veth1_to_bond: entered allmulticast mode [ 327.910415][T16747] bond_slave_1: entered promiscuous mode [ 327.916065][T16747] bond_slave_1: entered allmulticast mode [ 327.922176][T16747] veth0_to_team: entered promiscuous mode [ 327.928037][T16747] veth0_to_team: entered allmulticast mode [ 327.934991][T16747] team_slave_0: entered promiscuous mode [ 327.940893][T16747] team_slave_0: entered allmulticast mode [ 327.947271][T16747] veth1_to_team: entered promiscuous mode [ 327.953080][T16747] veth1_to_team: entered allmulticast mode [ 327.959596][T16747] team_slave_1: entered promiscuous mode [ 327.965307][T16747] team_slave_1: entered allmulticast mode [ 327.971686][T16747] veth0_to_batadv: entered promiscuous mode [ 327.977846][T16747] veth0_to_batadv: entered allmulticast mode [ 327.984479][T16747] batadv_slave_0: entered promiscuous mode [ 327.990392][T16747] batadv_slave_0: entered allmulticast mode [ 327.996767][T16747] veth1_to_batadv: entered promiscuous mode [ 328.002660][T16747] veth1_to_batadv: entered allmulticast mode [ 328.009078][T16747] batadv_slave_1: entered promiscuous mode [ 328.014883][T16747] batadv_slave_1: entered allmulticast mode [ 328.021293][T16747] xfrm0: entered promiscuous mode [ 328.026541][T16747] xfrm0: entered allmulticast mode [ 328.032236][T16747] veth0_to_hsr: entered promiscuous mode [ 328.038040][T16747] veth0_to_hsr: entered allmulticast mode [ 328.044132][T16747] hsr_slave_0: entered promiscuous mode [ 328.049977][T16747] hsr_slave_0: entered allmulticast mode [ 328.056155][T16747] veth1_to_hsr: entered promiscuous mode [ 328.066997][T16747] veth1_to_hsr: entered allmulticast mode [ 328.079818][T16747] hsr_slave_1: entered promiscuous mode [ 328.085429][T16747] hsr_slave_1: entered allmulticast mode [ 328.091769][T16747] veth1_virt_wifi: entered promiscuous mode [ 328.098335][T16747] veth1_virt_wifi: entered allmulticast mode [ 328.104932][T16747] veth0_virt_wifi: entered promiscuous mode [ 328.111224][T16747] veth0_virt_wifi: entered allmulticast mode [ 328.118378][T16747] veth1_vlan: entered promiscuous mode [ 328.123996][T16747] veth1_vlan: entered allmulticast mode [ 328.130608][T16747] veth0_vlan: entered allmulticast mode [ 328.136824][T16747] vlan0: entered promiscuous mode [ 328.141955][T16747] vlan0: entered allmulticast mode [ 328.147582][T16747] vlan1: entered promiscuous mode [ 328.152691][T16747] vlan1: entered allmulticast mode [ 328.158368][T16747] veth1_macvtap: entered allmulticast mode [ 328.164561][T16747] veth0_macvtap: entered promiscuous mode [ 328.170420][T16747] veth0_macvtap: entered allmulticast mode [ 328.177371][T16747] macsec0: entered promiscuous mode [ 328.182703][T16747] macsec0: entered allmulticast mode [ 328.188800][T16747] M: entered promiscuous mode [ 328.193511][T16747] M: entered allmulticast mode [ 328.199265][T10644] ip6_tunnel: M xmit: Local address not yet configured! [ 328.271475][T16784] overlayfs: cannot append lower layer [ 328.292793][T16793] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5513'. [ 328.412024][T16795] overlay: ./file0 is not a directory [ 328.596157][T16837] : renamed from bond_slave_0 [ 329.211614][ T36] audit: type=1400 audit(1762310146.835:1127): avc: denied { accept } for pid=16978 comm="syz.0.5584" path="socket:[60437]" dev="sockfs" ino=60437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.537828][T17001] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5591'. [ 330.173923][T17035] incfs: Error accessing: ./file0. [ 330.179159][T17035] incfs: mount failed -20 [ 330.244668][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5607'. [ 330.580871][T17065] fuse: Unknown parameter '184467440737095516150177777777777777777777701777777777777777777777' [ 330.644426][T17067] 9pnet_fd: Insufficient options for proto=fd [ 331.792776][T17163] validate_nla: 24 callbacks suppressed [ 331.792798][T17163] netlink: 'syz.4.5647': attribute type 4 has an invalid length. [ 331.809084][T17164] netlink: 'syz.4.5647': attribute type 4 has an invalid length. [ 331.936754][T17166] netlink: 'syz.3.5643': attribute type 27 has an invalid length. [ 332.010327][T17195] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5643'. [ 332.127735][ T36] audit: type=1326 audit(1762310149.755:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.6.5632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7fc00000 [ 332.160820][T17211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5662'. [ 332.366851][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 332.598665][T17228] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5671'. [ 332.608084][T17228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5671'. [ 332.671585][T17237] overlayfs: failed to clone upperpath [ 332.716727][T17246] fuse: Bad value for 'user_id' [ 332.722689][T17246] fuse: Bad value for 'user_id' [ 332.878079][T17262] overlayfs: failed to clone upperpath [ 332.903608][T17269] overlayfs: missing 'lowerdir' [ 333.068413][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5686'. [ 333.078224][T17281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5686'. [ 333.210668][T17311] overlayfs: failed to clone upperpath [ 333.333758][T17330] netlink: 'syz.0.5705': attribute type 1 has an invalid length. [ 333.405695][T17345] 9pnet_fd: Insufficient options for proto=fd [ 333.417255][ T36] audit: type=1400 audit(1762310151.035:1129): avc: denied { watch watch_reads } for pid=17340 comm="syz.0.5710" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 333.450708][T17355] tmpfs: Invalid uid '0x00000000ffffffff' [ 333.492468][T17360] overlayfs: failed to clone upperpath [ 333.524747][T17364] overlayfs: failed to clone upperpath [ 333.531162][T17364] overlay: ./file1 is not a directory [ 333.562138][T17370] fuse: Unknown parameter 'rootmode?00000000000000000040000' [ 333.779975][T17372] 9pnet_fd: Insufficient options for proto=fd [ 333.817291][ T36] audit: type=1326 audit(1762310151.455:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17375 comm="syz.4.5724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d5c18f6c9 code=0x0 [ 333.902303][T17386] overlayfs: failed to clone lowerpath [ 334.050832][T17388] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 334.053632][T17390] fuseblk: Bad value for 'fd' [ 334.061365][ T36] audit: type=1400 audit(1762310151.695:1131): avc: denied { relabelto } for pid=17387 comm="syz.0.5728" name="ptp0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 334.067296][T17390] netlink: 'syz.6.5729': attribute type 4 has an invalid length. [ 334.106295][ T36] audit: type=1400 audit(1762310151.695:1132): avc: denied { associate } for pid=17387 comm="syz.0.5728" name="ptp0" dev="tmpfs" ino=2472 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 334.134577][T17393] netlink: 'syz.6.5729': attribute type 4 has an invalid length. [ 334.153517][T17396] net_ratelimit: 24 callbacks suppressed [ 334.153535][T17396] ip6gretap0: mtu less than device minimum [ 334.918888][T17449] 9pnet_fd: Insufficient options for proto=fd [ 334.966924][T17458] fuse: Bad value for 'fd' [ 335.016831][T17471] fuseblk: Bad value for 'source' [ 335.022557][T17471] fuse: Unknown parameter 'group_i [ 335.022557][T17471] K' [ 335.031006][T17471] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5758'. [ 335.040624][T17471] z00X: left allmulticast mode [ 336.200650][T17527] tipc: Started in network mode [ 336.205598][T17527] tipc: Node identity eafc0a513d5d, cluster identity 4711 [ 336.212859][T17527] tipc: Enabled bearer , priority 10 [ 336.219538][T17527] fuse: Unknown parameter 'H' [ 336.278733][T17528] fuseblk: Bad value for 'fd' [ 336.735879][T17553] netlink: 'syz.4.5785': attribute type 16 has an invalid length. [ 336.744570][T17553] netlink: 'syz.4.5785': attribute type 16 has an invalid length. [ 336.783777][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5788'. [ 336.793463][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.802026][T17561] bridge_slave_0 (unregistering): left allmulticast mode [ 336.809206][T17561] bridge_slave_0 (unregistering): left promiscuous mode [ 336.816160][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.053987][T17581] incfs: Options parsing error. -22 [ 337.059321][T17581] incfs: mount failed -22 [ 337.238092][T17603] /dev/loop0: Can't lookup blockdev [ 337.336695][ T45] tipc: Node number set to 3617655377 [ 337.819203][ T36] audit: type=1326 audit(1762310155.455:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.6.5826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x0 [ 337.827004][T17672] traps: syz.3.5825[17672] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 [ 338.670302][T17717] fuse: Unknown parameter 'f' [ 338.926247][ T36] audit: type=1400 audit(1762310156.555:1134): avc: denied { read } for pid=17775 comm="syz.0.5862" name="ptp0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 338.971393][ T36] audit: type=1400 audit(1762310156.555:1135): avc: denied { open } for pid=17775 comm="syz.0.5862" path="/dev/ptp0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 339.570243][T17807] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 339.633085][T17809] @0: renamed from bond_slave_1 (while UP) [ 340.418448][T17841] overlayfs: failed to clone lowerpath [ 340.424558][T17841] overlayfs: failed to clone lowerpath [ 340.444910][T17848] netlink: 'syz.4.5886': attribute type 6 has an invalid length. [ 340.491925][ T36] audit: type=1326 audit(1762310158.125:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.6.5892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4d2d8f6c9 code=0x0 [ 340.545211][ T36] audit: type=1326 audit(1762310158.175:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17860 comm="syz.6.5892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x0 [ 340.573376][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5896'. [ 340.582398][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5896'. [ 340.592445][T17877] fuse: Bad value for 'group_id' [ 340.597708][T17877] fuse: Bad value for 'group_id' [ 340.646406][T17891] overlayfs: missing 'lowerdir' [ 341.566794][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 342.347721][T17950] overlayfs: failed to clone upperpath [ 342.352748][T17951] overlayfs: failed to clone upperpath [ 342.519631][T17964] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5925'. [ 343.834967][T18008] incfs: Backing dir is not set, filesystem can't be mounted. [ 343.842542][T18008] incfs: mount failed -2 [ 344.138904][ T36] audit: type=1400 audit(1762310161.775:1138): avc: denied { relabelto } for pid=18024 comm="syz.6.5948" name="cgroup" dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 344.147199][T18025] bridge0: port 1(veth0_to_team) entered blocking state [ 344.173098][T18025] bridge0: port 1(veth0_to_team) entered disabled state [ 344.180147][T18025] veth0_to_team: entered allmulticast mode [ 344.186404][T18025] veth0_to_team: entered promiscuous mode [ 344.202408][ T36] audit: type=1400 audit(1762310161.835:1139): avc: denied { unlink } for pid=13559 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 344.543250][ T36] audit: type=1400 audit(1762310162.175:1140): avc: denied { append } for pid=18069 comm="syz.4.5962" name="file0" dev="tmpfs" ino=1526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.271099][T18113] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5977'. [ 345.382482][T18118] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5979'. [ 346.124612][ T36] audit: type=1400 audit(1762310163.755:1141): avc: denied { execheap } for pid=18166 comm="syz.0.5995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 346.414442][T18218] fuse: Bad value for 'fd' [ 346.824024][T18260] +$<: renamed from bridge0 (while UP) [ 346.831579][T18260] netlink: 182 bytes leftover after parsing attributes in process `syz.3.6029'. [ 346.907523][T18273] tmpfs: Bad value for 'huge' [ 346.931496][ T36] audit: type=1400 audit(1762310164.565:1142): avc: denied { getattr } for pid=18274 comm="syz.4.6034" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=63087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 346.947675][T18277] overlayfs: missing 'lowerdir' [ 347.233680][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6053'. [ 347.295062][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6055'. [ 347.304023][T18338] erspan0: default FDB implementation only supports local addresses [ 347.485139][T18353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=73 sclass=netlink_audit_socket pid=18353 comm=syz.0.6065 [ 347.803528][T18360] fuse: Unknown parameter '~DB:**1^N\mcsT' [ 348.892398][T18396] 9pnet_fd: Insufficient options for proto=fd [ 349.020646][T18419] netlink: 'syz.4.6091': attribute type 4 has an invalid length. [ 349.030887][T18421] netlink: 'syz.0.6092': attribute type 27 has an invalid length. [ 349.058259][T18429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6094'. [ 349.101265][ T36] audit: type=1400 audit(1762310166.735:1143): avc: denied { create } for pid=18434 comm="syz.0.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 349.157144][T18440] 9pnet_fd: Insufficient options for proto=fd [ 349.179573][T18456] tipc: Started in network mode [ 349.184564][T18456] tipc: Node identity ac141426, cluster identity 4711 [ 349.191738][T18456] tipc: Enabling of bearer rejected, failed to enable media [ 349.812352][ T36] audit: type=1400 audit(1762310167.445:1144): avc: denied { create } for pid=18486 comm="syz.4.6112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 349.843475][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6113'. [ 350.174139][T18540] futex_wake_op: syz.3.6130 tries to shift op by 32; fix this program [ 350.289056][T18557] netlink: 'syz.3.6135': attribute type 4 has an invalid length. [ 350.296908][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6135'. [ 350.554920][T18569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18569 comm=syz.4.6139 [ 350.819482][T18583] overlayfs: failed to clone upperpath [ 351.060349][T18612] 9pnet_fd: Insufficient options for proto=fd [ 351.287502][T18631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6160'. [ 351.326964][T18643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18643 comm=syz.6.6163 [ 351.356596][ T36] audit: type=1400 audit(1762310168.985:1145): avc: denied { setattr } for pid=18645 comm="syz.3.6164" name="TIPC" dev="sockfs" ino=64610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 351.805769][T18712] 9pnet_fd: Insufficient options for proto=fd [ 351.832833][T18716] tmpfs: Unsupported parameter 'mpol' [ 351.846433][ T36] audit: type=1400 audit(1762310169.475:1146): avc: denied { accept } for pid=18714 comm="syz.3.6186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 351.886977][T18721] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6189'. [ 352.048312][T18751] netlink: 'syz.3.6196': attribute type 3 has an invalid length. [ 352.057125][T18751] netlink: 944 bytes leftover after parsing attributes in process `syz.3.6196'. [ 353.280334][T18810] cgroup: Name too long [ 353.352407][ T36] audit: type=1326 audit(1762310170.985:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18821 comm="syz.4.6229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c18f6c9 code=0x0 [ 353.507566][T18850] sit0: entered promiscuous mode [ 353.514131][T18850] netlink: 'syz.6.6236': attribute type 1 has an invalid length. [ 353.522079][T18850] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6236'. [ 353.550011][T18857] fuseblk: Unknown parameter '҈30x0000000000000004' [ 354.170736][ T36] audit: type=1400 audit(1762310171.805:1148): avc: denied { write } for pid=18886 comm="syz.3.6252" name="file2" dev="tmpfs" ino=2283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 354.215344][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.224357][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.233331][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.242985][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.252394][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.261546][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.268984][T18900] 9pnet_fd: Insufficient options for proto=fd [ 354.270806][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 354.382372][T18925] fuse: Unknown parameter 'rootmpde' [ 354.418097][ T36] audit: type=1400 audit(1762310172.055:1149): avc: denied { write } for pid=18906 comm="syz.6.6260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 354.885814][T18956] overlayfs: missing 'lowerdir' [ 355.024999][T18977] 9pnet_fd: Insufficient options for proto=fd [ 355.171109][T19005] overlayfs: failed to clone lowerpath [ 355.171128][T19006] overlayfs: failed to clone lowerpath [ 355.508557][T19019] fuse: Bad value for 'group_id' [ 355.513564][T19019] fuse: Bad value for 'group_id' [ 355.520858][T19019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=19019 comm=syz.4.6298 [ 355.592864][T19023] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 356.000286][T19068] netlink: 'syz.0.6316': attribute type 2 has an invalid length. [ 356.100132][T19097] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 356.801959][T19114] wg1: left promiscuous mode [ 357.702508][T19130] netlink: 'syz.0.6339': attribute type 11 has an invalid length. [ 357.962455][T19156] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.969649][T19156] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.976883][T19156] bridge_slave_0: entered allmulticast mode [ 357.983176][T19156] bridge_slave_0: entered promiscuous mode [ 357.989776][T19156] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.996854][T19156] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.003936][T19156] bridge_slave_1: entered allmulticast mode [ 358.010284][T19156] bridge_slave_1: entered promiscuous mode [ 358.051379][T10647] bridge_slave_1: left allmulticast mode [ 358.057083][T10647] bridge_slave_1: left promiscuous mode [ 358.062674][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.070246][T10647] bridge_slave_0: left allmulticast mode [ 358.075884][T10647] bridge_slave_0: left promiscuous mode [ 358.081643][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.150396][T19156] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.157477][T19156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.164757][T19156] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.171831][T19156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.192806][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.200748][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.208930][T10647] tipc: Left network mode [ 358.214264][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.216726][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 358.221345][T10644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.236393][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.243474][T10644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.252167][T10647] veth1_macvtap: left promiscuous mode [ 358.257830][T10647] veth0_vlan: left promiscuous mode [ 358.291788][T19180] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 358.323451][T19185] netlink: 'syz.3.6354': attribute type 6 has an invalid length. [ 358.346262][T19156] veth0_vlan: entered promiscuous mode [ 358.362778][T19156] veth1_macvtap: entered promiscuous mode [ 358.391147][ T36] audit: type=1400 audit(1762310176.025:1150): avc: denied { mounton } for pid=19156 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 358.423810][T19193] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 358.423817][T19194] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 358.435033][T19193] tipc: Started in network mode [ 358.448322][T19193] tipc: Node identity eecd22c601f3, cluster identity 4711 [ 358.455520][T19193] tipc: Enabled bearer , priority 0 [ 358.465907][T19191] tipc: Disabling bearer [ 358.620440][T19197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.630970][T19197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.639339][T19200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.803534][T19210] can: request_module (can-proto-0) failed. [ 358.893031][T19223] /dev/rnullb0: Can't open blockdev [ 358.969335][T19244] 9pnet_fd: Insufficient options for proto=fd [ 359.004504][T19254] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 249) [ 359.004530][T19254] rust_binder: Error while translating object. [ 359.022352][T19254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.026877][T19257] 9pnet_fd: Insufficient options for proto=fd [ 359.030295][T19254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 359.132551][ T36] audit: type=1400 audit(1762310176.765:1151): avc: denied { read } for pid=19278 comm="syz.0.6386" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.146938][T19279] binder: Bad value for 'max' [ 359.170159][T19280] binder: Bad value for 'max' [ 359.175002][ T36] audit: type=1400 audit(1762310176.765:1152): avc: denied { open } for pid=19278 comm="syz.0.6386" path="/8/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.201589][ T36] audit: type=1400 audit(1762310176.775:1153): avc: denied { ioctl } for pid=19278 comm="syz.0.6386" path="/8/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.399642][T19297] binfmt_misc: register: failed to install interpreter file ./file0 [ 359.472238][ T36] audit: type=1400 audit(1762310177.105:1154): avc: denied { getattr } for pid=19296 comm="syz.0.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.726697][ T492] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 359.850969][T19328] __nla_validate_parse: 64 callbacks suppressed [ 359.850993][T19328] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6404'. [ 359.875935][T19330] netlink: 'syz.3.6405': attribute type 2 has an invalid length. [ 359.884209][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 359.888862][ T492] usb 1-1: Using ep0 maxpacket: 8 [ 359.894508][T19330] netlink: 'syz.3.6405': attribute type 2 has an invalid length. [ 359.899605][ T492] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 359.906678][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 359.914425][ T492] usb 1-1: config 0 has no interface number 0 [ 359.930742][ T492] usb 1-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice=1b.16 [ 359.940383][ T492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.949126][ T492] usb 1-1: Product: syz [ 359.953453][ T492] usb 1-1: Manufacturer: syz [ 359.958213][ T492] usb 1-1: SerialNumber: syz [ 359.963455][ T492] usb 1-1: config 0 descriptor?? [ 359.969754][ T492] hub 1-1:0.72: bad descriptor, ignoring hub [ 359.975989][ T492] hub 1-1:0.72: probe with driver hub failed with error -5 [ 359.983860][ T492] ftdi_sio 1-1:0.72: FTDI USB Serial Device converter detected [ 359.992093][ T492] ftdi_sio ttyUSB0: unknown device type: 0x1b16 [ 360.012016][T19339] overlayfs: failed to clone upperpath [ 360.084415][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6413'. [ 360.276869][ T492] usb 1-1: USB disconnect, device number 28 [ 360.283147][ T492] ftdi_sio 1-1:0.72: device disconnected [ 360.753333][T19391] binder: Bad value for 'max' [ 360.770000][ T36] audit: type=1400 audit(1762310178.405:1155): avc: denied { set_context_mgr } for pid=19393 comm="syz.0.6426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 360.770785][T19394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 360.790028][ T36] audit: type=1400 audit(1762310178.405:1156): avc: denied { call } for pid=19393 comm="syz.0.6426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 360.792975][T19394] rust_binder: 19394 RLIMIT_NICE not set [ 361.056620][ T460] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 361.132415][T19396] netlink: 'syz.3.6427': attribute type 58 has an invalid length. [ 361.185015][ T36] audit: type=1326 audit(1762310178.815:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.3.6430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x0 [ 361.208357][ T460] usb 1-1: device descriptor read/64, error -71 [ 361.297581][T19415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=19415 comm=syz.4.6434 [ 361.446627][ T460] usb 1-1: device descriptor read/64, error -71 [ 361.686602][ T460] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 361.816633][ T460] usb 1-1: device descriptor read/64, error -71 [ 362.056599][ T460] usb 1-1: device descriptor read/64, error -71 [ 362.166771][ T460] usb usb1-port1: attempt power cycle [ 362.207461][T19449] netlink: 'syz.4.6447': attribute type 4 has an invalid length. [ 362.215344][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6447'. [ 362.225333][T19449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=19449 comm=syz.4.6447 [ 362.337179][T19459] cgroup: Name too long [ 362.506653][ T460] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 362.527678][ T460] usb 1-1: device descriptor read/8, error -71 [ 362.657760][ T460] usb 1-1: device descriptor read/8, error -71 [ 362.896641][ T460] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 362.917663][ T460] usb 1-1: device descriptor read/8, error -71 [ 363.047624][ T460] usb 1-1: device descriptor read/8, error -71 [ 363.156663][ T460] usb usb1-port1: unable to enumerate USB device [ 363.865437][T19469] rust_binder: Write failure EFAULT in pid:45 [ 364.136615][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 364.296620][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 364.304282][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 364.313415][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.321614][ T9] usb 1-1: Product: syz [ 364.325820][ T9] usb 1-1: Manufacturer: syz [ 364.330471][ T9] usb 1-1: SerialNumber: syz [ 364.335697][ T9] usb 1-1: config 0 descriptor?? [ 364.541880][T19475] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 364.552197][T19484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.560784][T19484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.588439][ T36] audit: type=1400 audit(364.268:1158): avc: denied { transfer } for pid=19486 comm="syz.0.6461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 364.612371][ T9] usb 1-1: USB disconnect, device number 33 [ 364.634865][T19495] binder: Bad value for 'stats' [ 364.637166][T19198] udevd[19198]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 364.671062][T19499] netlink: 488 bytes leftover after parsing attributes in process `syz.0.6465'. [ 364.744273][T19511] sit0: entered promiscuous mode [ 364.750834][T19511] netlink: 'syz.0.6468': attribute type 1 has an invalid length. [ 364.758785][T19511] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6468'. [ 364.839577][T19524] rust_binder: Write failure EINVAL in pid:77 [ 364.840049][T19525] rust_binder: Write failure EINVAL in pid:77 [ 365.096615][ T45] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 365.236687][ T45] usb 1-1: device descriptor read/64, error -71 [ 365.400670][T19547] 9pnet_fd: Insufficient options for proto=fd [ 365.486607][ T45] usb 1-1: device descriptor read/64, error -71 [ 365.726770][ T45] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 365.856599][ T45] usb 1-1: device descriptor read/64, error -71 [ 365.914714][T19562] No source specified [ 365.949551][T19571] overlayfs: failed to clone lowerpath [ 366.096614][ T45] usb 1-1: device descriptor read/64, error -71 [ 366.183078][T19575] netlink: 680 bytes leftover after parsing attributes in process `syz.3.6491'. [ 366.206773][ T45] usb usb1-port1: attempt power cycle [ 366.546647][ T45] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 366.567638][ T45] usb 1-1: device descriptor read/8, error -71 [ 366.697655][ T45] usb 1-1: device descriptor read/8, error -71 [ 366.936611][ T45] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 366.957568][ T45] usb 1-1: device descriptor read/8, error -71 [ 367.005025][T19604] 9p: Unknown uid 00000000004294967295 [ 367.087807][ T45] usb 1-1: device descriptor read/8, error -71 [ 367.196688][ T45] usb usb1-port1: unable to enumerate USB device [ 367.415970][T19642] netlink: 'syz.4.6514': attribute type 6 has an invalid length. [ 367.728912][ T36] audit: type=1400 audit(367.408:1159): avc: denied { listen } for pid=19657 comm="syz.6.6520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.766083][T19663] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6522'. [ 367.947444][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.947480][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.954039][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.960649][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.967398][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.973853][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.981434][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.987026][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 367.993618][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.000151][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.006649][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.013087][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.020391][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.026887][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.033407][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.043510][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.053588][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.063116][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.073020][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.081036][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.085902][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.092413][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.111536][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.111565][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.133816][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.133843][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.140371][T19697] rust_binder: Error in use_page_slow: ESRCH [ 368.152927][T19697] rust_binder: use_range failure ESRCH [ 368.152952][T19697] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 368.158598][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.173416][T19697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 368.173449][T19697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:90 [ 368.183295][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.201509][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.201533][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.208013][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.214506][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.220980][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.227582][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.234034][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.240580][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.247050][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.253554][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.260025][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.266515][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.272986][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.279490][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.285926][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.292582][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.299101][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.305624][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.312090][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.318582][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.325030][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.331552][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.338004][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.344479][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.350972][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.357485][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.363928][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.370494][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.376953][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.383444][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.389910][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.396398][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.402933][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.409450][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.415886][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.422395][T19689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.557082][T19707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6537'. [ 368.664083][T19727] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 368.664105][T19727] rust_binder: Read failure Err(EFAULT) in pid:108 [ 368.715235][T19736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 368.721976][T19736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:112 [ 368.749221][T19740] __vm_enough_memory: pid: 19740, comm: syz.0.6551, bytes: 18014402804453376 not enough memory for the allocation [ 368.788579][T19748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 368.788605][T19749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 368.833931][T19748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 368.843194][T19748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 368.909848][T19768] netlink: 'syz.3.6562': attribute type 12 has an invalid length. [ 369.006940][T19783] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 369.021066][T19783] overlayfs: missing 'lowerdir' [ 369.101606][T19808] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6577'. [ 369.167705][T19824] netlink: 'syz.0.6581': attribute type 16 has an invalid length. [ 369.175908][T19824] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6581'. [ 369.264639][T19842] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.272026][T19842] bridge0: entered allmulticast mode [ 369.716651][T19886] overlay: ./file0 is not a directory [ 369.958253][T19897] overlayfs: failed to clone lowerpath [ 369.977021][T19896] overlayfs: failed to clone lowerpath [ 370.436325][T19942] 9pnet_fd: Insufficient options for proto=fd [ 370.706145][T19960] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=19960 comm=syz.6.6633 [ 370.719497][T19960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6633'. [ 370.774817][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6636'. [ 370.775618][T19960] netlink: 'syz.6.6633': attribute type 11 has an invalid length. [ 370.865826][T19980] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6641'. [ 370.890694][T19974] netlink: 596 bytes leftover after parsing attributes in process `syz.6.6639'. [ 370.917315][T19986] fuse: Bad value for 'group_id' [ 370.922307][T19986] fuse: Bad value for 'group_id' [ 371.006420][T20007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6649'. [ 371.161875][T20057] netlink: 'syz.0.6654': attribute type 4 has an invalid length. [ 371.664900][T20066] overlayfs: failed to clone upperpath [ 371.725703][T20087] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6662'. [ 371.734999][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6662'. [ 371.744022][T20087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6662'. [ 371.763491][T20095] 8021q: VLANs not supported on ip_vti0 [ 371.776322][T20098] netlink: 'syz.6.6666': attribute type 11 has an invalid length. [ 371.785295][ T36] audit: type=1326 audit(371.458:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 371.809370][ T36] audit: type=1326 audit(371.458:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 371.836628][ T36] audit: type=1326 audit(371.488:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 371.859579][ T36] audit: type=1326 audit(371.488:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 371.882757][ T36] audit: type=1326 audit(371.488:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 372.005567][ T36] audit: type=1326 audit(371.488:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 372.028908][ T36] audit: type=1326 audit(371.488:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 372.052283][ T36] audit: type=1326 audit(371.488:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 372.076485][ T36] audit: type=1326 audit(371.508:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 372.079717][T20125] overlayfs: failed to clone lowerpath [ 372.099613][ T36] audit: type=1326 audit(371.508:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20097 comm="syz.6.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 372.813715][T20180] veth1: entered allmulticast mode [ 372.821009][T20170] veth1: left allmulticast mode [ 372.931878][T20196] tipc: Enabling of bearer rejected, failed to enable media [ 373.597628][T20211] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6704'. [ 374.019581][T20237] tmpfs: Bad value for 'nr_blocks' [ 375.151703][T20255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6718'. [ 375.161522][T20255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6718'. [ 375.331025][T20278] netlink: 'syz.3.6726': attribute type 27 has an invalid length. [ 375.382166][T20292] netlink: 'syz.6.6730': attribute type 4 has an invalid length. [ 376.203053][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6744'. [ 376.700626][T20360] fuse: Bad value for 'fd' [ 376.837267][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 376.837285][ T36] audit: type=1326 audit(376.518:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20366 comm="syz.3.6755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f685db8f6c9 code=0x0 [ 377.235744][T20388] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 378.003553][T20443] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.010825][T20443] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.018403][T20443] bridge0: left promiscuous mode [ 378.663335][ T36] audit: type=1326 audit(378.338:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20459 comm="syz.0.6789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2c18f6c9 code=0x7fc00000 [ 378.787668][ T36] audit: type=1400 audit(378.468:1218): avc: denied { name_bind } for pid=20466 comm="syz.0.6791" src=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 378.840892][T20471] overlayfs: failed to clone upperpath [ 378.907510][T20479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45402 sclass=netlink_route_socket pid=20479 comm=syz.4.6796 [ 378.956437][T20489] netlink: 'syz.6.6799': attribute type 4 has an invalid length. [ 379.279549][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6807'. [ 379.368294][ T36] audit: type=1400 audit(379.048:1219): avc: denied { listen } for pid=20518 comm="syz.0.6810" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 379.466679][T20530] overlayfs: failed to clone upperpath [ 379.538759][T20553] overlayfs: failed to clone upperpath [ 380.193111][T20598] netlink: 'syz.3.6839': attribute type 58 has an invalid length. [ 380.201114][T20598] netlink: 'syz.3.6839': attribute type 58 has an invalid length. [ 380.235492][ T36] audit: type=1326 audit(379.908:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.0.6843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b2c18f6c9 code=0x0 [ 380.608478][T20641] netlink: 8568 bytes leftover after parsing attributes in process `syz.6.6855'. [ 380.702608][ T36] audit: type=1400 audit(380.384:1221): avc: denied { watch } for pid=20655 comm="syz.6.6861" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 380.708807][T20656] sock: sock_timestamping_bind_phc: sock not bind to device [ 381.102386][T20675] @: renamed from vlan0 (while UP) [ 381.150678][T20683] 9pnet_virtio: no channels available for device 127.0.0.1 [ 381.423213][ T36] audit: type=1326 audit(381.104:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20720 comm="syz.0.6885" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b2c18f6c9 code=0x0 [ 381.439244][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6884'. [ 381.445724][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6884'. [ 382.057027][T20739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=20739 comm=syz.4.6890 [ 382.074557][T20739] overlay: ./file0 is not a directory [ 382.087046][T20742] incfs: Options parsing error. -22 [ 382.092364][T20742] incfs: mount failed -22 [ 382.093707][T20744] netlink: 'syz.4.6892': attribute type 58 has an invalid length. [ 382.104894][T20744] z00X: left promiscuous mode [ 382.137839][T20754] 9pnet_fd: Insufficient options for proto=fd [ 382.276091][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6908'. [ 382.806523][ T36] audit: type=1326 audit(382.484:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.829538][ T36] audit: type=1326 audit(382.484:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.852729][ T36] audit: type=1326 audit(382.484:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.875808][ T36] audit: type=1326 audit(382.484:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.898808][ T36] audit: type=1326 audit(382.484:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.921780][ T36] audit: type=1326 audit(382.484:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.944862][ T36] audit: type=1326 audit(382.484:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.974494][ T36] audit: type=1326 audit(382.484:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 382.997584][ T36] audit: type=1326 audit(382.484:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 383.020566][ T36] audit: type=1326 audit(382.484:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20806 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff4d2d8f6c9 code=0x7ffc0000 [ 383.066272][T20828] netlink: 'syz.6.6927': attribute type 63 has an invalid length. [ 383.076506][T20828] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6927'. [ 383.462777][T10635] tipc: Subscription rejected, illegal request [ 383.584611][T20873] fuse: Unknown parameter '' [ 384.196961][T20902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6958'. [ 384.501940][T20910] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 385.068366][T20926] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.6966'. [ 385.827583][T20970] netlink: 'syz.4.6979': attribute type 27 has an invalid length. [ 385.835495][T20970] lo: left promiscuous mode [ 385.840036][T20970] lo: left allmulticast mode [ 385.845058][T20970] tunl0: left promiscuous mode [ 385.849886][T20970] tunl0: left allmulticast mode [ 385.855455][T20970] gre0: left promiscuous mode [ 385.860210][T20970] gre0: left allmulticast mode [ 385.866593][T20970] erspan0: left promiscuous mode [ 385.871541][T20970] erspan0: left allmulticast mode [ 385.877299][T20970] ip_vti0: left promiscuous mode [ 385.882249][T20970] ip_vti0: left allmulticast mode [ 385.887903][T20970] ip6_vti0: left promiscuous mode [ 385.892925][T20970] ip6_vti0: left allmulticast mode [ 385.898634][T20970] sit0: left promiscuous mode [ 385.903306][T20970] sit0: left allmulticast mode [ 385.909100][T20970] ip6tnl0: left promiscuous mode [ 385.914033][T20970] ip6tnl0: left allmulticast mode [ 385.919664][T20970] ip6gre0: left promiscuous mode [ 385.924603][T20970] ip6gre0: left allmulticast mode [ 385.930982][T20970] syz_tun: left promiscuous mode [ 385.935918][T20970] syz_tun: left allmulticast mode [ 385.941774][T20970] ip6gretap0: left promiscuous mode [ 385.947020][T20970] ip6gretap0: left allmulticast mode [ 385.953009][T20970] bridge0: left allmulticast mode [ 385.958123][T20970] vcan0: left promiscuous mode [ 385.962882][T20970] vcan0: left allmulticast mode [ 385.968099][T20970] dummy0: left promiscuous mode [ 385.972958][T20970] dummy0: left allmulticast mode [ 385.978525][T20970] veth0: left promiscuous mode [ 385.983316][T20970] veth0: left allmulticast mode [ 385.989002][T20970] veth1: left promiscuous mode [ 385.993857][T20970] veth1: left allmulticast mode [ 385.999480][T20970] wg0: left promiscuous mode [ 386.004159][T20970] wg0: left allmulticast mode [ 386.009368][T20970] wg1: left allmulticast mode [ 386.014288][T20970] wg2: left promiscuous mode [ 386.019016][T20970] wg2: left allmulticast mode [ 386.024460][T20970] veth0_to_bridge: left promiscuous mode [ 386.030208][T20970] veth0_to_bridge: left allmulticast mode [ 386.037745][T20970] veth1_to_bridge: left promiscuous mode [ 386.043436][T20970] veth1_to_bridge: left allmulticast mode [ 386.051287][T20970] veth0_to_bond: left promiscuous mode [ 386.056964][T20970] veth0_to_bond: left allmulticast mode [ 386.063388][T20970] bond_slave_0: left promiscuous mode [ 386.068820][T20970] bond_slave_0: left allmulticast mode [ 386.074951][T20970] veth1_to_bond: left promiscuous mode [ 386.080593][T20970] veth1_to_bond: left allmulticast mode [ 386.086971][T20970] @0: left promiscuous mode [ 386.091662][T20970] @0: left allmulticast mode [ 386.096971][T20970] veth0_to_team: left promiscuous mode [ 386.102429][T20970] veth0_to_team: left allmulticast mode [ 386.108724][T20970] team_slave_0: left promiscuous mode [ 386.114095][T20970] team_slave_0: left allmulticast mode [ 386.119984][T20970] veth1_to_team: left promiscuous mode [ 386.125444][T20970] veth1_to_team: left allmulticast mode [ 386.132217][T20970] team_slave_1: left promiscuous mode [ 386.140350][T20970] team_slave_1: left allmulticast mode [ 386.146712][T20970] veth0_to_batadv: left promiscuous mode [ 386.152363][T20970] veth0_to_batadv: left allmulticast mode [ 386.159279][T20970] batadv_slave_0: left promiscuous mode [ 386.164927][T20970] batadv_slave_0: left allmulticast mode [ 386.177341][T20970] veth1_to_batadv: left promiscuous mode [ 386.183002][T20970] veth1_to_batadv: left allmulticast mode [ 386.191853][T20970] batadv_slave_1: left promiscuous mode [ 386.197564][T20970] batadv_slave_1: left allmulticast mode [ 386.203868][T20970] xfrm0: left promiscuous mode [ 386.208791][T20970] xfrm0: left allmulticast mode [ 386.214151][T20970] veth0_to_hsr: left promiscuous mode [ 386.219802][T20970] veth0_to_hsr: left allmulticast mode [ 386.226274][T20970] hsr_slave_0: left promiscuous mode [ 386.231613][T20970] hsr_slave_0: left allmulticast mode [ 386.237894][T20970] veth1_to_hsr: left promiscuous mode [ 386.243266][T20970] veth1_to_hsr: left allmulticast mode [ 386.250255][T20970] hsr_slave_1: left promiscuous mode [ 386.255552][T20970] hsr_slave_1: left allmulticast mode [ 386.261381][T20970] veth1_virt_wifi: left promiscuous mode [ 386.267079][T20970] veth1_virt_wifi: left allmulticast mode [ 386.273519][T20970] veth0_virt_wifi: left promiscuous mode [ 386.279183][T20970] veth0_virt_wifi: left allmulticast mode [ 386.285470][T20970] veth1_vlan: left promiscuous mode [ 386.290716][T20970] veth1_vlan: left allmulticast mode [ 386.298380][T20970] vlan0: left promiscuous mode [ 386.303241][T20970] vlan0: left allmulticast mode [ 386.308317][T20970] vlan1: left promiscuous mode [ 386.313223][T20970] vlan1: left allmulticast mode [ 386.318268][T20970] veth0_vlan: left allmulticast mode [ 386.324340][T20970] veth0_macvtap: left promiscuous mode [ 386.329889][T20970] veth0_macvtap: left allmulticast mode [ 386.336054][T20970] veth1_macvtap: left allmulticast mode [ 386.341706][T20970] macsec0: left promiscuous mode [ 386.346695][T20970] macsec0: left allmulticast mode [ 386.352495][T20970] M: left promiscuous mode [ 386.356935][T20970] M: left allmulticast mode [ 386.424321][T21009] overlayfs: failed to clone upperpath [ 386.433143][T21009] 9pnet_fd: Insufficient options for proto=fd [ 387.626836][T21070] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 387.689743][T21079] @0: renamed from bond_slave_1 [ 387.734555][T21085] netlink: 8540 bytes leftover after parsing attributes in process `syz.6.7018'. [ 387.796035][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7018'. [ 387.807760][T21085] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7018'. [ 387.833915][T21074] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.841008][T21074] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.848208][T21074] bridge_slave_0: entered allmulticast mode [ 387.854470][T21074] bridge_slave_0: entered promiscuous mode [ 387.860851][T21074] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.867934][T21074] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.874990][T21074] bridge_slave_1: entered allmulticast mode [ 387.881295][T21074] bridge_slave_1: entered promiscuous mode [ 387.892479][T10635] bridge_slave_1: left allmulticast mode [ 387.898261][T10635] bridge_slave_1: left promiscuous mode [ 387.903865][T10635] +$<: port 2(bridge_slave_1) entered disabled state [ 387.911412][T10635] bridge_slave_0: left allmulticast mode [ 387.917120][T10635] bridge_slave_0: left promiscuous mode [ 387.922751][T10635] +$<: port 1(bridge_slave_0) entered disabled state [ 387.930570][T10635] tipc: Resetting bearer [ 387.947854][T10635] tipc: Disabling bearer [ 388.049161][T10635] tipc: Left network mode [ 388.054778][T10635] veth1_macvtap: left promiscuous mode [ 388.060299][T10635] veth0_vlan: left promiscuous mode [ 388.120756][T21074] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.123673][T21100] overlayfs: failed to clone upperpath [ 388.127850][T21074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.127965][T21074] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.134199][T21099] overlayfs: failed to clone upperpath [ 388.140592][T21074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.187772][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.195276][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.220767][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.227835][T10644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.235356][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.242414][T10644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.267447][T21074] veth0_vlan: entered promiscuous mode [ 388.279683][T21074] veth1_macvtap: entered promiscuous mode [ 388.509620][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7042'. [ 388.577379][T21165] tmpfs: Unknown parameter 'no' [ 388.594487][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 388.594504][ T36] audit: type=1400 audit(388.274:1335): avc: denied { setattr } for pid=21168 comm="syz.3.7047" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.646743][ T36] audit: type=1400 audit(388.274:1336): avc: denied { add_name } for pid=21168 comm="syz.3.7047" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.688134][ T36] audit: type=1400 audit(388.274:1337): avc: denied { create } for pid=21168 comm="syz.3.7047" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.711295][ T36] audit: type=1400 audit(388.274:1338): avc: denied { associate } for pid=21168 comm="syz.3.7047" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 389.166738][ T64] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 389.316530][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 389.324382][ T64] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 389.333813][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.342064][ T64] usb 4-1: Product: syz [ 389.346329][ T64] usb 4-1: Manufacturer: syz [ 389.351162][ T64] usb 4-1: SerialNumber: syz [ 389.356810][ T64] usb 4-1: config 0 descriptor?? [ 389.363349][ T64] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 389.541880][T21225] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7068'. [ 389.563951][ T460] usb 4-1: USB disconnect, device number 27 [ 389.917128][T21232] netlink: 'syz.0.7071': attribute type 4 has an invalid length. [ 391.100956][T21256] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.108063][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.115126][T21256] bridge_slave_0: entered allmulticast mode [ 391.121445][T21256] bridge_slave_0: entered promiscuous mode [ 391.127740][T21256] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.134760][T21256] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.141885][T21256] bridge_slave_1: entered allmulticast mode [ 391.148116][T21256] bridge_slave_1: entered promiscuous mode [ 391.160534][T10635] bridge_slave_1: left allmulticast mode [ 391.166190][T10635] bridge_slave_1: left promiscuous mode [ 391.171815][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.179295][T10635] bridge_slave_0: left allmulticast mode [ 391.184943][T10635] bridge_slave_0: left promiscuous mode [ 391.190588][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.278175][T10635] tipc: Left network mode [ 391.336822][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.343907][T10638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.353488][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.360532][T10644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.390550][T21256] veth0_vlan: entered promiscuous mode [ 391.401439][T21256] veth1_macvtap: entered promiscuous mode [ 391.652493][T21277] netlink: 'syz.0.7084': attribute type 1 has an invalid length. [ 391.660387][T21277] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7084'. [ 391.669390][ T492] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 391.836743][ T492] usb 5-1: Using ep0 maxpacket: 32 [ 391.848283][ T492] usb 5-1: no configurations [ 391.856239][ T492] usb 5-1: can't read configurations, error -22 [ 391.947621][T21296] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 391.997180][ T492] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 392.146501][ T492] usb 5-1: Using ep0 maxpacket: 32 [ 392.152074][ T492] usb 5-1: no configurations [ 392.156768][ T492] usb 5-1: can't read configurations, error -22 [ 392.163112][ T492] usb usb5-port1: attempt power cycle [ 392.506527][ T492] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 392.527103][ T492] usb 5-1: Using ep0 maxpacket: 32 [ 392.532657][ T492] usb 5-1: no configurations [ 392.537295][ T492] usb 5-1: can't read configurations, error -22 [ 392.666590][ T492] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 392.686899][ T492] usb 5-1: Using ep0 maxpacket: 32 [ 392.692444][ T492] usb 5-1: no configurations [ 392.697100][ T492] usb 5-1: can't read configurations, error -22 [ 392.703432][ T492] usb usb5-port1: unable to enumerate USB device [ 392.890415][T21308] incfs: Options parsing error. -22 [ 392.895703][T21308] incfs: mount failed -22 [ 393.157052][T21321] fuse: Bad value for 'fd' [ 393.188702][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7100'. [ 393.624520][T21360] fuse: Bad value for 'rootmode' [ 393.676567][ T9] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 393.827585][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.839832][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.853044][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.859830][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 393.869021][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.877923][ T9] usb 4-1: config 0 descriptor?? [ 394.288457][T21350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 394.288497][T21350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:39 [ 394.298895][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 394.314022][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.326004][ T9] usb 4-1: USB disconnect, device number 28 [ 394.444965][T21394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 394.448334][T21396] cgroup: Unknown subsys name 'measure' [ 394.641442][T21438] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7137'. [ 394.650793][T21440] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7137'. [ 394.830052][ T36] audit: type=1400 audit(394.513:1339): avc: denied { create } for pid=21453 comm="syz.3.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 394.850405][ T36] audit: type=1400 audit(394.513:1340): avc: denied { write } for pid=21453 comm="syz.3.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 394.965062][T21456] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.973105][T21456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 394.981460][T21456] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 394.989331][T21456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 395.317488][T21487] netlink: 'syz.6.7153': attribute type 4 has an invalid length. [ 395.609000][T21541] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 395.609026][T21541] rust_binder: Read failure Err(EFAULT) in pid:29 [ 395.839044][T21559] overlay: Unknown parameter 'euid' [ 395.864347][T21563] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.871706][ T9] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 395.921396][T21570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7177'. [ 395.930722][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7177'. [ 395.941764][T21570] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7177'. [ 395.951016][T21570] netlink: 'syz.0.7177': attribute type 3 has an invalid length. [ 395.959021][T21570] netlink: 'syz.0.7177': attribute type 2 has an invalid length. [ 395.967036][T21570] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7177'. [ 396.027603][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 396.036703][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.045491][ T9] usb 5-1: config 0 descriptor?? [ 396.336653][T21580] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7179'. [ 396.394843][ T36] audit: type=1400 audit(396.073:1341): avc: denied { unmount } for pid=21074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 396.636738][ T36] audit: type=1400 audit(396.313:1342): avc: denied { setattr } for pid=21624 comm="syz.0.7183" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=74209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 396.656298][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 396.687130][T21625] netlink: 'syz.0.7183': attribute type 5 has an invalid length. [ 396.694963][ T9] asix 5-1:0.0: probe with driver asix failed with error -61 [ 396.698168][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7183'. [ 396.780067][T21633] rust_binder: inc_ref_done called when no active inc_refs [ 396.809173][T21626] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.823526][T21626] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.831440][T21626] bridge_slave_0: entered allmulticast mode [ 396.837997][T21626] bridge_slave_0: entered promiscuous mode [ 396.844471][T21626] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.851858][T21626] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.860636][T21626] bridge_slave_1: entered allmulticast mode [ 396.867317][T21626] bridge_slave_1: entered promiscuous mode [ 396.985542][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.992622][T10647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.000559][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.007627][T10647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.029012][T21626] veth0_vlan: entered promiscuous mode [ 397.040170][T21626] veth1_macvtap: entered promiscuous mode [ 397.125043][T21659] netlink: 'syz.6.7190': attribute type 6 has an invalid length. [ 397.150454][T21659] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4046068442 (32368547536 ns) > initial count (5909850560 ns). Using initial count to start timer. [ 397.206613][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 397.346530][ T10] usb 4-1: device descriptor read/64, error -71 [ 397.586579][ T10] usb 4-1: device descriptor read/64, error -71 [ 397.725248][T21676] overlayfs: failed to clone upperpath [ 397.826545][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 397.956488][ T10] usb 4-1: device descriptor read/64, error -71 [ 398.019592][T21679] overlay: Unknown parameter 'smackfsroot' [ 398.196518][ T10] usb 4-1: device descriptor read/64, error -71 [ 398.306629][ T10] usb usb4-port1: attempt power cycle [ 398.528016][T10647] erspan0: left allmulticast mode [ 398.533111][T10647] erspan0: left promiscuous mode [ 398.538185][T10647] bridge0: port 3(erspan0) entered disabled state [ 398.544974][T10647] bridge_slave_1: left allmulticast mode [ 398.550666][T10647] bridge_slave_1: left promiscuous mode [ 398.556253][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.563683][T10647] bridge_slave_0: left allmulticast mode [ 398.569346][T10647] bridge_slave_0: left promiscuous mode [ 398.574980][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.646498][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 398.667441][ T10] usb 4-1: device descriptor read/8, error -71 [ 398.797576][ T10] usb 4-1: device descriptor read/8, error -71 [ 398.828312][T21691] netlink: 'syz.0.7201': attribute type 11 has an invalid length. [ 399.005803][ T36] audit: type=1400 audit(398.683:1343): avc: denied { shutdown } for pid=21694 comm="syz.0.7202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.036507][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 399.057596][ T10] usb 4-1: device descriptor read/8, error -71 [ 399.197615][ T10] usb 4-1: device descriptor read/8, error -71 [ 399.285052][ T64] usb 5-1: USB disconnect, device number 39 [ 399.295930][T21698] virtiofs: Unknown parameter 'always' [ 399.301945][T21698] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 399.306625][ T10] usb usb4-port1: unable to enumerate USB device [ 399.616488][ T64] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 399.767530][ T64] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 399.775694][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 399.786860][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 399.798031][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.811360][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.820423][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.829033][ T64] usb 5-1: config 0 descriptor?? [ 399.834263][T21698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 399.876263][T21704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7206'. [ 399.911260][T21711] overlayfs: failed to clone lowerpath [ 399.969124][T21712] overlayfs: failed to resolve 'workdir=./file0/file0': -2 [ 400.098966][T21722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 400.100019][T21721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.115286][T21721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.243400][ T64] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 400.250955][ T64] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 400.258387][ T64] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 400.265930][ T64] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 400.274730][ T64] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 400.356492][ T492] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 400.496787][T21698] rust_binder: Write failure EINVAL in pid:37 [ 400.497125][ T64] usb 5-1: USB disconnect, device number 40 [ 400.506926][ T492] usb 4-1: Using ep0 maxpacket: 8 [ 400.515831][ T492] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 400.524148][ T492] usb 4-1: config 179 has no interface number 0 [ 400.530621][ T492] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 400.541699][ T492] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 400.552944][ T492] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 400.564088][ T492] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 400.575505][ T492] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 400.588771][ T492] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 400.597824][ T492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.606946][T21722] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 400.770403][T21727] : renamed from bond_slave_0 [ 401.020341][T21732] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 401.054030][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7217'. [ 401.071444][T21721] rust_binder: 81: no such ref 3 [ 401.076649][T21721] rust_binder: inc_ref_done called when no active inc_refs [ 401.076671][T21721] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 401.091816][T21721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 401.098741][ T460] usb 4-1: USB disconnect, device number 33 [ 401.098837][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 401.122242][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 401.143253][ T36] audit: type=1326 audit(400.823:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21742 comm="syz.6.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945e38f6c9 code=0x7ffc0000 [ 401.166410][ T36] audit: type=1326 audit(400.823:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21742 comm="syz.6.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945e38f6c9 code=0x7ffc0000 [ 401.190804][ T36] audit: type=1326 audit(400.823:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21742 comm="syz.6.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f945e38f6c9 code=0x7ffc0000 [ 401.215699][ T36] audit: type=1326 audit(400.823:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21742 comm="syz.6.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945e38f6c9 code=0x7ffc0000 [ 401.238714][ T36] audit: type=1326 audit(400.823:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21742 comm="syz.6.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945e38f6c9 code=0x7ffc0000 [ 401.354494][T21756] rust_binder: inc_ref_done called when no active inc_refs [ 401.354520][T21756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 401.703680][T21791] rust_binder: 89: no such ref 0 [ 401.718046][ T36] audit: type=1326 audit(401.403:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.3.7233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20d18f6c9 code=0x7ffc0000 [ 401.728454][T21791] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 401.742039][ T36] audit: type=1326 audit(401.403:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.3.7233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20d18f6c9 code=0x7ffc0000 [ 401.748312][T21791] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 401.771150][ T36] audit: type=1326 audit(401.413:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.3.7233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe20d18f6c9 code=0x7ffc0000 [ 401.800952][ T36] audit: type=1326 audit(401.413:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.3.7233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe20d18f6c9 code=0x7ffc0000 [ 401.827544][T21798] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 401.831737][ T36] audit: type=1326 audit(401.413:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.3.7233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe20d18f6c9 code=0x7ffc0000 [ 401.835832][T21798] rust_binder: Write failure EINVAL in pid:96 [ 402.088763][T21816] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 402.103565][T21816] rust_binder: Write failure EINVAL in pid:103 [ 402.166512][ T460] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 402.326523][ T460] usb 5-1: Using ep0 maxpacket: 8 [ 402.336810][ T460] usb 5-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 402.348113][ T460] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 402.359686][ T460] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.371485][T21840] rust_binder: Read failure Err(EAGAIN) in pid:48 [ 402.372936][ T460] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 402.390453][ T460] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 402.403794][ T460] usb 5-1: config 1 interface 0 has no altsetting 0 [ 402.412635][ T460] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.421806][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 402.429942][ T460] usb 5-1: SerialNumber: syz [ 402.436832][T21805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 402.580926][T21851] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.589725][T21851] overlayfs: conflicting options: metacopy=off,verity=on [ 402.615153][T21853] SELinux: security_context_str_to_sid (syste_uGй :!ku~72sT`@/8k-q]򛐭[@_ǝq4UYu) failed with errno=-22 [ 402.629763][T21853] SELinux: security_context_str_to_sid (syste_uGй :!ku~72sT`@/8k-q]򛐭[@_ǝq4UYu) failed with errno=-22 [ 402.649223][ T460] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 402.659685][ T460] usb 5-1: USB disconnect, device number 41 [ 402.945545][T21878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 402.945573][T21878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 402.992340][T21888] rust_binder: Write failure EFAULT in pid:87 [ 403.023399][T21892] binder: Unknown parameter '' [ 403.063702][T21896] binder: Unknown parameter 'smackfsroot' [ 403.084553][T21900] rust_binder: Got transaction with invalid offset. [ 403.084604][T21900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 403.092400][T21900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 403.171341][T21904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7273'. [ 403.189554][T21904] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7273'. [ 403.198678][T21904] netlink: 'syz.4.7273': attribute type 6 has an invalid length. [ 403.206412][T21904] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7273'. [ 403.257362][T21912] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 403.275853][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7279'. [ 403.576534][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 403.607006][T21925] SELinux: policydb string length -1590962991 does not match expected length 8 [ 403.616061][T21925] SELinux: failed to load policy [ 403.737661][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.748652][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 403.757708][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.766695][ T9] usb 4-1: config 0 descriptor?? [ 404.174905][ T9] logitech 0003:046D:C50C.001C: hidraw0: USB HID v1.00 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0 [ 404.396648][T21938] binder: Unknown parameter 'fscontext?}' [ 404.402528][T21938] binder: Unknown parameter 'fscontext?}' [ 404.408367][T21938] binder: Unknown parameter 'fscontext?}' [ 404.414225][T21938] binder: Unknown parameter 'fscontext?}' [ 404.420048][T21938] binder: Unknown parameter 'fscontext?}' [ 404.425842][T21938] binder: Unknown parameter 'fscontext?}' [ 404.431668][T21938] binder: Unknown parameter 'fscontext?}' [ 404.437470][T21938] binder: Unknown parameter 'fscontext?}' [ 404.443217][T21938] binder: Unknown parameter 'fscontext?}' [ 404.449626][T21938] binder: Unknown parameter 'fscontext?}' [ 404.455442][T21938] binder: Unknown parameter 'fscontext?}' [ 404.461311][T21938] binder: Unknown parameter 'fscontext?}' [ 404.467135][T21938] binder: Unknown parameter 'fscontext?}' [ 404.472990][T21938] binder: Unknown parameter 'fscontext?}' [ 404.478796][T21938] binder: Unknown parameter 'fscontext?}' [ 404.484556][T21938] binder: Unknown parameter 'fscontext?}' [ 404.490347][T21938] binder: Unknown parameter 'fscontext?}' [ 404.496132][T21938] binder: Unknown parameter 'fscontext?}' [ 404.501943][T21938] binder: Unknown parameter 'fscontext?}' [ 404.507740][T21938] binder: Unknown parameter 'fscontext?}' [ 404.513512][T21938] binder: Unknown parameter 'fscontext?}' [ 404.519437][T21938] binder: Unknown parameter 'fscontext?}' [ 404.525231][T21938] binder: Unknown parameter 'fscontext?}' [ 404.531074][T21938] binder: Unknown parameter 'fscontext?}' [ 404.536900][T21938] binder: Unknown parameter 'fscontext?}' [ 404.542679][T21938] binder: Unknown parameter 'fscontext?}' [ 404.548488][T21938] binder: Unknown parameter 'fscontext?}' [ 404.554299][T21938] binder: Unknown parameter 'fscontext?}' [ 404.560094][T21938] binder: Unknown parameter 'fscontext?}' [ 404.565893][T21938] binder: Unknown parameter 'fscontext?}' [ 404.571681][T21938] binder: Unknown parameter 'fscontext?}' [ 404.577496][T21938] binder: Unknown parameter 'fscontext?}' [ 404.583256][T21938] binder: Unknown parameter 'fscontext?}' [ 404.771860][T21945] rust_binder: 68: no such ref 1 [ 404.771901][T21944] rust_binder: Error in use_page_slow: ESRCH [ 404.776918][T21944] rust_binder: use_range failure ESRCH [ 404.782973][T21944] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 404.788530][T21944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 404.796471][T21944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:68 [ 404.817723][T21949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 404.826712][T21949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 404.918508][T21953] rust_binder: validate_parent_fixup: new_min_offset=72057594037927973, sg_entry.length=0 [ 404.928318][T21953] rust_binder: Error while translating object. [ 404.938371][T21953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 404.944608][T21953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 404.967438][ T9] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=9 comm=kworker/0:0 [ 404.989402][ T64] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=104 sclass=netlink_xfrm_socket pid=64 comm=kworker/1:2 [ 406.279619][ T10] usb 4-1: USB disconnect, device number 34 [ 406.293123][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 406.293139][ T36] audit: type=1400 audit(405.973:1386): avc: denied { rename } for pid=21999 comm="syz.6.7308" name="file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 406.295025][T22000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 406.325502][T22000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:102 [ 406.344441][T22006] overlayfs: missing 'lowerdir' [ 406.366882][ T36] audit: type=1404 audit(406.043:1387): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 406.398632][ T36] audit: type=1400 audit(406.043:1388): avc: denied { unlink } for pid=21626 comm="syz-executor" name="file7" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 406.424275][ T36] audit: type=1400 audit(406.073:1389): avc: denied { ioctl } for pid=22007 comm="syz.3.7312" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 406.458551][ T36] audit: type=1400 audit(406.073:1390): avc: denied { ioctl } for pid=22007 comm="syz.3.7312" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 406.486367][ T36] audit: type=1400 audit(406.103:1391): avc: denied { read write } for pid=21074 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.510402][ T36] audit: type=1400 audit(406.103:1392): avc: denied { execmem } for pid=22010 comm="syz.0.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 406.530257][ T36] audit: type=1400 audit(406.133:1393): avc: denied { read write } for pid=22012 comm="syz.3.7315" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 406.553915][ T36] audit: type=1400 audit(406.133:1394): avc: denied { execmem } for pid=22010 comm="syz.0.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 406.573276][ T36] audit: type=1400 audit(406.143:1395): avc: denied { read write } for pid=21074 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.750723][T22071] netlink: 57 bytes leftover after parsing attributes in process `syz.3.7333'. [ 411.685735][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 411.685756][ T36] audit: type=1400 audit(411.363:1501): avc: denied { create } for pid=22088 comm="syz.4.7339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 411.713508][ T36] audit: type=1400 audit(411.363:1502): avc: denied { execmem } for pid=22086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 411.732474][ T36] audit: type=1400 audit(411.363:1503): avc: denied { read append } for pid=22090 comm="syz.3.7340" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 411.755828][ T36] audit: type=1400 audit(411.373:1504): avc: denied { create } for pid=22096 comm="syz.0.7341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 411.775552][ T36] audit: type=1400 audit(411.373:1505): avc: denied { create } for pid=22096 comm="syz.0.7341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 411.795513][ T36] audit: type=1400 audit(411.373:1506): avc: denied { create } for pid=22096 comm="syz.0.7341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 411.815484][ T36] audit: type=1400 audit(411.383:1507): avc: denied { execmem } for pid=22090 comm="syz.3.7340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 411.834274][ T36] audit: type=1400 audit(411.393:1508): avc: denied { read write } for pid=21074 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 412.797031][ T36] audit: type=1400 audit(412.473:1509): avc: denied { execmem } for pid=22099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 412.798180][T22102] x_tables: unsorted underflow at hook 3 [ 412.819780][ T36] audit: type=1400 audit(412.483:1510): avc: denied { create } for pid=22100 comm="syz.4.7343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 414.529157][T10644] bridge_slave_1: left allmulticast mode [ 414.534847][T10644] bridge_slave_1: left promiscuous mode [ 414.540875][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.548650][T10644] bridge_slave_0: left allmulticast mode [ 414.554315][T10644] bridge_slave_0: left promiscuous mode [ 414.559951][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.678657][T10644] veth1_macvtap: left promiscuous mode [ 414.684183][T10644] veth0_vlan: left promiscuous mode [ 416.758586][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 416.758603][ T36] audit: type=1400 audit(416.439:1537): avc: denied { execmem } for pid=22127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 416.786281][ T36] audit: type=1400 audit(416.469:1538): avc: denied { name_bind } for pid=22128 comm="syz.3.7354" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 416.786446][T22134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22134 comm=syz.4.7353 [ 416.809336][T22131] netlink: 'syz.3.7354': attribute type 12 has an invalid length. [ 416.820488][T22133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22133 comm=syz.4.7353 [ 416.827952][ T36] audit: type=1400 audit(416.469:1539): avc: denied { create } for pid=22130 comm="syz.4.7353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 416.860399][ T36] audit: type=1400 audit(416.489:1540): avc: denied { read write } for pid=22128 comm="syz.3.7354" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 416.883060][ T36] audit: type=1400 audit(416.489:1541): avc: denied { execmem } for pid=22128 comm="syz.3.7354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 416.901758][ T36] audit: type=1400 audit(416.489:1542): avc: denied { read } for pid=22128 comm="syz.3.7354" dev="nsfs" ino=4026532315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 416.922357][ T36] audit: type=1400 audit(416.529:1543): avc: denied { create } for pid=22128 comm="syz.3.7354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 416.941744][ T36] audit: type=1400 audit(416.529:1544): avc: denied { read } for pid=22128 comm="syz.3.7354" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 416.964071][ T36] audit: type=1400 audit(416.539:1545): avc: denied { read write } for pid=21074 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 418.306242][ T36] audit: type=1400 audit(417.979:1546): avc: denied { execmem } for pid=22135 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 419.009525][T10644] veth0_to_team: left allmulticast mode [ 419.015102][T10644] veth0_to_team: left promiscuous mode [ 419.020712][T10644] bridge0: port 3(veth0_to_team) entered disabled state [ 419.028085][T10644] bridge_slave_1: left allmulticast mode [ 419.033717][T10644] bridge_slave_1: left promiscuous mode [ 419.039353][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.046809][T10644] bridge_slave_0: left allmulticast mode [ 419.052447][T10644] bridge_slave_0: left promiscuous mode [ 419.058130][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.157890][T10644] tipc: Disabling bearer [ 419.163213][T10644] tipc: Left network mode [ 419.168470][T10644] veth1_macvtap: left promiscuous mode [ 419.173975][T10644] veth0_vlan: left promiscuous mode [ 423.440488][ T36] kauditd_printk_skb: 82 callbacks suppressed [ 423.440509][ T36] audit: type=1400 audit(423.119:1629): avc: denied { read } for pid=22168 comm="syz.3.7366" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 423.470622][ T36] audit: type=1400 audit(423.119:1630): avc: denied { mounton } for pid=22166 comm="syz.4.7365" path="/43/file0" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 423.492986][ T36] audit: type=1400 audit(423.119:1631): avc: denied { execmem } for pid=22165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 423.511903][ T36] audit: type=1400 audit(423.129:1632): avc: denied { sys_module } for pid=22166 comm="syz.4.7365" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 423.532478][ T36] audit: type=1400 audit(423.169:1633): avc: denied { read write } for pid=21074 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 425.357658][ T36] audit: type=1400 audit(425.029:1634): avc: denied { execmem } for pid=22174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 425.385695][ T36] audit: type=1400 audit(425.059:1635): avc: denied { execmem } for pid=22177 comm="syz.4.7368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 425.404611][ T36] audit: type=1400 audit(425.059:1636): avc: denied { read write } for pid=21074 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 427.368320][ T36] audit: type=1400 audit(427.049:1637): avc: denied { read write } for pid=22185 comm="syz.3.7372" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 427.431821][ T36] audit: type=1400 audit(427.049:1638): avc: denied { create } for pid=22183 comm="syz.4.7371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 427.576939][T10635] bridge_slave_1: left allmulticast mode [ 427.582627][T10635] bridge_slave_1: left promiscuous mode [ 427.596820][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.605669][T10635] bridge_slave_0: left allmulticast mode [ 427.611471][T10635] bridge_slave_0: left promiscuous mode [ 427.617111][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.729065][T10635] veth1_macvtap: left promiscuous mode [ 427.734583][T10635] veth0_vlan: left promiscuous mode [ 428.068001][T10635] bridge_slave_1: left allmulticast mode [ 428.073667][T10635] bridge_slave_1: left promiscuous mode [ 428.079321][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.086905][T10635] bridge_slave_0: left allmulticast mode [ 428.092542][T10635] bridge_slave_0: left promiscuous mode [ 428.098183][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.105809][T10635] bridge_slave_1: left allmulticast mode [ 428.111534][T10635] bridge_slave_1: left promiscuous mode [ 428.117153][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.124470][T10635] bridge_slave_0: left allmulticast mode [ 428.130149][T10635] bridge_slave_0: left promiscuous mode [ 428.135748][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.298708][T10635] tipc: Left network mode [ 428.304095][T10635] veth1_macvtap: left promiscuous mode [ 428.309648][T10635] veth0_vlan: left promiscuous mode [ 428.315022][T10635] veth1_macvtap: left promiscuous mode [ 428.320535][T10635] veth0_vlan: left promiscuous mode