last executing test programs: 50.801727602s ago: executing program 0 (id=219): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000040)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22b}], 0x2}}], 0x1, 0x4040001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000640)=0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x5, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x2, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x7, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x6, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbe, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xf2, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0xff, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept(r2, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000640)) (async) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000640)) socket$inet6(0xa, 0x3, 0xff) (async) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x20000}, 0x1c) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r7 = dup(r5) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d1) sendto$inet6(r3, &(0x7f0000000000)='\x00', 0x1, 0x4895, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000004c0)=""/4069, 0xfe5}], 0x2}}], 0x1, 0x40030002, 0x0) 49.963402178s ago: executing program 0 (id=234): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) writev(r1, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="244bd6726e6724a01958213df0da3cae923251f21a80680430b73f96e93318e1d97f112bf7afa1998aa3840ca843b89be28f7d84ee1146b727e199de079188d12cd5bac4591aba093445d6b8fbd32a1645fc1bc991f22c2f4da98d73f4f385c9353481fb526abf6a47916f5285beb5e7d3057d842cb28b27ee2715dcff100d790ab13cd7c0ea0154e7f53efac340ab22324ca657d147af2c36ec72d9f267fe", 0x9f}, {&(0x7f0000001180)="0900431bf0e2f2367fe449efce3592d584df70fd9b7b2aedbf4f2bd82e100952f0a589d654a0a87a8844ff38902be17658e4fcd0809e5dca", 0x38}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="66fcdced620a51398b034979c8fb891cb47b05fad52f40f97aa257f9f8a7bc96b682e713042184bd68c342f65567fbb814791664bf31bf72d46a61605dd66014e21f70c91cda23d5a1069b4b0a347cd06c0005464c36b604bcb46056dee8d9fa4c50c95f9a14fae18d2aafddfb58d0a69a5c1be2", 0x74}, {&(0x7f0000001280)="51b86b35f4c5ed1c3112ea69a509768c294f2678a4fed11914d8e600632af5e04702203d43cbdb43f14db7a92a49e15a3a5a72f34e70582fe26b12e614bb0455a0797a68cf61f512922c372332ff35dc0a7e071f2d750ade1d64bc524aa39a86091da3e2e7035f1f0200bce8043c6387bcc8e1f1e2f9693c3537d40e3d24f583a820b4023e3307869e96ce73cb65649d9138134079d0ae699df3d532cbcdcfc1ca225e75dcb5fd480265b25a4d6b6bf21e27cdc3d5335dce845649f7276bbcf0ce4c9d12ad38431c310646ec91a3e2f26b90618aed6252791c2cd791367957a70336007523c9bd4abf5130eb8bcd2d5776ba", 0xf2}], 0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000011c0)={0x1, 0xab16}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffb, 0x5}, {0x2, 0xffff}]}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0xfffffffb, 0x5}, {0x2, 0xffff}]}}) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000001400)) (async) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000001400)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0xffffffc, 0x100000, {{}, {}, {0x4, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004) close_range(r1, 0xffffffffffffffff, 0x0) 49.941321438s ago: executing program 0 (id=236): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, 0x0, &(0x7f0000000300)) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129851c8070000000000000005d4b034d0ce1f6e0be5b65e1ea3aab64fb19483ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40fa02b2a7b3f179ac1d1c332424093c93924b0fb97f23a2ce3a5ffd46a4ca58d205e8263de6c8f35ae0bdf26e7665d4521dc583997930691d414e950900194775678184d57e2a7bfbbb812ed678dee3f02a1c54cfd4c2faee9cd398d28b9f4f5fb8eb0290290399155c805fc6c3f6329e625d718b0215af67c4482ab8af756b973664ab0a372ecea980cf89a63de97a4f0721aab97a9", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a5566ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fba2556dd2c750b72373cfc7c039e0d68baf893a84557d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef20500000000000000bdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f0000000000000000", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r3, &(0x7f0000000300), 0x5b0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="f30f01766136440f01c970a8652e0f780b66ba4300ed36410f381c1d20000000b9800000c00f3235001000000f3066baf80cb80c652d85ef66bafc0ced66baf80cb8d87d8e86ef66bafc0cb831440000ef66baf80cb89e5eb885ef66bafc0c66ed", 0x61}], 0x24, 0x50, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001280)={0x0, 0x5b, &(0x7f0000000340)={&(0x7f0000000a80)={0x1c, r5, 0x10ada85e65c25359, 0xffeffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x5}}, 0x20000000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r10, 0x403) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000012c0)=0x1, 0x4) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40580d1) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 49.881859669s ago: executing program 0 (id=237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000002300)="b805000000b9fa0000000f01d9660f78c4020a52f7d6d605000004b90000c0fe0fae41d901000000b87f8baf7f2626000000000f30660fc7ff7502020fba600c980f320f3566b857000f00d0", 0x4c}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) dup(r5) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}, {0x0, 0x56}], 0x2, 0x0, 0x5245) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x20}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000340)=0x60) pwritev2(r0, &(0x7f00000018c0)=[{&(0x7f0000001740)="08299711fd561b5ed83cdaf94bac7b8746a8f754533acb0efc0410b1188aef83e4c5146694c533371ce5eadff3355c1ffa8d7fd04848ced5f1ed162371288f22221ae7be91a136c006fec9aba621dccadee20dd36a2dcac56ebdc8c516a46235ae9a8fb56cdbdd727ac49abfdf12b3", 0x6f}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000080)="08e444d8f1d32e664d2d40ade55951ab2cfa04e7cda52cb5297c3e53edfb04ceb257de5fd7349b3d604fc172961b57743b", 0x31}, {&(0x7f00000017c0)="ec48ce15e7d24cecff2eb40377d416cdf6984e2fce0baa1057a50318ee81725d244bad53232f2a111935ad46fa3b84482fdee1e781008bc61166b298a2595a733fd97a8efebb17521106991382f9233da14f3256332c56e627e86f946f3b5bfc81bb43579d891f07db01c4c2a62dddaa471a58cf392b0a871b8fb91763acb504", 0x80}, {&(0x7f0000001840)="64c84e41ce34b6626b14032d6d20bd0fe81cfc37fce437d01fc8428be3b901550db3e321b2bf40a99b9010e878ef0563d7017ebda1058cf7720440a4893770a8a416e2ad958c7cb85e8730f85786aa5cf9b3a106daeedf7e3bbea16a5e3e7efcfc9955ad3c40a2fbe88f3ede55dbb935b42265449a23085768032739fea4109f", 0x80}, {&(0x7f0000000300)="8bcf594f0bb70a29fa662f7de393b2", 0xf}], 0x6, 0x2, 0x2, 0x1c) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x11a8, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x69, 0xa9, @random="a74a5b744cb5f463c310972c118c9a8508fd35746ab3bf4dd8d9c6e6a567528f59429c2af7c1c1e4d293758876a489b7271ae72393d4e0772984c76462f1792a7889003b69eb7876f8a5e243e4da1083e789861d78cef1da807b1202202ae435cce59ab657"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xce, 0xa8, @random="22888cc041a0042871597291640b67029b6a24e4a74cbdc6c534fb5db63befe2c5f0fa976ab20756c7e48addda92938a8f71a7528042aa1d0bcb808b090ee6d506b12dd41eabc713e135ac03f3f8ab9611d4c2c43cad30e55b2e778b8061a41dd12d1af9cb4a6e6b7fe918383e8c632be00712ede960605b782b50911c4113b18f327dcd5d6db2b750faa6169c94f86b9a3f8df3fec8bd26396eba822c6040ec6037f51bccc82d8c085e5297a2a164a21fefc568e034e5f2eba800aa3c92bfdd69093a4abc41498f5eb1"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x4c000}, 0x818) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000016c0)={@ptr={0x70742a85, 0x1, &(0x7f00000015c0)=""/232, 0xe8, 0x0, 0x27}, @fda={0x66646185, 0x7, 0x0, 0x41}, @fda={0x66646185, 0x8, 0x1, 0xb}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 49.881350639s ago: executing program 0 (id=238): pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 49.677872173s ago: executing program 0 (id=241): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000000)) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 49.677671403s ago: executing program 32 (id=241): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000000)) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 11.577521992s ago: executing program 4 (id=664): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x2001c811) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) read(r0, &(0x7f0000000000), 0x2002) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs\x00', 0x0, 0x32044a9, &(0x7f0000000080)=ANY=[]) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$binfmt_script(r5, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "c759faefeeda60e2b20525f9585d99e774"}, 0xffffffffffffff2e) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) shutdown(r4, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/232, 0xe8, 0x0, 0x0}, &(0x7f0000000100)=0x40) close(r3) 11.576226992s ago: executing program 4 (id=665): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 11.576032992s ago: executing program 4 (id=666): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x2486, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="240000000000000000000000070000004414"], 0x28}, 0x4000810) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000600)="580000001400192140834b80040d8c560a110036c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e000093d09817b4a35ccf3c3f3e6c7891d1ab08254d38c8faf85e7c44a57d1992a77498272e3556e1f0f2ef170de8836ca8f7ac8bea8ed5bb9e3790ef7759ad1e0f0800000000000000d9013685cfa81fc45c3cd0bc9bebc91a1a", 0xb0}, {&(0x7f0000000840)="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", 0x19a}, {&(0x7f00000006c0)="5738dcce513a9edc8da2daf3d93ba179482a236de3e6c114c7ea9ba0880fdb94349c3dea8d2c44d3f9d1c26b770906637c2e0892351cb4b4b55daa4d5a307b52a3506dcb111c048110987a8c05e5dc78561d29ff2f810ba76ed9211cd6036141a8cb74d221fff187a20a9a5162ca6a7e3d8aa27b2a706a36b8d4b4597a2ac3733f06569aed8825", 0x87}, {&(0x7f0000000780)="e4486514f161694f5c69c0fba8f76403ff146d6f9e985f642cbdc28cb81fb4d8bd064a8f37b3cff8f47c3051036252d1f36be411bda6c4c4469828abbfb8c0ee53f80ee3a86a434cdf91d050b7bdc8f1039e4777c160e76f98c1c7803499dc96725961659eb83349708c7ddd1f3c756ff4331854e02ce0deb4a378574115122644d4d7d0571292", 0x87}, {&(0x7f0000000180)="3fb9e25b10bedf602017a6069fa76511c2827f6ec5257275b228be28de961405f4a71fdca6b77aa4da5541435e10ffa0aae9bf1183f29ce8bad3c24dfeab76bb04da17fce08ddd20091f7884edee4457348663fc9a5df02e045a70093955575f61f6ba90bf33f911ab10e97a981cb6fb5599906a10c90a3a28234987cf7cd6", 0x7f}], 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) mount$incfs(0x0, 0x0, &(0x7f00000005c0), 0x48000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x22000020) umount2(&(0x7f0000000100)='./file0\x00', 0x2) connect$vsock_stream(r3, &(0x7f0000000140), 0x10) listen(r3, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1a1341, 0x0) 11.506472663s ago: executing program 4 (id=667): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x50281, 0x0, 0x8}, 0x18) pipe2$9p(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 11.497108703s ago: executing program 4 (id=668): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x408582, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async) tgkill(0x0, 0x0, 0x22) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3fd}, 0xffffffaa) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) 11.401731015s ago: executing program 4 (id=669): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000040)) (async) timer_gettime(r1, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x7ffff000) 11.382350346s ago: executing program 33 (id=669): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000040)) (async) timer_gettime(r1, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x7ffff000) 4.592122463s ago: executing program 2 (id=811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/251, 0xfb, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x2, 0x24}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @release], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) 3.6876257s ago: executing program 2 (id=830): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000280)=@req={0x0, 0xfffffff9, 0x9, 0x3}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x6}], 0x1, 0x7fffeca3, 0x0) (async) rt_sigaction(0x19, &(0x7f0000000000)={&(0x7f0000000340)="dfd3bf2e36c07fff7066440f1ed20000d3a41039000000f344aa643e3ef08104dc19b4000041d8d041de7dd3c4e2f9db8179d90000f3410f5d4efe", 0x5c000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) (async) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) fallocate(r2, 0x0, 0x400000000000000, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x1) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000001140)=0x1, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) timer_create(0x4, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000180)={{}, {r7, r8+10000000}}, &(0x7f00000001c0)) r9 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) (async) write$P9_RCREATE(r3, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x2, 0x3, 0x1}, 0x1ff}}, 0x18) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0xf, 0x57, 0x2, 0x0}) 3.675948761s ago: executing program 2 (id=831): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x596, 0x5, 0x6, 0x8}, 0x3e, [0x7, 0x9, 0x100, 0xce05, 0x8001, 0x814, 0x5, 0x0, 0x81, 0x0, 0x9, 0x3ff, 0x6, 0x9, 0x4, 0x8, 0x0, 0x3, 0x4, 0x2, 0x9, 0x8, 0x5, 0x77858b97, 0x9, 0x5804, 0xc69, 0x1, 0xfff, 0x5, 0x6, 0x7, 0xc4, 0x9, 0x7, 0x6, 0x9, 0x7, 0x9, 0x0, 0x3, 0xf6cb, 0x8, 0x8, 0x7, 0x101, 0x8, 0x6, 0xfff, 0x6f7, 0x9, 0x2eb00000, 0x8, 0x7, 0x3, 0x8, 0x0, 0x1, 0xff, 0x3, 0x2, 0x0, 0x2, 0x6], [0xeb86, 0x5, 0xa, 0xc, 0x8, 0x3, 0x0, 0x9, 0xffff3863, 0x0, 0x7f, 0x6, 0x200, 0x1, 0x7fffffff, 0x6, 0x0, 0xb60a, 0xfff, 0xfd, 0x6, 0x1, 0x3c326450, 0x0, 0x200, 0x7, 0x9, 0x6, 0x76f5, 0x4, 0x6, 0x5, 0x401, 0x2, 0x9409, 0x3ff, 0x5, 0x1, 0xfff, 0x3, 0x2, 0x80000000, 0x3ff, 0x10001, 0xc79, 0x2, 0xfff, 0x6, 0x7, 0xa, 0xe, 0x8, 0x401, 0x6, 0x8, 0x8, 0x9, 0x1, 0xd5, 0x200, 0x5, 0x7, 0x80, 0x87], [0xfffffff1, 0x9, 0x20000000, 0x4, 0x2, 0x9, 0x2, 0x3, 0x2, 0x6, 0xabe, 0x0, 0x4, 0x2409, 0x7b, 0x8, 0x3, 0x80, 0xb3, 0xf, 0xff, 0x3, 0x4, 0x3, 0x2, 0x3, 0x36, 0x1, 0x1, 0x6, 0x5, 0x8, 0x9, 0x4, 0x5, 0x4, 0x5, 0x1392, 0x6, 0x800, 0x9, 0x7, 0x3, 0x2, 0x3, 0x9, 0x6, 0x7fffffff, 0x2, 0x10, 0x0, 0x0, 0x2, 0x8, 0xe, 0x5, 0x3ff, 0x9, 0x10, 0x7, 0x5, 0x5, 0x4], [0xe, 0x3, 0x3, 0x2377eb18, 0x1a, 0x4, 0x4, 0xc9b, 0xfffffffd, 0x8, 0x0, 0x1, 0x8, 0xa, 0x9, 0x6, 0x839, 0x80000000, 0x2, 0x1, 0x1000, 0xd, 0x6, 0x7, 0x10, 0x4, 0x0, 0x3, 0x6, 0xc, 0x1, 0x3, 0x4, 0x101, 0x7, 0x2, 0x9d, 0x7, 0x7, 0x8, 0x3ff, 0xcddf, 0x0, 0xc796, 0x6, 0x4, 0x1, 0x615, 0xfffffffd, 0x0, 0x4, 0x80000001, 0x8, 0x1, 0x2, 0xffffff4e, 0xc, 0x7fffffff, 0x5, 0x6, 0x0, 0x20, 0x0, 0x6]}, 0x45c) r1 = socket(0x10, 0x803, 0x0) recvmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.592689762s ago: executing program 2 (id=832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) getpeername(r2, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xe, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x142, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x401, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3.566255453s ago: executing program 2 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x20000}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0x5000, 0x1, 0x0, 0x3, 0xf4, 0xc6, 0x1, 0x0, 0x2a, 0x5, 0x4}, {0x10000, 0x6a810118234bc4b0, 0xd, 0x3, 0x0, 0x43, 0x8a, 0x2, 0x1, 0x9, 0x2, 0x3}, {0x2, 0x80a0000, 0x3, 0x3, 0xe9, 0xd, 0xd1, 0x8, 0x9, 0x7, 0x3, 0x2}, {0x8000000, 0x2, 0xc, 0x3, 0xff, 0x9, 0x4, 0x5, 0x19, 0x9, 0x7, 0x2}, {0x3000, 0x10000, 0xc, 0xa7, 0x6, 0xf, 0x3, 0x0, 0x3, 0x3, 0x2, 0xa1}, {0x4, 0xeeef0000, 0xd, 0x4, 0x9a, 0xb5, 0x2, 0x40, 0xf8, 0xed, 0x9, 0x2}, {0x3000, 0x0, 0xb, 0xb, 0x8, 0xc5, 0x9, 0x4, 0x7, 0xc, 0x4, 0xfc}, {0x4, 0x10000, 0x3, 0x4, 0xe, 0xc, 0x81, 0x7, 0xd, 0xff, 0xe, 0x7f}, {0x2, 0x2}, {0xeeee0000, 0xb}, 0x8005001c, 0x0, 0x100000, 0x100000, 0x7, 0x0, 0x1000, [0x1, 0x2, 0x5, 0xffff]}) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x9}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) pipe(&(0x7f0000001300)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r9, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="890492fb789e0292fcfdec"], 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 3.085760122s ago: executing program 3 (id=836): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @fd, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socket(0x10, 0x4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3.085198632s ago: executing program 3 (id=837): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000110001"], 0x30}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.072936372s ago: executing program 3 (id=838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.057939372s ago: executing program 3 (id=839): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x846}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xf5, 0x7b}}}}}]}}]}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x2801, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) write(r0, &(0x7f00000002c0)="e5caddd25225f58781993717697062c1e7dccb1ecdb7a0402e821bdbf7b3289f7f2e41ccf997885a6da30bf269d6a2066f6226105f0fba989d7cd1547f0b68ec9a3730d254a28cda2818a2b5e5f856b7c9a1cac2c2997e41d81aa11bacb11fa52db5d92d288d1b02da968dedcba5a67aaeb56a35be13af6bb420b5794dfc83535718f3143ffa35fa18f4f3bf51b061e01ed2ea189666113d4268d5553506000ff543238f5e667c4367", 0xa9) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x860102, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000280)={0x4, 0x8, 0xffffffff, 0x3, 0x4, "86d0c634961d2fe8feb86be97e2d18dd6d251e"}) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x14, 0x1b, 0x1e5, &(0x7f0000000980)="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"}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000900)}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28", 0x1a}, {&(0x7f0000000940)="74739b5832d9f06f8d760a", 0xb}], 0x3, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000003100)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0xf, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x92, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x53, 0x4, 0xb4}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x16, &(0x7f0000000040)=@string={0x16, 0x3, "c8d0a915b8c42196c07f8723ad7828bc58d961dd"}}, {0x0, 0x0}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.517718103s ago: executing program 5 (id=854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x204a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x2000c010) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7}}, 0x14}}, 0x4040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x80000001, 0x400) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f00000000c0)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="c637baa7400629a3e299c946d71506876313fc", @ANYBLOB="08002700851600000a00180000000000000000001c005a80180001", @ANYRESHEX], 0x4c}}, 0x4000804) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.489386343s ago: executing program 3 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000002ac1e00010000000000000000000000000000000000020000020000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110015efc3d105e042709684b010203010902616501090690e90904900401ff"], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000002680)=[@dead_binder_done], 0x0, 0x0, 0x0}) 2.454090453s ago: executing program 5 (id=856): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4043, &(0x7f0000000cc0)=ANY=[@ANYBLOB='rlog_pages=0']) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000002900)=""/4085, 0xff5, 0x66) 2.402000375s ago: executing program 5 (id=857): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x0, 0x4, 0x86cc, 0x81, 0xf4, 0x4, 0x4, 0xc0, 0x14, 0x2, 0xa5, 0xa, 0x6, 0x5, 0xcc, [0xf6000000, 0x6]}}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 2.401661895s ago: executing program 5 (id=858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x8002, 0x7ff, 0x0, 0x8, 0x1, 0x44, 0x5, 0x200, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 1.861943035s ago: executing program 3 (id=861): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe2(0x0, 0x80000) r0 = syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x8, @string={0x8, 0x3, "7f0766df0300"}}, 0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc7441, 0x0) write$cgroup_netprio_ifpriomap(r3, 0x0, 0x0) 1.727966648s ago: executing program 2 (id=862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201f31ddd01e54caf65d36a74ee03c40000751c0110e60f00989ad10102030109021b0001000000000904290201b48cbb0009050402100000fa00"], 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x6, 0x0, [{0xeeee0000, 0x1000, &(0x7f0000001600)=""/4096}, {0x5000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0xfffffd27, &(0x7f00000001c0)=""/4}, {0x1000, 0xc461de124a7460e9, &(0x7f0000000580)=""/113}, {0xf000, 0x11, &(0x7f00000004c0)=""/17}, {0x2, 0xbd, &(0x7f0000000640)=""/189}]}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0xfffff000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b}}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setreuid(0xee00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r7, &(0x7f0000002600)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)="34a6cd08fb2307840cc5e775b459a705c0fee9fd53f2d37bc7f7ddc039ed278abc24f6f3caab633fe19839a4ab24d6b19bddbc912aa9c62926dcc208f1061a84582715ed0b92edfd341501632f452d9c7447d81ce693997e0626d076dea1afb0e652d601f065a0e54e023dfd370119bdb6f8abb0323f0f24dec6d46dbabbe8a8b47602029a38a8b74e98057f573b7d8ea39c01e41addd6a27dd2", 0x9a}, {&(0x7f0000000940)="fd726339db068b07934c1bfb125bc8aba592196df35a1e008843581825912f63e2ce7435ba3db545529b9510531533dfc9d446660f813d9cc8bc6d3ed4829c3d8765556dc17c121d75cbf351f224cced5849164217fd506ee60c744dc5b38e482d07477ee6da72a9e16a6bfb3669e64f5289febd5da2fc83375ac5e24ba1fa1bc7e2c8b2817b9fc3f688ad80d3b98b4fa7790aab93fffadb2faaeb387d6468706dc267c1b6381a936c1b07fa77eada94278b03f04f247287f0acb7f474141c4280484297d0fdc58b5786995e665f6ad36bd2e95de53f16d31c839b476fe51f59d0", 0xe1}, {&(0x7f0000000280)="b3ae821cbcac37f268a4a791bc9028ba79d96c9f65ca110f67f40f9e138e0977b6cb1dde23044bca8eee631aa7b159cc4410adcf79e277521df3f6f03025c46a3f686a2e373d7ea1009b0bd6e8cf7b6e89afc49d701bae1b579b8f6b", 0x5c}, {&(0x7f0000000a40)="77b9c48cee58d30ccc01dcccbdf5873c64adbec00e6f7f3b0747610c76671c573460f5399e471fa9e401737038ff68a5054fdaf74fabc7b61a6009d45b3e554d81c5d26750a174c599295fa902592fb85712736aeca9c646fd7a2dbf79bb38f1249916a0c60d011abbcf", 0x6a}, {&(0x7f0000000ac0)="bd45", 0x2}], 0x5, &(0x7f0000000b80)=[@rights={{0x28, 0x1, 0x1, [r0, r5, r0, r1, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x40, 0x4000}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="6534811491442f8291871945d82be2e6d313b47195adab41e94fcf67e5fe8c62fe2711cb2355cbaf025050d2b2b178a20b719b05cc05ca5798aba3450112705e3179901a2af709eddcbd15f09ba93e5b1c45756d56c7be9084f1718b", 0x5c}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20, 0x8090}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000e80)="1467f16827df35a501326c8b43695c65f8a43830c5b19834cd94e34ff825d8e739267c481edadcd7cc7785a59737bb0b920d21390528bc00d9a921296a73891e883a2907c4365d2c880ce40d41d8ae40c2abc8ade1907217c1e8d9c569abd8b244007853536d91807e4ba71889f67d9732c4341d23cc7ca94824e3ade333a93a083d80f23e3eb85760bc6d6693362c4117c5d626282e984ced85cd303f655e403e3e35e162e4dba5c517c6", 0xab}, {&(0x7f0000000f40)="8075b220574d0450784e0d9e41d472532a3c6d35a9e5d63ca5f6eb3aa262cc00362f7e062f0d8fcdafc337c53f52afd6fe542e45d159e400ecedf0330bd430986b7c29eda7959cffea5c22c1bc7da07b47167bba3034fc9d71c47411d12fae5c1f1c779ebb73de5feaf4cad6d6c33fd85f5e6c977b11d57f8b91abb20c99e833cb62473a3fcfd1246110f982b106ae3a6f1c05b9525b08a25e3af5378b58e288bd4d9ddf5518f3cb7d799dab98f4cb", 0xaf}, {&(0x7f0000001000)="96f25a330a40dd30a8403d8a00363fa8e192f8756ffbef9aafd2754864e55d026c7027032aa6d9cf0b5ba6888a7575ba0185accfa5133d73a00a8cd24cc966fca661682ecef610529ff69407b7442b476119336bce25dec968b316a801c7c455a14fd079cb4e11c3d9b1287da065916548d14ea268eef459d856b8a6e9b63732155b77781621356c4763ab3a90351c3cccdfd7f4b2f136e3a269ab6b19dd5f0dd021ecee91a62a6d07001bb11ddadfc75f429af9750ec58e1afe4412c72f334add0852c7", 0xc4}, {&(0x7f0000001100)="e6d1895d6474a9b8cac7fc03f50d52a4d86bfbfeaefb1fb257eda3d855bea060", 0x20}, {&(0x7f0000001140)="30c8378ed9356204d29cbd49940eccca80975faf34d1b48e477df828707eac0937dc5d27f89769ce221fe5a374abc58b9035b0d91d78ce5dda17504bd3bc1235780d7f1ff0ef108da92c2be6a7b3782d8411fc1394fdf42a8c7006023fc5808418cdaafa0928a76e0e49bf400dd13b78bcfdb290f77048da6c86d860a65c150fcba09f7f5ff71ad66df34547f85ae7bd5e0bb04aa099a2c8c48de02146541646bd4cdd15f84ff7ec81a0a7af6d22f21494eb9fef755b7b02c039d88d96fcfa69c7321a9a53112e286ef03e0af4380b48d48d0448164cfc08287136", 0xdb}, {&(0x7f0000001240)="c9bc611013fd5fb1510d16e194713957ac10dc0d3b73fde70f9856e7f5f940940c76d02e46669bdc4494387555a8fd8281aa58d0437fa554ef9338ce392e0d091f9efa2ef37fccab70700225dce31d3b5582cd77b4bd86642ee4e0f79f71341f5ed22479697c3c64b20e2dab3bb25ccd3ec43c2647ee3cf6a962e8b1cf8a209cea0385679aba6032dc4943803c847cdc711879e3604abfa01a01a219899d71b5127803bd34f139d802404fdc82c8fb562e", 0xb1}], 0x6, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r6, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r4, r7]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r5, r6, r6, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}, @rights={{0x34, 0x1, 0x1, [r2, r3, r3, r5, r4, r3, r6, r7, r1]}}], 0xf8, 0x40044800}}], 0x3, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = openat(0xffffffffffffffff, 0x0, 0x20c601, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000003000)="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", 0x1000) madvise(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x1) syz_open_procfs(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 335.999424ms ago: executing program 5 (id=866): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x125400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x10000, 0x2, 0xfffffffffffffffa}) clock_gettime(0xfffffffffffffff5, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r4}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000f00)={0x81, 0x0, 0x1}) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 288.489325ms ago: executing program 5 (id=867): setfsuid(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r3, 0xa, 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'vlan1\x00', @random="010000201000"}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX=r0], 0xfdef) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r7, 0x107, 0x18, &(0x7f0000000240)=0x4e6f, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000300)={"dc13814105f3453280ffa15dd9fff295", 0x0, 0x0, {0x4892, 0xb393}, {0x7, 0x3}, 0xffffffffffff7fff, [0xff, 0x8, 0x1, 0x5, 0x7, 0xfffffffffffffffe, 0x200, 0x5ac85dbb, 0xfffffffffffffff9, 0x6, 0x8000, 0x1, 0x3ff, 0x2, 0x7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000140)=r9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r8) ptrace(0x420e, r8) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x49841, 0x0) 73.932479ms ago: executing program 1 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) listen(r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)=0xfffffffc) 73.706419ms ago: executing program 1 (id=874): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x22000000) umount2(&(0x7f0000000080)='./file0\x00', 0xc) 73.236159ms ago: executing program 1 (id=875): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0xcf, 0xea9f, &(0x7f0000000000)=0x800}) 72.957479ms ago: executing program 1 (id=876): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xfdc48000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000040)={0x7, 'veth0_to_bond\x00', {0x3}, 0x1d}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 17.63316ms ago: executing program 1 (id=877): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x541e, 0xff4f370c567f0000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/256, 0x107f, 0x0, 0x0}, &(0x7f0000000180)=0x8d) fchdir(0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000940)) timer_getoverrun(0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=878): r0 = gettid() openat$uinput(0xffffffffffffff9c, &(0x7f0000001500), 0x802, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) pwritev(r4, &(0x7f0000001380)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="9b797970c78bccce8ff08892a23f417afe1f86fe60829ebfe82588ac46bbf4dd53dcb5a40e284b12c9ff073ea8b8729a55fbba1e1d4fa91e7d9c15947a8dc3339e3d384380e6849e2afc3557fa50fab4345a0d932312af7ef0bdab982056167f5da1474de21bac0635169d100063a0175e38523de3f489a1b508e180657582833abb83031d5b", 0x86}, {&(0x7f00000002c0)="17fcceece73fde0c5afa35758b3828157e1068f8439745a143cb434cbfc8d78a1a5e2f5e23bc65e6dcf2b50da38c2749f5990b636734897e0342", 0x3a}, {&(0x7f0000000300)="199c51329d5e03d97f03b874cf140de35ac22207c1b581d1811bcbf34bc2e4c697f34a81643c3d68123af11dd9bcd5930321", 0x32}, {&(0x7f0000000340)="3f909cb3f41d82370fc260fbedfeafa572d608e3d7f00315d31f5240675495e84b9f2c30820db049bcf5d3a6", 0x2c}, {&(0x7f0000000380)="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", 0x1000}], 0x6, 0x28b, 0x885) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, r6, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) r7 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000001400)={'syz', 0x2}, &(0x7f0000001440)=ANY=[@ANYBLOB="01000000000000006162343b19d51149cd577a30313233343536"], 0x29, 0xfffffffffffffff8) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540), 0x20001, 0x0) close_range(r2, r8, 0x2) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001480)=0x0) getgroups(0x4, &(0x7f00000014c0)=[0xee01, 0xee01, 0xee00, 0x0]) keyctl$chown(0x4, r7, r9, r10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 21.851912][ T36] audit: type=1400 audit(1758136743.289:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.853014][ T283] cgroup: Unknown subsys name 'net' [ 21.874560][ T36] audit: type=1400 audit(1758136743.289:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.901815][ T36] audit: type=1400 audit(1758136743.309:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.902134][ T283] cgroup: Unknown subsys name 'devices' [ 22.082591][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.088229][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.261036][ T36] audit: type=1400 audit(1758136743.699:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.284205][ T36] audit: type=1400 audit(1758136743.699:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.308974][ T36] audit: type=1400 audit(1758136743.699:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.318224][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.340825][ T36] audit: type=1400 audit(1758136743.779:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.366336][ T36] audit: type=1400 audit(1758136743.779:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.407680][ T36] audit: type=1400 audit(1758136743.839:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.433495][ T36] audit: type=1400 audit(1758136743.839:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.433543][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.160821][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.167891][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.174995][ T290] bridge_slave_0: entered allmulticast mode [ 23.181220][ T290] bridge_slave_0: entered promiscuous mode [ 23.187573][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.194647][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.201728][ T290] bridge_slave_1: entered allmulticast mode [ 23.208018][ T290] bridge_slave_1: entered promiscuous mode [ 23.312637][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319685][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.326826][ T296] bridge_slave_0: entered allmulticast mode [ 23.333142][ T296] bridge_slave_0: entered promiscuous mode [ 23.346756][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.353854][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.360940][ T296] bridge_slave_1: entered allmulticast mode [ 23.367080][ T296] bridge_slave_1: entered promiscuous mode [ 23.432887][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.439939][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.447280][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.454312][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.465506][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.472711][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.479787][ T295] bridge_slave_0: entered allmulticast mode [ 23.486050][ T295] bridge_slave_0: entered promiscuous mode [ 23.492820][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.499856][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.506968][ T295] bridge_slave_1: entered allmulticast mode [ 23.513263][ T295] bridge_slave_1: entered promiscuous mode [ 23.526246][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.533320][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.540605][ T294] bridge_slave_0: entered allmulticast mode [ 23.547005][ T294] bridge_slave_0: entered promiscuous mode [ 23.560282][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.567461][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.574710][ T294] bridge_slave_1: entered allmulticast mode [ 23.581112][ T294] bridge_slave_1: entered promiscuous mode [ 23.751896][ T290] veth0_vlan: entered promiscuous mode [ 23.768704][ T290] veth1_macvtap: entered promiscuous mode [ 23.777708][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.784774][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.792673][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.799690][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.825243][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.832322][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.850063][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.858312][ T295] veth0_vlan: entered promiscuous mode [ 23.875819][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.882897][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.891110][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.898148][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.907890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.914962][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.938250][ T295] veth1_macvtap: entered promiscuous mode [ 23.988643][ T296] veth0_vlan: entered promiscuous mode [ 24.006453][ T294] veth0_vlan: entered promiscuous mode [ 24.016773][ T296] veth1_macvtap: entered promiscuous mode [ 24.033834][ T294] veth1_macvtap: entered promiscuous mode [ 24.072693][ T338] __vm_enough_memory: pid: 338, comm: syz.1.5, bytes: 18014402804453376 not enough memory for the allocation [ 24.075035][ T353] netlink: 'syz.0.7': attribute type 22 has an invalid length. [ 24.107332][ T355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 24.155566][ T366] rust_binder: Error while translating object. [ 24.155634][ T366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.173887][ T366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 24.201227][ T366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.210309][ T373] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 24.226660][ T377] rust_binder: Error while translating object. [ 24.226718][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.234187][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 24.278822][ T385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'. [ 24.356854][ T393] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.480774][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.633051][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 24.642241][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.650234][ T9] usb 1-1: Product: syz [ 24.654683][ T9] usb 1-1: Manufacturer: syz [ 24.659269][ T9] usb 1-1: SerialNumber: syz [ 25.310854][ T339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.410723][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.460753][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 25.466997][ T339] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 25.475293][ T350] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.482842][ T339] usb 3-1: config 0 has no interface number 0 [ 25.488928][ T339] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 25.499139][ T339] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 25.510626][ T339] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 25.519710][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.527741][ T339] usb 3-1: Product: syz [ 25.531920][ T339] usb 3-1: Manufacturer: syz [ 25.536495][ T339] usb 3-1: SerialNumber: syz [ 25.541830][ T339] usb 3-1: config 0 descriptor?? [ 25.547103][ T404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 25.554384][ T9] usb 2-1: device descriptor read/64, error -71 [ 25.556102][ T404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 25.660718][ T350] usb 4-1: Using ep0 maxpacket: 32 [ 25.667291][ T350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.675849][ T350] usb 4-1: config 14 has an invalid interface number: 32 but max is 0 [ 25.684067][ T350] usb 4-1: config 14 has no interface number 0 [ 25.690369][ T350] usb 4-1: config 14 interface 32 has no altsetting 0 [ 25.698889][ T350] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 25.708000][ T350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.716069][ T350] usb 4-1: Product: syz [ 25.720237][ T350] usb 4-1: Manufacturer: syz [ 25.724903][ T350] usb 4-1: SerialNumber: syz [ 25.772380][ T339] usb 3-1: USB disconnect, device number 2 [ 25.830709][ T9] usb 2-1: device descriptor read/64, error -71 [ 25.936815][ T350] ums-usbat 4-1:14.32: USB Mass Storage device detected [ 25.944806][ T350] ums-usbat 4-1:14.32: Quirks match for vid 0781 pid 0005: 1 [ 25.952673][ T350] ums-usbat 4-1:14.32: This device (0781,0005,0005 S 39 P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 25.952673][ T350] Please send a copy of this message to and [ 26.012368][ T350] usb 4-1: USB disconnect, device number 2 [ 26.070824][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.200763][ T9] usb 2-1: device descriptor read/64, error -71 [ 26.442671][ T9] usb 2-1: device descriptor read/64, error -71 [ 26.462384][ T424] input: syz1 as /devices/virtual/input/input5 [ 26.530783][ T350] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.560863][ T9] usb usb2-port1: attempt power cycle [ 26.652367][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 26.681859][ T350] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 26.699264][ T350] usb 3-1: config 220 has an invalid descriptor of length 140, skipping remainder of the config [ 26.709867][ T350] usb 3-1: config 220 has no interface number 2 [ 26.716183][ T350] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 26.729337][ T350] usb 3-1: config 220 interface 0 has no altsetting 0 [ 26.736124][ T350] usb 3-1: config 220 interface 76 has no altsetting 0 [ 26.743042][ T350] usb 3-1: config 220 interface 1 has no altsetting 0 [ 26.751286][ T350] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 26.760330][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.768341][ T350] usb 3-1: Product: syz [ 26.772552][ T350] usb 3-1: Manufacturer: syz [ 26.777135][ T350] usb 3-1: SerialNumber: syz [ 26.900730][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.921956][ T9] usb 2-1: device descriptor read/8, error -71 [ 26.984096][ T420] rust_binder: Fixups oob 165 172 361 173 [ 26.984119][ T420] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 26.989966][ T420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.998607][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 27.011529][ T350] usb 3-1: selecting invalid altsetting 0 [ 27.026544][ T350] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 27.033206][ T350] usb 3-1: No valid video chain found. [ 27.040764][ T350] usb 3-1: USB disconnect, device number 3 [ 27.051678][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.246488][ T45] usb 1-1: USB disconnect, device number 2 [ 27.262742][ T434] overlayfs: failed to resolve './file1': -2 [ 27.269370][ T36] kauditd_printk_skb: 125 callbacks suppressed [ 27.269387][ T36] audit: type=1400 audit(1758136748.696:199): avc: denied { read write } for pid=433 comm="syz.0.31" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.299826][ T36] audit: type=1400 audit(1758136748.696:200): avc: denied { open } for pid=433 comm="syz.0.31" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.323952][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.352294][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.381604][ T438] rust_binder: 33: no such ref 5 [ 27.386582][ T438] rust_binder: Write failure EINVAL in pid:33 [ 27.396687][ T440] rust_binder: 35: no such ref 0 [ 27.461559][ T36] audit: type=1400 audit(1758136748.896:201): avc: denied { map } for pid=446 comm="syz.3.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.463674][ T447] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 27.485882][ T36] audit: type=1400 audit(1758136748.896:202): avc: denied { write } for pid=446 comm="syz.3.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.514042][ T9] usb 2-1: device descriptor read/8, error -71 [ 27.519717][ T36] audit: type=1400 audit(1758136748.946:203): avc: denied { read } for pid=448 comm="syz.3.37" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 27.551485][ T36] audit: type=1400 audit(1758136748.946:204): avc: denied { open } for pid=448 comm="syz.3.37" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 27.556423][ T451] can0: slcan on ttyS3. [ 27.579612][ T36] audit: type=1400 audit(1758136749.016:205): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.600815][ T36] audit: type=1400 audit(1758136749.016:206): avc: denied { read write } for pid=448 comm="syz.3.37" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.625503][ T36] audit: type=1400 audit(1758136749.016:207): avc: denied { open } for pid=448 comm="syz.3.37" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.635941][ T9] usb usb2-port1: unable to enumerate USB device [ 27.650197][ T36] audit: type=1400 audit(1758136749.016:208): avc: denied { ioctl } for pid=448 comm="syz.3.37" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 27.730764][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.801074][ T451] can0 (unregistered): slcan off ttyS3. [ 27.880703][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 27.895308][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 27.914893][ T45] usb 1-1: config 0 has no interface number 0 [ 27.936148][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 27.941343][ T477] exFAT-fs (rnullb0): invalid boot record signature [ 27.953067][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 27.962214][ T477] exFAT-fs (rnullb0): failed to read boot sector [ 27.965384][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.968557][ T477] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.976865][ T45] usb 1-1: Product: syz [ 27.990698][ T45] usb 1-1: Manufacturer: syz [ 27.995317][ T45] usb 1-1: SerialNumber: syz [ 28.019903][ T45] usb 1-1: config 0 descriptor?? [ 28.029697][ T45] smsc75xx v1.0.0 [ 28.281045][ T501] fuse: blksize only supported for fuseblk [ 28.430869][ T436] x_tables: duplicate entry at hook 2 [ 28.438730][ T436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 28.439273][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 28.459264][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 28.469171][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 28.479421][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 28.491041][ T45] usb 1-1: USB disconnect, device number 3 [ 28.590718][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.730732][ T65] usb 2-1: device descriptor read/64, error -71 [ 28.954664][ T511] overlay: Unknown parameter 'func' [ 28.963910][ T511] rust_binder: Write failure EFAULT in pid:25 [ 28.965416][ T511] overlay: Unknown parameter 'func' [ 28.965558][ T514] rust_binder: Write failure EFAULT in pid:25 [ 28.980721][ T65] usb 2-1: device descriptor read/64, error -71 [ 29.006603][ T517] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.210756][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.231712][ T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.360712][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 29.365888][ T65] usb 2-1: device descriptor read/64, error -71 [ 29.373133][ T45] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 29.383243][ T45] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.394977][ T45] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.404723][ T45] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.417508][ T45] usb 3-1: config 7 interface 0 has no altsetting 0 [ 29.424131][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 29.433176][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.566125][ T525] batadv_slave_0: mtu less than device minimum [ 29.573097][ T525] netlink: 'syz.0.54': attribute type 5 has an invalid length. [ 29.580742][ T525] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.54'. [ 29.594247][ T525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=525 comm=syz.0.54 [ 29.610882][ T65] usb 2-1: device descriptor read/64, error -71 [ 29.668601][ T539] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 29.696611][ T546] 9pnet_fd: Insufficient options for proto=fd [ 29.720851][ T551] overlayfs: failed to clone upperpath [ 29.726487][ T65] usb usb2-port1: attempt power cycle [ 29.815062][ T558] netlink: 'syz.0.66': attribute type 6 has an invalid length. [ 29.822677][ T558] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 29.830226][ T558] netlink: 'syz.0.66': attribute type 6 has an invalid length. [ 29.837795][ T558] netlink: 'syz.0.66': attribute type 13 has an invalid length. [ 29.845584][ T558] netlink: 'syz.0.66': attribute type 15 has an invalid length. [ 29.850576][ T45] hid (null): invalid report_size 28531 [ 29.853445][ T558] netlink: 'syz.0.66': attribute type 19 has an invalid length. [ 29.867397][ T558] netlink: 3684 bytes leftover after parsing attributes in process `syz.0.66'. [ 29.869660][ T45] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0001/input/input6 [ 29.898988][ T45] kye 0003:0458:5010.0001: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 29.939151][ T564] capability: warning: `syz.0.68' uses deprecated v2 capabilities in a way that may be insecure [ 29.968844][ T568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.69'. [ 30.065879][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 30.090728][ T65] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.111749][ T65] usb 2-1: device descriptor read/8, error -71 [ 30.241725][ T65] usb 2-1: device descriptor read/8, error -71 [ 30.275683][ T513] process 'syz.2.50' launched './file0' with NULL argv: empty string added [ 30.480735][ T65] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 30.501751][ T65] usb 2-1: device descriptor read/8, error -71 [ 30.631740][ T65] usb 2-1: device descriptor read/8, error -71 [ 30.670768][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 30.671104][ T506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.740840][ T65] usb usb2-port1: unable to enumerate USB device [ 30.950711][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.080708][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.320727][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.560728][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 31.624730][ T594] tipc: Started in network mode [ 31.629696][ T594] tipc: Node identity ac14142f, cluster identity 4711 [ 31.637082][ T594] tipc: New replicast peer: 0.0.0.0 [ 31.642631][ T594] tipc: Enabled bearer , priority 10 [ 31.665068][ T596] UHID_CREATE from different security context by process 35 (syz.1.78), this is not allowed. [ 31.682790][ T596] rust_binder: 35: no such ref 2 [ 31.691007][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.691019][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 31.765733][ T598] 9pnet: Could not find request transport: fdÈvæ‰ÄÍ(\B_™ž [ 31.874699][ T610] netlink: 396 bytes leftover after parsing attributes in process `syz.1.84'. [ 31.896876][ T612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.896905][ T612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.914087][ T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.929237][ T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.940721][ T45] usb 4-1: device descriptor read/64, error -71 [ 31.968670][ T494] usb 3-1: USB disconnect, device number 4 [ 32.037381][ T625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=625 comm=syz.2.89 [ 32.051497][ T45] usb usb4-port1: attempt power cycle [ 32.103970][ T626] ======================================================= [ 32.103970][ T626] WARNING: The mand mount option has been deprecated and [ 32.103970][ T626] and is ignored by this kernel. Remove the mand [ 32.103970][ T626] option from the mount to silence this warning. [ 32.103970][ T626] ======================================================= [ 32.139145][ T626] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 32.150744][ T65] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 32.225071][ T628] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 32.225105][ T628] rust_binder: Error while translating object. [ 32.237356][ T628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.243570][ T628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 32.300703][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 32.319537][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.329116][ T65] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 32.337374][ T65] usb 2-1: config 6 has no interface number 0 [ 32.343474][ T65] usb 2-1: config 6 interface 248 has no altsetting 0 [ 32.351844][ T65] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 32.360950][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.368932][ T65] usb 2-1: Product: syz [ 32.373100][ T65] usb 2-1: Manufacturer: syz [ 32.377689][ T65] usb 2-1: SerialNumber: syz [ 32.405624][ T339] rust_binder: 629: removing orphan mapping 0:24 [ 32.410738][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 32.419978][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 32.419992][ T36] audit: type=1400 audit(1758136753.846:262): avc: denied { create } for pid=632 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.420616][ T633] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 32.445216][ T633] rust_binder: Error while translating object. [ 32.446197][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.457741][ T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.469724][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 32.479801][ T633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.529943][ T638] rust_binder: Error in use_page_slow: ESRCH [ 32.536525][ T638] rust_binder: use_range failure ESRCH [ 32.542811][ T638] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 32.548369][ T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.556615][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:58 [ 32.565690][ T640] fuse: Bad value for 'fd' [ 32.580564][ T36] audit: type=1400 audit(1758136754.006:263): avc: denied { mount } for pid=639 comm="syz.0.94" name="/" dev="ramfs" ino=4648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.605632][ T65] ums-karma 2-1:6.248: USB Mass Storage device detected [ 32.609431][ T36] audit: type=1400 audit(1758136754.036:264): avc: denied { write } for pid=637 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 32.632370][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.649029][ T36] audit: type=1326 audit(1758136754.076:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.0.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7844b8eba9 code=0x0 [ 32.683884][ T65] usb 2-1: USB disconnect, device number 10 [ 32.751384][ T654] 9pnet_fd: Insufficient options for proto=fd [ 32.770745][ T350] tipc: Node number set to 2886997039 [ 32.880724][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 32.901682][ T45] usb 4-1: device descriptor read/8, error -71 [ 32.980737][ T339] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.031793][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.113320][ T339] usb 3-1: device descriptor read/64, error -71 [ 33.123430][ T657] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 33.133096][ T36] audit: type=1400 audit(1758136754.566:266): avc: denied { relabelto } for pid=655 comm="syz.1.99" name="file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 33.159278][ T45] usb usb4-port1: unable to enumerate USB device [ 33.159582][ T36] audit: type=1400 audit(1758136754.566:267): avc: denied { associate } for pid=655 comm="syz.1.99" name="file0" dev="tmpfs" ino=122 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 33.246150][ T36] audit: type=1400 audit(1758136754.676:268): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 33.308425][ T661] rust_binder: 660 RLIMIT_NICE not set [ 33.308853][ T660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.314444][ T660] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 33.323929][ T660] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:61 [ 33.346735][ T663] binder: Unknown parameter '000000000000000000000040x0000000000000004' [ 33.371427][ T339] usb 3-1: device descriptor read/64, error -71 [ 33.377695][ T666] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 33.454116][ T36] audit: type=1400 audit(1758136754.886:269): avc: denied { lock } for pid=671 comm="syz.1.104" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.516089][ T36] audit: type=1400 audit(1758136754.946:270): avc: denied { ioctl } for pid=671 comm="syz.1.104" path="socket:[4762]" dev="sockfs" ino=4762 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.556850][ T36] audit: type=1400 audit(1758136754.986:271): avc: denied { connect } for pid=671 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.558128][ T672] Zero length message leads to an empty skb [ 33.610717][ T339] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.673824][ T681] rust_binder: Error while translating object. [ 33.673852][ T681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.680088][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 33.701937][ T683] 9pnet_fd: p9_fd_create_tcp (683): problem connecting socket to 127.0.0.1 [ 33.721550][ T683] rust_binder: Write failure EINVAL in pid:80 [ 33.731237][ T685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.738065][ T685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 33.747708][ T339] usb 3-1: device descriptor read/64, error -71 [ 34.002844][ T339] usb 3-1: device descriptor read/64, error -71 [ 34.111089][ T339] usb usb3-port1: attempt power cycle [ 34.450727][ T339] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.454476][ T715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.471879][ T339] usb 3-1: device descriptor read/8, error -71 [ 34.511175][ T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 34.601375][ T725] veth0_virt_wifi: entered allmulticast mode [ 34.616869][ T725] veth0_virt_wifi: left allmulticast mode [ 34.623893][ T339] usb 3-1: device descriptor read/8, error -71 [ 34.870712][ T339] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 34.891711][ T339] usb 3-1: device descriptor read/8, error -71 [ 35.021767][ T339] usb 3-1: device descriptor read/8, error -71 [ 35.130880][ T339] usb usb3-port1: unable to enumerate USB device [ 35.238054][ T339] rust_binder: 714: removing orphan mapping 0:24 [ 35.248779][ T742] binder: Unknown parameter '' [ 35.264948][ T746] exFAT-fs (rnullb0): invalid boot record signature [ 35.271644][ T746] exFAT-fs (rnullb0): failed to read boot sector [ 35.278053][ T746] exFAT-fs (rnullb0): failed to recognize exfat type [ 35.306557][ T750] rust_binder: 111: no such ref 0 [ 35.311710][ T750] rust_binder: 111: no such ref 3 [ 35.317182][ T750] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 35.324372][ T750] rust_binder: Write failure EINVAL in pid:111 [ 35.484035][ T761] /dev/nbd3: Can't lookup blockdev [ 35.837782][ T790] rust_binder: Read failure Err(EAGAIN) in pid:73 [ 36.174157][ T822] netlink: 'syz.0.157': attribute type 46 has an invalid length. [ 36.184455][ T822] netlink: 'syz.0.157': attribute type 46 has an invalid length. [ 36.275571][ T847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 36.287775][ T852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 36.310871][ T855] fuse: Bad value for 'user_id' [ 36.315900][ T855] fuse: Bad value for 'user_id' [ 36.338951][ T858] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 36.347456][ T858] rust_binder: Write failure EINVAL in pid:80 [ 36.399267][ T876] kernel profiling enabled (shift: 0) [ 36.468574][ T880] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 36.480715][ T880] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 36.870839][ T883] tipc: Started in network mode [ 36.875720][ T883] tipc: Node identity 923caf6055f6, cluster identity 4711 [ 36.882931][ T883] tipc: Enabled bearer , priority 0 [ 36.890742][ T882] tipc: Disabling bearer [ 37.117260][ T907] overlayfs: failed to clone upperpath [ 37.200719][ T65] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 37.225480][ T919] binder: Bad value for 'defcontext' [ 37.231115][ T920] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 37.271963][ T926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.350762][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 37.358355][ T65] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 37.381016][ T65] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 37.395211][ T65] usb 3-1: config 0 has no interface number 0 [ 37.402939][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 37.413915][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.422103][ T65] usb 3-1: Product: syz [ 37.426716][ T65] usb 3-1: Manufacturer: syz [ 37.433019][ T65] usb 3-1: SerialNumber: syz [ 37.439121][ T65] usb 3-1: config 0 descriptor?? [ 37.463675][ T929] rust_binder: 141: no such ref 1 [ 37.468904][ T929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 37.649601][ T65] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 37.686057][ T65] usb 3-1: No valid video chain found. [ 37.693368][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 37.693385][ T36] audit: type=1400 audit(1758136759.126:306): avc: denied { watch } for pid=932 comm="syz.1.194" path="/50/file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.696787][ T65] usb 3-1: USB disconnect, device number 9 [ 37.930724][ T494] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 38.070726][ T494] usb 2-1: device descriptor read/64, error -71 [ 38.310755][ T494] usb 2-1: device descriptor read/64, error -71 [ 38.550783][ T494] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 38.680738][ T494] usb 2-1: device descriptor read/64, error -71 [ 38.920772][ T494] usb 2-1: device descriptor read/64, error -71 [ 39.030856][ T494] usb usb2-port1: attempt power cycle [ 39.370799][ T494] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 39.391740][ T494] usb 2-1: device descriptor read/8, error -71 [ 39.521756][ T494] usb 2-1: device descriptor read/8, error -71 [ 39.760797][ T494] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 39.781824][ T494] usb 2-1: device descriptor read/8, error -71 [ 39.911753][ T494] usb 2-1: device descriptor read/8, error -71 [ 40.020842][ T494] usb usb2-port1: unable to enumerate USB device [ 44.756086][ T36] audit: type=1400 audit(1758136766.186:307): avc: denied { create } for pid=934 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 44.780043][ T940] overlayfs: failed to clone upperpath [ 44.802925][ T944] rust_binder: Write failure EFAULT in pid:149 [ 44.817025][ T949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.201'. [ 44.823416][ T36] audit: type=1400 audit(1758136766.256:308): avc: denied { mount } for pid=950 comm="syz.0.202" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.833538][ T949] incfs: Backing dir is not set, filesystem can't be mounted. [ 44.854527][ T951] overlayfs: failed to clone lowerpath [ 44.862757][ T949] incfs: mount failed -2 [ 44.867659][ T941] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 75) [ 44.871407][ T941] rust_binder: Error while translating object. [ 44.881868][ T36] audit: type=1400 audit(1758136766.306:309): avc: denied { write } for pid=950 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.898745][ T941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.907201][ T941] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 44.916647][ T941] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:109 [ 44.942842][ T494] rust_binder: 938: removing orphan mapping 0:24 [ 44.959360][ T36] audit: type=1400 audit(1758136766.386:310): avc: denied { append } for pid=959 comm="syz.2.205" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.290725][ T494] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.451824][ T494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.471504][ T494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.490719][ T494] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 45.501533][ T494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.511274][ T494] usb 2-1: config 0 descriptor?? [ 45.563146][ T36] audit: type=1400 audit(1758136766.996:311): avc: denied { map } for pid=968 comm="syz.0.208" path="socket:[7489]" dev="sockfs" ino=7489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.933215][ T976] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 45.940473][ T976] rust_binder: Write failure EINVAL in pid:116 [ 46.190879][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.314071][ T36] audit: type=1400 audit(1758136767.746:312): avc: denied { shutdown } for pid=988 comm="syz.0.215" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.346359][ T494] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 46.350711][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 46.373598][ T494] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 46.377933][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 46.403916][ T10] usb 3-1: config 9 has an invalid interface number: 63 but max is 1 [ 46.422244][ T10] usb 3-1: config 9 has an invalid interface number: 159 but max is 1 [ 46.430461][ T10] usb 3-1: config 9 has no interface number 0 [ 46.446090][ T10] usb 3-1: config 9 has no interface number 1 [ 46.452601][ T10] usb 3-1: config 9 interface 63 has no altsetting 0 [ 46.460904][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 46.470125][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.478400][ T10] usb 3-1: Product: syz [ 46.482828][ T10] usb 3-1: Manufacturer: syz [ 46.487441][ T10] usb 3-1: SerialNumber: syz [ 46.543325][ T339] usb 2-1: USB disconnect, device number 15 [ 46.709479][ T10] usb 3-1: USB disconnect, device number 10 [ 46.719084][ T965] udevd[965]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.050955][ T1015] overlayfs: missing 'lowerdir' [ 47.094944][ T1025] overlayfs: failed to resolve './file1': -2 [ 47.110536][ T36] audit: type=1400 audit(1758136768.536:313): avc: denied { setopt } for pid=1027 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.134007][ T36] audit: type=1400 audit(1758136768.536:314): avc: denied { bind } for pid=1027 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.153183][ T1033] rust_binder: 163: no such ref 0 [ 47.158228][ T1033] rust_binder: 163: no such ref 0 [ 47.164626][ T1033] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 47.182103][ T1033] rust_binder: 163: no such ref 64 [ 47.190827][ T1033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 47.235700][ T36] audit: type=1400 audit(1758136768.666:315): avc: denied { ioctl } for pid=1041 comm="syz.2.230" path="socket:[6803]" dev="sockfs" ino=6803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.269301][ T36] audit: type=1400 audit(1758136768.666:316): avc: denied { bind } for pid=1041 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.308989][ T1055] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 47.310056][ T1057] netlink: 108 bytes leftover after parsing attributes in process `syz.0.234'. [ 47.364205][ T1067] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 47.371978][ T1067] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.237'. [ 47.524301][ T1070] exFAT-fs (rnullb0): invalid boot record signature [ 47.531110][ T1070] exFAT-fs (rnullb0): failed to read boot sector [ 47.537543][ T1070] exFAT-fs (rnullb0): failed to recognize exfat type [ 47.621896][ T63] bridge_slave_1: left allmulticast mode [ 47.627673][ T63] bridge_slave_1: left promiscuous mode [ 47.635326][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.652425][ T63] bridge_slave_0: left allmulticast mode [ 47.658357][ T63] bridge_slave_0: left promiscuous mode [ 47.664090][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.760756][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.767792][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.774992][ T1079] bridge_slave_0: entered allmulticast mode [ 47.781323][ T1079] bridge_slave_0: entered promiscuous mode [ 47.787681][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.794785][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.801990][ T1079] bridge_slave_1: entered allmulticast mode [ 47.808131][ T1079] bridge_slave_1: entered promiscuous mode [ 47.827179][ T63] veth1_macvtap: left promiscuous mode [ 47.832778][ T63] veth0_vlan: left promiscuous mode [ 47.885021][ T1090] netlink: 'syz.2.246': attribute type 4 has an invalid length. [ 47.894880][ T1090] netlink: 'syz.2.246': attribute type 4 has an invalid length. [ 47.938817][ T1093] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 47.945445][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.953363][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.960699][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.967744][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.002327][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.009765][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.019510][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.026575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.035818][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.042905][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.065619][ T1079] veth0_vlan: entered promiscuous mode [ 48.075845][ T1079] veth1_macvtap: entered promiscuous mode [ 48.116561][ T1110] netlink: 44 bytes leftover after parsing attributes in process `syz.4.250'. [ 48.125665][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.250'. [ 48.135146][ T1110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 48.241149][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.258987][ T1114] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.259008][ T1114] rust_binder: Read failure Err(EFAULT) in pid:11 [ 48.401790][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.419692][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.432665][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 48.434874][ T1134] syz.4.258 uses obsolete (PF_INET,SOCK_PACKET) [ 48.445847][ T65] usb 2-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 48.461113][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.465219][ T1134] netlink: 92 bytes leftover after parsing attributes in process `syz.4.258'. [ 48.473922][ T65] usb 2-1: config 0 descriptor?? [ 48.559563][ T1151] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.263'. [ 48.609105][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.609132][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.617835][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.622201][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.628929][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.638059][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.648216][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.648235][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.656280][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.664870][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.667928][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.674844][ T1159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.885137][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 48.897540][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 48.906900][ T65] usb 2-1: USB disconnect, device number 16 [ 56.816881][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 56.816899][ T36] audit: type=1400 audit(1758136778.246:327): avc: denied { getattr } for pid=1165 comm="syz.2.270" path="cgroup:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.900992][ T36] audit: type=1400 audit(1758136778.336:328): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.984405][ T36] audit: type=1400 audit(1758136778.416:329): avc: denied { read } for pid=1197 comm="syz.4.281" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.985387][ T1198] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 57.014829][ T36] audit: type=1400 audit(1758136778.416:330): avc: denied { open } for pid=1197 comm="syz.4.281" path="/11/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.037478][ T1200] rust_binder: Read failure Err(EAGAIN) in pid:179 [ 57.039186][ T1200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 57.041540][ T36] audit: type=1400 audit(1758136778.416:331): avc: denied { ioctl } for pid=1197 comm="syz.4.281" path="/11/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.124255][ T1216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 57.140707][ T339] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 57.250711][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 57.264646][ T1226] netlink: 'syz.3.288': attribute type 27 has an invalid length. [ 57.280055][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.287318][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.300713][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 57.307160][ T339] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.315794][ T339] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.329841][ T339] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.338940][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.348738][ T339] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.358508][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.371665][ T339] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.380837][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.389892][ T339] usb 3-1: config 0 descriptor?? [ 57.400689][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 57.406934][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.417528][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.427932][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.437285][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.445478][ T10] usb 2-1: Product: syz [ 57.449643][ T10] usb 2-1: Manufacturer: syz [ 57.454389][ T10] usb 2-1: SerialNumber: syz [ 57.597439][ T339] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.610173][ T339] usb 3-1: USB disconnect, device number 11 [ 57.616964][ T339] usblp0: removed [ 57.665062][ T10] usb 2-1: 0:2 : does not exist [ 57.670065][ T10] usb 2-1: unit 9 not found! [ 57.676457][ T10] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 57.685703][ T10] usb 2-1: USB disconnect, device number 17 [ 57.694191][ T1178] udevd[1178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.941514][ T1231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 57.944388][ T1232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 57.979410][ T36] audit: type=1400 audit(1758136779.406:332): avc: denied { remount } for pid=1233 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.012419][ T36] audit: type=1400 audit(1758136779.416:333): avc: denied { connect } for pid=1233 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.039251][ T1245] netlink: 44 bytes leftover after parsing attributes in process `syz.3.293'. [ 58.048273][ T1245] tc_dump_action: action bad kind [ 58.048286][ T494] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.067867][ T36] audit: type=1400 audit(1758136779.496:334): avc: denied { unmount } for pid=1079 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.173529][ T36] audit: type=1400 audit(1758136779.606:335): avc: denied { append } for pid=1254 comm="syz.1.297" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.209019][ T1259] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 58.210696][ T494] usb 3-1: Using ep0 maxpacket: 32 [ 58.236149][ T494] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.244811][ T494] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.258343][ T494] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.268076][ T494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.290719][ T494] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.300561][ T494] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.323276][ T494] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.332552][ T494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.347094][ T494] usb 3-1: config 0 descriptor?? [ 58.412894][ T1276] /dev/rnullb0: Can't open blockdev [ 58.436651][ T36] audit: type=1400 audit(1758136779.868:336): avc: denied { write } for pid=1280 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.531971][ T1286] incfs: Error accessing: ./file0. [ 58.537264][ T1286] incfs: mount failed -20 [ 58.554485][ T494] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.669754][ T1290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.669784][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 58.670799][ T1291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.688406][ T1291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 58.759809][ T10] usb 3-1: USB disconnect, device number 12 [ 58.775588][ T1184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 58.775678][ T1184] rust_binder: 154: no such ref 2 [ 58.796085][ T10] usblp0: removed [ 58.848576][ T1297] rust_binder: 157: no such ref 3 [ 58.854118][ T1298] rust_binder: Write failure EINVAL in pid:157 [ 58.854180][ T1297] rust_binder: Write failure EINVAL in pid:157 [ 58.878425][ T1300] /dev/sr0: Can't lookup blockdev [ 58.982767][ T1306] rust_binder: Write failure EINVAL in pid:162 [ 58.983216][ T1306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.312'. [ 59.110794][ T494] rust_binder: 1309: removing orphan mapping 0:4208 [ 59.315235][ T1322] __vm_enough_memory: pid: 1322, comm: syz.1.316, bytes: 18014402804453376 not enough memory for the allocation [ 59.510791][ T1327] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 59.520485][ T1327] sock: sock_timestamping_bind_phc: sock not bind to device [ 59.543177][ T1334] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿûYy+Õ‰0¬  4÷°¡ã¼k¯ÖðÜŠ+ºGðÑäUò¶ ›ñÖ×îQש·þ­;Rx.HÎÈ›Ðý³' [ 59.784872][ T1339] rust_binder: Read failure Err(EFAULT) in pid:232 [ 59.819107][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.000502][ T1354] binder: Bad value for 'stats' [ 60.016435][ T1356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 60.016458][ T1356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68 [ 60.918321][ T1372] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=89 sclass=netlink_xfrm_socket pid=1372 comm=syz.3.336 [ 61.761859][ T1382] netlink: 'syz.4.340': attribute type 25 has an invalid length. [ 61.870726][ T506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.912206][ T1404] rust_binder: Write failure EFAULT in pid:240 [ 61.924001][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 61.924020][ T36] audit: type=1400 audit(1758136783.358:358): avc: denied { map } for pid=1405 comm="syz.4.349" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 62.021309][ T36] audit: type=1400 audit(1758136783.458:359): avc: denied { execute } for pid=1423 comm="syz.1.358" path="/memory.events.local" dev="ramfs" ino=8664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 62.219715][ T1446] rust_binder: 1444 RLIMIT_NICE not set [ 62.219989][ T1446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 62.414071][ T1454] netlink: 80 bytes leftover after parsing attributes in process `syz.2.366'. [ 62.432492][ T1454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=1454 comm=syz.2.366 [ 62.461056][ T1456] overlay: ./file1 is not a directory [ 62.467226][ T36] audit: type=1400 audit(1758136783.898:360): avc: denied { setattr } for pid=1455 comm="syz.2.367" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.571971][ T1468] mmap: syz.4.371 (1468): VmData 29339648 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 62.694511][ T1481] rust_binder: inc_ref_done called when no active inc_refs [ 62.694534][ T1481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 62.704178][ T1481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 62.724049][ T1485] __vm_enough_memory: pid: 1485, comm: syz.2.376, bytes: 18014402804453376 not enough memory for the allocation [ 62.754599][ T36] audit: type=1400 audit(1758136784.188:361): avc: denied { mount } for pid=1486 comm="syz.2.377" name="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.777244][ T36] audit: type=1400 audit(1758136784.188:362): avc: denied { search } for pid=1486 comm="syz.2.377" name="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.799500][ T36] audit: type=1400 audit(1758136784.188:363): avc: denied { read } for pid=1486 comm="syz.2.377" name="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.821813][ T36] audit: type=1400 audit(1758136784.188:364): avc: denied { open } for pid=1486 comm="syz.2.377" path="/" dev="configfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.845724][ T36] audit: type=1400 audit(1758136784.278:365): avc: denied { write } for pid=1493 comm="syz.2.379" name="protocols" dev="proc" ino=4026532409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.351889][ T1514] 9pnet_fd: p9_fd_create_unix (1514): problem connecting socket: ./file0: -5 [ 63.392279][ T1524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.392316][ T1524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 63.417519][ T1527] KVM: debugfs: duplicate directory 1527-6 [ 63.455398][ T36] audit: type=1326 audit(1758136784.888:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1531 comm="syz.4.390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac338eba9 code=0x0 [ 63.489761][ T1536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214 [ 63.491476][ T36] audit: type=1400 audit(1758136784.928:367): avc: denied { append } for pid=1535 comm="syz.2.392" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.585719][ T1545] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 63.594091][ T1545] rust_binder: Write failure EINVAL in pid:110 [ 63.900739][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 64.061744][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.072678][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 64.084062][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.093191][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.101220][ T10] usb 2-1: Product: syz [ 64.105395][ T10] usb 2-1: Manufacturer: syz [ 64.109987][ T10] usb 2-1: SerialNumber: syz [ 64.116615][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 64.316260][ T1550] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 64.329552][ T10] cdc_mbim 2-1:1.0: bind() failure [ 64.343269][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 64.361786][ T10] cdc_ncm 2-1:1.1: bind() failure [ 64.368343][ T10] usb 2-1: USB disconnect, device number 18 [ 64.752242][ T414] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.779078][ T1611] rust_binder: Error while translating object. [ 64.779128][ T1611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 64.785788][ T1611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:301 [ 64.844625][ T1622] rust_binder: 1622 RLIMIT_NICE not set [ 64.860748][ T340] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.897128][ T350] rust_binder: 0: removing orphan mapping 0:1048 [ 64.903587][ T414] usb 3-1: device descriptor read/64, error -71 [ 64.958312][ T1630] overlayfs: failed to clone upperpath [ 64.970015][ T1633] rust_binder: 305: no such ref 3 [ 64.975226][ T1633] rust_binder: Read failure Err(EAGAIN) in pid:305 [ 65.031720][ T340] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 65.047053][ T340] usb 5-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 65.057605][ T340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.066714][ T340] usb 5-1: config 1 has no interface number 0 [ 65.073462][ T340] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 65.084190][ T340] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 65.098469][ T340] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.107531][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.115535][ T340] usb 5-1: Product: syz [ 65.119681][ T340] usb 5-1: Manufacturer: syz [ 65.124278][ T340] usb 5-1: SerialNumber: syz [ 65.130175][ T340] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 65.137010][ T340] cdc_ncm 5-1:1.1: bind() failure [ 65.150716][ T414] usb 3-1: device descriptor read/64, error -71 [ 65.260706][ T350] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 65.332249][ T1580] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 65.332270][ T1580] rust_binder: Error while translating object. [ 65.344478][ T1580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.350687][ T1580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 65.360904][ T339] usb 5-1: USB disconnect, device number 3 [ 65.390700][ T414] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 65.410686][ T350] usb 2-1: Using ep0 maxpacket: 32 [ 65.416869][ T350] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 65.425006][ T350] usb 2-1: config 0 has no interface number 0 [ 65.432652][ T350] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 65.441863][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.449852][ T350] usb 2-1: Product: syz [ 65.454108][ T350] usb 2-1: Manufacturer: syz [ 65.458708][ T350] usb 2-1: SerialNumber: syz [ 65.463948][ T350] usb 2-1: config 0 descriptor?? [ 65.469624][ T350] smsc95xx v2.0.0 [ 65.520710][ T414] usb 3-1: device descriptor read/64, error -71 [ 65.760708][ T414] usb 3-1: device descriptor read/64, error -71 [ 65.871544][ T414] usb usb3-port1: attempt power cycle [ 65.877147][ T350] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 65.898810][ T350] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.904854][ T1665] overlayfs: failed to resolve './file1': -2 [ 65.934606][ T1667] fuse: Bad value for 'user_id' [ 65.939539][ T1667] fuse: Bad value for 'user_id' [ 65.963191][ T1677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1677 comm=syz.3.436 [ 66.152163][ T1685] rust_binder: Write failure EINVAL in pid:131 [ 66.230685][ T414] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 66.261750][ T414] usb 3-1: device descriptor read/8, error -71 [ 66.283006][ T1695] capability: warning: `syz.4.444' uses 32-bit capabilities (legacy support in use) [ 66.377881][ T1701] rust_binder: 147: no such ref 0 [ 66.383002][ T1701] rust_binder: 147: no such ref 0 [ 66.388073][ T1701] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 66.395410][ T1701] rust_binder: 147: no such ref 64 [ 66.400546][ T1701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 66.401715][ T414] usb 3-1: device descriptor read/8, error -71 [ 66.650716][ T414] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 66.671737][ T414] usb 3-1: device descriptor read/8, error -71 [ 66.801774][ T414] usb 3-1: device descriptor read/8, error -71 [ 66.910778][ T414] usb usb3-port1: unable to enumerate USB device [ 67.324965][ T1725] FAT-fs (rnullb0): bogus number of reserved sectors [ 67.331698][ T1725] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 67.524890][ T1730] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 67.910417][ T350] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 67.921397][ T350] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 67.929628][ T414] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 67.945803][ T350] usb 2-1: USB disconnect, device number 19 [ 68.070263][ T1751] netlink: 172 bytes leftover after parsing attributes in process `syz.4.461'. [ 68.227782][ T1752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.300683][ T414] usb 3-1: Using ep0 maxpacket: 8 [ 68.313250][ T414] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 68.321581][ T414] usb 3-1: config 179 has no interface number 0 [ 68.327857][ T414] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 68.339264][ T414] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 68.350706][ T414] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.362062][ T414] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 68.375392][ T414] usb 3-1: config 179 interface 65 has no altsetting 0 [ 68.382281][ T414] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 68.391327][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.403114][ T414] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 68.450878][ T96] input input8: unable to receive magic message: -110 [ 68.458348][ T96] input input8: unable to receive magic message: -32 [ 68.465852][ T96] input input8: unable to receive magic message: -32 [ 68.543077][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 68.543093][ T36] audit: type=1400 audit(1758136789.978:386): avc: denied { read } for pid=1753 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.627959][ T36] audit: type=1326 audit(1758136790.058:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.651436][ T36] audit: type=1326 audit(1758136790.058:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.674818][ T36] audit: type=1326 audit(1758136790.058:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.698146][ T36] audit: type=1326 audit(1758136790.058:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.721568][ T36] audit: type=1326 audit(1758136790.058:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.744858][ T36] audit: type=1326 audit(1758136790.058:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.769270][ T36] audit: type=1326 audit(1758136790.058:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.795521][ T414] usb 3-1: USB disconnect, device number 17 [ 68.795560][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 68.799681][ T36] audit: type=1326 audit(1758136790.058:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.806184][ T414] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 68.838107][ T36] audit: type=1326 audit(1758136790.058:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz.3.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff56898eba9 code=0x7ffc0000 [ 68.895104][ T1778] binder: Unknown parameter 'fscontext?}' [ 68.927515][ T1783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1783 comm=syz.4.473 [ 68.960920][ T1785] binder: Bad value for 'max' [ 68.966756][ T1781] binder: Unknown parameter '' [ 68.978142][ T1787] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 68.986778][ T1787] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 68.994281][ T1787] rust_binder: Write failure EINVAL in pid:175 [ 69.115571][ T1799] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 69.190168][ T1805] can0: slcan on ttyS3. [ 69.313233][ T1835] netlink: 'syz.3.489': attribute type 58 has an invalid length. [ 69.321035][ T1835] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 69.402571][ T1848] fuse: Bad value for 'fd' [ 69.410696][ T414] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.440714][ T340] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 69.560694][ T414] usb 5-1: Using ep0 maxpacket: 8 [ 69.566752][ T414] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 69.577780][ T414] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 69.586867][ T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.600753][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 69.606997][ T340] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.617283][ T340] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 69.627629][ T340] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.636713][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.644736][ T340] usb 3-1: Product: syz [ 69.648896][ T340] usb 3-1: Manufacturer: syz [ 69.653505][ T340] usb 3-1: SerialNumber: syz [ 69.658696][ T340] usb 3-1: config 0 descriptor?? [ 69.797588][ T414] usb 5-1: string descriptor 0 read error: -71 [ 69.803963][ T414] hub 5-1:32.0: USB hub found [ 69.809154][ T414] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 69.841132][ T414] usb 5-1: USB disconnect, device number 4 [ 69.865728][ T1805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.874294][ T1805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.884327][ T1635] usb 3-1: USB disconnect, device number 18 [ 69.937487][ T1805] can0 (unregistered): slcan off ttyS3. [ 69.937739][ T1888] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 69.955712][ T1888] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 71.062516][ T2000] netlink: 5 bytes leftover after parsing attributes in process `syz.1.535'. [ 71.133709][ T2008] rust_binder: Write failure EINVAL in pid:193 [ 71.143740][ T2010] rust_binder: 195: no such ref 3 [ 71.358086][ T2022] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 71.366736][ T2022] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 71.524048][ T1635] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 71.680677][ T1635] usb 5-1: Invalid ep0 maxpacket: 64 [ 71.820692][ T1635] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 71.970732][ T1635] usb 5-1: Invalid ep0 maxpacket: 64 [ 71.976215][ T1635] usb usb5-port1: attempt power cycle [ 72.222220][ T2057] overlayfs: failed to clone upperpath [ 72.320718][ T1635] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 72.341073][ T1635] usb 5-1: Invalid ep0 maxpacket: 64 [ 72.470710][ T1635] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 72.491081][ T1635] usb 5-1: Invalid ep0 maxpacket: 64 [ 72.496529][ T1635] usb usb5-port1: unable to enumerate USB device [ 72.767954][ T2071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 72.767979][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:271 [ 72.813908][ T2079] netlink: 224 bytes leftover after parsing attributes in process `syz.3.563'. [ 73.150617][ T2138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.580'. [ 73.245241][ T2158] netlink: 152 bytes leftover after parsing attributes in process `syz.1.587'. [ 73.742138][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 73.742155][ T36] audit: type=1400 audit(1758136795.178:482): avc: denied { map } for pid=2161 comm="syz.3.589" path="socket:[14164]" dev="sockfs" ino=14164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.771358][ T36] audit: type=1400 audit(1758136795.178:483): avc: denied { create } for pid=2161 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.837740][ T36] audit: type=1400 audit(1758136795.268:484): avc: denied { map } for pid=2178 comm="syz.2.594" path="socket:[14177]" dev="sockfs" ino=14177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.568649][ T2213] SELinux: security_context_str_to_sid () failed with errno=-22 [ 82.740708][ T414] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.762286][ T2232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 83.090692][ T340] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 83.250683][ T340] usb 3-1: Using ep0 maxpacket: 8 [ 83.257312][ T340] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.265986][ T340] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 83.274271][ T340] usb 3-1: config 6 has no interface number 0 [ 83.280501][ T340] usb 3-1: config 6 interface 248 has no altsetting 0 [ 83.289223][ T340] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 83.298537][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.306851][ T340] usb 3-1: Product: syz [ 83.311506][ T340] usb 3-1: Manufacturer: syz [ 83.316217][ T340] usb 3-1: SerialNumber: syz [ 83.417760][ T2238] rust_binder: Error while translating object. [ 83.417812][ T2238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.424147][ T2238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 83.434104][ T2239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.457581][ T36] audit: type=1400 audit(1758136804.888:485): avc: denied { view } for pid=2242 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.486532][ T36] audit: type=1326 audit(1758136804.918:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2245 comm="syz.4.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac338eba9 code=0x0 [ 83.535037][ T340] ums-karma 3-1:6.248: USB Mass Storage device detected [ 83.587867][ T340] usb 3-1: USB disconnect, device number 19 [ 83.847820][ T2274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 84.134125][ T36] audit: type=1400 audit(1758136805.568:487): avc: denied { mount } for pid=2308 comm="syz.2.631" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.134691][ T2309] netlink: 88 bytes leftover after parsing attributes in process `syz.2.631'. [ 84.168379][ T2309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2309 comm=syz.2.631 [ 84.217218][ T36] audit: type=1400 audit(1758136805.648:488): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.229951][ T2312] netlink: 64 bytes leftover after parsing attributes in process `syz.2.632'. [ 84.246656][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.246681][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.253193][ T2314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.259641][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.266179][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.272666][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.279157][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.285634][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.292130][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.298562][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.305007][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.311465][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.317894][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.324346][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.330799][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.337228][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.343675][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.350110][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.356946][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.364233][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.371000][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.377448][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.384140][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.390599][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.397184][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.403685][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.410128][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.416614][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.423121][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.429785][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.436812][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.443311][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.449970][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.456644][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.463479][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.470359][ T2331] overlayfs: failed to resolve './file1/file0': -2 [ 84.470535][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.483455][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.490244][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.496800][ T340] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 84.503529][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.510877][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.517460][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.523961][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.530853][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.537331][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.543946][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.550466][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.557085][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.563609][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.570334][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.577100][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.583836][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.590406][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.596982][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.603576][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.610114][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.616875][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.623218][ T2352] 9pnet_fd: Insufficient options for proto=fd [ 84.623574][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.636199][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.642925][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.649455][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.656107][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.662623][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.663534][ T340] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 84.669138][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.676258][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.684968][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.691498][ T340] usb 3-1: Product: syz [ 84.699279][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.705869][ T340] usb 3-1: Manufacturer: syz [ 84.720926][ T340] usb 3-1: SerialNumber: syz [ 84.882739][ T2364] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.883217][ T2365] overlayfs: conflicting lowerdir path [ 84.896933][ T2364] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 84.917039][ T2364] overlayfs: conflicting lowerdir path [ 84.993178][ T36] audit: type=1400 audit(1758136806.428:489): avc: denied { ioctl } for pid=2367 comm="syz.4.651" path="socket:[15627]" dev="sockfs" ino=15627 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.995710][ T2368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.026212][ T2368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.173525][ T2377] netlink: 72 bytes leftover after parsing attributes in process `syz.1.654'. [ 85.553248][ T2397] rust_binder: 267: no such ref 4294967295 [ 85.559144][ T2398] rust_binder: 267: no such ref 4294967295 [ 85.567964][ T2398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 85.568474][ T2397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 85.706751][ T2412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2412 comm=syz.4.666 [ 85.732734][ T36] audit: type=1400 audit(1758136807.167:490): avc: denied { mounton } for pid=2413 comm="syz.4.667" path="/97/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 85.732830][ T2414] incfs_lookup_dentry err:-1 [ 85.759100][ T2414] incfs: Can't find or create .index dir in ./file0 [ 85.765772][ T2414] incfs: mount failed -1 [ 85.966539][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.974180][ T2416] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.981580][ T2416] bridge_slave_0: entered allmulticast mode [ 85.987763][ T2416] bridge_slave_0: entered promiscuous mode [ 85.994990][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.002050][ T2416] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.009112][ T2416] bridge_slave_1: entered allmulticast mode [ 86.015448][ T2416] bridge_slave_1: entered promiscuous mode [ 86.057212][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.064750][ T2416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.072122][ T2416] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.079188][ T2416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.094498][ T2429] netlink: 'syz.3.672': attribute type 16 has an invalid length. [ 86.104240][ T2429] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.672'. [ 86.113677][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.121761][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.130931][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.137983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.147780][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.154867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.163913][ T2435] netlink: 104 bytes leftover after parsing attributes in process `syz.1.675'. [ 86.188865][ T2416] veth0_vlan: entered promiscuous mode [ 86.198967][ T2416] veth1_macvtap: entered promiscuous mode [ 86.240379][ T36] audit: type=1400 audit(1758136807.635:491): avc: denied { append } for pid=2442 comm="syz.5.677" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.274059][ T2446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.302974][ T36] audit: type=1400 audit(1758136807.700:492): avc: denied { create } for pid=2438 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.349677][ T2450] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.349858][ T2450] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 86.364268][ T2450] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 86.371501][ T2450] rust_binder: Write failure EINVAL in pid:10 [ 86.426477][ T2453] rust_binder: 10: no such ref 0 [ 86.437940][ T2453] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 86.445816][ T2453] rust_binder: Write failure EINVAL in pid:10 [ 86.694173][ T2459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.682'. [ 87.105471][ T36] audit: type=1400 audit(1758136808.448:493): avc: denied { getopt } for pid=2466 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.256112][ T36] audit: type=1400 audit(1758136808.588:494): avc: denied { accept } for pid=2490 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.312525][ T2502] rust_binder: Write failure EFAULT in pid:22 [ 87.345842][ T340] usb 3-1: USB disconnect, device number 20 [ 87.390514][ T2517] 9pnet_fd: Insufficient options for proto=fd [ 87.538643][ T2528] binder: Bad value for 'stats' [ 87.540926][ T2529] binder: Bad value for 'stats' [ 87.548129][ T2533] rust_binder: Error while translating object. [ 87.549296][ T2533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 87.549548][ T2532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.555850][ T2533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:342 [ 87.584645][ T2536] rust_binder: Error while translating object. [ 87.593963][ T2538] rust_binder: Write failure EFAULT in pid:35 [ 87.595767][ T2536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 87.606333][ T2536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:347 [ 87.627812][ T2542] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.644930][ T2542] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 87.661675][ T2542] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.669650][ T2542] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 87.871265][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.031652][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 88.038173][ T65] usb 6-1: unable to get BOS descriptor or descriptor too short [ 88.046646][ T65] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.055394][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.065616][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.076591][ T65] usb 6-1: string descriptor 0 read error: -22 [ 88.082817][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.092002][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.102242][ T65] usb 6-1: 0:2 : does not exist [ 88.159997][ T414] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 88.299051][ T414] usb 3-1: device descriptor read/64, error -71 [ 88.316329][ T65] usb 6-1: USB disconnect, device number 2 [ 88.555674][ T414] usb 3-1: device descriptor read/64, error -71 [ 88.812333][ T414] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 88.864966][ T2574] rust_binder: Error while translating object. [ 88.865011][ T2574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.871363][ T2574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 88.962058][ T414] usb 3-1: device descriptor read/64, error -71 [ 88.986632][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 88.986649][ T36] audit: type=1400 audit(1758136810.206:496): avc: denied { getopt } for pid=2582 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.986660][ T2585] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 88.986675][ T2585] rust_binder: Error while translating object. [ 89.020603][ T2585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.026853][ T2585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 89.033181][ T36] audit: type=1400 audit(1758136810.253:497): avc: denied { read } for pid=2588 comm="syz.1.729" path="socket:[16481]" dev="sockfs" ino=16481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.088219][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.173595][ T2608] .N: renamed from veth0_to_bond (while UP) [ 89.250760][ T414] usb 3-1: device descriptor read/64, error -71 [ 89.295445][ T2637] overlayfs: failed to resolve './file0': -2 [ 89.302661][ T2637] overlayfs: failed to clone upperpath [ 89.309858][ T2637] 9pnet_fd: Insufficient options for proto=fd [ 89.368601][ T414] usb usb3-port1: attempt power cycle [ 89.543533][ T2672] bridge_slave_0: mtu less than device minimum [ 89.559601][ T2674] overlayfs: failed to clone upperpath [ 89.573959][ T2676] __nla_validate_parse: 1 callbacks suppressed [ 89.573979][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 89.732023][ T414] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 89.754390][ T414] usb 3-1: device descriptor read/8, error -71 [ 89.893409][ T414] usb 3-1: device descriptor read/8, error -71 [ 90.149075][ T414] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 90.171405][ T414] usb 3-1: device descriptor read/8, error -71 [ 90.310526][ T414] usb 3-1: device descriptor read/8, error -71 [ 90.435119][ T414] usb usb3-port1: unable to enumerate USB device [ 90.519186][ T36] audit: type=1400 audit(1758136811.637:498): avc: denied { mounton } for pid=2704 comm="syz.1.774" path="/257/file0" dev="tmpfs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 90.519195][ T2705] cgroup2: Unknown parameter 'memor' [ 90.557843][ T2711] netlink: 'syz.1.776': attribute type 30 has an invalid length. [ 90.579709][ T2715] 9pnet_fd: Insufficient options for proto=fd [ 91.066060][ T36] audit: type=1400 audit(1758136812.151:499): avc: denied { shutdown } for pid=2736 comm="syz.2.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.271872][ T506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.271945][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 91.341859][ T2749] tmpfs: Unknown parameter 'noinode32' [ 91.473096][ T2760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.473914][ T2760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.480409][ T2760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 91.556979][ T36] audit: type=1400 audit(1758136812.609:500): avc: denied { execmod } for pid=2761 comm="syz.2.793" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 91.646157][ T340] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.807764][ T340] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.818621][ T340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 151, changing to 11 [ 91.829765][ T340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9305, setting to 1024 [ 91.840868][ T340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.854600][ T340] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.863694][ T340] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.872011][ T340] usb 6-1: Manufacturer: syz [ 91.877099][ T340] usb 6-1: config 0 descriptor?? [ 91.882347][ T2756] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 92.109018][ T340] usbhid 6-1:0.0: can't add hid device: -71 [ 92.116718][ T340] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 92.125372][ T340] usb 6-1: USB disconnect, device number 3 [ 92.154470][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.154499][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.161099][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.167453][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.174050][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.180387][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.186923][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.193526][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.199803][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.206508][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.212802][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.220303][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.225955][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.232515][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.239083][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.245620][ T2774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.267018][ T36] audit: type=1400 audit(1758136813.283:501): avc: denied { mounton } for pid=2777 comm="syz.5.797" path="/22/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 92.403531][ T2782] tipc: Enabled bearer , priority 0 [ 92.411414][ T2782] tipc: Disabling bearer [ 92.435162][ T36] audit: type=1326 audit(1758136813.432:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2625 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56898eba9 code=0x7fc00000 [ 92.474501][ T2788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2788 comm=syz.3.800 [ 92.475638][ T36] audit: type=1400 audit(1758136813.470:503): avc: denied { setopt } for pid=2786 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.487077][ T2788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2788 comm=syz.3.800 [ 92.521372][ T2788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2788 comm=syz.3.800 [ 92.534852][ T2791] rust_binder: Error while translating object. [ 92.534884][ T2791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.541069][ T2791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 92.581307][ T36] audit: type=1400 audit(1758136813.572:504): avc: denied { getopt } for pid=2802 comm="syz.3.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.637206][ T2812] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 92.640373][ T36] audit: type=1400 audit(1758136813.619:505): avc: denied { mounton } for pid=2811 comm="syz.2.808" path="/file0" dev="ramfs" ino=17584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 92.693723][ T2819] rust_binder: Error while translating object. [ 92.693765][ T2819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.700296][ T2819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 92.873646][ T2827] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 92.873673][ T2827] rust_binder: Error in use_page_slow: EFAULT [ 92.884127][ T2827] rust_binder: use_range failure EFAULT [ 92.890289][ T2827] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 92.895838][ T2827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.903883][ T2827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:76 [ 92.927104][ T2829] FAT-fs (rnullb0): bogus number of reserved sectors [ 92.942950][ T2829] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 93.180119][ T2840] overlayfs: failed to clone upperpath [ 93.265260][ T2857] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 93.357033][ T2862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.365815][ T2862] overlayfs: missing 'lowerdir' [ 93.485495][ T340] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 93.612167][ T2870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.612307][ T2870] rust_binder: Error while translating object. [ 93.618819][ T2870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 93.625049][ T2870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:407 [ 93.645898][ T340] usb 6-1: Using ep0 maxpacket: 8 [ 93.648435][ T2873] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 93.656507][ T340] usb 6-1: unable to get BOS descriptor or descriptor too short [ 93.660039][ T2873] rust_binder: Error while translating object. [ 93.660090][ T2873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.669968][ T340] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 93.676428][ T2873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:410 [ 93.683093][ T340] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 93.722923][ T340] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 93.733143][ T340] usb 6-1: config 1 has no interface number 1 [ 93.739229][ T340] usb 6-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 93.752174][ T340] usb 6-1: config 1 interface 4 has no altsetting 0 [ 93.760129][ T340] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.769245][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.777336][ T340] usb 6-1: Product: syz [ 93.781549][ T340] usb 6-1: Manufacturer: syz [ 93.786192][ T340] usb 6-1: SerialNumber: syz [ 93.977420][ T414] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 94.019545][ T340] usb 6-1: 2:1 : invalid UAC_AS_GENERAL desc [ 94.029594][ T340] usb 6-1: USB disconnect, device number 4 [ 94.040898][ T2189] udevd[2189]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.139784][ T414] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 94.148172][ T414] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.159862][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.170934][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.182271][ T414] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.195375][ T414] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.212977][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.223657][ T414] usb 3-1: config 0 descriptor?? [ 94.228924][ T2875] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 94.667364][ T414] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 94.675638][ T414] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 94.686571][ T414] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 94.722375][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 94.722393][ T36] audit: type=1400 audit(1758136815.564:507): avc: denied { bind } for pid=2933 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.722712][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 94.728620][ T36] audit: type=1400 audit(1758136815.564:508): avc: denied { setopt } for pid=2933 comm="syz.5.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.778351][ T36] audit: type=1400 audit(1758136815.611:509): avc: denied { append } for pid=2933 comm="syz.5.854" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.791240][ T2936] netlink: 80 bytes leftover after parsing attributes in process `syz.3.855'. [ 94.940608][ T2875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.949097][ T2875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.960870][ T339] usb 3-1: USB disconnect, device number 25 [ 95.100259][ T414] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.261821][ T414] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.271967][ T414] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.274994][ T2950] sock: sock_set_timeout: `syz.1.860' (pid 2950) tries to set negative timeout [ 95.284691][ T414] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.300940][ T414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.308973][ T414] usb 6-1: Product: syz [ 95.313216][ T414] usb 6-1: Manufacturer: syz [ 95.317871][ T414] usb 6-1: SerialNumber: syz [ 95.323814][ T414] cdc_mbim 6-1:1.0: skipping garbage [ 95.341030][ T36] audit: type=1400 audit(1758136816.144:510): avc: denied { read } for pid=2952 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) Stopping network: [ 95.631523][ T36] audit: type=1400 audit(1758136816.415:511): avc: denied { read write } for pid=2978 comm="ip" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 95.693063][ T36] audit: type=1400 audit(1758136816.481:512): avc: denied { unlink } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 Stopping iptables: [ 95.719010][ T36] audit: type=1400 audit(1758136816.499:513): avc: denied { read write } for pid=2984 comm="iptables" path="/dev/console" dev="rootfs" ino=1067 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 95.743898][ T36] audit: type=1400 audit(1758136816.509:514): avc: denied { search } for pid=2984 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 95.766028][ T36] audit: type=1400 audit(1758136816.509:515): avc: denied { write } for pid=2984 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: [ 95.788678][ T36] audit: type=1400 audit(1758136816.509:516): avc: denied { add_name } for pid=2984 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.827439][ T495] usb 3-1: new high-speed USB device number 26 using dummy_hcd done Stopping klogd: [ 95.966488][ T495] usb 3-1: device descriptor read/64, error -71 OK Stopping acpid: [ 96.223107][ T495] usb 3-1: device descriptor read/64, error -71 [ 96.397488][ T414] cdc_mbim 6-1:1.0: bind() failure [ 96.405256][ T414] usb 6-1: USB disconnect, device number 5 [ 96.479752][ T495] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 96.618790][ T495] usb 3-1: device descriptor read/64, error -71 [ 96.875448][ T495] usb 3-1: device descriptor read/64, error -71 [ 96.993164][ T495] usb usb3-port1: attempt power cycle OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK [ 97.123446][ T3029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3029 comm=syz.1.870 [ 97.170806][ T3045] incfs: Error accessing: ./file0. [ 97.176034][ T3045] incfs: mount failed -20 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.148 closed by remote host. [ 97.388739][ T495] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 97.602051][ T12] bridge_slave_1: left allmulticast mode [ 97.607850][ T12] bridge_slave_1: left promiscuous mode [ 97.614754][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.622433][ T12] bridge_slave_0: left allmulticast mode [ 97.628259][ T12] bridge_slave_0: left promiscuous mode [ 97.633900][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.786833][ T12] tipc: Disabling bearer [ 97.792133][ T12] tipc: Left network mode [ 97.797231][ T12] veth1_macvtap: left promiscuous mode [ 97.802705][ T12] veth0_vlan: left promiscuous mode [ 97.880637][ T495] usb 3-1: device not accepting address 28, error -71 [ 98.138555][ T12] bridge_slave_1: left allmulticast mode [ 98.144198][ T12] bridge_slave_1: left promiscuous mode [ 98.149831][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.157437][ T12] bridge_slave_0: left allmulticast mode [ 98.163124][ T12] bridge_slave_0: left promiscuous mode [ 98.168814][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.176346][ T12] bridge_slave_1: left allmulticast mode [ 98.182047][ T12] bridge_slave_1: left promiscuous mode [ 98.187635][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.194987][ T12] bridge_slave_0: left allmulticast mode [ 98.200600][ T12] bridge_slave_0: left promiscuous mode [ 98.206316][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.320863][ T12] tipc: Left network mode [ 98.326688][ T12] veth1_macvtap: left promiscuous mode [ 98.332218][ T12] veth0_vlan: left promiscuous mode [ 98.337672][ T12] veth1_macvtap: left promiscuous mode [ 98.343223][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 99.627884][ T3055] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 99.634502][ T3055] ACPI: PM: Preparing to enter system sleep state S5 [ 99.641343][ T3055] kvm: exiting hardware virtualization [ 99.646860][ T3055] reboot: Power down serialport: VM disconnected.