last executing test programs: 10m36.887157646s ago: executing program 2 (id=1299): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001200010a00000000000000000700"], 0xbc}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 10m36.33187761s ago: executing program 2 (id=1316): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0xffffffffffffff7d) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x5, 0x2, 0x5a}, {0x3, 0x2, 0x9, 0x5}, {0x0, 0x4, 0xc8, 0x1}]}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 10m36.32950354s ago: executing program 2 (id=1317): r0 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r0, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async, rerun: 64) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x40040, 0x0) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4) ioctl$TIOCGSID(r2, 0x5429, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, 0x0) (async) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6fc6746d6f6f1f8621eb8eb96764653d30303030303030303030303030303030303034303030302c757365725f6964", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f00000016c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250d0000000800068004000200700006804c00040067636d286165732900000000000000000000000800000000000000000000000024000000f35b5af1f861516887af309d4e10d047fbb9f07695a47665ccca10d826f8dc6a3a4b2cab08000600d90400000400050008000100000400000400020008000100070000002400098008000200090000000800010007000000080001007f0000000800010006000000"], 0xb0}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x97052, r5, 0xfffff000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2240, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getdents64(r8, &(0x7f00000006c0)=""/4096, 0x1000) 10m36.3272115s ago: executing program 2 (id=1318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 10m36.326885911s ago: executing program 2 (id=1319): syslog(0x3, 0x0, 0x0) r0 = epoll_create1(0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) 10m36.104866842s ago: executing program 2 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/64, 0x40) memfd_create(&(0x7f0000000000)='mountinfo\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x2200c859, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x0, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x2, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x3a, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x8, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r4, &(0x7f0000001e00)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/127, 0x7f}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f0000001b80)=""/124, 0x7c}, {&(0x7f0000001c00)=""/139, 0x8b}], 0xa, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x2000, &(0x7f0000001e40)={0x0, 0x3938700}) close_range(r0, 0xffffffffffffffff, 0x0) 10m36.074829465s ago: executing program 32 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/64, 0x40) memfd_create(&(0x7f0000000000)='mountinfo\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x80801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x2200c859, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x0, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x2, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x3a, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x8, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r4, &(0x7f0000001e00)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/127, 0x7f}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f0000001b80)=""/124, 0x7c}, {&(0x7f0000001c00)=""/139, 0x8b}], 0xa, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x1, 0x2000, &(0x7f0000001e40)={0x0, 0x3938700}) close_range(r0, 0xffffffffffffffff, 0x0) 10m26.692715144s ago: executing program 1 (id=1457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x6001}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "bc053d249b322df1", "82e1abfc62356eea7d2fb690bce81ef3", "fc121a97", "ea6762b1a874ab32"}, 0xffc9) close_range(r0, 0xffffffffffffffff, 0x0) 10m26.640094338s ago: executing program 1 (id=1458): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b0001f3ffffff080400ff0207010100090501020000130000"], 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$bt_hci(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) 10m23.66247463s ago: executing program 1 (id=1483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r0, &(0x7f0000005080), 0x0, 0x12040, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x5, 0x14, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c909cda49a11ff76e906b13a0c26ef2f2b18d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]}) prctl$PR_CAPBSET_DROP(0x18, 0x7) capset(&(0x7f0000000740)={0x20080522}, &(0x7f0000000780)={0x8, 0xffff, 0xff, 0x4, 0x5, 0xcbf}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 10m23.571983619s ago: executing program 1 (id=1484): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) accept(r2, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, 0x24, 0x8, 0x3, 0x25dfdbff, {0x4}, [@typed={0x11, 0x1, 0x0, 0x0, @str='/dev/\x93nullb0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x2b, 0xad, 0xffffffff80208803, 0x1, 0x0, 0xf, 0x1ff, 0x0, 0x0, 0x10, 0x5}}, 0x50) pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0x4000000000000d37) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r7) 10m22.751044349s ago: executing program 1 (id=1500): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x2000044) (async) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) (async, rerun: 64) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe8) (async, rerun: 64) socket$nl_audit(0x10, 0x3, 0x9) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2100063, &(0x7f0000000040)={[{@stats}]}) (async, rerun: 64) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10) getsockopt$inet_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f0000000380)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="dca65ae67d358391da936a3aaf75e930af885e86d0990679f620fd39973fba3b18a9dff9cdc454a865d5632a7a1d8980356f00fdcceb64e79e131aace82a7c1f26666916cd503ddab20d313e0c80cd3c943f119141f79f0fc7c1b631885c2b0dfc20b025f6781155f31a0bceb94e1042988e47e25684a3fb5f678b7c6b80c275321e1cf66254e817e83f1f1fa3802b80c6c256007fcc7ad1216b0e633f3cf7b65e1c1415992780292a40d01e541501f9bb48cd315b7a7da99856f00d97a39a0c13e0b7a38b03797f1185f6ca85b9b5912ea6977ac701800bae687292a9f3e818ec34306e7f1830e9fb76b91a007dade4941419ce09bd98b9f3dee9763d166bbd645f97868ed9da861cba65e6104806c9aa97308aaebbef2645b3014a157cb013e0884cd6a0bb84ac74c660f06403a756e53f80028dc87f2666cde6b068022ceaef522576b22a3b020d313f2036a9bb3e34e8d5ad29649680df5b87f8597f9a4b6cb70d230178e79a434b7b4ec2f708d9100b57766a68482e6e1deeac8475faac69c62a9f805b5059e540f433c859e1cca11afbff9c9666205a0a8a2acae36c7ef4ea28b2242a0f9ee3fa6610764d05f54bebad7e9d0178b6d839927bc466bd44521fca214d2f8f81c05524edef23eb0c7a61bcddeeeed8f9e7e6427b038dda8e3f122c7c7b867f2a3b0d6c8482bc374eea80a689a241221b2844cd006ca5a1890cea188055c4cafbc4af3f643f391a22ce10eb2d9be9f76b2ea817fded6f04669408e7b886ecb858091e6223e1a12232d7bcfe93ac45371061e5a4b4f05a5318e1294206a490c11c8ec82e30a53245aea19e", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) 10m22.64485798s ago: executing program 1 (id=1505): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)={0x3, 'syz_tun\x00', {0x200}, 0x2}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x2004, 0x0, 0x4, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"60326cafc77ea745452f1a7cd5c2f8f2", 0x0, 0x0, {0x6b9, 0x4}, {0x6, 0x4}, 0x5, [0x2, 0x4, 0x2, 0xfba8, 0x2, 0x3, 0x5, 0x5, 0xa2, 0x400, 0xfffffffffffffffb, 0x2, 0x5, 0x256f00, 0xbed, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000440)={{r2}, r5, 0x10, @inherit={0x58, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x100000000, {0x30, 0x3, 0x9, 0x3}, [0x7, 0x3]}}, @name="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"}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r6, 0x406, r7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xad3385218f2bd9f6}, 0xc, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x2800}, 0x20008801) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f00000028c0)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 10m7.6253189s ago: executing program 33 (id=1505): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000003c0)={0x3, 'syz_tun\x00', {0x200}, 0x2}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x2004, 0x0, 0x4, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"60326cafc77ea745452f1a7cd5c2f8f2", 0x0, 0x0, {0x6b9, 0x4}, {0x6, 0x4}, 0x5, [0x2, 0x4, 0x2, 0xfba8, 0x2, 0x3, 0x5, 0x5, 0xa2, 0x400, 0xfffffffffffffffb, 0x2, 0x5, 0x256f00, 0xbed, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000440)={{r2}, r5, 0x10, @inherit={0x58, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x100000000, {0x30, 0x3, 0x9, 0x3}, [0x7, 0x3]}}, @name="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"}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r6, 0x406, r7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xad3385218f2bd9f6}, 0xc, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="1400009e4875883e798b4600000000000000000a1c000000000a050000000000000000000a000004080002400000000250010000030a030000000000000000000200000a08000b4000000003280008800c00014000000000000000070c00014000000000000000070c000240000000000000000655000c000139afda16ac8a90fd37a6b5e192eeb82be1907a3056a63097bfe4955fad8ff976aa8375d5a1ceb9b6e51d58a1346f8348da6992f9885b1ff982455e274d6bbcef51fe8258d8cff0dd47c3698aee440f7b000000b2000c00788e39ff14904f6d8ab25d248c656c70abc7782d71b38ae1bea6a84f530b102d4a631784e58daf70dc72308c85cfa32d7b59c4d1fc7077797a378bcde9ffce31fbef3e7566f356483fc2e9baa87b9840be1d16c16575b29866726f929d2bc3230fcde657c18fd0ffc5953bee132fd7b0f1ca091159983d7110822172d8f6b9b8920c6a024e2030f9afd88ec428738f1a63bab5ee939a0d0199d5418a057292904141f30c3fa00952e314270975990000140000001100010000000000000000000500000a"], 0x194}, 0x1, 0x0, 0x0, 0x2800}, 0x20008801) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f00000028c0)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 6m22.430119842s ago: executing program 0 (id=4121): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 6m22.331990541s ago: executing program 0 (id=4134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x2, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x20, 0x0, 0x0) write(r1, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) close_range(r0, 0xffffffffffffffff, 0x0) 6m22.182671016s ago: executing program 0 (id=4136): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) sendfile(r1, r0, 0x0, 0xffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x30, 0x64, 0x64, 0x32, 0x31, 0x39, 0x39, 0x61, 0x62, 0x30, 0x38, 0x38, 0x30, 0x31, 0x66]}, &(0x7f0000000080)={0x0, "dea0e72a1a2a87d0e05917324783a90599568b1ecbf796211d8a8dec466c01185e8886672d6c54b11288664b386a4a4837d356b276c2dc81c32ccca57deaa1bf", 0x2c}, 0x48, 0xfffffffffffffffe) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x29) 6m21.891965864s ago: executing program 0 (id=4138): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x195) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000040)=@random={'btrfs.', 'clear_refs\x00'}, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x9) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 6m21.772833536s ago: executing program 0 (id=4140): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f0000000040)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400, &(0x7f0000000100)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x3, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020}, 0x941f) 6m21.622542301s ago: executing program 0 (id=4143): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (rerun: 64) fcntl$setlease(r4, 0x400, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x4e24, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) (async) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async, rerun: 32) socket(0xa, 0x3, 0x87) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) (async) r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) 6m21.481876145s ago: executing program 34 (id=4143): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (rerun: 64) fcntl$setlease(r4, 0x400, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x4e24, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) (async) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async, rerun: 32) socket(0xa, 0x3, 0x87) syz_usb_connect(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905", @ANYRES32], 0x0) (async) r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) 3m37.54003485s ago: executing program 5 (id=6115): r0 = syz_clone(0x20040011, 0x0, 0xffd4, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010004, 0x0, 0x3ff}]}) ptrace(0x10, r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x90, 0x1) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000040)={0x0}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r6, 0x1, 0x37, 0x0, &(0x7f0000000580)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xf000, 0x4000}) r7 = getpgrp(0x0) capset(&(0x7f0000000100)={0x20080522, r7}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) 3m37.458533169s ago: executing program 5 (id=6117): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x492, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg$unix(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdc, 0xd6, 0x9f, 0x20, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2e, 0x0, 0x2, 0x7e, 0x3a, 0x11, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xe}}]}}]}}]}}, 0x0) syz_usb_ep_read(r2, 0xd, 0xa, &(0x7f0000000140)=""/10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x20, 0xc}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x37, {0x35, "4def5b7d023ffa876ae5d13f864a7aab22b7bfba5317cac238989b83277fb366b6a51c2c81634c4f1aa4de1d423b5282d07734a0ce"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x6}, 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) syz_usb_disconnect(r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3m36.596005743s ago: executing program 5 (id=6126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async, rerun: 64) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000200000000af0000000000007f"]) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m36.461548386s ago: executing program 5 (id=6128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x40, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x100}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x19d0}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x6}}]}, 0x40}}, 0x0) 3m36.414499161s ago: executing program 5 (id=6129): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x762, 0x84000) sendfile(r1, r1, 0x0, 0x24002de8) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x4, 0x0) r3 = memfd_secret(0x80000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x3000426) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) open$dir(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x14) openat(r0, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') ftruncate(r3, 0x3) pipe(&(0x7f00000000c0)) ftruncate(r3, 0x3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) 3m36.291750293s ago: executing program 5 (id=6131): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = fsmount(0xffffffffffffffff, 0x1, 0x8) mkdirat(r2, &(0x7f0000002080)='./file0\x00', 0x80) r3 = openat$cgroup_devices(r2, &(0x7f00000020c0)='devices.deny\x00', 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) read$snapshot(r4, &(0x7f0000002100)=""/29, 0x1d) symlink(&(0x7f0000002140)='./file0/../file0\x00', &(0x7f0000002180)='./file0\x00') r6 = openat$cgroup_ro(r2, &(0x7f00000021c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$ppp(r4, &(0x7f0000002200)="1e0ee4c65b6ca8994c12b589f334fb4fbef0d0dea5397fc68496ad588dc0b73b4cb1ff44d54515997c63be59ab54c7a3a7383c40bf7a5dc5f6c2c966d5fba875a638e970e2f4b54b6049b57f68446aae1ce76c", 0x53) write$binfmt_register(r6, &(0x7f0000002280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xc622, 0x3a, '/dev/fuse\x00', 0x3a, '/dev/fuse\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x45) r7 = openat$cgroup(r2, &(0x7f0000002300)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000002340), 0x2, 0x0) truncate(&(0x7f0000002380)='./file0/../file0\x00', 0x9d) lsetxattr$security_capability(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), &(0x7f0000002440)=@v1={0x1000000, [{0x1, 0xb}]}, 0xc, 0x3) mount$overlay(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x4000, &(0x7f0000002500)={[{@redirect_dir_follow}, {@uuid_auto}, {@nfs_export_off}, {@volatile}, {@uuid_auto}, {@xino_auto}], [{@obj_user}, {@flag='mand'}]}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000002580)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000025c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000035c0)={{r8, 0x9e, 0x9, 0x3, 0x3ff, 0x4, 0x6, 0x1, 0x1, 0x80, 0x2, 0x9, 0xffffffffffffffff, 0x81, 0x8}}) r9 = openat(0xffffffffffffffff, &(0x7f00000045c0)='./file0/../file0\x00', 0x422000, 0x9) syz_clone3(&(0x7f0000004840)={0x1000, &(0x7f0000004600)=0xffffffffffffffff, &(0x7f0000004640), &(0x7f0000004680), {0xe}, &(0x7f00000046c0)=""/60, 0x3c, &(0x7f0000004700)=""/237, &(0x7f0000004800)=[r1, r1, r1, r1, r1, 0xffffffffffffffff, r1, r1, r1], 0x9, {r6}}, 0x58) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000048c0), 0x80102, 0x0) ioctl$MON_IOCX_GETX(r11, 0x4018920a, &(0x7f0000005940)={&(0x7f0000004900), &(0x7f0000004940)=""/4096, 0x1000}) writev(r10, &(0x7f0000005a00)=[{&(0x7f0000005980)="3d693ce483afee392a4cc2bc2e1b972fba62684dfd17ae4674e35c43c420305a673a090100f17aaddcf18109e794a917cf98ab5f5f11d91500b33b53da09c95dd400f57c9cb34d5f61db53c5b2b44b070223cc843bd692eac93d7b9ec3eba7755c107cada4d1", 0x66}], 0x1) write$P9_RVERSION(r9, &(0x7f0000005a40)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) ioctl$BTRFS_IOC_SEND(r9, 0x40489426, &(0x7f0000005ac0)={{r0}, 0x3, &(0x7f0000005a80)=[0x7b8d, 0x7fffffff, 0x7], 0x5f38, 0x4}) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000005b40)={0x10, 0x0, "43c80e3a5b076f5c92bb5e17cfdc9f76"}) syz_io_uring_setup(0x4494, &(0x7f0000005bc0)={0x0, 0x60f4, 0x40, 0x1, 0x5b}, &(0x7f0000005c40), &(0x7f0000005c80)) 3m20.89289321s ago: executing program 35 (id=6131): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = fsmount(0xffffffffffffffff, 0x1, 0x8) mkdirat(r2, &(0x7f0000002080)='./file0\x00', 0x80) r3 = openat$cgroup_devices(r2, &(0x7f00000020c0)='devices.deny\x00', 0x2, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) read$snapshot(r4, &(0x7f0000002100)=""/29, 0x1d) symlink(&(0x7f0000002140)='./file0/../file0\x00', &(0x7f0000002180)='./file0\x00') r6 = openat$cgroup_ro(r2, &(0x7f00000021c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$ppp(r4, &(0x7f0000002200)="1e0ee4c65b6ca8994c12b589f334fb4fbef0d0dea5397fc68496ad588dc0b73b4cb1ff44d54515997c63be59ab54c7a3a7383c40bf7a5dc5f6c2c966d5fba875a638e970e2f4b54b6049b57f68446aae1ce76c", 0x53) write$binfmt_register(r6, &(0x7f0000002280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xc622, 0x3a, '/dev/fuse\x00', 0x3a, '/dev/fuse\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x45) r7 = openat$cgroup(r2, &(0x7f0000002300)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000002340), 0x2, 0x0) truncate(&(0x7f0000002380)='./file0/../file0\x00', 0x9d) lsetxattr$security_capability(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), &(0x7f0000002440)=@v1={0x1000000, [{0x1, 0xb}]}, 0xc, 0x3) mount$overlay(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x4000, &(0x7f0000002500)={[{@redirect_dir_follow}, {@uuid_auto}, {@nfs_export_off}, {@volatile}, {@uuid_auto}, {@xino_auto}], [{@obj_user}, {@flag='mand'}]}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000002580)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000025c0)={0x0, 0x0, "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", "142a545a441f57064997f88078b68773ff61a6eeed0d4ff677ee5f27c3c1a0f124f9d907ef23f12af32d37b49fb8f726dfb8b7511920e0636c5e652483ef130afe4d57367254c167cb0dc27072cbd1e89db45204ce70858301afcad2df82252a80cf62a33979c280c8bab4179a678e319b9d319174fc0a9ed4a38c43459579f361d0e057543094ee7ad321b173116c2732d3d6b81b86852552dacbf48aa4f2beebe324b4beecf2c6b88dae2e1b8c15d92b80f76ce42f755ff7dfdcb7c92391ee4278e8776b1a1a1fc7baa51ef84d8d83e5837575de5d40577c8a0a3869d74d737b8486b789a512c4cecc2d814f13dac43ce206e99719871e4a41ecc8448ecbb570642abbd3ed55162d61b38a13f271240533edb907303e1cde7f40a6ec5bc2bb2cf700257d7dd963f5b8039dd8986e7d442b1424b87d4ddcfaa3490356d2ea2bc49f4dea4024c648b90b317a9c626de97400511d107bcfb34bfb571f29947fef982054cf8fa1e3fe133ee62d1fb1983a3e2c52ddfb185a3a2e8a2571bf02567609487ed3ab52d2bcab6b67c51b03e2c707c3fd1f7f3f98e3573ff125dfb376e3397727e879a8c56b884ebda5a40eebd7b0ab29e92cde6bf7fc67e3aa0e3040460c18d5830e99696e018e50cfd026a78ce817965ad08fa39eac6fe3f78c17fe520c54a4d394580f2d19a242d91cc19fd5da770b0afd60f92378a919836a353a42d34b5b66f6d27eaad5a1974d4ff9350329b775b666b96563d49e043569db0c08ec8a79e799a23e8a3d5df12b5635edfc85c506ffaf988069f145a8fa406f343e9cd36541cb3523b62f9c7f5e8251b9ada9307dee361b36497bd63fc475924c8113c85a953c6881194b437bd0d5b0087e503f0e42ddde975bec7365aaeec0a3bd3418344201ec424e68653fc529b628352ec09a97f38cb63f1a108febb42f0de1155ff96f7341a764f01aaf63f1b19b14988c7cf659fe2cc61a53219c28ca396ba6134f6363ee5e33b1b07f7e119d61dce43eaa497f18373e128ed196644a19095cc96eea8a657d1d72cd215709f83f3126e30cc0591a7d6107e596cd7d0e808ab9ff2cc9f7ef27b2b027d7350f7f0e65c3cbb740966c317589b1596170e0e8787c112ee1d181d82d1d79bcfc82f65ef18b62005845d9f9bb1547965b02a4a969800c7d8fa5c15c4e361fc6f80d1b347120a3bdfc5a53536df71c64c4ed4d072911d4eb50db8c3164ab2e6052b6e7b651b5008262c57a8460988ce9672c986b357651648cbfb7428c14f0103d425c3de7e8493dedc04ec93df2b169959714e2ecd57cabdbbcbad56f4b4c8a2c4d221882e1667c0aeb42f5f35f4839d9f870a03434ed5b0b973dfd40050180404ec0047798f9f04a7bbd298cbed7213e8168146b246211569c52d4e2a97953ed99471221cc5ae8ee2a2249d55d63f3010b80dc79a84dcc85681e8506b0c48b3bdb68e63036e2e858a762e7231a94d1e6654fc51b7e984ec5d9ffdb3303da812a87186cd190126bff707520859d0171491481496b45303594b05406135d5720b21da17983e08b177af09fe5d4f850a2302d485e07bc7c0ab3cfd8fd290e8f69b4be235130e1878a520941ef0502b063ca2dc2efa2dc2fe81b040405c1be8ab7409d1994f1fb7c501424402033d2bcea51ad779adabb4e8a0822e304f9d97210ebe751c18c1c526be2f6f20450458a1000be99a42c4a3cfbb9726d5c4136da190f8900eff074432f39ea2f98e9b36aab6e01f27e3990cd3cf237be0c91f2fd9c4bf5a99d422cbefa05e35291eff33964081da7282780c6c95b30d28639f00dc6e4b2a79474052544258494e5a05ad161b30514d48d4385464b46069699d49a13e384c72ba95929e1cedd113dedc2d571e675a121c99afffdf665ee939253be597a4154b26f4f52f08faf2eb50df9f4259dc19d2c32820c550e6a175196fbd085b1b03cad21d273bca01f014e87db68f0da94a79ccd4210685cd3e26f0d7fbfade6c18cb47a05dd872ef5febf1a0854e5bae4468315fe780cf5d5808e575298b4f86de2e8bb7e784be55b7650fc153e36fd39ef7bd26008a3466e2757af7fa6ddc7e874eb592ccd9ec134f7cdf4cd204145a7f5366541d9cfeff02dbcacdac3a7eecb3fd96682cdbafc4000fcfe425b93335fd79673bfd79ab6bfb8c2dc3b7d65b12a35290a8dfdd0b49e26c5e58229e6bf5552dbc8616131dc6281d4eaa1db12af740a8c6d8734d0c10970925470f6d9944b98324f0c6a7f7e20b2f3e66716c30b2d87c2ee2382ee2818aec4f0f546c064fb1dcd5bbd1bd858ad343566d285300006a8cd62146b65fd71513a6c2acdb7eb0076572bb9213996a0fb3451625c9278f200782ce0ae10d9d1f3670c0ff108c2680af8faab3b723782fb121d722907025b5dca63a115f3fc94bb5587a7f5c9e140cbe9a537892c1abe589f5f8c7ef2f5218a205c59eb5bac885e2d5960e2710b89d817c88815e8a3c539b98b7f8460df5f3ce731e292edf42f11608e69c4155565661995b50dd5dddf45f9d67052467a852064b3c62bb990a8c30908674c7d234bcf61744689b64321fa67fbbf9b3970bf44434f0c919a1b0bfb6b87544c4a13a1f2431d3bc3260780150184520c41ce3ee9db5e0e066f63d1b2a1e620cc1ee0b255af43b4ecde1efa9ee8b4fdbc2b720b8f92d38102405ded93d48f3733383515db3511e75bb6ac0307ea0e063eb03bb22b20b0549bef17a7dde8f627d342081913c9122bdea475c86486bacb686c49161b7a474c9bca216638090b1297c7c89f878f4d70f6245d13e65151572ca67a1eeeecbc19f42a4c1b0ce07ac77c58879cbd57626dc2472f8ff76cad180dc932973e521ca51043dea28554c2df653e4525e251e5aaef87c374be68b3271dbd82374e21980e00f231532f410f14a7507f6900f2c4bc697128b8ff7388af4413669736298e41e54aea3aeeef351c01e0e165f5a98529db808b49c7a7454bfc3a15527b59c6eaf5c067087c1444e0e540a0a6d45c9b36a8bc2f1b938fdd64857d4915dc5f3c4084a17d45c0846adde47b80c5e658f435b2dea3dec27d766b49e3ad40a249bd46b71cc01c965c5b04e0d2fcd4e57b2c1ad41910c99bc4500ceade6f8fdc01ec951906bd238c557c018bcc6767e477386225f478569c9edb914298ce716deaa4b8d6f395af4e527c1e0e17a6f07519a6de528aca47505e42d75af44b8715e938117d9b1923f7037c9e21cf323d9038fe571847c6d9b4a2c7ebe6679aa2ef46f3fb9dec1b7ec94510a8f0fffe4d21f359213a1ab18af38fcd8e079d710a8a5d4caf1715fa87e659d46b204f9d3eafffb2a42a881024f37a6fba7ce03f1d4d278c1716d0b09ca955100a6152a07b6c110ed3c0d39fac025285972660c5c10a8722c6f03965f3249bf629e2a8c9187751a6c6f7c7c278adbb440517543bc409366485cfcee99e4a4ad2c2b55c85a084bf84806dbf9dd61e1bae6746ae10e5af448a328a38ebc26b82e41c2bca91c53e1fb6d97438015c0b4053382cfed8f6fab8f83aa382e10b2b2bd60fc978aea9a77fd2ff6f82f79c9a5d59bacf4acad211266e41ce6932a73046851519620e5f51281516b6f2637ea9b2cfe40b6be64db8d78599223aaeffe3c0b55fb2af0722323db7e91ffb0002cf1b9c3c4f6b1dec3add0d4d4b8636bd6a6d564ae78e3a2e61ecca0ef746a5f1f49372e13453e7db91cca5c2e7082a9578b559d4f8c106226f32d17b9fd9446e045d7c2ec8e489ee9c041f0fc6f126cfed11672de8a6cac6b4cf438c3818f16566ac4b3b3d4840004106938b10e102b168e2d746e6f8ba316d8f5f40065a17b1468f96cffdcaaf00fa4aaa7a40d4c71aea63fb94a8e755e5424b7a32efb9537e5249e7699a74e06e257b603a7af17ec1e0761e37b4acc4be4eeeedab184661a489a1961ff277b851f364c58a1c2f9e8df8f561398ccb1eaf4e3d41435bde33ce6b805370f489f2ea613ebe2e1d7316f0d325b35ab172d3cac4f03aaa8d9a904a9dbf51f7f88121750cd7f58dddb4aa4e554b39ab54f65b9306e0bb5fd815ce861cad44b13f32164f189afe47aa10699cf5703294b1679077148f24bd0aaee2df3840a1403c9364f668622d6e67bb570eb414066d2ec632aae2f5265929777c195ebb9f6fca59b05423007e5ba232a0d7be3a186b8bda86effff3aabd132005f52bd79c542726150758f9a77610b6f7c106569af8219e451b11081d6a4de080c96c70fa22f46ea8606d64116a6b54ac781a4873c911638c57bfcb4157023d6a2b7d257c358bef70cef5b374bc7902e4abef5b644c7c77173d1177e43249b905bda8a75da8e89db1cef3d870cb7b47a19f514f9c7f3a864e310a171732671ed02230265ee0598968cd83bc2add2d6fa5bb7673ce1b6fa62ac8f4dfd7640fd45044abae0609f51fc86cb9752289c90abdfecda2c35e134d9168772db0b5390e8e134ec4553dff97b4494f9a2846f7b8adc69fed9f54f044b597331f4c4c6967bd2729505155d84bb36c88ef4372e06035e787b50686fe04881241ee0f75a14723946b311c4cbe72b617bba4b692c63eb67eab85ab95162d4884392975464f5524fb1f838562dcab8de2203117e35c74af6edad49de2c9be345c2fb1f149835db913246583b0115263ce5e5256523904efd20e556b622d4520de5d55f37a1791b32a3b852b62162c781187bbf2250711d3f020a33b058f3d83f3196e0b6085cfc5f3e838b936f31af473ac6a519224e5e0b1984e5e138c1d48b7bc706742248e142e5c0d93c09228f81e2db969f494ae62493a0de892d514ce16aafab97e68fcd9287f2112b7e70638f2a6355ccd2850fe6239021f07afd26278398a44b5e088034b85f1e597d511b9c26f28ac290114b6127363fca64c34deba4d444f1b88afe65194cc6645b91554a0ac3f35ba860be419059dc5cdb34feacba6df62c040a91eeebe4cc6e8297b24b1e76797dc01a763d81025f1b3290e556fd8468b415bd98e0e2a7a44683c7a13585dad0c937c2334784e3cd10e8b984162c2080f6a733ffa1ba9aaaa9289434d78d804cb03300e52ba81d57d4c005c478a1aa426400587da40601bc62f73379ef0572bd977b43247e03c5c01cb998072b33feec254cf8e115dd61484e902fdeb3e6a302de144083a038ac0591038aa65099612ecb2ae996b0af197b5d13086e2c2ef1bc634c50a9c2a781ba04c3d36374209be68c3ecf9722f8997e2789118a0e53564677225854379bf530c543e00d9ada1468dbcfe525961c1796df1c514a1983070ce182645aeb4f3572b7a934a7dcbce5df56fc8151f33dd5adbc46568983a65cf265a78ee6fbedc5ea0b62cde1257d133b40144bece8d29627bcaffdd7ade5f1bb9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000035c0)={{r8, 0x9e, 0x9, 0x3, 0x3ff, 0x4, 0x6, 0x1, 0x1, 0x80, 0x2, 0x9, 0xffffffffffffffff, 0x81, 0x8}}) r9 = openat(0xffffffffffffffff, &(0x7f00000045c0)='./file0/../file0\x00', 0x422000, 0x9) syz_clone3(&(0x7f0000004840)={0x1000, &(0x7f0000004600)=0xffffffffffffffff, &(0x7f0000004640), &(0x7f0000004680), {0xe}, &(0x7f00000046c0)=""/60, 0x3c, &(0x7f0000004700)=""/237, &(0x7f0000004800)=[r1, r1, r1, r1, r1, 0xffffffffffffffff, r1, r1, r1], 0x9, {r6}}, 0x58) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000048c0), 0x80102, 0x0) ioctl$MON_IOCX_GETX(r11, 0x4018920a, &(0x7f0000005940)={&(0x7f0000004900), &(0x7f0000004940)=""/4096, 0x1000}) writev(r10, &(0x7f0000005a00)=[{&(0x7f0000005980)="3d693ce483afee392a4cc2bc2e1b972fba62684dfd17ae4674e35c43c420305a673a090100f17aaddcf18109e794a917cf98ab5f5f11d91500b33b53da09c95dd400f57c9cb34d5f61db53c5b2b44b070223cc843bd692eac93d7b9ec3eba7755c107cada4d1", 0x66}], 0x1) write$P9_RVERSION(r9, &(0x7f0000005a40)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.u'}, 0x15) ioctl$BTRFS_IOC_SEND(r9, 0x40489426, &(0x7f0000005ac0)={{r0}, 0x3, &(0x7f0000005a80)=[0x7b8d, 0x7fffffff, 0x7], 0x5f38, 0x4}) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000005b40)={0x10, 0x0, "43c80e3a5b076f5c92bb5e17cfdc9f76"}) syz_io_uring_setup(0x4494, &(0x7f0000005bc0)={0x0, 0x60f4, 0x40, 0x1, 0x5b}, &(0x7f0000005c40), &(0x7f0000005c80)) 6.142262697s ago: executing program 3 (id=8436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1e, 0x9, 0x70bd2a, 0x25dfdbff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000099000040"]) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000180)=0x5, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="231fce266f888530eff6be4a6bb653779acff30fded854db8c208d470ec85c1059d83335ddc4e93d4ccd7ef1b2e9772f5448edb5c0cb8b723a03146e0d5bdc9498e5b3052971d29378043153d1cc29d08d654597667e6bfef978fb4d3d2d17a55ff68efe359448423eee66a09241ea3ce36c724e12d26754c5d1acbe78b55ab83bb83fe1d8bed14908af032336b71cd945ba4359b315544658ea9f5467879b0fd3626cef758233239a", 0xa9, 0x800, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000240)=0xa) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r9 = getpid() ioctl$UI_SET_PHYS(r7, 0x4008556c, &(0x7f0000000000)='syz0\x00') syz_pidfd_open(r9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.245448335s ago: executing program 3 (id=8439): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x38, 0x36, 0x65, 0x31, 0x39, 0x3e, 0x2c, 0x0, 0x39, 0x66, 0x38, 0x30, 0x33, 0x64, 0x33]}, &(0x7f0000000080)={0x0, "957968d3c0f443e972b9d723b2865bed4fb32162005aa91192e61d4668d960da62c8486e30f4b269944aa86d0fc98dc32a905b1437ea3628b522a4cb4389b610", 0x28}, 0x48, r0) keyctl$unlink(0x9, r0, r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2}, 0x14) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @c}, 0x29, r0) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="1331b6ccd5243e30f9bc4b59d04cb7fe90", 0x11, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r3, 0x400c620e, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x3}], 0x35, 0x0, &(0x7f0000000200)="ddb8499995d670e64d0ca0b87a50245e51fc5d18d5b759b8cc3dbfbb6c324243982d403d5b618753a7a21078cca562bae6035a8dfa"}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x38, 0x36, 0x65, 0x31, 0x39, 0x3e, 0x2c, 0x0, 0x39, 0x66, 0x38, 0x30, 0x33, 0x64, 0x33]}, &(0x7f0000000080)={0x0, "957968d3c0f443e972b9d723b2865bed4fb32162005aa91192e61d4668d960da62c8486e30f4b269944aa86d0fc98dc32a905b1437ea3628b522a4cb4389b610", 0x28}, 0x48, r0) (async) keyctl$unlink(0x9, r0, r0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00'}) (async) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2}, 0x14) (async) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @c}, 0x29, r0) (async) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="1331b6ccd5243e30f9bc4b59d04cb7fe90", 0x11, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) (async) ioctl$BINDER_FREEZE(r3, 0x400c620e, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x3}], 0x35, 0x0, &(0x7f0000000200)="ddb8499995d670e64d0ca0b87a50245e51fc5d18d5b759b8cc3dbfbb6c324243982d403d5b618753a7a21078cca562bae6035a8dfa"}) (async) 5.143925755s ago: executing program 3 (id=8440): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2502, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xe2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000002505fa5dd02a6bc460000000000744a552dc1cabc7feabf6400ad3f0000000000000000000000000000000000000000000000000000de02034ed0fc5b802b05b2190000a988e1ce9d0b2be96b000000000000000000a2000000000000000000000099c91c670453bafb73e8bafcfbfc31b5c40e1a748aa03f5700"], 0x68) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x8, 0xfb, 0x9, 0x3}, {0x4, 0x7, 0x7, 0xa9}, {0x0, 0x5, 0x1, 0xfffffff7}]}, 0x10) r5 = socket(0x2, 0x4, 0xfffffffe) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe64, 0x7, @empty, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40000020, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000001100)=0x16) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff8105000000ffff0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) poll(&(0x7f0000001140)=[{r4, 0x2c41}, {r0, 0x20c}], 0x2, 0x2) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000400)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001040)={0x5c, r10, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "578491804e547746030a252344"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "2d69eb1d6b58623b01"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004001) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000000c0)={0x44, 0x2e, 0x333, 0x70bd2d, 0x25dfdbfb, "", [@generic="5db4da4a8216cd4fba3e0a46fe92961616680352eab82aeb7ed24c45f9e609f32d6668fda94619aa97dc60c1ed2dc5959c7fa02c"]}, 0x44}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) 5.044239355s ago: executing program 3 (id=8442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r1, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x9, 0x800, 0x2, 0x5, 0x963, 0x6, 0x8]}}]}]}]}]}]}, 0x44}}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0xfe, {{0x5}, {0x5, 0x24, 0x0, 0x175a}, {0xd, 0x24, 0xf, 0x1, 0x80000000}, [@country_functional={0x6, 0x24, 0x7, 0x6, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x3, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xf8}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8fe69000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/4107, 0x100b}], 0x2}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000004d32b00"], 0x1fc}, 0x1, 0x0, 0x0, 0x8090}, 0x40884) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x30500000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f0000000600)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000001c0)=""/210, 0xd2}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) ioctl$BLKRRPART(r2, 0x125f, 0x0) 4.291963079s ago: executing program 3 (id=8452): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x5b, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000740)=""/125, 0x7d}], 0x6, 0x8, 0x7fff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0xe}, 0x3, 0x22, &(0x7f0000000040)="578a1107854a86f2e8642f2b9b9a0959a93aead6c7bc606df42d12a65a3443281f92607a1cca33", 0x27, 0x3, 0x0, 0x30, 0x1, 0x4, &(0x7f0000000080)="8836a79cf9e77fb2d67681095120c1af27e72676b52cc97f4c43018fb254ff8775a1946ab655d3b5920cd4650446b8096e52a98a", [{0x7f, 0x2, 0x7}, {0xe, 0x7, 0x40}, {0x1c65, 0x3, 0x2459}, {0xf, 0x3ff, 0x9}, {0x7, 0x4, 0xa1d}, {0x97a, 0x2, 0x9}, {0x81, 0x7, 0x5}, {0x100, 0x8000, 0x1}, {0x200, 0xeae7}, {0x1de, 0x5, 0x21}, {0x81, 0x0, 0x8}, {0xd713, 0x4, 0xf301}, {0x7ff, 0x80, 0x4}, {0xffffffcc, 0x3, 0xfff}, {0x5, 0x7, 0x565}, {0x401, 0xb8ffca, 0x3}, {0x89, 0xfffffff9, 0xffff1937}, {0x0, 0x80000000, 0x6}, {0x8, 0x8000, 0x8001}, {0x0, 0x401, 0x7}, {0xff, 0x100}, {0x9, 0x7f, 0x2}, {0x2, 0x5, 0xff}, {0x100, 0x9b, 0x3}, {0x5, 0x16c9a632, 0x7}, {0x10, 0xd3, 0x6}, {0x2f, 0xffffffbb}, {0x8, 0xffffffff, 0xffffffff}, {0x5, 0xa, 0x2}, {0x10000, 0x8, 0xef}, {0x80000000, 0x0, 0x9}, {0x937, 0x9, 0x6}, {0x8, 0x1, 0x4}, {0x0, 0xffffffff, 0x6}, {0x0, 0x2e5d, 0x200}, {0x5, 0x0, 0x400}, {0x3, 0x8, 0x7f}, {0x5, 0x1, 0x1}, {0x2, 0x6fb9, 0x3ff}, {0x800, 0x6, 0x10}, {0x400, 0x6, 0x5}, {0x7fff, 0x6, 0x2}, {0xf, 0x2, 0x6}, {0x3, 0x1, 0x40}, {0x7, 0xff, 0x2}, {0x77f4, 0x2, 0x59c}, {0x2, 0x7, 0x9}, {0x8, 0xfd3, 0x3}]}) 4.217765056s ago: executing program 3 (id=8453): r0 = socket(0x840000000002, 0x3, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000003c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000240)="a905ac15a40013000074640001", 0xd}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf8270c1d5c7fff805d7", 0x17}], 0x2}}], 0x1, 0x24004044) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x1d}}, &(0x7f0000000180)={0xfffffffffffffd22, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) socket(0x840000000002, 0x3, 0xff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000003c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000240)="a905ac15a40013000074640001", 0xd}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf8270c1d5c7fff805d7", 0x17}], 0x2}}], 0x1, 0x24004044) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x1d}}, &(0x7f0000000180)={0xfffffffffffffd22, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 4.141576354s ago: executing program 36 (id=8453): r0 = socket(0x840000000002, 0x3, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000003c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000240)="a905ac15a40013000074640001", 0xd}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf8270c1d5c7fff805d7", 0x17}], 0x2}}], 0x1, 0x24004044) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x1d}}, &(0x7f0000000180)={0xfffffffffffffd22, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) socket(0x840000000002, 0x3, 0xff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000003c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000240)="a905ac15a40013000074640001", 0xd}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf8270c1d5c7fff805d7", 0x17}], 0x2}}], 0x1, 0x24004044) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bond_slave_1\x00', @random="f7ff3a711070"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x1d}}, &(0x7f0000000180)={0xfffffffffffffd22, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 3.335807393s ago: executing program 7 (id=8462): socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, 0x0) pread64(r2, &(0x7f00000000c0)=""/22, 0x16, 0x6) 3.15599153s ago: executing program 7 (id=8466): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000018040103000400c400100045ae00280065000001069078ac1414aaac1414bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000390780080530139347360da47360ee78d82eb8993799ff87c44869713f1144dc65147d2716e13e026b2bfaf868aaebda0ce204289856e8e6093efe739731368ae57d79ff70884afa25ed00d7cfab5e8c53cbd922938113d50f187884a167c3d0105b71d2d6420bfb267ed3624179916ff7d72f25934880ce23b397a8be854b45f5e5115806aa051a002c41317b8a5a8068d2038a2ce4db7f06cf44313dac15382b65b"], 0x36) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 2.681687047s ago: executing program 7 (id=8472): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001580), 0x35c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x1b}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @multicast1}, "35158101a84e1706"}}}}}, 0x36) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xff01, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xa2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf6}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 2.44815129s ago: executing program 7 (id=8475): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000200)={@any, 0x0, 0x6, 0x6e, 0x80, 0x3ff, "1e16d9027d208c8c12a7c3d172f02c9a4f474f22eec7364d18c2ba909e623b2666d4c275c8de03bc77dba8cb74c06243efbc3643a51b2cbbce3f82893596fb8584f6f7a396aa5b2f759b89995276d77aabc174f6135649683003b8aa31037595426602475c95f4b3168a790637faa9405303a40d56d78818ce6ed4087b367e16"}) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000002f80)={'\x00', 0x7, 0xa813, 0x4a6, 0xa9, 0x1, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r6, 0x112, 0x4, 0x0, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000003000)={'\x00', 0x40, 0x200, 0x8, 0x7, 0x4, r5}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x44, 0x0, &(0x7f0000000040)="fd65ac98d84bfcedf62b86efc841ebb6f575541a7f0ca953ca6ce85093719aa84ad00333c496b6d71d495174ef97fd2a03c9896e05d855424d6191a8a57973059da0909e"}) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/9, 0x9}, {&(0x7f00000014c0)=""/225, 0xe1}, {&(0x7f00000015c0)=""/230, 0xe6}, {&(0x7f00000016c0)=""/5, 0x5}, {&(0x7f0000001700)=""/212, 0xd4}], 0x8, &(0x7f0000001880)=""/206, 0xce}, 0x40}, {{&(0x7f0000001980)=@pppol2tpv3, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001a00)=""/242, 0xf2}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4, 0x4}, {&(0x7f0000002b40)=""/146, 0x92}, {&(0x7f0000002c00)=""/231, 0xe7}, {&(0x7f0000002d00)=""/3, 0x3}, {&(0x7f0000002d40)=""/146, 0x92}], 0x7, &(0x7f0000002e80)=""/23, 0x17}, 0x7}], 0x2, 0x10040, &(0x7f0000002f40)={0x0, 0x3938700}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) 2.292147365s ago: executing program 7 (id=8477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(0x0, &(0x7f0000001280)={0xaf19, 0xfffffff9, 0x80000000, 0x80000000, 0xffffffff, 0x80000001}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) r2 = dup(r1) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x8082) dup3(r3, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100)=0x12) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.887944755s ago: executing program 7 (id=8479): socket$inet6(0xa, 0x802, 0x88) (async) r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x43df, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x13, r0, 0x16e19000) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x13, r0, 0x16e19000) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12015002f10a80085a041052011901020301090212000106bd200f0904"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=""/61, 0x132a000, 0x1000, 0xc}, 0x26) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=""/61, 0x132a000, 0x1000, 0xc}, 0x26) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 1.818396862s ago: executing program 8 (id=8454): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x222942, 0x0) fallocate(r0, 0x0, 0x3, 0x100000001) r1 = inotify_init() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x6) inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0x1400005e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1, 0xfd7e, 0xb6b4d58, 0x2, 0x1, 0x5, 0x1}, 0x1c) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d) getsockopt$inet_opts(r8, 0x0, 0x4, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20ef2bbd7000fb5b0000000600280001000000050037000000000008003200050000000500330000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40080) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) clock_getres(0xe2249e36e7addc67, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x1, 0x20000000, &(0x7f0000000a80)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x48) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"}) 1.659585137s ago: executing program 8 (id=8481): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x4000, 0x5, 0xa3, 0x200, 0x0, [{0x6, 0x4, 0x7, '\x00', 0x20}, {0x9, 0xf2, 0x6, '\x00', 0x2}, {0x7, 0xb, 0x8, '\x00', 0x2}, {0x3, 0x4, 0x40, '\x00', 0x9}, {0x4, 0x4, 0x3, '\x00', 0x3}, {0xd7, 0x10, 0x10, '\x00', 0xbe}, {0x7f, 0x3, 0xc, '\x00', 0x2}, {0x4, 0xb1, 0x0, '\x00', 0x9}, {0xe, 0x0, 0x9, '\x00', 0xff}, {0x2, 0x8, 0x4, '\x00', 0x1}, {0x7f, 0x7f, 0xf8, '\x00', 0x3}, {0x3, 0x6, 0xe5, '\x00', 0x11}, {0x9, 0x5, 0x5, '\x00', 0x6}, {0x10, 0x5, 0x4, '\x00', 0xf9}, {0x81, 0x9, 0x1d, '\x00', 0x81}, {0x57, 0x30, 0x9c, '\x00', 0x3}, {0x9, 0xd, 0x9, '\x00', 0x8}, {0x7, 0x1, 0x78, '\x00', 0x80}, {0x2, 0x40, 0x2, '\x00', 0x7}, {0xe, 0x7, 0x0, '\x00', 0x4}, {0x4, 0x4, 0x2, '\x00', 0xc}, {0x6, 0xb, 0xf, '\x00', 0x8}, {0x4, 0x7, 0x1d, '\x00', 0xa}, {0x3, 0xf7, 0x7f, '\x00', 0x8}]}}) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0xa, 0x0, 0xc4, 0x7a, 0xb2, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000dc0)=@string={0x6e, 0x3, "2c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33d499c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868de"}}]}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000001340)={0x2, 0x0, @pic={0xe, 0x5, 0x0, 0x40, 0x6, 0x3, 0x8, 0x2, 0xd, 0x1, 0x2, 0x1, 0x9, 0x3, 0x7}}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000005c0)={'broute\x00', 0x0, 0x4, 0x56, [0x4, 0xfffffffffffffff2, 0x9, 0x7ff, 0x57b4], 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/86}, &(0x7f0000000000)=0x78) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, 0x0, 0x2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 1.320008711s ago: executing program 6 (id=8484): keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0xfe, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) (async) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@private}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@initdev}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2800010, &(0x7f0000000400)={[{@huge_always}]}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000780)='Tgr\t\x00\x00\x00\x00\xb7E\x8c\xf9\xcfH~\'^\xa7{\x01n\xea\xdc\x8f\xa0\xd9\x1d\xa4\x89\xe5\xe3.\xa5\x83W+\xda\xb6[\xf2\xa9\x9fiM\x1d\xfb\x0e\x03\xeb\xed\xb5\xa1\xf7\xd8\xa3b\xa4\xa2B\x8d\xe7}\xf3\xf3\xb5Tj\xdf\x13(\x0f\x95\x89\xfb6\x8b\x92\'\x9b~{y\nw\x91\xb1\xd9\xd3Kt\xec\x8fU\x90r\xc6\x93|O\xc7\xcaa\x19Z\x93\x95\xd8\xd4h\xd2\r\xa7A\x93-\xc1\xc1\xf5N\xfa\xa2\x93\xf3\xd9\x94\xe1&\x98\x14$!r\xca\xc6@\x1fk<\xb9C\x93##k\xce\xb7M\xec]&M\xfd\xcb\x90\xe6\xe1\xbf\xbd\x82D\x00\x00\x8e\xf2\x1c\x97\xb2\x06\xd4\xd8\x8a\xb2>\xb0\x0e;\x83\xaeam\xe7\x8c&?\x0fF\xa9y)\xa3b\xde\x14\x9b\x97\xb9\xd6\xb2\x94\x98\x13\xfa\xd9F\xa9\x82\xa2\x96\x1a\x0ea\x14\n\xd4H\xedH\xaeS\x9b\xa2\x7f\r\x15r%h=p\x1b\x1a\x12<\xeb\"\xadi#\x8bs\xc7r$\xeap\x8bh\xad\xd6i\x97 \xef\xe7d\xf1\x90\xf5\x7fp\xc9\xcbw\xca\xc0^(\xb8{\xcf\xd1{J\xa8\b\x04\xfc?\xc4M7\x05p4\f4Z\x9b\xb2\b\xec~#?\xc5\x7f\v\x8bmI\x91%\xc9\xfc(97!\xb6\xfb\x92Z\xd4\x9dCM\xee\xaa\xfd\n\x97\x94u\x82\xf5\bB\xa5\x9d\xc3\x1f\x15I\xd4\x8f~Q\xe5rj4\xda\x047\xaa\xa8Yw\xdf\xe8\xb0\xc0\xa4=_TU\x01\xee\xc3\xb5\x82\x84\x10\f\xb3\t\x031 \xa00\xcb_6\x83\xa8\x94\xcc\xc9a\xa9\xa2\xa9\t\x1dt\x9f}kV\xc5\x19\xceA\x97 \xf1\xcf@)\xcd\xd0hR\xec\x1d\xa4\xaf%6\xa2\xa2=3\x19ty\x1a\xcc\x13\xb1j\xf4\x86\xc73\x97Nu\x9eT\x87aCU%\xd4>\x9f\n^\x825\x9f\xad\xd2\xab\xbd/^\x13\xa6qLF\x92,a\xa8\xfd\xbe0\xd5\xd8\xa8)\xc3I\x054\x9f\xeay\f\\/q\x11\xd2C\xea\x06\xfd\x9eU\xa0\xa2rT\xd7B\xcc\x8e?\xb0l\xc3n\xd7\xe0\x160\xa5\xa5l&E\x9b\xfe\x113\x91z-\x93\x15\xe9l \xfdI\xb9\xd9\xce', 0x0, r2) set_robust_list(0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.310263722s ago: executing program 6 (id=8485): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000014000/0x2000)=nil, 0x2000, 0xa8ca3411d2c26009, 0xc2110, r0, 0xc37e6000) 1.231042019s ago: executing program 6 (id=8486): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x270, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)="93", 0x1, 0x4000014, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000059a000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.12159463s ago: executing program 6 (id=8487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="2400000026000305a7c4046155f2b7323e9c61016ff52bd3beda57db7e8839585bca5fb81846e7bab2d29f455e0109a7d90a2ca4c5a1edc03f96065a5e4e43444ecc5f71b0da357d4ab39f4678c954dbb786663e62f450e28456a78621fd8898064a6dfe1df3f49be34ba11a667aab9eed174ebd4d11c71302666116d17590ebe597fd44e935b0c14d0ead64602e0b741a1ba1c4c8b2d3bc3fe16d189754bc8e7f7d835ae6d49c97329ba564"], 0x24}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2902, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r5 = fsopen(&(0x7f0000001900)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setresuid(0x0, 0xee00, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235004000000f30b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d90000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3166b857000f00d0", 0x54}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 971.403535ms ago: executing program 6 (id=8491): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x8000) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) fcntl$dupfd(r0, 0x0, r0) 464.007535ms ago: executing program 4 (id=8495): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x7ff, 0x2000) (async) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x8, r3) (async) syz_pidfd_open(r3, 0x0) (async) wait4(r3, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 444.649646ms ago: executing program 4 (id=8496): mmap(&(0x7f00008a4000/0x3000)=nil, 0x3000, 0x100000f, 0x2010, 0xffffffffffffffff, 0x26f94000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1'}, 0xb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000001440)={0x1}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) r8 = accept$nfc_llcp(r6, 0x0, &(0x7f0000000040)) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000001480)={@initdev, 0x0}, &(0x7f00000014c0)=0x14) sendmsg$sock(r8, &(0x7f00000003c0)={&(0x7f00000000c0)=@xdp={0x2c, 0x7, r9, 0x2a}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="6dae68715e683862e06bde8ca489993f4543300c1dca149b75dc2b6815082e892df977a9de3a598330f981d3bff8903f4fd92a64ebe50dd4b34fde5a36bf5c9722dbe0c71d30ae8c7084d07d9e4f282f2341c0dccf1210d071f73d7518853f60", 0x60}, {&(0x7f00000001c0)="0caebce8b7fc84fd3a92b4c38b5e89e312db5352a4de2b040ab56c78a817ce6d4030f016a8c4ee8ddf8c6cf59d6f7a04f3e66409b7d1f2d19eef2f79a37ec6e105ca2742ee7606869f5dd1c9ae084fa6dba56464381a178c78b08d7390b88bcc35bb8c19441a37a93d13d8e1cae14eb7ca7aa3ee25eb1751fa0f0637154c2a0a8a06b9930224548382a2cc337fec44b705d08a634554ce129ac5dfc77d961ce92a5d3bb1d2008d1e3bee989b69d70f283b4de8558e", 0xb5}], 0x2, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x689}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x61f9fa13}}, @mark={{0x14, 0x1, 0x24, 0x1004}}], 0xd8}, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f00005aa000/0x10000)=nil, 0x10000, 0x5) write(r0, &(0x7f0000000400)="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", 0x1f000) 363.699794ms ago: executing program 4 (id=8497): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') (async) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket(0x28, 0x5, 0x0) (rerun: 64) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x2, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000002400070dfeffffff0000000001545f"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0}) (rerun: 32) 196.056981ms ago: executing program 4 (id=8498): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x85b83000) 164.641384ms ago: executing program 4 (id=8499): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145543, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2d, 0x48, 0x2a, 0x401, 0x2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x700, 0x401, 0x4f}}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x11, r2, 0x1, 0x7, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) fadvise64(r0, 0x40, 0x10, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 76.251043ms ago: executing program 6 (id=8500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21e54db, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '/selinux/load\x00'}], 0xa, "c77eef246f25ff3a3245dee34614b0a379584070528db18039904adc2db3a7d16ba9ae94860d72657c2d7f3b838a5a7548843f4df318"}, 0x50) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000440)={{0x4, 0x5000, 0xe, 0xc5, 0x1, 0x8, 0x9, 0x0, 0x9, 0x3, 0xc0, 0x7f}, {0xeeef0000, 0xdddd1000, 0xc, 0x7, 0xff, 0x0, 0x6, 0x30, 0x1, 0x7, 0x23, 0x2}, {0x8003000, 0x0, 0x4, 0x6, 0xe, 0xf, 0xa, 0x4, 0x3, 0x7f, 0xc, 0x10}, {0x0, 0x8080000, 0x3, 0x1, 0x7, 0x0, 0xff, 0x5a, 0x2, 0x7f, 0x1}, {0xdddd1000, 0xeeef0000, 0xb, 0x1, 0x5, 0x80, 0x6, 0x2, 0x9, 0x6, 0x5, 0xfc}, {0x80a0000, 0x8000000, 0x3, 0x0, 0x5, 0x7, 0x3, 0x80, 0x9, 0xa7, 0x9, 0x6}, {0x5000, 0xd000, 0xe, 0x54, 0x52, 0x3, 0x6, 0x32, 0x96, 0x8, 0xf, 0xc}, {0x2, 0x333ad000, 0x3, 0x9, 0xf6, 0x2, 0x88, 0x2, 0x8, 0x9e, 0x0, 0xb}, {0x1000, 0x338}, {0x0, 0x31}, 0x2000000b, 0x0, 0xf000, 0x400314, 0xf, 0x400, 0x0, 0x1, [0x9, 0x1, 0xfffffffffffffff9, 0x5]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) socket$unix(0x1, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x1, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x40) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000080)=""/21, &(0x7f0000000240)=0x15) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000006e0002"]) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0xffffffffffffffda}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xb959) socket$inet6(0xa, 0x1, 0x2) 0s ago: executing program 4 (id=8501): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766746ec53d47", @ANYRESHEX=r2, @ANYBLOB=',directio,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) kernel console output (not intermixed with test programs): inder: BINDER_SET_CONTEXT_MGR already set [ 669.318137][T22968] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7509'. [ 669.434317][T20611] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 669.539387][T22981] overlay: Unknown parameter 'uid' [ 669.596557][T20611] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 669.611800][T20611] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.621010][T20611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 669.629054][T20611] usb 4-1: SerialNumber: syz [ 669.844678][ T36] kauditd_printk_skb: 664 callbacks suppressed [ 669.844699][ T36] audit: type=1400 audit(1760037080.291:99226): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 669.855224][T20611] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 669.878234][ T36] audit: type=1400 audit(1760037080.291:99227): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 669.921596][ T36] audit: type=1400 audit(1760037080.291:99228): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 669.946478][T20611] usb 4-1: USB disconnect, device number 4 [ 669.964372][T20611] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 669.969387][ T36] audit: type=1400 audit(1760037080.291:99229): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.005370][T22989] binder: Unknown parameter 'fscontext?}' [ 670.027007][ T36] audit: type=1400 audit(1760037080.291:99230): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.029841][T22989] binder: Unknown parameter 'fscontext?}' [ 670.052243][ T36] audit: type=1400 audit(1760037080.291:99231): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.086086][T22989] binder: Unknown parameter 'fscontext?}' [ 670.093351][T22989] binder: Unknown parameter 'fscontext?}' [ 670.122321][T22989] binder: Unknown parameter 'fscontext?}' [ 670.130537][ T36] audit: type=1400 audit(1760037080.291:99232): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.145170][T22989] binder: Unknown parameter 'fscontext?}' [ 670.160413][ T36] audit: type=1400 audit(1760037080.291:99233): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.186423][T22989] binder: Unknown parameter 'fscontext?}' [ 670.187341][ T36] audit: type=1400 audit(1760037080.291:99234): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.220006][T22989] binder: Unknown parameter 'fscontext?}' [ 670.230934][T22989] binder: Unknown parameter 'fscontext?}' [ 670.241842][T22989] binder: Unknown parameter 'fscontext?}' [ 670.263742][T22989] binder: Unknown parameter 'fscontext?}' [ 670.271840][T22989] binder: Unknown parameter 'fscontext?}' [ 670.282215][T22989] binder: Unknown parameter 'fscontext?}' [ 670.287385][ T36] audit: type=1400 audit(1760037080.291:99235): avc: denied { ioctl } for pid=22956 comm="syz.3.7506" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.306950][T22989] binder: Unknown parameter 'fscontext?}' [ 670.335391][T22989] binder: Unknown parameter 'fscontext?}' [ 670.342660][T22989] binder: Unknown parameter 'fscontext?}' [ 670.350824][T22989] binder: Unknown parameter 'fscontext?}' [ 670.358693][T22989] binder: Unknown parameter 'fscontext?}' [ 670.366563][T22989] binder: Unknown parameter 'fscontext?}' [ 670.373869][T22989] binder: Unknown parameter 'fscontext?}' [ 670.383160][T22989] binder: Unknown parameter 'fscontext?}' [ 670.391014][T22989] binder: Unknown parameter 'fscontext?}' [ 670.398700][T22989] binder: Unknown parameter 'fscontext?}' [ 670.406730][T22989] binder: Unknown parameter 'fscontext?}' [ 670.414849][T22989] binder: Unknown parameter 'fscontext?}' [ 670.422061][T22989] binder: Unknown parameter 'fscontext?}' [ 670.430455][T22989] binder: Unknown parameter 'fscontext?}' [ 670.438464][T22989] binder: Unknown parameter 'fscontext?}' [ 670.446519][T22989] binder: Unknown parameter 'fscontext?}' [ 670.453913][T22989] binder: Unknown parameter 'fscontext?}' [ 670.461201][T22989] binder: Unknown parameter 'fscontext?}' [ 670.468101][T22989] binder: Unknown parameter 'fscontext?}' [ 670.475245][T22989] binder: Unknown parameter 'fscontext?}' [ 670.804064][T20611] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 670.956677][T20611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.967827][T20611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 84 [ 670.977699][T20611] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.986795][T20611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.000856][T23005] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 671.221420][T20611] usb 4-1: USB disconnect, device number 5 [ 671.242867][T23010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 671.248269][T23010] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 671.368331][T23016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 671.431402][T23017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 671.447273][T23017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1683 [ 671.455600][T23017] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 671.534956][T23019] netlink: 'syz.7.7523': attribute type 1 has an invalid length. [ 671.599073][T23022] x_tables: duplicate underflow at hook 1 [ 671.606030][T23022] bridge0: port 3(dummy0) entered blocking state [ 671.612431][T23022] bridge0: port 3(dummy0) entered disabled state [ 671.619306][T23022] dummy0: entered allmulticast mode [ 671.625113][T23022] dummy0: entered promiscuous mode [ 671.630474][T23022] bridge0: port 3(dummy0) entered blocking state [ 671.636926][T23022] bridge0: port 3(dummy0) entered forwarding state [ 671.646114][T23022] binder: Bad value for 'max' [ 671.727775][T23027] rust_binder: Error while translating object. [ 671.727798][T23027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 671.735018][T23027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:638 [ 671.913679][T23035] rust_binder: Got transaction with invalid offset. [ 671.930296][T23035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 671.939040][T23035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 671.975819][T23038] netlink: 57 bytes leftover after parsing attributes in process `syz.3.7531'. [ 672.020414][ T1812] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.200989][T23044] rust_binder: Failed to allocate buffer. len:18446744073709551592, is_oneway:true [ 672.271196][T23051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.293930][T23050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.861097][T23056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.868139][T23055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.905314][T23055] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 674.053446][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 674.053446][T14062] Bluetooth: hci0: command 0x1003 tx timeout [ 674.378257][T23073] veth1: entered allmulticast mode [ 674.393187][T23072] veth1: left allmulticast mode [ 674.426505][T23075] 9pnet_fd: Insufficient options for proto=fd [ 674.650749][T23083] rust_binder: Write failure EINVAL in pid:94 [ 674.785681][T23097] devpts: called with bogus options [ 674.800956][T23097] rust_binder: Read failure Err(EAGAIN) in pid:108 [ 674.876309][ T36] kauditd_printk_skb: 416 callbacks suppressed [ 674.876337][ T36] audit: type=1400 audit(1760037085.322:99652): avc: denied { create } for pid=23102 comm="syz.3.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.909545][ T36] audit: type=1400 audit(1760037085.322:99653): avc: denied { connect } for pid=23102 comm="syz.3.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.929763][ T36] audit: type=1400 audit(1760037085.322:99654): avc: denied { write } for pid=23102 comm="syz.3.7553" path="socket:[116180]" dev="sockfs" ino=116180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.954952][ T36] audit: type=1400 audit(1760037085.322:99655): avc: denied { write } for pid=23102 comm="syz.3.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.984604][ T36] audit: type=1400 audit(1760037085.382:99656): avc: denied { read } for pid=23102 comm="syz.3.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 675.033207][ T36] audit: type=1400 audit(1760037085.382:99657): avc: denied { read write } for pid=22725 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 675.062130][ T36] audit: type=1400 audit(1760037085.382:99658): avc: denied { read write open } for pid=22725 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 675.089490][ T36] audit: type=1400 audit(1760037085.382:99659): avc: denied { ioctl } for pid=22725 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 675.091793][T23105] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 675.116072][ T36] audit: type=1400 audit(1760037085.462:99660): avc: denied { read } for pid=23104 comm="syz.3.7554" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 675.148835][ T36] audit: type=1400 audit(1760037085.462:99661): avc: denied { read open } for pid=23104 comm="syz.3.7554" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 675.185209][T23105] rust_binder: Error while translating object. [ 675.185262][T23105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 675.191232][T23109] 9pnet_fd: Insufficient options for proto=fd [ 675.191572][T23105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 675.209517][T23109] netlink: 'syz.4.7555': attribute type 4 has an invalid length. [ 675.317056][T23111] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7556'. [ 675.350794][T23113] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 675.363868][T23113] rust_binder: Write failure EINVAL in pid:119 [ 675.412492][T23116] rust_binder: 23115 RLIMIT_NICE not set [ 675.461399][T23120] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 675.467162][T23120] rust_binder: Read failure Err(EFAULT) in pid:126 [ 675.744432][T23126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 675.830679][T23131] binder: Bad value for 'stats' [ 676.064090][T23144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 676.068232][T23144] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 676.218133][T23156] tipc: Enabling of bearer rejected, failed to enable media [ 676.912043][T23168] __vm_enough_memory: pid: 23168, comm: syz.3.7576, bytes: 18014402804453376 not enough memory for the allocation [ 677.479467][T23203] rust_binder: Write failure EFAULT in pid:167 [ 677.518810][T23205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 677.533092][T23205] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 677.576858][T23207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 677.586329][T23207] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 677.962506][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 678.102440][ T31] usb 4-1: device descriptor read/64, error -71 [ 678.343239][ T31] usb 4-1: device descriptor read/64, error -71 [ 678.582953][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 678.732275][ T31] usb 4-1: device descriptor read/64, error -71 [ 678.906696][T23256] rust_binder: 676: no such ref 0 [ 678.972266][ T31] usb 4-1: device descriptor read/64, error -71 [ 679.082309][ T31] usb usb4-port1: attempt power cycle [ 679.422116][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 679.455569][T23275] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7612'. [ 679.465245][ T31] usb 4-1: device descriptor read/8, error -71 [ 679.518988][T23277] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 679.595199][ T31] usb 4-1: device descriptor read/8, error -71 [ 679.630607][T23282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 679.636639][T23282] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 679.832090][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 679.864411][ T31] usb 4-1: device descriptor read/8, error -71 [ 679.993245][ T36] kauditd_printk_skb: 751 callbacks suppressed [ 679.993265][ T36] audit: type=1400 audit(1760037090.443:100413): avc: denied { ioctl } for pid=23212 comm="syz.3.7593" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.024724][ T36] audit: type=1400 audit(1760037090.443:100414): avc: denied { ioctl } for pid=23212 comm="syz.3.7593" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.050377][ T36] audit: type=1400 audit(1760037090.493:100415): avc: denied { ioctl } for pid=23212 comm="syz.3.7593" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.076284][ T36] audit: type=1400 audit(1760037090.523:100416): avc: denied { ioctl } for pid=23212 comm="syz.3.7593" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.101700][ T31] usb 4-1: device descriptor read/8, error -71 [ 680.102258][ T36] audit: type=1400 audit(1760037090.523:100417): avc: denied { ioctl } for pid=23212 comm="syz.3.7593" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.133561][ T36] audit: type=1400 audit(1760037090.543:100418): avc: denied { ioctl } for pid=23212 comm="syz.3.7593" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.178448][ T36] audit: type=1400 audit(1760037090.623:100419): avc: denied { read write } for pid=12991 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.202871][ T36] audit: type=1400 audit(1760037090.623:100420): avc: denied { read write open } for pid=12991 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.231544][ T31] usb usb4-port1: unable to enumerate USB device [ 680.239125][ T36] audit: type=1400 audit(1760037090.623:100421): avc: denied { ioctl } for pid=12991 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.272687][ T36] audit: type=1400 audit(1760037090.673:100422): avc: denied { read } for pid=23295 comm="syz.6.7620" name="binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 680.361227][T23301] netlink: 'syz.4.7621': attribute type 29 has an invalid length. [ 680.380248][T23301] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.7621'. [ 680.414281][T23301] overlayfs: failed to clone upperpath [ 680.557049][T23307] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3865 sclass=netlink_xfrm_socket pid=23307 comm=syz.4.7624 [ 680.577549][T23308] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3865 sclass=netlink_xfrm_socket pid=23308 comm=syz.4.7624 [ 680.596039][ T1840] bridge_slave_0: left allmulticast mode [ 680.602191][ T1840] bridge_slave_0: left promiscuous mode [ 680.607861][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.716288][T23305] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.723856][T23305] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.735941][T23305] bridge_slave_0: entered allmulticast mode [ 680.744218][T23305] bridge_slave_0: entered promiscuous mode [ 680.750618][ T1840] tipc: Left network mode [ 680.757563][T23305] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.764840][T23305] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.795051][T23305] bridge_slave_1: entered allmulticast mode [ 680.801549][T23305] bridge_slave_1: entered promiscuous mode [ 680.821810][ T1840] veth1_macvtap: left promiscuous mode [ 680.827342][ T1840] veth0_vlan: left promiscuous mode [ 680.925319][T23334] netlink: 'syz.4.7630': attribute type 12 has an invalid length. [ 681.223983][T23305] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.231110][T23305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.238493][T23305] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.245580][T23305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.265736][ T1840] bridge_slave_1: left allmulticast mode [ 681.271441][ T1840] bridge_slave_1: left promiscuous mode [ 681.278122][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.286449][ T1840] bridge_slave_0: left allmulticast mode [ 681.292642][ T1840] bridge_slave_0: left promiscuous mode [ 681.298309][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.440568][ T1840] tipc: Disabling bearer [ 681.451471][ T1840] tipc: Left network mode [ 681.464017][ T1840] veth1_macvtap: left promiscuous mode [ 681.590213][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.597706][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.617514][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.624657][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.636687][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.643798][T11518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.743937][T23305] veth0_vlan: entered promiscuous mode [ 681.793451][T23305] veth1_macvtap: entered promiscuous mode [ 681.950290][T23366] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 682.013567][T23372] rust_binder: 23366 RLIMIT_NICE not set [ 682.161900][T23379] rust_binder: Write failure EFAULT in pid:8 [ 683.005002][T23396] 9pnet_virtio: no channels available for device ./file1 [ 683.079018][T23399] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 683.365354][T23412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 683.366941][T23412] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 683.585694][T23425] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 683.604620][T23425] rust_binder: Write failure EINVAL in pid:711 [ 683.723832][T23432] binder: Bad value for 'max' [ 683.887934][T23436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 683.889637][T23436] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 684.170929][T20611] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 684.310912][T20611] usb 4-1: device descriptor read/64, error -71 [ 684.550944][T20611] usb 4-1: device descriptor read/64, error -71 [ 684.683000][T23452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 684.683510][T23452] rust_binder: inc_ref_done called when no active inc_refs [ 684.812673][T20611] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 684.830896][T23457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 684.893398][T23459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:725 [ 684.960759][T20611] usb 4-1: device descriptor read/64, error -71 [ 685.081463][ T36] kauditd_printk_skb: 511 callbacks suppressed [ 685.081482][ T36] audit: type=1400 audit(1760037095.534:100934): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.113182][ T36] audit: type=1400 audit(1760037095.534:100935): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.139012][ T36] audit: type=1400 audit(1760037095.594:100936): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.165171][ T36] audit: type=1400 audit(1760037095.614:100937): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.191804][ T36] audit: type=1400 audit(1760037095.614:100938): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.217051][ T36] audit: type=1400 audit(1760037095.644:100939): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.245637][ T36] audit: type=1400 audit(1760037095.644:100940): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.272106][ T36] audit: type=1400 audit(1760037095.724:100941): avc: denied { ioctl } for pid=23438 comm="syz.3.7658" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 685.298418][ T36] audit: type=1400 audit(1760037095.724:100942): avc: denied { create } for pid=23466 comm="syz.4.7668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 685.318258][ T36] audit: type=1400 audit(1760037095.724:100943): avc: denied { connect } for pid=23466 comm="syz.4.7668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 685.338643][T20611] usb 4-1: device descriptor read/64, error -71 [ 685.405438][T23479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.412800][T23479] IPv6: NLM_F_CREATE should be set when creating new route [ 685.420020][T23479] IPv6: NLM_F_CREATE should be set when creating new route [ 685.451206][T20611] usb usb4-port1: attempt power cycle [ 685.790579][T20611] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 685.838975][T20611] usb 4-1: device descriptor read/8, error -71 [ 685.973805][T20611] usb 4-1: device descriptor read/8, error -71 [ 686.220511][T20611] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 686.242388][T20611] usb 4-1: device descriptor read/8, error -71 [ 686.321008][T23500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7678'. [ 686.328411][T23499] netlink: 'syz.4.7678': attribute type 25 has an invalid length. [ 686.378653][T20611] usb 4-1: device descriptor read/8, error -71 [ 686.500445][T20611] usb usb4-port1: unable to enumerate USB device [ 687.120768][T23521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 687.125912][T23521] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 687.434453][T23529] VFS: Mount too revealing [ 687.745389][T23548] /dev/rnullb0: Can't lookup blockdev [ 689.777490][T23604] rust_binder: Error in use_page_slow: ESRCH [ 689.777520][T23604] rust_binder: use_range failure ESRCH [ 689.784324][T23604] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 689.790076][T23604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 689.798342][T23604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:29 [ 690.089458][ T36] kauditd_printk_skb: 1466 callbacks suppressed [ 690.089483][ T36] audit: type=1400 audit(1760037100.535:102410): avc: denied { read write } for pid=23305 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.133293][ T36] audit: type=1400 audit(1760037100.535:102411): avc: denied { read write open } for pid=23305 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.191851][ T36] audit: type=1400 audit(1760037100.535:102412): avc: denied { ioctl } for pid=23305 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.224659][ T36] audit: type=1400 audit(1760037100.585:102413): avc: denied { read write } for pid=23637 comm="syz.6.7725" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.261836][ T36] audit: type=1400 audit(1760037100.585:102414): avc: denied { read write open } for pid=23637 comm="syz.6.7725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.286576][ T36] audit: type=1400 audit(1760037100.585:102415): avc: denied { ioctl } for pid=23637 comm="syz.6.7725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.311862][ T36] audit: type=1400 audit(1760037100.585:102416): avc: denied { ioctl } for pid=23637 comm="syz.6.7725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.337076][ T36] audit: type=1400 audit(1760037100.585:102417): avc: denied { ioctl } for pid=23637 comm="syz.6.7725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.362307][ T36] audit: type=1400 audit(1760037100.585:102418): avc: denied { ioctl } for pid=23637 comm="syz.6.7725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.387634][ T36] audit: type=1400 audit(1760037100.625:102419): avc: denied { read write } for pid=23639 comm="syz.3.7723" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.419459][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 690.579428][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 690.991930][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 691.009714][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 691.020820][T22229] bridge_slave_1: left allmulticast mode [ 691.029107][T22229] bridge_slave_1: left promiscuous mode [ 691.029175][ T31] usb 4-1: can't read configurations, error -71 [ 691.036197][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.051400][T22229] bridge_slave_0: left allmulticast mode [ 691.057456][T22229] bridge_slave_0: left promiscuous mode [ 691.062114][T23661] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23661 comm=syz.4.7731 [ 691.064815][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.240716][T22229] tipc: Left network mode [ 691.246156][T22229] veth1_macvtap: left promiscuous mode [ 691.251723][T22229] veth0_vlan: left promiscuous mode [ 691.584889][T23669] rust_binder: Write failure EFAULT in pid:266 [ 691.636307][T23671] tipc: Enabling not permitted [ 691.648669][T23671] tipc: Enabling of bearer rejected, failed to enable media [ 691.659065][T23671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.660090][T23671] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 691.748845][T23675] can: request_module (can-proto-6) failed. [ 691.831128][T23680] binder: Bad value for 'defcontext' [ 691.919465][T23686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.924466][T23686] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 691.939040][T23688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.059309][T23697] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.348771][T23722] rust_binder: 749: no such ref 3 [ 692.360117][T23722] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 692.367431][T23722] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 692.374753][T23722] rust_binder: Write failure EFAULT in pid:749 [ 692.427432][T23729] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7752'. [ 692.691711][T23750] rust_binder: Write failure EFAULT in pid:763 [ 692.698848][T20612] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 692.822612][T23759] sit0: entered promiscuous mode [ 692.829339][T23759] netlink: 'syz.7.7764': attribute type 1 has an invalid length. [ 692.837210][T23759] netlink: 9 bytes leftover after parsing attributes in process `syz.7.7764'. [ 692.886057][T23761] cgroup: none used incorrectly [ 692.893942][T20612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 692.913578][T20612] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 692.935248][T20612] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 692.945250][T20612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.958368][T20612] usb 4-1: config 0 descriptor?? [ 692.966879][T23734] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 692.985825][T20612] usbhid 4-1:0.0: can't add hid device: -22 [ 693.000226][T20612] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 693.209728][ T31] usb 4-1: USB disconnect, device number 16 [ 693.289027][T23776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.293632][T23776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:775 [ 693.654278][T23813] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 693.670655][T23813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 693.708949][T23815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 693.718172][T23815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:54 [ 693.827507][T23819] rust_binder: Write failure EFAULT in pid:296 [ 693.900570][T23822] rust_binder: Write failure EFAULT in pid:296 [ 694.152802][T23836] 9pnet: Could not find request transport: xen [ 694.270206][T23837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7788'. [ 694.928360][T20610] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 695.080560][T20610] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.091015][T20610] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 695.099936][T20610] usb 4-1: config 1 has no interface number 0 [ 695.106049][T20610] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.119809][ T36] kauditd_printk_skb: 632 callbacks suppressed [ 695.119829][ T36] audit: type=1400 audit(1760037105.577:103052): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.123057][T20610] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.126188][ T36] audit: type=1400 audit(1760037105.577:103053): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.151725][T20610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.162664][ T36] audit: type=1400 audit(1760037105.577:103054): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.185462][T20610] usb 4-1: Product: syz [ 695.194993][ T36] audit: type=1400 audit(1760037105.577:103055): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.218684][T20610] usb 4-1: Manufacturer: syz [ 695.224119][ T36] audit: type=1400 audit(1760037105.577:103056): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.248189][T20610] usb 4-1: SerialNumber: syz [ 695.254107][ T36] audit: type=1400 audit(1760037105.577:103057): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.287454][T20610] cdc_ncm 4-1:1.1: NCM or ECM functional descriptors missing [ 695.307950][ T36] audit: type=1400 audit(1760037105.577:103058): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.332777][T20610] cdc_ncm 4-1:1.1: bind() failure [ 695.341809][ T36] audit: type=1400 audit(1760037105.607:103059): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.371343][ T36] audit: type=1400 audit(1760037105.737:103060): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.397546][ T36] audit: type=1400 audit(1760037105.737:103061): avc: denied { ioctl } for pid=23838 comm="syz.3.7789" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.506417][ T426] usb 4-1: USB disconnect, device number 17 [ 696.049570][T23841] SELinux: security_context_str_to_sid () failed with errno=-22 [ 696.100976][T23846] loop2: detected capacity change from 0 to 7 [ 696.107439][ C0] blk_print_req_error: 4 callbacks suppressed [ 696.107459][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.122766][ C0] buffer_io_error: 4 callbacks suppressed [ 696.122788][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.139667][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.148891][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.156752][T23846] loop2: unable to read partition table [ 696.163827][T23846] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 696.218309][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.227507][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.235597][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.244806][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.252695][T13016] loop2: unable to read partition table [ 696.258909][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.268125][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.276077][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.285328][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.293416][T23848] loop2: unable to read partition table [ 696.293851][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.299176][T23848] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 696.308243][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.329858][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.339072][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.347168][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.356347][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.364314][T23847] loop2: unable to read partition table [ 696.364390][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.370458][T23847] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 696.379183][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 696.450602][T23850] .N: renamed from veth0_to_bond (while UP) [ 696.489030][T23850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 696.490881][T23850] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 696.638476][T23854] rust_binder: Write failure EFAULT in pid:783 [ 696.649825][T23856] rust_binder: Write failure EFAULT in pid:783 [ 696.698744][T23859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 696.761732][T23863] tmpfs: Bad value for 'nr_blocks' [ 696.777820][ T426] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 696.833220][T23865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 696.833699][T23865] rust_binder: 794: no such ref 0 [ 696.846237][T23865] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 696.857803][T23865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:794 [ 696.938426][ T426] usb 4-1: Using ep0 maxpacket: 16 [ 696.997774][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.023090][ T426] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 697.050911][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.069740][ T426] usb 4-1: config 0 descriptor?? [ 697.132074][T23880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 697.134226][T23880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:805 [ 697.188776][T23878] rust_binder: 63: no such ref 1 [ 697.226802][T23878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 697.348847][T23888] rust_binder: Error while translating object. [ 697.382172][T23888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 697.395145][T23888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 697.496000][ T426] dragonrise 0003:0079:0011.003C: unknown main item tag 0x6 [ 697.553498][ T426] dragonrise 0003:0079:0011.003C: unknown main item tag 0x5 [ 697.567709][ T426] dragonrise 0003:0079:0011.003C: unknown main item tag 0x4 [ 697.577170][ T426] dragonrise 0003:0079:0011.003C: item fetching failed at offset 31/160 [ 697.588373][ T426] dragonrise 0003:0079:0011.003C: parse failed [ 697.594689][ T426] dragonrise 0003:0079:0011.003C: probe with driver dragonrise failed with error -22 [ 699.556286][ T426] usb 4-1: USB disconnect, device number 18 [ 700.124556][T23938] tmpfs: Unknown parameter '' [ 700.161944][ T36] kauditd_printk_skb: 301 callbacks suppressed [ 700.161964][ T36] audit: type=1400 audit(1760037110.618:103363): avc: denied { mounton } for pid=23939 comm="syz.4.7826" path="/340/file0" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 700.162557][T23940] /dev/loop0: Can't lookup blockdev [ 700.302862][ T36] audit: type=1400 audit(1760037110.758:103364): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.325426][ T36] audit: type=1400 audit(1760037110.758:103365): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.350002][ T36] audit: type=1400 audit(1760037110.758:103366): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.373508][ T36] audit: type=1400 audit(1760037110.758:103367): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.395370][ T36] audit: type=1400 audit(1760037110.758:103368): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.417229][ T36] audit: type=1400 audit(1760037110.758:103369): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.439608][ T36] audit: type=1400 audit(1760037110.758:103370): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.475774][ T36] audit: type=1400 audit(1760037110.758:103371): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.499719][ T36] audit: type=1400 audit(1760037110.758:103372): avc: denied { create } for pid=23950 comm="syz.4.7830" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 700.567391][T23958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 700.572341][T23958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 700.578944][T23958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:813 [ 700.721189][T23971] x_tables: duplicate underflow at hook 1 [ 700.781680][T23976] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7838'. [ 700.804092][T23976] __vm_enough_memory: pid: 23976, comm: syz.3.7838, bytes: 18014402804453376 not enough memory for the allocation [ 700.874865][T23983] 9pnet_fd: Insufficient options for proto=fd [ 700.942049][T23992] netlink: 'syz.6.7842': attribute type 7 has an invalid length. [ 700.966795][T23992] netlink: 'syz.6.7842': attribute type 5 has an invalid length. [ 700.991557][T23992] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7842'. [ 701.004743][T23993] rust_binder: 84: no such ref 0 [ 701.009975][T23993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 701.279401][T22229] bridge_slave_1: left allmulticast mode [ 701.306732][T22229] bridge_slave_1: left promiscuous mode [ 701.313092][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.326973][T22229] bridge_slave_0: left allmulticast mode [ 701.332682][T22229] bridge_slave_0: left promiscuous mode [ 701.357735][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.480022][T22229] veth1_macvtap: left promiscuous mode [ 701.485614][T22229] veth0_vlan: left promiscuous mode [ 701.598215][T24003] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.605447][T24003] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.612680][T24003] bridge_slave_0: entered allmulticast mode [ 701.619735][T24003] bridge_slave_0: entered promiscuous mode [ 701.628654][T24003] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.635882][T24003] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.643035][T24003] bridge_slave_1: entered allmulticast mode [ 701.649978][T24003] bridge_slave_1: entered promiscuous mode [ 701.741588][T24003] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.748694][T24003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.755978][T24003] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.763045][T24003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.814930][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.822379][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.837119][T22236] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.844222][T22236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.855243][T22229] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.862350][T22229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.961306][T24003] veth0_vlan: entered promiscuous mode [ 702.011106][T24003] veth1_macvtap: entered promiscuous mode [ 702.091257][T24023] overlay: Unknown parameter 'fowner<00000000000000060928' [ 702.194413][T24027] rust_binder: Error in use_page_slow: ESRCH [ 702.194438][T24027] rust_binder: use_range failure ESRCH [ 702.201433][T24027] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 702.207281][T24027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 702.215926][T24027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 703.424575][T24056] binder: Unknown parameter 'defcontext01777777777777777777777' [ 703.766171][T20610] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 703.919719][T20610] usb 4-1: Using ep0 maxpacket: 16 [ 703.935445][T20610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.958577][T20610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.987493][T20610] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 704.003796][T20610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.017845][T20610] usb 4-1: config 0 descriptor?? [ 704.148984][T24090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=24090 comm=syz.4.7877 [ 704.246213][T20610] holtek_mouse 0003:04D9:A081.003D: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.3-1/input0 [ 704.440755][T20610] usb 4-1: USB disconnect, device number 19 [ 704.776510][T24114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.777396][T24116] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 705.078496][T24124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7888'. [ 705.253952][ T36] kauditd_printk_skb: 571 callbacks suppressed [ 705.253989][ T36] audit: type=1400 audit(1760037115.699:103944): avc: denied { create } for pid=24125 comm="syz.3.7889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.282185][ T36] audit: type=1400 audit(1760037115.729:103945): avc: denied { create } for pid=24125 comm="syz.3.7889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.327127][ T36] audit: type=1400 audit(1760037115.729:103946): avc: denied { write } for pid=24125 comm="syz.3.7889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 705.417563][ T36] audit: type=1400 audit(1760037115.869:103947): avc: denied { create } for pid=24137 comm="syz.4.7892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 705.474439][ T36] audit: type=1400 audit(1760037115.869:103948): avc: denied { write } for pid=24137 comm="syz.4.7892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 705.500902][ T36] audit: type=1400 audit(1760037115.869:103949): avc: denied { read } for pid=24137 comm="syz.4.7892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 705.542298][ T36] audit: type=1400 audit(1760037115.899:103950): avc: denied { create } for pid=24125 comm="syz.3.7889" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 705.564914][ T36] audit: type=1400 audit(1760037115.899:103951): avc: denied { ioctl } for pid=24125 comm="syz.3.7889" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=119740 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 705.591769][ T36] audit: type=1400 audit(1760037115.899:103952): avc: denied { ioctl } for pid=24125 comm="syz.3.7889" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=119740 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 705.618439][ T36] audit: type=1400 audit(1760037115.899:103953): avc: denied { ioctl } for pid=24125 comm="syz.3.7889" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=119740 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 706.244718][T24170] tmpfs: Invalid uid '0x00000000ffffffff' [ 706.266803][T24172] rust_binder: Read failure Err(EAGAIN) in pid:858 [ 706.271645][ T1837] Bluetooth: hci0: Frame reassembly failed (-84) [ 706.357939][T24173] 9pnet_fd: Insufficient options for proto=fd [ 706.367056][T22228] bridge_slave_1: left allmulticast mode [ 706.372764][T22228] bridge_slave_1: left promiscuous mode [ 706.378452][T22228] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.385924][T22228] bridge_slave_0: left allmulticast mode [ 706.391588][T22228] bridge_slave_0: left promiscuous mode [ 706.397458][T22228] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.497771][T22228] tipc: Left network mode [ 706.717606][T22228] bridge_slave_1: left allmulticast mode [ 706.723410][T22228] bridge_slave_1: left promiscuous mode [ 706.729274][T22228] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.737243][T22228] bridge_slave_0: left allmulticast mode [ 706.743012][T22228] bridge_slave_0: left promiscuous mode [ 706.748861][T22228] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.862531][T22228] veth1_macvtap: left promiscuous mode [ 706.868160][T22228] veth0_vlan: left promiscuous mode [ 706.930298][T24175] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.937414][T24175] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.944554][T24175] bridge_slave_0: entered allmulticast mode [ 706.951187][T24175] bridge_slave_0: entered promiscuous mode [ 706.959434][T24175] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.966521][T24175] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.973670][T24175] bridge_slave_1: entered allmulticast mode [ 706.980180][T24175] bridge_slave_1: entered promiscuous mode [ 707.067494][T24175] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.074563][T24175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.082002][T24175] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.089096][T24175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.147308][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.154691][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.167873][T24187] incfs: Options parsing error. -22 [ 707.173165][T24187] incfs: mount failed -22 [ 707.173394][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.184629][ T1837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.196268][T22229] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.203348][T22229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.282237][T24175] veth0_vlan: entered promiscuous mode [ 707.318998][T24175] veth1_macvtap: entered promiscuous mode [ 708.294930][T14062] Bluetooth: hci0: command 0x1003 tx timeout [ 708.294996][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 708.336238][T24209] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 708.473422][T24214] rust_binder: Failed copying into alloc: EFAULT [ 708.473451][T24214] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 708.508103][T24214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 708.547158][T24214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:6 [ 709.227612][T24252] rust_binder: Write failure EFAULT in pid:10 [ 709.319913][T24254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 709.372108][T24256] rust_binder: Failed to allocate buffer. len:200, is_oneway:true [ 709.567392][T24261] netlink: 'syz.7.7921': attribute type 46 has an invalid length. [ 709.673811][T24261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 709.685087][T24261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:872 [ 709.829352][T24264] cgroup: none used incorrectly [ 710.254621][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 710.254640][ T36] audit: type=1400 audit(1760037120.710:104434): avc: denied { ioctl } for pid=24278 comm="syz.3.7927" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 710.293799][T24280] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 710.293824][T24280] rust_binder: Error while translating object. [ 710.303302][T24279] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 710.309570][T24280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 710.317611][T24279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 710.327042][T24280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 710.353225][ T36] audit: type=1400 audit(1760037120.740:104435): avc: denied { ioctl } for pid=24278 comm="syz.3.7927" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 710.388114][T24279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:18 [ 710.423925][T24282] __vm_enough_memory: pid: 24282, comm: syz.6.7928, bytes: 18014402804453376 not enough memory for the allocation [ 710.449277][ T36] audit: type=1400 audit(1760037120.740:104436): avc: denied { create } for pid=24278 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 710.522293][ T36] audit: type=1400 audit(1760037120.740:104437): avc: denied { create } for pid=24278 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 710.562055][ T36] audit: type=1400 audit(1760037120.740:104438): avc: denied { ioctl } for pid=24278 comm="syz.3.7927" path="socket:[121447]" dev="sockfs" ino=121447 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 710.643860][ T36] audit: type=1400 audit(1760037120.740:104439): avc: denied { create } for pid=24278 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 710.687234][ T36] audit: type=1400 audit(1760037120.740:104440): avc: denied { create } for pid=24278 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 710.734414][ T36] audit: type=1400 audit(1760037120.740:104441): avc: denied { write } for pid=24278 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 710.761701][T24298] rust_binder: Error while translating object. [ 710.761751][T24298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 710.768094][ T36] audit: type=1400 audit(1760037120.740:104442): avc: denied { nlmsg_write } for pid=24278 comm="syz.3.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 710.798429][T24298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 710.826115][ T36] audit: type=1400 audit(1760037120.740:104443): avc: denied { ioctl } for pid=24278 comm="syz.3.7927" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 710.857130][T24300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 710.861016][T24300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 711.060416][T24312] rust_binder: Write failure EINVAL in pid:44 [ 711.247370][T24325] SELinux: security_context_str_to_sid () failed with errno=-22 [ 711.389204][T24327] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 711.965847][T24339] 9pnet_fd: Insufficient options for proto=fd [ 712.118810][T24349] rust_binder: Error while translating object. [ 712.118839][T24349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 712.126008][T24349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:70 [ 712.292146][T24356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 712.844220][ T1354] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 713.004070][ T1354] usb 4-1: Invalid ep0 maxpacket: 9 [ 713.125613][T24373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 713.127429][T24373] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 713.134001][ T1354] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 713.245158][T24377] rust_binder: Read failure Err(EAGAIN) in pid:889 [ 713.293793][ T1354] usb 4-1: Invalid ep0 maxpacket: 9 [ 713.306094][ T1354] usb usb4-port1: attempt power cycle [ 713.643722][ T1354] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 713.703682][ T1354] usb 4-1: Invalid ep0 maxpacket: 9 [ 713.719806][T24385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7961'. [ 713.845900][ T1354] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 713.898267][ T1354] usb 4-1: Invalid ep0 maxpacket: 9 [ 713.905041][ T1354] usb usb4-port1: unable to enumerate USB device [ 715.606959][ T36] kauditd_printk_skb: 1285 callbacks suppressed [ 715.606979][ T36] audit: type=1400 audit(7040148523.598:105729): avc: denied { read write } for pid=24175 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.638562][ T36] audit: type=1400 audit(7040148523.618:105730): avc: denied { read write open } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.665510][ T36] audit: type=1400 audit(7040148523.618:105731): avc: denied { ioctl } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.708750][T24428] rust_binder: Error while translating object. [ 715.708808][T24428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 715.715712][ T36] audit: type=1400 audit(7040148523.688:105732): avc: denied { read } for pid=24427 comm="syz.3.7974" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 715.748814][T24428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:87 [ 715.750157][T24431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 715.755575][ T36] audit: type=1400 audit(7040148523.688:105733): avc: denied { read open } for pid=24427 comm="syz.3.7974" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 715.801213][ T36] audit: type=1400 audit(7040148523.688:105734): avc: denied { ioctl } for pid=24427 comm="syz.3.7974" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 715.832927][ T36] audit: type=1400 audit(7040148523.688:105735): avc: denied { set_context_mgr } for pid=24427 comm="syz.3.7974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 715.854193][ T36] audit: type=1400 audit(7040148523.688:105736): avc: denied { map } for pid=24427 comm="syz.3.7974" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 715.890365][ T36] audit: type=1400 audit(7040148523.688:105737): avc: denied { read } for pid=24427 comm="syz.3.7974" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 715.914603][ T36] audit: type=1400 audit(7040148523.688:105738): avc: denied { create } for pid=24427 comm="syz.3.7974" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 715.946704][T24444] rust_binder: Read failure Err(EAGAIN) in pid:92 [ 716.240304][T24455] rust_binder: 105: no such ref 0 [ 716.251849][T24455] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 716.268635][T24455] rust_binder: 105: no such ref 2 [ 716.287825][T24455] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 716.291982][T24459] binder: Binderfs stats mode cannot be changed during a remount [ 716.361444][T24461] netlink: 'syz.3.7983': attribute type 6 has an invalid length. [ 716.380751][T24462] netlink: 'syz.3.7983': attribute type 6 has an invalid length. [ 716.424959][T24464] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7984'. [ 716.436799][T24464] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 716.461217][T24462] rust_binder: Error in use_page_slow: ESRCH [ 716.461244][T24462] rust_binder: use_range failure ESRCH [ 716.467334][T24462] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 716.472850][T24462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 716.480805][T24462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:109 [ 716.491536][T24465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 716.674479][T24484] rust_binder: 902: no such ref 131073 [ 716.803186][T24490] netlink: 'syz.4.7992': attribute type 6 has an invalid length. [ 716.814229][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7993'. [ 716.825602][T24492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 716.830043][T24492] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 716.968227][T24497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.253484][T24508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 717.412846][T24516] rust_binder: Write failure EFAULT in pid:117 [ 717.612774][T24531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.620127][T24531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.628057][T24531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.816104][T24545] option changes via remount are deprecated (pid=24544 comm=syz.7.8012) [ 717.831032][T24545] cgroup: option or name mismatch, new: 0x0 "memory", old: 0x0 "" [ 718.551022][T24562] devpts: called with bogus options [ 718.672710][T24564] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 718.724077][T24569] 9pnet_fd: Insufficient options for proto=fd [ 719.210129][T24591] kvm: pic: non byte read [ 719.228590][T24591] kvm: pic: non byte read [ 719.233226][T24591] kvm: pic: non byte read [ 719.252532][T24591] kvm: pic: level sensitive irq not supported [ 719.252594][T24591] kvm: pic: non byte read [ 719.275188][T24591] kvm: pic: non byte read [ 719.280085][T24591] kvm: pic: non byte read [ 719.283036][T24594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 719.284536][T24594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 719.306285][T24591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 719.358388][T24605] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8031'. [ 719.429720][T24608] __vm_enough_memory: pid: 24608, comm: syz.7.8032, bytes: 18014402804453376 not enough memory for the allocation [ 719.509404][T24612] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 719.509430][T24612] rust_binder: Read failure Err(EFAULT) in pid:148 [ 719.876920][T24629] rust_binder: Write failure EFAULT in pid:158 [ 719.978052][T24638] rust_binder: Error while translating object. [ 719.984333][T24638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 719.990607][T24638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162 [ 720.232142][T24659] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8051'. [ 720.566804][T24687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 720.612672][T24689] rust_binder: Read failure Err(EAGAIN) in pid:169 [ 720.643550][ T36] kauditd_printk_skb: 884 callbacks suppressed [ 720.643572][ T36] audit: type=1400 audit(7040148528.628:106623): avc: denied { read write } for pid=24175 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 720.700403][ T36] audit: type=1400 audit(7040148528.638:106624): avc: denied { read write open } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 720.741928][ T36] audit: type=1400 audit(7040148528.638:106625): avc: denied { ioctl } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 720.809143][ T36] audit: type=1400 audit(7040148528.658:106626): avc: denied { read } for pid=24698 comm="syz.3.8062" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 720.869030][ T36] audit: type=1400 audit(7040148528.658:106627): avc: denied { read open } for pid=24698 comm="syz.3.8062" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 720.897519][T24708] rust_binder: Write failure EFAULT in pid:174 [ 720.938177][ T36] audit: type=1400 audit(7040148528.658:106628): avc: denied { ioctl } for pid=24698 comm="syz.3.8062" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 720.977942][ T36] audit: type=1400 audit(7040148528.658:106629): avc: denied { ioctl } for pid=24698 comm="syz.3.8062" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 721.005884][ T36] audit: type=1400 audit(7040148528.658:106630): avc: denied { set_context_mgr } for pid=24698 comm="syz.3.8062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 721.026217][ T36] audit: type=1400 audit(7040148528.658:106631): avc: denied { ioctl } for pid=24698 comm="syz.3.8062" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 721.059652][ T36] audit: type=1400 audit(7040148528.678:106632): avc: denied { read write } for pid=24175 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.159639][T24719] tipc: MTU too low for tipc bearer [ 721.234905][T24727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=24727 comm=syz.6.8070 [ 721.263614][ T1354] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 721.289635][T24729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.290914][T24730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.297856][T24731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.356775][T24733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.364719][T24733] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 721.413712][ T1354] usb 4-1: device descriptor read/64, error -71 [ 721.537295][T24738] tipc: Started in network mode [ 721.542412][T24738] tipc: Node identity , cluster identity 4711 [ 721.548695][T24738] tipc: Failed to set node id, please configure manually [ 721.556173][T24738] tipc: Enabling of bearer rejected, failed to enable media [ 721.568481][T24739] rust_binder: Error while translating object. [ 721.568491][T24738] rust_binder: Error while translating object. [ 721.568525][T24738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 721.575858][T24739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 721.581242][T24738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 721.591379][T24739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 721.663647][ T1354] usb 4-1: device descriptor read/64, error -71 [ 721.913618][ T1354] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 722.053652][ T1354] usb 4-1: device descriptor read/64, error -71 [ 722.303664][ T1354] usb 4-1: device descriptor read/64, error -71 [ 722.414912][ T1354] usb usb4-port1: attempt power cycle [ 722.753593][ T1354] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 722.775810][ T1354] usb 4-1: device descriptor read/8, error -71 [ 722.906191][ T1354] usb 4-1: device descriptor read/8, error -71 [ 723.143881][ T1354] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 723.166355][ T1354] usb 4-1: device descriptor read/8, error -71 [ 723.184594][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8094'. [ 723.296627][ T1354] usb 4-1: device descriptor read/8, error -71 [ 723.368188][T24802] 9p filesystem being mounted at /443/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 723.414045][ T1354] usb usb4-port1: unable to enumerate USB device [ 723.608325][T24804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:948 [ 723.651946][T24807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.662288][T24807] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 723.705206][T24809] rust_binder: Write failure EFAULT in pid:953 [ 723.838165][T24815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.846518][T24815] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 723.942909][T24818] netlink: 'syz.7.8104': attribute type 20 has an invalid length. [ 723.961673][T24818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.962619][T24818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 723.970389][T24818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:961 [ 724.068289][T24825] 9p filesystem being mounted at /64/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 724.804784][T24861] 9p filesystem being mounted at /332/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 724.899877][T24866] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 724.983564][T24870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 724.984300][T24870] rust_binder: 973: no such ref 0 [ 724.996974][T24870] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 725.005187][T24870] rust_binder: 973: no such ref 2 [ 725.010794][T24870] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 725.175150][T24873] rust_binder: 207: no such ref 1 [ 725.246107][T24876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 725.248224][T24876] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 725.402596][T24887] rust_binder: Write failure EINVAL in pid:983 [ 725.575504][T24891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 725.586911][T24893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 725.593893][T24891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 725.612517][T24892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 725.669327][ T36] kauditd_printk_skb: 598 callbacks suppressed [ 725.669349][ T36] audit: type=1400 audit(7040148533.658:107231): avc: denied { read write } for pid=19230 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 725.755175][ T36] audit: type=1400 audit(7040148533.688:107232): avc: denied { read write open } for pid=19230 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 725.769692][T24900] netlink: 'syz.7.8131': attribute type 27 has an invalid length. [ 725.781904][ T36] audit: type=1400 audit(7040148533.688:107233): avc: denied { ioctl } for pid=19230 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 725.815022][T24900] sit0: left promiscuous mode [ 725.816882][ T36] audit: type=1400 audit(7040148533.718:107234): avc: denied { read } for pid=24897 comm="syz.3.8130" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 725.867983][ T36] audit: type=1400 audit(7040148533.718:107235): avc: denied { read open } for pid=24897 comm="syz.3.8130" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 725.908259][ T36] audit: type=1400 audit(7040148533.738:107236): avc: denied { execmem } for pid=24897 comm="syz.3.8130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 725.930957][ T36] audit: type=1400 audit(7040148533.828:107237): avc: denied { mounton } for pid=24899 comm="syz.7.8131" path="/340/file0" dev="tmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 725.973560][ T36] audit: type=1400 audit(7040148533.828:107238): avc: denied { mount } for pid=24899 comm="syz.7.8131" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 726.007062][ T36] audit: type=1400 audit(7040148533.848:107239): avc: denied { read write } for pid=24175 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 726.033439][ T36] audit: type=1400 audit(7040148533.848:107240): avc: denied { read write open } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 726.066329][T24905] netlink: 'syz.3.8133': attribute type 29 has an invalid length. [ 726.074276][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8133'. [ 726.148816][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8133'. [ 726.162148][T24910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 726.201034][T24915] rust_binder: Write failure EINVAL in pid:242 [ 726.402430][T24921] rust_binder: 995: no such ref 1 [ 726.415285][T24921] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 726.415309][T24921] rust_binder: Read failure Err(EFAULT) in pid:995 [ 726.488471][T24930] netlink: 260 bytes leftover after parsing attributes in process `syz.6.8138'. [ 726.683892][T22228] ip6_tunnel:  xmit: Local address not yet configured! [ 726.691419][T22228] ip6_tunnel:  xmit: Local address not yet configured! [ 726.713612][ T31] ip6_tunnel:  xmit: Local address not yet configured! [ 726.784750][T24943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1012 [ 726.968086][T24951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 726.969218][T24952] rust_binder: 1018: no such ref 0 [ 727.006702][T24952] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 727.013877][T24952] rust_binder: 1018: no such ref 2 [ 727.019760][T24952] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 727.020975][T24951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 727.037526][T24953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 727.183551][ T1354] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 727.261104][T24963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=24963 comm=syz.7.8149 [ 727.275789][T24963] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8149'. [ 727.285430][T24963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 727.287019][T24963] rust_binder: Failed to allocate buffer. len:200, is_oneway:true [ 727.298228][T24966] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8149'. [ 727.318242][T24969] tipc: Started in network mode [ 727.323152][T24969] tipc: Node identity 4, cluster identity 4711 [ 727.329877][T24969] tipc: Node number set to 4 [ 727.344093][ T1354] usb 4-1: Using ep0 maxpacket: 32 [ 727.383778][ T1354] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 727.391926][ T1354] usb 4-1: config 0 has no interface number 0 [ 727.403992][ T31] ip6_tunnel:  xmit: Local address not yet configured! [ 727.437919][ T1354] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 727.452956][ T1354] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 727.467584][ T1354] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 727.487012][ T1354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.503579][ T1354] usb 4-1: Product: syz [ 727.507799][ T1354] usb 4-1: Manufacturer: syz [ 727.525991][ T1354] usb 4-1: SerialNumber: syz [ 727.573789][ T1354] usb 4-1: config 0 descriptor?? [ 727.580372][T24949] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 727.603974][T24949] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 727.622820][T24974] rust_binder: Error while translating object. [ 727.622856][T24974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 727.629745][T24974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1034 [ 727.701215][T24990] 9pnet_fd: Insufficient options for proto=fd [ 727.726369][ T31] ip6_tunnel:  xmit: Local address not yet configured! [ 727.864233][T24949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.872873][T24949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.917722][T24949] /dev/rnullb0: Can't lookup blockdev [ 727.953695][ T1354] usb 4-1: USB disconnect, device number 28 [ 728.146454][T25011] rust_binder: Write failure EFAULT in pid:233 [ 728.392239][T25024] netlink: 'syz.4.8166': attribute type 4 has an invalid length. [ 728.406290][T25024] netlink: 'syz.4.8166': attribute type 21 has an invalid length. [ 728.414197][T25024] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.8166'. [ 728.423358][T25023] netlink: 'syz.4.8166': attribute type 4 has an invalid length. [ 728.431281][T25023] netlink: 'syz.4.8166': attribute type 21 has an invalid length. [ 728.440029][T25023] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.8166'. [ 728.785620][T25052] rust_binder: 25049 RLIMIT_NICE not set [ 728.792777][T25054] 9pnet_fd: Insufficient options for proto=fd [ 728.985467][T25062] netlink: 'syz.3.8180': attribute type 4 has an invalid length. [ 728.999100][T25062] netlink: 'syz.3.8180': attribute type 1 has an invalid length. [ 729.011324][T25062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.030690][T25062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.243627][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 729.393614][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 729.401618][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.413526][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.423292][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 729.436227][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 729.445306][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.455194][ T31] usb 4-1: config 0 descriptor?? [ 730.174308][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 730.180319][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 730.214513][ T31] usb 4-1: USB disconnect, device number 29 [ 730.697407][ T36] kauditd_printk_skb: 687 callbacks suppressed [ 730.697429][ T36] audit: type=1400 audit(7040148538.688:107928): avc: denied { create } for pid=25103 comm="syz.3.8196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 730.725551][T25106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8197'. [ 730.761741][ T36] audit: type=1400 audit(7040148538.738:107929): avc: denied { read } for pid=25103 comm="syz.3.8196" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 730.815668][ T36] audit: type=1400 audit(7040148538.738:107930): avc: denied { read open } for pid=25103 comm="syz.3.8196" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 730.843576][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 730.883534][ T36] audit: type=1400 audit(7040148538.738:107931): avc: denied { ioctl } for pid=25103 comm="syz.3.8196" path="/dev/binderfs/binder1" dev="binder" ino=18 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 730.894762][T25111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 730.924211][ T36] audit: type=1400 audit(7040148538.738:107932): avc: denied { set_context_mgr } for pid=25103 comm="syz.3.8196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 730.960942][ T36] audit: type=1400 audit(7040148538.778:107933): avc: denied { execmem } for pid=25107 comm="syz.4.8198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 730.981702][T25113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 730.981732][T25113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1041 [ 731.041893][ T36] audit: type=1400 audit(7040148538.778:107934): avc: denied { create } for pid=25107 comm="syz.4.8198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 731.092145][ T36] audit: type=1400 audit(7040148538.778:107935): avc: denied { connect } for pid=25107 comm="syz.4.8198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 731.120737][ T36] audit: type=1400 audit(7040148538.798:107936): avc: denied { read write } for pid=19230 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.148212][ T36] audit: type=1400 audit(7040148538.798:107937): avc: denied { read write open } for pid=19230 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.175019][ T426] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 731.284635][T25138] rust_binder: Write failure EFAULT in pid:1054 [ 731.333552][ T426] usb 4-1: device descriptor read/64, error -71 [ 731.407014][T25149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 731.409170][T25149] rust_binder: Failed to allocate buffer. len:5168, is_oneway:false [ 731.434026][T25148] 9pnet_fd: Insufficient options for proto=fd [ 731.549514][T25161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 731.550056][T25161] rust_binder: 1066: no such ref 0 [ 731.573528][T25161] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 731.589971][T25161] rust_binder: 1066: no such ref 2 [ 731.603594][ T426] usb 4-1: device descriptor read/64, error -71 [ 731.614004][T25161] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 731.863843][ T426] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 731.898497][T25185] netlink: 'syz.6.8223': attribute type 27 has an invalid length. [ 731.928356][T25185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8223'. [ 731.931187][T25188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 731.942829][T25188] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 731.953909][T25185] rust_binder: Write failure EFAULT in pid:254 [ 732.000558][T25185] netlink: 'syz.6.8223': attribute type 1 has an invalid length. [ 732.023554][ T426] usb 4-1: device descriptor read/64, error -71 [ 732.273599][ T426] usb 4-1: device descriptor read/64, error -71 [ 732.384051][ T426] usb usb4-port1: attempt power cycle [ 732.621630][T25208] 9pnet_fd: Insufficient options for proto=fd [ 732.723546][ T426] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 732.746834][ T426] usb 4-1: device descriptor read/8, error -71 [ 732.818285][T25224] veth0_to_bridge: mtu less than device minimum [ 732.867767][T25226] syzkaller0: entered allmulticast mode [ 732.874321][T25226] syzkaller0: entered promiscuous mode [ 732.877402][ T426] usb 4-1: device descriptor read/8, error -71 [ 732.883883][T25225] syzkaller0: left promiscuous mode [ 732.891381][T25225] syzkaller0: left allmulticast mode [ 733.124540][ T426] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 733.166643][ T426] usb 4-1: device descriptor read/8, error -71 [ 733.306534][ T426] usb 4-1: device descriptor read/8, error -71 [ 733.414089][ T426] usb usb4-port1: unable to enumerate USB device [ 733.939277][T25257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 733.998123][T25262] rust_binder: Error while translating object. [ 734.007416][T25262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 734.013644][T25262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 734.112751][T25270] netlink: 'syz.3.8254': attribute type 30 has an invalid length. [ 734.164168][T25270] netlink: 'syz.3.8254': attribute type 30 has an invalid length. [ 734.276408][T25279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8257'. [ 734.296418][T25279] __vm_enough_memory: pid: 25279, comm: syz.3.8257, bytes: 18014402804453376 not enough memory for the allocation [ 735.703587][T20610] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 735.711922][ T36] kauditd_printk_skb: 546 callbacks suppressed [ 735.711941][ T36] audit: type=1400 audit(7040148543.698:108484): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.743617][ T36] audit: type=1400 audit(7040148543.698:108485): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.768806][ T36] audit: type=1400 audit(7040148543.738:108486): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.814457][ T36] audit: type=1400 audit(7040148543.808:108487): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.894193][ T36] audit: type=1400 audit(7040148543.888:108488): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.911742][T20610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.919560][ T36] audit: type=1400 audit(7040148543.888:108489): avc: denied { map } for pid=25317 comm="syz.4.8270" path="socket:[125794]" dev="sockfs" ino=125794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 735.952472][T20610] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 735.957724][ T36] audit: type=1400 audit(7040148543.898:108490): avc: denied { map } for pid=25317 comm="syz.4.8270" path="socket:[125794]" dev="sockfs" ino=125794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 735.973535][T20610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.988930][ T36] audit: type=1400 audit(7040148543.898:108491): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 736.009765][T20610] usb 4-1: config 0 descriptor?? [ 736.025886][ T36] audit: type=1400 audit(7040148543.898:108492): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 736.054456][ T36] audit: type=1400 audit(7040148543.898:108493): avc: denied { ioctl } for pid=25315 comm="syz.3.8269" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 736.161389][T25322] rust_binder: Error while translating object. [ 736.161421][T25322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 736.167757][T25322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:262 [ 736.273383][T25326] Invalid ELF header len 56 [ 736.343981][T25330] rust_binder: 270: no such ref 3 [ 736.349111][T25330] rust_binder: 270: no such ref 1 [ 736.354263][T25330] rust_binder: Write failure EFAULT in pid:270 [ 736.458281][T20610] zeroplus 0003:0C12:0005.003E: unknown main item tag 0x0 [ 736.471881][T20610] zeroplus 0003:0C12:0005.003E: unknown main item tag 0x0 [ 736.479919][T20610] zeroplus 0003:0C12:0005.003E: unknown main item tag 0x0 [ 736.490848][T20610] zeroplus 0003:0C12:0005.003E: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 736.502999][T20610] zeroplus 0003:0C12:0005.003E: no inputs found [ 736.812769][ T426] usb 4-1: USB disconnect, device number 34 [ 737.391092][T25346] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 737.391119][T25346] rust_binder: Read failure Err(EFAULT) in pid:305 [ 737.703526][ T426] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 737.865853][ T426] usb 4-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 737.876299][ T426] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 737.889457][ T426] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 737.898590][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.908353][ T426] usb 4-1: config 0 descriptor?? [ 737.915521][ T426] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 738.019734][T25352] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 738.478679][ T426] usb 4-1: USB disconnect, device number 35 [ 738.566829][T25371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8288'. [ 738.590274][T25371] overlayfs: missing 'workdir' [ 738.993543][ T426] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 739.003612][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 739.075963][T25388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 739.076811][T25388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 739.083363][T25388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1087 [ 739.095662][T25389] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 739.133509][ T426] usb 4-1: device descriptor read/64, error -71 [ 739.163023][T25393] rust_binder: Write failure EFAULT in pid:1092 [ 739.383525][ T426] usb 4-1: device descriptor read/64, error -71 [ 739.657726][ T426] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 739.793576][ T426] usb 4-1: device descriptor read/64, error -71 [ 739.906632][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8303'. [ 739.918796][T25414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25414 comm=syz.6.8303 [ 740.042475][T25418] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8305'. [ 740.060379][ T426] usb 4-1: device descriptor read/64, error -71 [ 740.173770][ T426] usb usb4-port1: attempt power cycle [ 740.235277][T25430] rust_binder: Error while translating object. [ 740.235321][T25430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 740.241657][T25430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:293 [ 740.389796][T25435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 740.399404][T25435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:298 [ 740.450210][T25437] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 740.471580][T25437] rust_binder: Error while translating object. [ 740.471632][T25437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 740.479054][T25437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:300 [ 740.523513][ T426] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 740.606486][ T426] usb 4-1: device descriptor read/8, error -71 [ 740.716343][ T36] kauditd_printk_skb: 703 callbacks suppressed [ 740.716361][ T36] audit: type=1400 audit(7040148548.708:109197): avc: denied { create } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.724639][T25445] netlink: 196 bytes leftover after parsing attributes in process `syz.4.8315'. [ 740.744409][ T36] audit: type=1400 audit(7040148548.708:109198): avc: denied { write } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.774450][ T36] audit: type=1400 audit(7040148548.718:109199): avc: denied { nlmsg_write } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.796697][ T426] usb 4-1: device descriptor read/8, error -71 [ 740.798974][ T36] audit: type=1400 audit(7040148548.758:109200): avc: denied { ioctl } for pid=25374 comm="syz.3.8290" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 740.828149][ T36] audit: type=1400 audit(7040148548.768:109201): avc: denied { ioctl } for pid=25374 comm="syz.3.8290" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 740.854123][ T36] audit: type=1400 audit(7040148548.768:109202): avc: denied { ioctl } for pid=25374 comm="syz.3.8290" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 740.907937][ T36] audit: type=1400 audit(7040148548.768:109203): avc: denied { create } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 740.942434][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8319'. [ 740.970593][ T36] audit: type=1400 audit(7040148548.768:109204): avc: denied { write } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 741.039908][ T36] audit: type=1400 audit(7040148548.768:109205): avc: denied { read } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 741.049272][T25457] incfs: Can't find or create .index dir in ./bus [ 741.067050][ T426] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 741.080835][ T36] audit: type=1400 audit(7040148548.768:109206): avc: denied { read } for pid=25444 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 741.095165][T25457] incfs: mount failed -1 [ 741.114424][ T426] usb 4-1: device descriptor read/8, error -71 [ 741.132723][T25458] incfs: Can't find or create .index dir in ./bus [ 741.151111][T25458] incfs: mount failed -1 [ 741.247277][ T426] usb 4-1: device descriptor read/8, error -71 [ 741.365034][ T426] usb usb4-port1: unable to enumerate USB device [ 741.373609][T25470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 741.436246][T25476] tipc: Enabled bearer , priority 0 [ 742.634699][T25496] tipc: Enabling of bearer rejected, media not registered [ 742.656373][T25496] syzkaller0: entered promiscuous mode [ 742.661895][T25496] syzkaller0: entered allmulticast mode [ 742.668226][T22229] syzkaller0: tun_net_xmit 48 [ 742.683491][T25496] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 742.690762][T25496] syzkaller0: Linktype set failed because interface is up [ 742.700906][T25496] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 742.789012][T25503] rust_binder: 328: no such ref 0 [ 742.801022][T25503] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 742.809762][T25503] rust_binder: 328: no such ref 2 [ 742.820276][T25503] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 742.884205][T20610] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 742.892667][T25505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8337'. [ 743.025439][T25507] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 743.073486][T20610] usb 4-1: Using ep0 maxpacket: 16 [ 743.089726][T20610] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 743.112618][T20610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.134171][T20610] usb 4-1: config 0 has no interface number 0 [ 743.147152][T20610] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 743.158864][T20610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.167010][T20610] usb 4-1: Product: syz [ 743.171207][T20610] usb 4-1: Manufacturer: syz [ 743.175989][T20610] usb 4-1: SerialNumber: syz [ 743.182423][T20610] usb 4-1: config 0 descriptor?? [ 743.195297][T20610] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 743.259536][ T8597] udevd[8597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 743.394567][T25498] /dev/rnullb0: Can't lookup blockdev [ 743.400455][T20610] usb 4-1: USB disconnect, device number 40 [ 744.451226][T25523] rust_binder: Write failure EINVAL in pid:339 [ 744.452214][T25523] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32768 [ 744.466232][T25523] rust_binder: Write failure EINVAL in pid:339 [ 745.103800][T25535] loop2: detected capacity change from 0 to 7 [ 745.117540][ C1] blk_print_req_error: 3 callbacks suppressed [ 745.117562][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.132850][ C1] buffer_io_error: 3 callbacks suppressed [ 745.132874][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.148509][T25535] loop2: unable to read partition table [ 745.148978][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.157053][T25535] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 745.164006][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.173410][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.194593][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.206623][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.215941][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.232315][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.241551][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.250263][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.259469][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.270298][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 745.279515][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 745.712797][T25570] rust_binder: 376: no such ref 2 [ 745.728035][ T36] kauditd_printk_skb: 418 callbacks suppressed [ 745.728054][ T36] audit: type=1400 audit(7040148553.718:109625): avc: denied { read write } for pid=24175 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.760102][ T36] audit: type=1400 audit(7040148553.718:109626): avc: denied { read write open } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.763031][T25572] netlink: 'syz.3.8360': attribute type 16 has an invalid length. [ 745.787485][ T36] audit: type=1400 audit(7040148553.718:109627): avc: denied { ioctl } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.793216][T25572] netlink: 'syz.3.8360': attribute type 3 has an invalid length. [ 745.826705][T25572] netlink: 64054 bytes leftover after parsing attributes in process `syz.3.8360'. [ 745.839813][ T36] audit: type=1400 audit(7040148553.828:109628): avc: denied { read write } for pid=25571 comm="syz.3.8360" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 745.863258][ T36] audit: type=1400 audit(7040148553.828:109629): avc: denied { read write open } for pid=25571 comm="syz.3.8360" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 745.893523][ T36] audit: type=1400 audit(7040148553.828:109630): avc: denied { create } for pid=25571 comm="syz.3.8360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 745.914248][ T36] audit: type=1400 audit(7040148553.828:109631): avc: denied { create } for pid=25571 comm="syz.3.8360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 745.937523][ T36] audit: type=1400 audit(7040148553.828:109632): avc: denied { listen } for pid=25571 comm="syz.3.8360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 745.957881][ T36] audit: type=1400 audit(7040148553.838:109633): avc: denied { setopt } for pid=25571 comm="syz.3.8360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.013471][ T36] audit: type=1400 audit(7040148553.838:109634): avc: denied { ioctl } for pid=25571 comm="syz.3.8360" path="socket:[128753]" dev="sockfs" ino=128753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.043047][T25580] rust_binder: Read failure Err(EAGAIN) in pid:1102 [ 746.183843][T25592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.233804][T25596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.250708][T25596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.260247][T25598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.307579][T25601] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 746.320459][T25601] rust_binder: Read failure Err(EFAULT) in pid:337 [ 746.613503][T25627] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8378'. [ 746.641972][T25607] rust_binder: Write failure EFAULT in pid:396 [ 746.658123][T25627] 9p filesystem being mounted at /378/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 746.694665][T25629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 746.694723][T25629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:343 [ 746.725811][T25627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.751984][T25627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.801404][T25637] __vm_enough_memory: pid: 25637, comm: syz.6.8381, bytes: 18014402804453376 not enough memory for the allocation [ 746.891228][T25646] netlink: 'syz.7.8382': attribute type 4 has an invalid length. [ 746.899892][T25646] netlink: 17 bytes leftover after parsing attributes in process `syz.7.8382'. [ 746.903304][T25647] SELinux: security_context_str_to_sid () failed with errno=-22 [ 746.909000][T25648] netlink: 'syz.7.8382': attribute type 4 has an invalid length. [ 746.924476][T25648] netlink: 17 bytes leftover after parsing attributes in process `syz.7.8382'. [ 747.011100][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.011419][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.027655][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.042793][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.051590][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.059306][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.066983][T25654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.134643][T25661] /dev/loop0: Can't lookup blockdev [ 747.275043][T25666] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 747.275068][T25666] rust_binder: Read failure Err(EFAULT) in pid:357 [ 747.365305][T25674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.380461][T25674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.606586][ T426] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 747.715825][T25703] 9p filesystem being mounted at /562/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 747.790235][ T426] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 747.817846][ T426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.826456][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8399'. [ 747.836486][T25711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 747.837847][ T426] usb 4-1: Product: syz [ 747.849489][ T426] usb 4-1: Manufacturer: syz [ 747.856441][ T426] usb 4-1: SerialNumber: syz [ 748.074988][ T426] usb 4-1: USB disconnect, device number 41 [ 748.230475][T25738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25738 comm=syz.6.8403 [ 748.281860][T25738] tipc: Started in network mode [ 748.297072][T25738] tipc: Node identity 4, cluster identity 4711 [ 748.304808][T25738] tipc: Node number set to 4 [ 748.478764][T25762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8405'. [ 748.491230][T25762] >: renamed from veth0_vlan (while UP) [ 748.500788][T25762] rust_binder: Error while translating object. [ 748.500842][T25762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 748.507566][T25762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:367 [ 748.522313][T25762] netlink: 'syz.6.8405': attribute type 11 has an invalid length. [ 748.670119][T25769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 748.773816][T25773] netlink: 'syz.6.8409': attribute type 2 has an invalid length. [ 748.872300][T25782] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8413'. [ 748.881850][T25782] gretap0: entered promiscuous mode [ 748.892259][T25784] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 748.906139][T25780] netlink: 'syz.7.8412': attribute type 4 has an invalid length. [ 748.914282][T25780] netlink: 17 bytes leftover after parsing attributes in process `syz.7.8412'. [ 748.927221][T25782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8413'. [ 748.938704][T25782] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8413'. [ 748.948412][T25782] tipc: Invalid UDP bearer configuration [ 748.948439][T25782] tipc: Enabling of bearer rejected, failed to enable media [ 748.962469][T25780] netlink: 'syz.7.8412': attribute type 1 has an invalid length. [ 748.974970][T25783] rust_binder: 425: no such ref 3 [ 748.980047][T25783] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 748.987535][T25780] netlink: 'syz.7.8412': attribute type 2 has an invalid length. [ 748.999119][T25780] gretap0: entered promiscuous mode [ 749.004422][T25783] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 749.015890][T25783] rust_binder: Write failure EFAULT in pid:425 [ 749.033546][T25780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25780 comm=syz.7.8412 [ 749.074038][T25780] 0{X: renamed from gretap0 [ 749.079941][T25780] 0{X: entered allmulticast mode [ 749.086716][T25780] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 749.119457][T25799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.124663][T25796] vlan0: entered promiscuous mode [ 749.138897][T25796] vlan0: entered allmulticast mode [ 749.144886][T25796] veth0_vlan: entered allmulticast mode [ 749.169402][T25803] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 749.453508][ T426] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 749.613480][ T426] usb 4-1: Using ep0 maxpacket: 8 [ 749.620958][ T426] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 749.629198][ T426] usb 4-1: config 0 has no interface number 0 [ 749.638719][ T426] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 749.647954][ T426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.656280][ T426] usb 4-1: Product: syz [ 749.660487][ T426] usb 4-1: Manufacturer: syz [ 749.665152][ T426] usb 4-1: SerialNumber: syz [ 749.673591][ T426] usb 4-1: config 0 descriptor?? [ 749.889293][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.898814][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.909141][ T426] usb 4-1: USB disconnect, device number 42 [ 750.365390][T25823] fuse: Bad value for 'group_id' [ 750.370402][T25823] fuse: Bad value for 'group_id' [ 750.437896][T25824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25824 comm=syz.4.8426 [ 750.737484][ T36] kauditd_printk_skb: 877 callbacks suppressed [ 750.737504][ T36] audit: type=1400 audit(7040148561.725:110512): avc: denied { read write } for pid=24175 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 750.769214][ T36] audit: type=1400 audit(7040148561.725:110513): avc: denied { read write open } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 750.794548][ T36] audit: type=1400 audit(7040148561.725:110514): avc: denied { ioctl } for pid=24175 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 750.820369][ T36] audit: type=1400 audit(7040148561.745:110515): avc: denied { create } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.841610][ T36] audit: type=1400 audit(7040148561.745:110516): avc: denied { write } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.862249][ T36] audit: type=1400 audit(7040148561.745:110517): avc: denied { read } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.882825][ T36] audit: type=1400 audit(7040148561.755:110518): avc: denied { read } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.903445][ T36] audit: type=1400 audit(7040148561.755:110519): avc: denied { create } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.924185][ T36] audit: type=1400 audit(7040148561.755:110520): avc: denied { create } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 750.945325][ T36] audit: type=1400 audit(7040148561.755:110521): avc: denied { write } for pid=25839 comm="syz.3.8430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 751.647052][T25852] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 751.647082][T25852] rust_binder: Read failure Err(EFAULT) in pid:454 [ 751.815674][T25856] rust_binder: validate_parent_fixup: new_min_offset=41, sg_entry.length=0 [ 751.827957][T25856] rust_binder: Error while translating object. [ 751.837207][T25856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 751.843746][T25856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 752.693229][T25867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25867 comm=syz.3.8440 [ 752.879087][T25874] netlink: 'syz.3.8442': attribute type 11 has an invalid length. [ 752.907969][T25873] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 753.052982][T25880] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 753.357634][T25893] 9pnet: Unknown protocol version 9 [ 753.470352][T25895] overlayfs: failed to resolve './bus': -2 [ 753.540479][T25897] rust_binder: 389: no such ref 0 [ 753.550454][T25897] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 753.569316][T25897] rust_binder: 389: no such ref 2 [ 753.579929][T25897] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 753.745237][T22229] bridge_slave_1: left allmulticast mode [ 753.751063][T22229] bridge_slave_1: left promiscuous mode [ 753.764118][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.782756][T22229] bridge_slave_0: left allmulticast mode [ 753.793441][T22229] bridge_slave_0: left promiscuous mode [ 753.799231][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.986030][T22229] veth1_macvtap: left promiscuous mode [ 753.991806][T22229] veth0_vlan: left promiscuous mode [ 754.063659][T25905] usb usb9: usbfs: interface 0 claimed by hub while 'syz.6.8456' sets config #0 [ 754.091905][T25905] usb usb9: usbfs: interface 0 claimed by hub while 'syz.6.8456' sets config #1 [ 754.376226][T25901] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.399214][T25901] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.407374][T25901] bridge_slave_0: entered allmulticast mode [ 754.413824][T25901] bridge_slave_0: entered promiscuous mode [ 754.424049][T25922] rust_binder: Write failure EFAULT in pid:402 [ 754.440408][T25901] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.479889][T25901] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.499259][T25901] bridge_slave_1: entered allmulticast mode [ 754.515212][T25901] bridge_slave_1: entered promiscuous mode [ 754.777806][T25940] loop7: detected capacity change from 0 to 7 [ 754.799235][T25942] 9pnet_fd: Insufficient options for proto=fd [ 754.829778][ T61] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.839045][ T61] Buffer I/O error on dev loop7, logical block 0, async page read [ 754.849499][T25940] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 754.874417][T25940] Buffer I/O error on dev loop7, logical block 0, async page read [ 754.913631][T25945] rust_binder: Error while translating object. [ 754.913669][T25945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 754.921302][T25940] loop7: unable to read partition table [ 754.943462][T25945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:408 [ 754.982097][T25940] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 755.055477][T22229] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.062569][T22229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.076847][T22229] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.083977][T22229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.476390][T25901] veth0_vlan: entered promiscuous mode [ 755.491091][T25970] rust_binder: Write failure EFAULT in pid:1180 [ 755.494205][T25972] rust_binder: 421: no such ref 0 [ 755.526482][T25972] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 755.548519][T25972] rust_binder: 421: no such ref 2 [ 755.576063][T25972] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 755.641461][T25901] veth1_macvtap: entered promiscuous mode [ 755.685721][T25976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 755.693313][T25976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 755.723199][T25976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1182 [ 755.786934][ T36] kauditd_printk_skb: 492 callbacks suppressed [ 755.786954][ T36] audit: type=1400 audit(7040148566.775:111014): avc: denied { mounton } for pid=25901 comm="syz-executor" path="/root/syzkaller.Uip0uO/syz-tmp" dev="sda1" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 755.837058][ T36] audit: type=1400 audit(7040148566.825:111015): avc: denied { mount } for pid=25901 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 755.877599][ T36] audit: type=1400 audit(7040148566.825:111016): avc: denied { mounton } for pid=25901 comm="syz-executor" path="/root/syzkaller.Uip0uO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 755.923473][ T36] audit: type=1400 audit(7040148566.835:111017): avc: denied { mounton } for pid=25901 comm="syz-executor" path="/root/syzkaller.Uip0uO/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 756.020608][ T36] audit: type=1400 audit(7040148566.835:111018): avc: denied { mount } for pid=25901 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 756.083684][ T36] audit: type=1400 audit(7040148566.835:111019): avc: denied { mounton } for pid=25901 comm="syz-executor" path="/root/syzkaller.Uip0uO/syz-tmp/newroot/selinux" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 756.120206][T25990] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 756.120232][T25990] rust_binder: Read failure Err(EFAULT) in pid:2 [ 756.155138][ T36] audit: type=1400 audit(7040148566.835:111020): avc: denied { mounton } for pid=25901 comm="syz-executor" path="/root/syzkaller.Uip0uO/syz-tmp/newroot/selinux" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 756.272943][T25995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 756.273738][ T36] audit: type=1400 audit(7040148566.835:111021): avc: denied { mounton } for pid=25901 comm="syz-executor" path="/root/syzkaller.Uip0uO/syz-tmp/newroot/sys" dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 756.293732][T25995] audit: audit_lost=248 audit_rate_limit=0 audit_backlog_limit=64 [ 756.305236][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 756.563470][ T45] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 756.681226][T26011] rust_binder: 445: no such ref 0 [ 756.686762][T26011] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 756.694143][T26011] rust_binder: 445: no such ref 2 [ 756.700354][T26011] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 756.713469][ T45] usb 9-1: device descriptor read/64, error -71 [ 756.853004][T26020] devpts: called with bogus options [ 756.973569][ T45] usb 9-1: device descriptor read/64, error -71 [ 757.213810][ T45] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 757.393976][ T45] usb 9-1: device descriptor read/64, error -71 [ 757.643654][ T45] usb 9-1: device descriptor read/64, error -71 [ 757.763573][ T45] usb usb9-port1: attempt power cycle [ 757.791176][T26058] ------------[ cut here ]------------ [ 757.796736][T26058] WARNING: CPU: 0 PID: 26058 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 757.806304][T26058] Modules linked in: [ 757.810231][T26058] CPU: 0 UID: 0 PID: 26058 Comm: syz.6.8500 Not tainted syzkaller #0 9b63ddcf0ca82069290034062ca02b4369282e80 [ 757.821925][T26058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.832064][T26058] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 757.838037][T26058] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 757.857733][T26058] RSP: 0018:ffffc9000108f540 EFLAGS: 00010246 [ 757.863878][T26058] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 757.871902][T26058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000108f5f8 [ 757.877518][T26060] 9pnet_fd: Insufficient options for proto=fd [ 757.879944][T26058] RBP: ffffc9000108f680 R08: ffffc9000108f5f7 R09: 0000000000000000 [ 757.894059][T26058] R10: ffffc9000108f5e0 R11: fffff52000211ebf R12: ffffc9000108f580 [ 757.902072][T26058] R13: dffffc0000000000 R14: 1ffff92000211eac R15: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 757.910128][T26058] FS: 00007f08867fc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 757.919125][T26058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.925780][T26058] CR2: 000000110c2a9bba CR3: 0000000118e42000 CR4: 00000000003526b0 [ 757.933824][T26058] Call Trace: [ 757.937172][T26058] [ 757.940130][T26058] ? vfs_write+0x3c0/0xf30 [ 757.944608][T26058] ? ksys_write+0x141/0x250 [ 757.949142][T26058] ? x64_sys_call+0x271c/0x2ee0 [ 757.954066][T26058] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 757.959991][T26058] ? hashtab_init+0xdb/0x1f0 [ 757.964671][T26058] ___kmalloc_large_node+0x81/0x220 [ 757.969909][T26058] ? hashtab_init+0xdb/0x1f0 [ 757.974564][T26058] __kmalloc_large_node_noprof+0x1e/0xe0 [ 757.980236][T26058] ? hashtab_init+0xdb/0x1f0 [ 757.984890][T26058] __kmalloc_noprof+0x336/0x530 [ 757.989774][T26058] ? kasan_save_alloc_info+0x40/0x50 [ 757.995148][T26058] hashtab_init+0xdb/0x1f0 [ 757.999596][T26058] ? class_read+0x162/0x8a0 [ 758.004170][T26058] symtab_init+0x44/0x70 [ 758.008445][T26058] class_read+0x1df/0x8a0 [ 758.012815][T26058] ? hashtab_init+0xdb/0x1f0 [ 758.017471][T26058] ? __cfi_class_read+0x10/0x10 [ 758.022359][T26058] ? hashtab_init+0x105/0x1f0 [ 758.027094][T26058] policydb_read+0xaa8/0x28c0 [ 758.031821][T26058] ? __kasan_kmalloc+0x96/0xb0 [ 758.036666][T26058] ? __cfi_policydb_read+0x10/0x10 [ 758.041831][T26058] ? security_load_policy+0x128/0x12f0 [ 758.047357][T26058] ? _raw_spin_lock+0x8c/0x120 [ 758.052259][T26058] security_load_policy+0x162/0x12f0 [ 758.057611][T26058] ? avc_has_perm_noaudit+0x21c/0x360 [ 758.063028][T26058] ? _raw_spin_unlock+0x45/0x60 [ 758.067958][T26058] ? __check_object_size+0x50a/0x810 [ 758.073365][T26058] ? __cfi_security_load_policy+0x10/0x10 [ 758.079407][T26058] ? __kasan_check_write+0x18/0x20 [ 758.084607][T26058] sel_write_load+0x298/0x5e0 [ 758.089333][T26058] ? __cfi_sel_write_load+0x10/0x10 [ 758.094618][T26058] ? bpf_lsm_file_permission+0xd/0x20 [ 758.100058][T26058] ? __cfi_sel_write_load+0x10/0x10 [ 758.105360][T26058] vfs_write+0x3c0/0xf30 [ 758.109644][T26058] ? __cfi_vfs_write+0x10/0x10 [ 758.114460][T26058] ? __kasan_check_write+0x18/0x20 [ 758.119624][T26058] ? mutex_lock+0x92/0x1c0 [ 758.124163][T26058] ? __cfi_mutex_lock+0x10/0x10 [ 758.129070][T26058] ? __fget_files+0x2c5/0x340 [ 758.133812][T26058] ksys_write+0x141/0x250 [ 758.138276][T26058] ? xfd_validate_state+0x68/0x150 [ 758.143448][T26058] ? __cfi_ksys_write+0x10/0x10 [ 758.148339][T26058] ? __kasan_check_write+0x18/0x20 [ 758.153582][T26058] ? fpregs_restore_userregs+0x11d/0x260 [ 758.159272][T26058] __x64_sys_write+0x7f/0x90 [ 758.160027][ T45] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 758.163926][T26058] x64_sys_call+0x271c/0x2ee0 [ 758.176295][T26058] do_syscall_64+0x58/0xf0 [ 758.180797][T26058] ? clear_bhb_loop+0x50/0xa0 [ 758.185550][T26058] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 758.191781][T26058] RIP: 0033:0x7f088598eec9 [ 758.196263][T26058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.215976][T26058] RSP: 002b:00007f08867fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 758.224459][T26058] RAX: ffffffffffffffda RBX: 00007f0885be5fa0 RCX: 00007f088598eec9 [ 758.232480][T26058] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000009 [ 758.240514][T26058] RBP: 00007f0885a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 758.248605][T26058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.248687][ T1354] usb 5-1: USB disconnect, device number 61 [ 758.256681][T26058] R13: 00007f0885be6038 R14: 00007f0885be5fa0 R15: 00007ffeb26a2068 [ 758.270540][T26058] [ 758.273621][T26058] ---[ end trace 0000000000000000 ]--- [ 758.380137][T26058] SELinux: failed to load policy [ 758.472611][ T45] usb 9-1: device descriptor read/8, error -71 [ 758.479908][ T1837] bridge_slave_1: left allmulticast mode [ 758.500118][ T1837] bridge_slave_1: left promiscuous mode [ 758.512402][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.529450][ T1837] bridge_slave_0: left allmulticast mode [ 758.535186][ T1837] bridge_slave_0: left promiscuous mode [ 758.541448][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.624922][ T45] usb 9-1: device descriptor read/8, error -71 [ 758.726446][ T1837] veth1_macvtap: left promiscuous mode [ 758.732025][ T1837] veth0_vlan: left promiscuous mode [ 759.126259][ T1837] dummy0: left allmulticast mode [ 759.131233][ T1837] dummy0: left promiscuous mode [ 759.136241][ T1837] bridge0: port 3(dummy0) entered disabled state [ 759.143044][ T1837] bridge_slave_1: left allmulticast mode [ 759.148763][ T1837] bridge_slave_1: left promiscuous mode [ 759.154421][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.162100][ T1837] bridge_slave_0: left allmulticast mode [ 759.167974][ T1837] bridge_slave_0: left promiscuous mode [ 759.173625][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.181480][ T1837] bridge_slave_1: left allmulticast mode [ 759.187239][ T1837] bridge_slave_1: left promiscuous mode [ 759.192875][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.200643][ T1837] bridge_slave_0: left allmulticast mode [ 759.206393][ T1837] bridge_slave_0: left promiscuous mode [ 759.212010][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.446461][ T1837] tipc: Left network mode [ 759.452209][ T1837] veth1_macvtap: left promiscuous mode [ 759.457824][ T1837] veth0_vlan: left promiscuous mode [ 759.463370][ T1837] veth1_macvtap: left promiscuous mode [ 759.468905][ T1837] >: left promiscuous mode