last executing test programs: 43m37.115105131s ago: executing program 32 (id=427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = dup(r1) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4048014}, 0x810) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace(0x8, r3) ptrace(0x4207, r3) r4 = syz_open_procfs(r3, &(0x7f0000000040)='autogroup\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0xa0, 0x0, &(0x7f0000001440)=[@register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000001500)=""/4104, 0x1008, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/111, 0x6f, 0x2, 0x9}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x0, 0x7}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @exit_looper], 0x0, 0x0, 0x0}) 38m45.272853117s ago: executing program 33 (id=4542): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/276, 0x114, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 37m34.697246785s ago: executing program 34 (id=5872): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$snapshot(r4, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x6, 0x7ff, &(0x7f0000000100)="54fc218a3eca2a7ee1f4e13b7a5ac16e97a05dc4e1f3583073e98a5e26265039035baea7e45bfc4a958baad2ce19c43ba0484f97f8e81699fb3ac836", 0x3c) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@generic="8aeb5e6507843902985dafc60c6623d9b4", @generic="c7", @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x3}}, 0x10) bind$tipc(r5, 0x0, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r8, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r8, 0xca639000) 37m4.752102929s ago: executing program 35 (id=6213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x85, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 31m17.014972096s ago: executing program 36 (id=11519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) unshare(0x8000480) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) unshare(0x50000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, r1, 0xf84ce000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)}}], 0xac, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 30m41.893369992s ago: executing program 37 (id=11810): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) keyctl$revoke(0x3, 0x0) (async) r4 = gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r6, 0x800454e1, 0x17) (async) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) (async) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000001040)=[{0x7, 0xc00000000000000, 0x5}, {0x1, 0x5, 0x1}], 0x2, 0xbff, 0x1e, 0x0, 0x48, 0x6e}) (async) write$UHID_INPUT(r7, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r9, 0x0) (async) r10 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) fsmount(r10, 0x1, 0x7) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) 30m33.623171063s ago: executing program 38 (id=12118): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 27m2.339445968s ago: executing program 39 (id=15633): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) madvise(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x5521b3a7c65e050a) (async) madvise(&(0x7f0000687000/0x3000)=nil, 0x3000, 0x5521b3a7c65e050a) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890", 0xc3}], 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, '\x00', "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00001c1000/0x4000)=nil, 0x4000, 0x6, 0x40010, r0, 0x8fe67000) socket$inet_udplite(0x2, 0x2, 0x88) pwrite64(r0, &(0x7f0000000080)="477d48c446affb9128c04eb8bc3f08c869bd6938bccf2193fbc6dfd75d23e4aa901b19a4ad209ace085cbda77f7058beb4b7c8c84663a4c8b934e34ab3eb0393297356677cd66a659032d68ebe698a5a2e8651b589cf8036", 0x58, 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002011, r5, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) ptrace$setregs(0x1a, r4, 0xc, 0x0) (async) ptrace$setregs(0x1a, r4, 0xc, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0xa}) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0xa}) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f000021a000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f000021a000/0x400000)=nil) madvise(&(0x7f0000054000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000386000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000386000/0x1000)=nil, 0x1000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x2, 0x1}, 0x6, 0x0, &(0x7f0000000140)={0x3, 0x10, 0x1, 0x6, 0xd}, 0x8, 0x1, 0x1000, 0x0, 0x2, 0xc8, &(0x7f0000000400)="6107374ada96e5fe1ac7c1e71e6d12d9551ff5ee43b60fb0efec21e78c637e738342b49cd9834b63c4e21219ec6dea681761520469f685ced27d2a63c35f0e6267c03bfbbd88d949f5944eb8e780b36915a53904f25621bae420d508aed02026468a01c5fe5e79398049615c26f217f75547766cf6af6438286af1c25ed4167b0df028479687c832a394dff471edcc9b966f86ee88e3b3c1786f64dd644654601c81f342ec940853a65360a3b3190d"}) sched_setscheduler(r4, 0x6, &(0x7f0000000100)=0x9) 23m10.730767642s ago: executing program 40 (id=18562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x68, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x3ffffffffffffe, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x12}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0xfffffffffffffea2}}, 0x400}, @decrefs={0x40046307, 0x3}, @release={0x40046306, 0x1}, @dead_binder_done], 0x50, 0x0, &(0x7f0000000200)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) setresuid(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000001780)=[0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000017c0)={0x0}, &(0x7f0000001800)=0xc) getresuid(&(0x7f0000001840)=0x0, &(0x7f0000001880), &(0x7f00000018c0)) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setfsgid(r5) r6 = gettid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002200)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000001f80)=0x102) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001fc0), 0x410800, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r14, 0x4008ae9c, &(0x7f0000000580)={0x1f, 0x5, 0x1}) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000040)={[0x2, 0x8, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffff23, 0xf, 0x1, 0xff, 0xfffffffffffffffa, 0x8, 0x7f, 0x13a, 0x5fbd, 0x4], 0x100000, 0x2}) ioctl$KVM_RUN(r14, 0xae80, 0x0) r15 = openat2(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x200, 0x8, 0x15}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000400)="24fadb2a7ae3f414c538b3190ea0374124db9d0e361e562d447dcc24fe6b6cf716a2eafee799dbe0b261edd8b290d00d5999f3355f727cb0ceb3de1700976a50da1f12c77c8d80cb9a53c92f799dcd8723092bb80d5396ed18b725e9135adb3e16d65c7b2a1ee13c5da3517636ca01c24a8e927c703d102c3ebfbb", 0x7b}, {&(0x7f0000000480)="8f87feb11540934d47dc3bc6f9f5dbbaab3a95a6be86300d1c03626635fef7662903bab618e07cce3346776a6898960d438571d0830f525201f37795ab560b4c2e672767a790ee5bd6a5567d3436bbc43b9504f349fd9a13e039abd35af0ed0e03cbf49a8f0181376700cdba04cd500ebaa12a", 0x73}, {&(0x7f0000000500)="18e75f19ae54487ffc58e114197543ff63a9e4fb275c3f78c50d1a3a62a6362fd4865c48a985be56ae4c2954c077325c9adbd45c5c5dfa9fcbb40a6db5b3553af8ea7425bbb5a062e3bfd8856daf7a1eb8267386457ef667e2452a6c8fbcb00df2d1793cd04e57f6a7eca37ec72fad5992c59d6c4b98d1876f66d2f0592dceec4f7f030e0693a9629add0448d43e3c484bdda98b117f5c163d7d721ffe9fe47a5d857df8f081", 0xa6}, {&(0x7f00000005c0)="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", 0x1000}], 0x4, &(0x7f0000001600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x20, 0x41}}, {{&(0x7f0000001640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001740)=[{0xffffffffffffffff}, {&(0x7f00000016c0)="b9c50c2a7323834ee710956442459283ceb8394aa26bbf260e", 0x19}, {&(0x7f0000001700)="fe35", 0x2}], 0x3, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r5}}}], 0x90, 0x20000000}}, {{&(0x7f00000019c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a40)="44d19278fe8137d9c83aa40045bb573a215239cf4db1c321bfa5e875414704821e9113e3f52db1f4a21848a418ccee533d478f482d36fc05f217bf93ccafd6c0278dd352b28a838f2497ff658e36476ea57a45813fcb065850cd15b46f504a4176cdc136ad10b11094bbe8b51f00c1a9b42b51a8511433bce81f7b5dbe0a987f98f9761f54c96974b289cc4edc3e6cbdef8dfc195d7946da0d0ad19729fbb634b9f83a66976358a4e5ea", 0xaa}, {&(0x7f0000001b00)="bda39f0fb1a8c33cc3f52f628584e7d832af2a7eca0b6e4826a3b66f9af9c576808deabd69cd014b0d7b4e1807e888a373011d3e3fecd0d620b49ae60578cd6b52847be0ba00da9f1087511d9abc815c3b00a6868a9fa3eb3226a4db03dbd4b3cca914317d21776fc8cf42130b352d1e1b483959fedae765594d55d668cbc0110cf475afc17c103e1da44e63cdde418f15eaebede4ed57dbf9e0b765ba17cf304d2a4d31c88c4e48f9f3a7ce64e0", 0xae}, {&(0x7f0000001bc0)="37d546d95a55b5146dde0dd3f24c62fcb3805c1a8caa10c4b2a8429c270b3f489c500658d9f00ba7d08f0e33b1d9b4aa4d10312f59", 0x35}, {&(0x7f0000001c00)="a922c171faa3d0f11910ef91b5b19939c270309fc933b943875be9a736fe1f3a20561edac32ba99db6ed5b6675eb0d7972873535d800d2e3bd85334db2469a57be10f4b00c95b3e4cf036042e78b2aab12e5975eadfef43274d4e3855b0fd2352fffeb04f21c069fc2642042e29134343d9d3fa8247477ed2c2cd6404535b0682458dc7ea24afe8210b9b65e07c3c06942461e878c63e1017999fdd9b133741cc7482bd2d7d0ea87a91cbf671bfe7efa43aed3abfe0fddd7fa9703ca275708ab04f1976af3cb1b16f7", 0xc9}, {&(0x7f0000001d00)="418acf7fd3bbe273652677a87059277fa9a70778352d83f5493493677ed11270fe82d8c2b854c08a413fd82e9cd99795a0062708adc3a6cdc67e888a6a759d05820b43de58cebac0d689d91760be8a3513f47c9f91123d465339830485fd29aadee30fd04bb512078fe32c6b466b18ad0fc70041355ba7b092970b6b62567eaa6d071003cb709ac0ffe9d320a2be915c5c4405718620ef69f5d6faaa662ecc1debf3732bd914eae721a0daaa3fd116c8061e542964a023c48ffda72718abf6e2ae8e5b", 0xc3}], 0x5, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r0, r0, r0, r0, r11]}}, @rights={{0x2c, 0x1, 0x1, [r14, r0, r0, r0, r0, r15, r0]}}], 0xb8, 0x20040011}}], 0x3, 0x8045) 22m59.459423108s ago: executing program 41 (id=18676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f00000004c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x7fffffff, 0x3, 0xb, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x100000000037, 0x4, 0x9], 0x0, 0x2280}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r4, &(0x7f00000006c0)='./mnt\x00', r4, &(0x7f00000003c0)='./mnt\x00', 0x7) r5 = openat(r4, &(0x7f0000000100)='./cgroup\x00', 0x1493c2, 0x40) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24008040) r8 = openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r6, 0x40046210, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x3, 0x1, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)=0x2, 0xffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x5) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x103000, 0x0) setsockopt$bt_BT_SNDMTU(r10, 0x112, 0xc, &(0x7f0000000040)=0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r9, 0x22e7c000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000000c0)) 22m23.260191474s ago: executing program 42 (id=18900): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000000000003400"], 0x18}, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "3ecaf988"}]}}, 0x0}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 21m30.996613169s ago: executing program 43 (id=19704): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0x9, 0x2, 0x9}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3c2, 0x0) read$msr(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) linkat(r3, &(0x7f00000001c0)='./file1\x00', r3, 0x0, 0x1000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) ioctl$BLKRRPART(r1, 0x125f, 0x0) 17m29.975760983s ago: executing program 6 (id=22300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x5, 0x1000}, {0x7, 0x401}, {0x0, 0x7}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17m29.780938757s ago: executing program 6 (id=22302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xd0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000076001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) fsopen(0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 17m29.538403762s ago: executing program 6 (id=22304): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x8fe67000) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001300)=[{&(0x7f0000001580)=""/4101, 0x1005}], 0x1, 0x1, 0x3, 0x510) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) r5 = socket$key(0xf, 0x3, 0x2) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1800000, r5}, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) (async) clock_gettime(0x6, &(0x7f0000000040)) 17m29.352878695s ago: executing program 6 (id=22305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="c10000000000000001000080"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB='O\x00']) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x4e25, 0x0, 0x3, 0x2, 0x2}, {0x2, 0x53, 0xfff, 0x7, 0xffffdffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x727, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast1, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r6, &(0x7f0000000140)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000000)={0x4, {0x20, 0x1, 0xaf1, 0x5, 0x6}}) 17m29.189577689s ago: executing program 6 (id=22306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (async) fsmount(0xffffffffffffffff, 0x0, 0x72) 17m28.792870666s ago: executing program 6 (id=22313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000043000000090000000000000014000000000000002900000004000000ffffff7f00000000580000000000000029000000040000003c080000000000000105000000000005020003c910fe88000000000000ceaf8e0222eb8610c20400000002c910fe8000000000000000000000000000400401090106000120000000140000000000000029000000430000000500000000000000180000000000000029000000390000002e0002070000000014"], 0xd0}}], 0x1, 0xc8000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 17m28.753760667s ago: executing program 44 (id=22313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000043000000090000000000000014000000000000002900000004000000ffffff7f00000000580000000000000029000000040000003c080000000000000105000000000005020003c910fe88000000000000ceaf8e0222eb8610c20400000002c910fe8000000000000000000000000000400401090106000120000000140000000000000029000000430000000500000000000000180000000000000029000000390000002e0002070000000014"], 0xd0}}], 0x1, 0xc8000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 16m40.433766736s ago: executing program 4 (id=22886): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x5, 0xfffffffffffffffd, 0x20000, 0x10003, 0x0, 0x6, 0x7fffffffffffffff, 0x8, 0xfff, 0x6, 0x0, 0x1, 0x7], 0x10000, 0x2025c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') socket$key(0xf, 0x3, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',\x00']) 16m40.276183929s ago: executing program 4 (id=22887): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}) accept4$unix(r1, 0x0, 0x0, 0x80800) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 16m40.143525101s ago: executing program 4 (id=22888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x101040) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000002c0)={{0x0, 0x2, 0x3, 0x0, 0x6}, 0x8, 0x5}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, 0x0, 0x0, 0x19, 0x0) (async) r6 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000340)={0x8000000000000000, 0x8}, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x9) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) close_range(r0, 0xffffffffffffffff, 0x0) 16m40.131317312s ago: executing program 4 (id=22889): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0) r1 = userfaultfd(0x80000) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r1, 0xc018aa06, &(0x7f0000000380)={{&(0x7f0000964000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x3, 0x1) getdents64(r3, &(0x7f0000002540)=""/4096, 0x1000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) 16m39.19570287s ago: executing program 4 (id=22905): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000df0b000000000800ffffff7f030000000b00000027bd7000fc3f00000a0004004400000000000000480003"], 0x180}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xffffc000) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$P9_RLINK(r4, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000480)={0x5, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100"/199], 0x290) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100"/199], 0x290) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) write(r5, &(0x7f0000000000)="2400000011005f0414fbf407000e9853090400810001000000", 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000001020100000000006f276f0c6de28ae1f9000007080008400000000206000740000300000800084000"], 0x34}, 0x1, 0x0, 0x0, 0x20004002}, 0x20000000) 16m36.359038634s ago: executing program 4 (id=22929): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x2, 0x8}) exit(0x9) exit(0xff) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4) exit(0x9) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000100)='\x00', &(0x7f0000000140)='*\x00', &(0x7f0000000180)=')\x00', &(0x7f00000001c0)='/selinux/status\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)=']g^(.\x00', &(0x7f0000000280)='/selinux/status\x00']}, &(0x7f0000000340)={[&(0x7f0000000300)='/selinux/status\x00']}, 0x100) connect$netlink(r0, &(0x7f0000000380)=@unspec, 0xc) exit(0x4) exit(0x0) write$UHID_DESTROY(r0, &(0x7f00000003c0), 0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)=""/69, 0x45}], 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={r1, 0x1, r0, 0xe482}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000680), 0x400101, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x23) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000700)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6d, r4}) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000740)={0x2, 0x2, 0x8}) tee(0xffffffffffffffff, r3, 0x0, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f00000017c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000007c0)=""/4096, 0x1000, 0x9, 0x3, 0x3ff, 0x7ff, 0x5}}, 0x120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000019c0)={0x1c, 0x0, &(0x7f0000001900)=[@acquire, @increfs_done={0x40106308, 0x1}], 0x42, 0x0, &(0x7f0000001940)="efe219556008eea0b482a3848f85a9ae7f8f31a1bcea11c0a553a6596245a0b3e1044b829ca89063e74364d723256117002eb806cef925b195f49336651c3c3d5c3e"}) syz_io_uring_setup(0x2a82, &(0x7f0000001a00)={0x0, 0x4548, 0x8, 0x0, 0x177, 0x0, r0}, &(0x7f0000001a80), &(0x7f0000001ac0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001b00)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x24008800) syz_open_procfs(r2, &(0x7f0000001d00)='gid_map\x00') 16m20.128749156s ago: executing program 45 (id=22929): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x2, 0x8}) exit(0x9) exit(0xff) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), 0x4) exit(0x9) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000100)='\x00', &(0x7f0000000140)='*\x00', &(0x7f0000000180)=')\x00', &(0x7f00000001c0)='/selinux/status\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)=']g^(.\x00', &(0x7f0000000280)='/selinux/status\x00']}, &(0x7f0000000340)={[&(0x7f0000000300)='/selinux/status\x00']}, 0x100) connect$netlink(r0, &(0x7f0000000380)=@unspec, 0xc) exit(0x4) exit(0x0) write$UHID_DESTROY(r0, &(0x7f00000003c0), 0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f00000004c0)=""/1, 0x1}, {&(0x7f0000000500)=""/69, 0x45}], 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={r1, 0x1, r0, 0xe482}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000680), 0x400101, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x23) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000700)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6d, r4}) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000740)={0x2, 0x2, 0x8}) tee(0xffffffffffffffff, r3, 0x0, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f00000017c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000007c0)=""/4096, 0x1000, 0x9, 0x3, 0x3ff, 0x7ff, 0x5}}, 0x120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000019c0)={0x1c, 0x0, &(0x7f0000001900)=[@acquire, @increfs_done={0x40106308, 0x1}], 0x42, 0x0, &(0x7f0000001940)="efe219556008eea0b482a3848f85a9ae7f8f31a1bcea11c0a553a6596245a0b3e1044b829ca89063e74364d723256117002eb806cef925b195f49336651c3c3d5c3e"}) syz_io_uring_setup(0x2a82, &(0x7f0000001a00)={0x0, 0x4548, 0x8, 0x0, 0x177, 0x0, r0}, &(0x7f0000001a80), &(0x7f0000001ac0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001b00)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x24008800) syz_open_procfs(r2, &(0x7f0000001d00)='gid_map\x00') 13m16.988743808s ago: executing program 2 (id=25252): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r1, 0x0, 0x3) setfsgid(0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x1000000000000004, 0x4000000000000e52, 0x1, 0x5479, 0x1045, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0xfffffffffffffffb], 0xa0000, 0x40080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000180)=0x49b2, 0x4) socket$netlink(0x10, 0x3, 0x13) lstat(&(0x7f0000003380)='./file0\x00', &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = getegid() statx(r0, &(0x7f0000004400)='./file0\x00', 0x2000, 0x8, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004540)=0x0, &(0x7f0000004580), &(0x7f00000045c0)) syz_fuse_handle_req(r1, &(0x7f0000001100)="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", 0x2000, &(0x7f0000004740)={&(0x7f0000001040)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x4, 0x0, 0x2, 0x6a, 0x7, 0x9, 0x0, 0x0, 0x20, 0x40}}, &(0x7f0000003100)={0x18, 0x0, 0x4, {0x6}}, &(0x7f0000003140)={0x18, 0xfffffffffffffffe, 0x6, {0x4}}, &(0x7f0000003180)={0x18, 0x0, 0x8, {0xa}}, &(0x7f00000031c0)={0x18, 0x0, 0x1, {0xfff}}, &(0x7f0000003200)={0x28, 0x0, 0x6, {{0x8}}}, &(0x7f0000003240)={0x60, 0x0, 0xda, {{0x7, 0xe, 0x6, 0x5, 0x9000000000000000, 0x5, 0x8, 0x400}}}, &(0x7f00000032c0)={0x18, 0x0, 0x800, {0xffff36e7}}, &(0x7f0000003300)={0x17, 0x0, 0x9, {'&*#/]-\x00'}}, &(0x7f0000003340)={0x20, 0x0, 0x2, {0x0, 0xa}}, &(0x7f0000003480)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x6, 0x0, {0x3, 0x8000000000000001, 0x9, 0x651, 0x5, 0x2, 0x6, 0xca, 0x73, 0xc000, 0x3, 0x0, 0x0, 0x1ccd, 0x7f}}}, &(0x7f0000003500)={0x90, 0x7fffffffffffffed, 0x40, {0x0, 0x1, 0x7, 0x9, 0x7217cf92, 0x9, {0x4, 0xe34, 0x0, 0x1, 0x1000, 0x200, 0x40, 0x642, 0x6, 0xa000, 0x200, 0xffffffffffffffff, 0x0, 0x475, 0x6}}}, &(0x7f00000035c0)={0xd8, 0xfffffffffffffffe, 0x0, [{0x6, 0x7, 0x1, 0x0, ':'}, {0x2, 0x6, 0x1, 0x1, '\x00'}, {0x3, 0x6, 0x9, 0x4, '/dev/kvm\x00'}, {0x5, 0x2, 0x0, 0x80000001}, {0x4, 0x7, 0x9, 0x8, '/dev/kvm\x00'}, {0x2, 0x7, 0x1, 0x5, '#'}]}, &(0x7f00000036c0)=ANY=[@ANYBLOB="78050000000000000000000000000000010000000000000003000000000000000400000000000000ffff00000000000006000000050000000200000000000000080000000000000000000000fffffffffbffffffffffffff06000000000000004000000000000000ff0700000000ffff040000000080000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000005000000000000000100000000000000080000000000000009000000030000002f6465762f6b766d000000000000000000000000000000000000000000000000ffffffffffffffff0c0000000000000023b000000200000005000000000000008100000000000000030000000000000009000000000000000700000000000000533b733e000000000e000000ce4f0000060000000040000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0652fe8276908ee2b000000002000000000000002a0d000000000000000000066a9b9800000000000000000000010000000000000000000000000000000000000000000800000032adae0408000000000000f8010000000000000000040000000000000000000008000000b02f000000d96df0a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000100010000000000060000000000000002000000000000000100000004000000000000000000000006000000000000000300000000000000fffffffffeffffffff0e00000000000009000000060000000200000000000000ff0700000000000006000000000000000200000000000000080000000000000001000000000000005600000004000000070000000020000005000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="16fa000006000000000000000300000000000000020000000000000000000000050000000200000000000000020000000000000009000000000000008000000000000000010001001400000000000000000000000500000000000000480000000000000002000000000000000800000000000000060000000000000003000000080000000800000000c00000ff070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000008040000000000000000300000000000000810000000000000000000000070000000500000000000000020000000000000000000000004000000700000000000000080000008f0f000004000000000000000100000000000000040000000000000006000000000000000600000000000000ffffff7f00000000ff01000001000000090000000010000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00100000a061a7630000000000000000000000001b050000000000000300000009000000746c73000000000004000000000000000300000000000000000800000000000046de000000000000bd680000060000000100000000000000030000000000000001000000000000000300000000000000090000000000000004000000000000004f020000ff030000010001000040000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000000000005000000000000000600000000000000010000000d0000005b00000000000000010000000000000009000000000000000002000000000000070000000000000000000080e16e00000500000000000000ffffffffffffffff05000000000000000000000000000000070000000000000007000000000000000900000001030000010100000020000005000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="020000000900000000000000040000000000000001000000000000007b000000feffffff2429682f7ed5ea1262d86d91994aa0001d069188448ab1c656d87cf9f774b93c4e24ebf034a59500891b980ccbb5c5c68be3d736ce64ba797a7e7e427784e87103026378ab2a31128f13e74bfee30d0502b4b3fb274a10579b500a063d936c55fcbe5ada9b4ee2d83454660a8e7f68b3e86c6e31646f446194bae50000000000"], &(0x7f0000004300)={0xa0, 0x0, 0x5, {{0x3, 0x3, 0x0, 0x9, 0x10000, 0x1, {0x1, 0x5, 0x8000000000000001, 0x1, 0x0, 0x201d1aa6, 0x9, 0x40, 0x101, 0x1000, 0x4, r9, r10, 0x8000, 0x7}}, {0x0, 0x21}}}, &(0x7f00000043c0)={0x20, 0xfffffffffffffff5, 0x2, {0x1, 0x0, 0x40, 0x4}}, &(0x7f0000004600)={0x130, 0x0, 0x3, {0x7ff, 0x8001, 0x0, '\x00', {0x7ff, 0xffffff3b, 0x7fff, 0x2, r11, r12, 0x8000, '\x00', 0x800, 0x80, 0x2, 0xffff, {0x7fff, 0x51b}, {0x0, 0x2}, {0x1ff, 0x5}, {0x0, 0x5}, 0xb4, 0x844, 0x400, 0xb8}}}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x24, 0x4c, &(0x7f0000000040)=[@request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 13m16.906718189s ago: executing program 2 (id=25253): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_pidfd_open(r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f00000000c0)=0x58e, 0x14fffffd) setfsgid(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000880)={0xa3}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x30, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000e80)=ANY=[@ANYBLOB="0600000000000000010000a6b8ff73c00300000005000000050000001730000010000000040000000000000000000000000000000a000000200020000000000005000000fcffffffac2b045e0200000000000000000000000000000007000000c6000000020000004000006dc80000000dd8ffff0400000000000000000000000000000006000000030000000000000000100000080000000000000000000000000000040000000400000000000000010000000600000001000100fe000000000000000000000000000000000000c005000000048000"/239]) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r7 = syz_open_dev$rtc(&(0x7f0000000000), 0x6, 0x2000) ioctl$RTC_WIE_OFF(r7, 0x7010) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 13m15.985464627s ago: executing program 2 (id=25266): rt_sigtimedwait(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0x3938700}, 0x8) socket$netlink(0x10, 0x3, 0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x47}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x20000844) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000000c0)={0x9, 0xc, 0x50a2, 0xfffffffffffffffd, 0x1c}) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x94b7777fd1709e3a, 0xffffffffffffffff, 0x2fde4000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socket$unix(0x1, 0x2, 0x0) 13m14.972092977s ago: executing program 2 (id=25273): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00$'], 0x30}], 0x1}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) close_range(r5, 0xffffffffffffffff, 0x0) 13m14.676310772s ago: executing program 2 (id=25281): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5004) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)={'veth1_to_batadv', 0x32, 0x31}, 0x12) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readahead(r2, 0x5, 0x0) 13m14.576650714s ago: executing program 2 (id=25284): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 13m14.522966325s ago: executing program 46 (id=25284): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 12m19.876783816s ago: executing program 1 (id=25842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0xffffffff, @empty, 0xfffffff7}, {0xa, 0x4e24, 0x1, @remote, 0xfff}, 0xffffffffffffffff, {[0x80008000, 0xb, 0x2, 0xbe, 0x81, 0x8, 0x4, 0x3000000]}}, 0x5c) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r6, 0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 12m19.68376105s ago: executing program 1 (id=25845): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) pwritev2(r1, &(0x7f00000035c0)=[{&(0x7f0000000180)="323c1fac9fcf57cbe40f228cb6cef25f5f2b4fa51439551758b4ad0c43b0cb0955af67be7c92d732d4f20d9511241b9f8c1c99", 0x33}, {0x0}], 0x2, 0x47, 0xf7ab, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xc004) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) pipe(0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = getpid() r4 = gettid() syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002020000102505a1a440f1ffff00010902670001010000000904000012020600000b2406000002f332ac000005240000000d240f010000000087000600001524120600a317a88b045e4f01a607c0ffcb7e392a072414000001000324"], 0x0) rt_tgsigqueueinfo(r3, r4, 0x2d, &(0x7f0000000080)={0x0, 0x10, 0x2}) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r6 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x3, 0x6dc, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x47, 0x9d, 0xf6, 0x10, 0x19d2, 0xffa3, 0x8daa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ca, 0x3, 0xc, 0x3d, 0x20, 0x8, [{{0x9, 0x4, 0xab, 0xa9, 0xf, 0xff, 0xff, 0xff, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9e9c04"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4e2b, 0x5, 0x3a}, {0x6, 0x24, 0x1a, 0x3ff, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x4, 0xb9}]}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x44, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x3, 0xc8, 0x0, [@generic={0x5f, 0x28, "7fdd2e90ea7b471188aa17da6582a4aa8d84d39e4b43eb0e23b225ecd07f82d488de530fe2a091c245e43094269070853b7a683f6aaebfd4acb01b0ebc3d83c0de1675bee3f6957341057f9264dae642f33941b71e8722a93cea3320ac"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xea, 0x4}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x4, 0x2, 0x5}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x7, 0x4, 0x8}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x6, 0x81, 0x9}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x45, 0x0, 0x84}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xef, 0x2, 0x9}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0xf0, 0x5, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x87}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xc}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x4, 0xc}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x50, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x420, 0x6, 0xa, 0x10}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x6, 0x2f, 0x66, [@generic={0x79, 0x24, "3e1cd8864132989d32876fa950d57ada0ea2a8b8c63b9678e1e7f46365d3b84fa886c413f0bb1542439cf96e800e7d9c8c45eaea70b6a4256c12c65f6e996798264fafd20b454e868ed8a1949d5d42d372d1eb938c6d6af2d54395b35305e90237e7ddcdea7be65bd4862b722c7bae2def7eb9d451ceb3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xc, 0x67, 0x7}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0xb, 0x9, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0xb, 0xf, [@generic={0xe6, 0xb, "ab0521ac80ea881ea1ae7f78a74566788d5a7442cddafb32eee3e8c454994dadbab5870e98df15298f3f0a951dec2242beb7cd5302856034adf22d74c125d30533f22afd4b8600d4a906e8ff7d67936320399520aec726e36e373658442043747b99d2871f532dbac1c7fe0b5e00342f5f82398c4cf72910e30452a37eb2b95f8574410015232a24ebe30e35a53084e31bd4d34c2af8d27c3710cfeeef5cf29d3a6d4da16f77682848254c2111d92eab4e6b06b4858b6d19b8bb3f3d0f6d19d4ad29a1f5a4eadd528232a6dcdbcdb0ecd991e2a960286ea6d38408e252fe23c51a1a6451"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb}]}}]}}, {{0x9, 0x4, 0x55, 0x0, 0x1, 0xe0, 0x7e, 0xf9, 0xa, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0x9d, 0x9, [@generic={0x62, 0xe, "aed81e4f060e2ce6cc1a11930ff49be749e89286c46fcf453cffb93712a1bb829eb97a127df0afde712664702ee3d2c1cbbe89ad2b9fb874bff0d24030bcb26829a0941493de1e1a6b23f9506ecf759c1c0cb5a1b5d1297e7f99b933dacc7d8d"}, @generic={0xd1, 0x31, "0b1e8850b6c6854eb648f60b90e98f6e95cceab81f4c8a7ba1dc87aa23f2c6dc8a2e87b7bfb3ba3828de7d5ab1543a14630fad56198211823e046739960ce7792e7205d63890df13b58ebac40cc90435ae9a19ff00b70f427cdd9a6ce918bd134330140f79f141fae9e0a766f0db5eb74d1f6c3a950c4c0944d280fece82fa859b6f20e8ed735261ef7ebb8fa08815be0c96571fe74d64b73b7c3adf905f58c3061edefe6d7ab2c833df724b20da55284b2fdddd8f7452e2b725404628b6543fc135565d4954be3d2f49be9bbffeda"}]}}]}}, {{0x9, 0x4, 0xe9, 0x0, 0x9, 0x65, 0xe4, 0x30, 0x3, [], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0xe, 0x9, 0xd4, [@generic={0x5e, 0x44, "2d19b1d6818c2c3fb0b55204032111636dcdf01c755a324345f4964bf585c21db3ef678860b6e7fd4b64244613fff99734cae1c479a83aab2f119e1956130bddc063f6d0638e1037c2d7b2e6aae8edf01301dfb74be80d588f253b8c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x3, 0x9, 0xd}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x4, 0x7, 0x0, [@generic={0x9d, 0x6, "926bab589d6477ccf8543b215691f0a5fc7094a56da160cdf45e596b39dbc8f63b15374d8646d0f1947966e5b0454c31d671a1aa870a74dc56f240d31f3ea2d5a6c3808905a31ef5ef05d933335b2a4f128b4e558e73f881730680716088f1c5fd93896c649d89631e900b0d9bd231f9d9ce9f2f25545422f5f8d73b84ad2be4b370a6244434dec3cb976e84310839515db1188f9c645538bad0fb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x7, 0x0, 0x29d}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x0, 0xeb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0xc1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x5, 0x6, 0x8, [@generic={0xc9, 0x6, "f7227551cd62efe308f9c96f58d894926e7ab2b09efa98ade25e87721dd1bd22e44b7f54367f785eba2b331ee84a642a2bc1b8893f4604bfc8e0caadf247a14ddacaa95bd00c32d5e174130d2b7d5b2f51f13a75a6a6985a1f7ae049b934c4e17bc3a05435f784a1ac7b9382ef12d199aac09e20cedf9a2ff789c52289bdc9b812813a5924dc2c6cef5696ba4107a9dd4e2e7909332855f85ba7beb02da3455cd253c294b220c8cb6449490532c8db2a7db0da79fa4cbaae10ef7d558c6354087ce4ed653e5eed"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xa, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x8f, 0x5, 0x0, [@generic={0x54, 0x6, "a9a56011e8061ae3f0316544057fc3ff3f1526f9433bdc70f932f00d0328cc93ebdca8bd96659d807f7b5c3c0c4e269b9e86c007338a0ff68ca77ed380697f87ea81709b027130dc4a4d6918e3241efe3ea8"}, @generic={0x48, 0xc, "82d3f73bef8b046318520b0b4990e6cc72249b5b274f85a74ed4c5ad536b53fdabcb9c14aaebdd36008119d3dca5eee799fc1d9fdc9c74f93ab3e0035cfbe50fd2e05b00ad9f"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x1, 0x3, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x3e86}]}}]}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x201, 0x8, 0x7f, 0x4, 0x20, 0x1}, 0x56, &(0x7f0000001080)={0x5, 0xf, 0x56, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x4, 0xf00f, 0x6}, @ptm_cap={0x3}, @generic={0x37, 0x10, 0x2, "86cc49d8d8607e13de16b522ced6e3fa4b776b963bd0fccb1ee89402554a1da63dfe2a5ad7d5688e4413c49488d7ea8b3a056609"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7, 0x93, 0x3, 0x5}]}, 0x1, [{0xbf, &(0x7f0000001100)=@string={0xbf, 0x3, "6ab17f5cee839db20f864397e6c8954225a50f4252ac65079769fe023be63149454d887448daefd23abfdde33bad1c3793f1dc614394c0408ad3b3458576d1fa6cdac5b09cab38fe618f93296b2579ddb3f5ade52800ea4037d65c62e6bafe8828f31a8520e9b68fa7edb8aa40777852017224ce3a704a9ef082ef76287c5f19e5d26af22507363ce27310dd6b6d3f1cda84caeabd3cd3a153773f079260e9c4dd4e4806b33d00dbe39256c0ea562e5c3fd04da92615817dc08ffce531"}}]}) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020100030e00000000000000fcdbdf2505000600001000000a004e2000000400fe800000000000000000000000000004000000000000000005000500320000000a004e2200000001fc000000000000000000000000000000010100000000000002001000"], 0x70}}, 0x0) read(r5, &(0x7f0000000740)=""/377, 0x179) unshare(0x4000200) read$FUSE(r0, &(0x7f0000003600)={0x2020}, 0x2020) syz_usb_connect$uac1(0x5, 0xa8, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x8, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0xc0}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x6, 0x4, [0x6, 0x5, 0x3, 0x4], 0xd9}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x6, 0x9, 0x7, 0x8, 0x5}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x0, 0xd3, "c09c6a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x3, 0x6, "13a8d3b1337f067564"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x2, 0x6, {0x7, 0x25, 0x1, 0x1, 0x82, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x97, 0x4, 0x4, {0x7, 0x25, 0x1, 0x0, 0x2, 0xa1}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0xd, 0x4, 0x0, 0x0, 0x7}, 0x8c, &(0x7f0000000440)={0x5, 0xf, 0x8c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "0ac3c4329b49cdb156651a75ec6443b4"}, @generic={0x69, 0x10, 0x3, "7e67dda59b7f1c9f8fb88378920e2f5415464b974b6a4c07ded94160a6707a47621b54047cce5b0965be150185e1740e00d18b4bfb41488a4905338d07bdeb48ccc48a2cd242dc147931e67d298fe5544912c076ba856da9dd06bf860a131afe0c16043e3c24"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x4, 0x2, 0x4de7}]}, 0x6, [{0xe2, &(0x7f0000000500)=@string={0xe2, 0x3, "4e77cad1263cec5274f41b78d45a89a134685c372b680f5442b03e8418b4bae688c677db9c2285ba1a1465342f80b3d05b09baea53ad69d35b9a7448e3bf5d47fc99ae32aaf49e56729b4ba12f1054b0fd9e0e5cdb24cfe8eb8b1ea3c9e06fbba6d647b65cde78ee250a5e85a6245e0784ba93546fdc2552d5b1583019742da2020b48ba02080a82cdcf9e8aac62668433825f360466345066f92e8aa358ec2d590001760ff47c6c6e3307ee23d09de5ef62671e41f91ddbffb395eb6ca1027cebf950c242347c18099d2449a75c38419b46204afc9dc477fcbb4a4039e9db98"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x45, &(0x7f0000000600)=@string={0x45, 0x3, "4bbd45665ebb0be7b0df36fc5dc30f77a763fea6a335d0c0320a8f3e558dbd7a369ce35488d8cd7d3f35f399137eef752b76bb75ca1491de6542d34c853bede0b7b069"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x6231359651d36b3b}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x445}}]}) 12m18.932272594s ago: executing program 1 (id=25862): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0x4, "236e94616a5da7dbce0cecf5649300"}, 0xfffffffffffffe9e, 0x0) mmap(&(0x7f00008e2000/0xf000)=nil, 0xf000, 0x100000c, 0x10, r0, 0xffffc000) 12m18.907514184s ago: executing program 1 (id=25863): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f000000af40)={0xa000000a}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xbd) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xbd) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}, 0x8006}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}, 0x8006}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x210080, 0x0) (async) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x210080, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000280)="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", 0xfc) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x50, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 12m18.674908799s ago: executing program 1 (id=25864): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) r3 = socket(0x5, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100090008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 12m18.521924062s ago: executing program 1 (id=25866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@getsa={0x1e8, 0x12, 0x10, 0x70bd2d, 0x25dfdbfc, {@in6=@private0, 0x4d4, 0x2, 0x75}, [@extra_flags={0x8, 0x18, 0x1}, @algo_comp={0xce, 0x3, {{'lzs\x00'}, 0x430, "6b098170fd403bc47c27889712fee9e0fa5b26f7cedf3fb56c515401e65cf67706e40df6cf52c3c5321d5eada35246789b865d480703e81b0f361e01f8288ed928fdea6d05cef29e31a9f8336b06304b10813c4ad5b70bbfad351236f84d6c2b73c9e99d9f98e63512886d65330399a58e835469b7e92681fa57a138d50a67c7fd622e8911f9"}}, @algo_aead={0xde, 0x12, {{'authenc(hmac(sha256-ce),cts-cbc-aes-aesni)\x00'}, 0x490, 0x200, "5f72f0a5c57ea7a70165d3c5019a985c2782b390c06af5aed95836667ddc417d7aa7b2049b829e44fdc51f168e8948d3959badc1465c9ff7f1e0e9e29e0380261e054a505e56b94d2ccae3b41fb6ee7ced39f4b10300e29e1208c8e80957791b9e46f82b655276c58dd26ae46c273328bda0e938ce357d0794e32685d61618a31d0d4e2cc01241cd74ee95d79371b13fbdc4"}}, @extra_flags={0x8, 0x18, 0x5a}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x15}, 0x844) r1 = socket(0x15, 0x4, 0x9) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x39c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6460b8a2e9ba54059a33bb15eac137862a2ab5a535160b89fff30d37fb88a661"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b50eadd4ff0c503b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7d2f908979c844d9c67e6cfa422c5604"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c91cebaaa6231e52"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2e23ca7bc0dff0c06f8706ee56299047"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfb6d}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="678f38e760eb5735ffe3e79d10940eaa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ed5e7235dda54cd2246875da3d45472e5a0ad38e2ba474eb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d54eb170e8464e5a4a91debfd6da361e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f511de297e519d8bf00351c6c33783a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bfe924d8517c01dd14819d7ac58af7e3c32ba1a2454aac25a5b1441a3a323987"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dc146c84798c5090c4cbbbad50b0f8f6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="44cc9bc86e45e98ed9314cfc55cb1d83862845daf8531d9f"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9fc1da626dee880b26d976656931490f"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b3b71ac8080f89acdee38159fc7ed298"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7efb94f4bd6367e070c0c63bec0b7c18"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f4e950474aec22f174a4a306300fefd46f9b6699bc1e2b76"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="41b7ca4150a6517de6409985748f664e1e45302a7e78d08a39cee344ecb516e0"}]}, @NL80211_ATTR_REKEY_DATA={0xcc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dbe1fbaf018e653fb3501dc9b9cbff6a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4d48c6e87426b6f79e6b7d520cc7eb029ee757798b1b140e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7abb7971f1c45c39f8e95b9bc6359763e56e8c2392feb9fa"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e350636cf6edc1d14d30412e7cd6cc86"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2e94e24bf83a58eddf13fc2c58f9326384b077c6569bbb53fd118aa6ecc9576e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd03a}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "abae9f34e8bc9893"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="81249d3f3e70bb35bf7eaa573e70fd0a11431bb12ad04cbf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7cfbf0586b7cc37b"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ddcf5ed42654d5fb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="270e4357d6ed46d59499bd24acf45e3f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="11422f4a3d28e6fd0938364ca9c10358"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f89d27af096dd24"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4a1a23cf9365740e00970f79d929f5e34474500ff105b1409ae776ff755b68af"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="66c4858ae9b1abceaa7d08f228b1e97b24b7595fd097c9ad531432b2e6481569"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="59cd6f1f5bdb6c476210af20fc9de0092fe74a6f7a9655ab219f04b740134fd3"}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20000111}, 0x4) r3 = syz_io_uring_complete(0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000800)={0x401, 0xe1, 0x2, 0x6, 0x16, "513940e988c716e2b3f23c8602f3bf10d08971"}) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000880)='net/connector\x00') sendmsg$nl_generic(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x10c, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfd, {0x19}, [@generic="dc9b1a186e0d91bc17f8662c67383853f452812353b2ae3b7e20c18e0d6332d4756b58ad759905a42b1cc06ed942ea120d85415a4ebc453f24ed3f52ce2caa22f746c2bce6dcefb522d41f478f406d8c1c9ac438dd36f08eaf195497854b9d0f79a1a35bf7f297540f7b2cf7409164e1432077cf8e148e1c87bb08265132de53ed3263c34e53617e569ba1fad078e5be2cc5e1aaeaa488a1895b974e9b9a7d2b04198a1ff8f4123ce22add95f606d616d546e9ef35723ffc29bb627d5b9ab39862a2ef2f5605ccfbe58dcb79ca98ef37a94b3cf07e3a33c8ca97780e7988c8a43ca7bf6e2c3035d4ade9c4ef88a598435a985d6cc00d"]}, 0x10c}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x6, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x10, 0xc9, 0x0, 0x9, [0x877, 0x4, 0x9]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, 0x12, 0x800, 0x70bd2c, 0x25dfdbff, {0x1a, 0x1, 0xeb, 0x8, {0x4e21, 0x4e22, [0x1ff, 0x40, 0x5, 0x7fffffff], [0x10000, 0x2, 0x80000000, 0x3], r6, [0x2, 0x4]}, 0x9, 0x800}, [@INET_DIAG_REQ_BYTECODE={0x22, 0x1, "428b882dc0a86dcb23796d4c3a7e0c7b164a84826fff0ec15c2d21a484c8"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000cc0)={0x8000, 0x2, 0xf, 0x8, 0x16, "be1639abb2921844f70d54ee9819c9acbe839b"}) socket$inet6(0xa, 0x80000, 0xd1b) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001280)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', r6, 0x20, 0x7800, 0x215a, 0x6154, {{0x22, 0x4, 0x2, 0x1a, 0x88, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x7, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x10000}]}, @lsrr={0x83, 0x7, 0x4d, [@remote]}, @end, @lsrr={0x83, 0x13, 0x85, [@empty, @multicast1, @private=0xa010102, @multicast1]}, @cipso={0x86, 0x26, 0x0, [{0x1, 0x12, "477a8d8423e656bfc8a2f597e6fab8f2"}, {0x2, 0x9, "9dc106dfb1fa4e"}, {0x6, 0x5, "20d56d"}]}, @end, @timestamp={0x44, 0x1c, 0x22, 0x0, 0x0, [0x2, 0x7, 0x31, 0x612, 0x5, 0x7]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="81af816f8d17de3cd8799bda091450add9a7be0f5cf71021ac055a56e40218dcfb5d5cb16f342f23d871988cb4215e0b2f4b0117d72f9c4db92e7a2114f867da9dcefbae03408b0db438915e4495ef57bb58ebad49643a6ff872e5371ad1a1fdf1b332ee9f6955579229520f1b36ebf5cd481bc5b90a2128ff98", 0x7a}, {&(0x7f0000000dc0)="2db3769bccfe036be39719923c8d4b39f7d69dc9d13c71a5ec7b60347e850e1eb7f852e0e546f45d640f3acb2b33e332ea85dcc5eb59bfbfcf92c12ff567148167dd39ecbbb410daf5", 0x49}, {&(0x7f0000000e40)="98eaed81218e78fe99d92e6a1b905ac7d44206c964ab24be678f6d887059a6577f03a2a7559375251cc9bbbe115c2427d96f09f3b9e7f03e0fe62452391494a9e86d553a358adaa467", 0x49}], 0x3, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f40)="5c853dd549a160a08fca116e7b17e49834f39debdfbab0359cfb31437f82e8de2f7743abf5eb1f2069750703111321c4182a5f638f7a9f08013c985b0262ebee967003f91e9309b00741a40f812048f777391f47a845bb4c515c7dc0066f76b407a3809e6799ab8a7c37935c639c02d9a41a694ef4a7c3fa16361e77f0b26792aab900f50d2c78557f0189cabde97d6ff4ea10c083eac64fbd57dc99486fbfb1e2809a582038947d07ba53eabe2e97b581fd8e872cc17d9fa7a28484d36a545587b9972adf7526e0a5fc0a648f3690137c1d945fba666bcd20d7aee1ffb51fb0", 0xe0}, {&(0x7f0000001040)="39b5b23d8247640553ff09bfc6b5b5b2e7f3869e17b5665217f41293fba9e6985e30fd053f4e0a7ca439ad30ff7ec308964883217b0d1e897ba319dedc92867a545acc8577ea64b6a734018238a75cd367566966a0d0eae4951bef4ff93eb4056878df2879b0c04bf553138498f4f0c6e8fc3670040e64f21444b04321690fc5d3680650eb97537354f0a2bc2fe281c49596cf73495878e5979defaab7113679ade3e3fe7e5202e467db2a215f048ff11bc7af2a6a08b2ef283412400f9847fa2bf66edf9497d81c96a46a97be4a8c99e385d4ae304906bdbfce55482af10f48c77f035f4671e4132a714fca89d40dc8b5e1", 0xf2}, {&(0x7f0000001140)="c5ebf168c89e", 0x6}], 0x3, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x1, [{@remote, 0x7}, {@loopback}]}, @generic={0x86, 0x3, "97"}, @end, @noop, @timestamp_addr={0x44, 0x54, 0x20, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@empty, 0x800}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x26}, {@broadcast, 0xf4c}, {@empty, 0xb}, {@remote, 0x5f}, {@empty, 0x253}, {@broadcast, 0x40}, {@multicast1, 0x7f}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x4, 0xbf, 0x3, 0xf}, @noop, @cipso={0x86, 0x11, 0x1, [{0x0, 0xb, "d15f32abacc171497c"}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x8, [0x2, 0x7f, 0x2, 0x4, 0x5df]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x4d, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x32}, @empty]}, @ssrr={0x89, 0x17, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x1c0}}], 0x2, 0x4000010) r9 = syz_io_uring_complete(0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000001500)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r11, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x37}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040880}, 0x40) r12 = syz_genetlink_get_family_id$team(&(0x7f00000016c0), r9) getsockname$packet(r5, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x9c, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x6847849b9a93360b}, 0x24000810) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f00000028c0)={{0x0, 0x7f, 0x200, 0x5, 0x5, 0xfffffffffffffffb, 0x7, 0x1, 0x1ff, 0x1000, 0xc0, 0xb, 0x3, 0x4, 0x81}}) 12m18.437354343s ago: executing program 47 (id=25866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@getsa={0x1e8, 0x12, 0x10, 0x70bd2d, 0x25dfdbfc, {@in6=@private0, 0x4d4, 0x2, 0x75}, [@extra_flags={0x8, 0x18, 0x1}, @algo_comp={0xce, 0x3, {{'lzs\x00'}, 0x430, "6b098170fd403bc47c27889712fee9e0fa5b26f7cedf3fb56c515401e65cf67706e40df6cf52c3c5321d5eada35246789b865d480703e81b0f361e01f8288ed928fdea6d05cef29e31a9f8336b06304b10813c4ad5b70bbfad351236f84d6c2b73c9e99d9f98e63512886d65330399a58e835469b7e92681fa57a138d50a67c7fd622e8911f9"}}, @algo_aead={0xde, 0x12, {{'authenc(hmac(sha256-ce),cts-cbc-aes-aesni)\x00'}, 0x490, 0x200, "5f72f0a5c57ea7a70165d3c5019a985c2782b390c06af5aed95836667ddc417d7aa7b2049b829e44fdc51f168e8948d3959badc1465c9ff7f1e0e9e29e0380261e054a505e56b94d2ccae3b41fb6ee7ced39f4b10300e29e1208c8e80957791b9e46f82b655276c58dd26ae46c273328bda0e938ce357d0794e32685d61618a31d0d4e2cc01241cd74ee95d79371b13fbdc4"}}, @extra_flags={0x8, 0x18, 0x5a}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x15}, 0x844) r1 = socket(0x15, 0x4, 0x9) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x39c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6460b8a2e9ba54059a33bb15eac137862a2ab5a535160b89fff30d37fb88a661"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b50eadd4ff0c503b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7d2f908979c844d9c67e6cfa422c5604"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c91cebaaa6231e52"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2e23ca7bc0dff0c06f8706ee56299047"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfb6d}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="678f38e760eb5735ffe3e79d10940eaa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ed5e7235dda54cd2246875da3d45472e5a0ad38e2ba474eb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d54eb170e8464e5a4a91debfd6da361e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f511de297e519d8bf00351c6c33783a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bfe924d8517c01dd14819d7ac58af7e3c32ba1a2454aac25a5b1441a3a323987"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dc146c84798c5090c4cbbbad50b0f8f6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="44cc9bc86e45e98ed9314cfc55cb1d83862845daf8531d9f"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9fc1da626dee880b26d976656931490f"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b3b71ac8080f89acdee38159fc7ed298"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7efb94f4bd6367e070c0c63bec0b7c18"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f4e950474aec22f174a4a306300fefd46f9b6699bc1e2b76"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="41b7ca4150a6517de6409985748f664e1e45302a7e78d08a39cee344ecb516e0"}]}, @NL80211_ATTR_REKEY_DATA={0xcc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dbe1fbaf018e653fb3501dc9b9cbff6a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4d48c6e87426b6f79e6b7d520cc7eb029ee757798b1b140e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7abb7971f1c45c39f8e95b9bc6359763e56e8c2392feb9fa"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e350636cf6edc1d14d30412e7cd6cc86"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2e94e24bf83a58eddf13fc2c58f9326384b077c6569bbb53fd118aa6ecc9576e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd03a}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "abae9f34e8bc9893"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="81249d3f3e70bb35bf7eaa573e70fd0a11431bb12ad04cbf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7cfbf0586b7cc37b"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ddcf5ed42654d5fb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="270e4357d6ed46d59499bd24acf45e3f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="11422f4a3d28e6fd0938364ca9c10358"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f89d27af096dd24"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4a1a23cf9365740e00970f79d929f5e34474500ff105b1409ae776ff755b68af"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="66c4858ae9b1abceaa7d08f228b1e97b24b7595fd097c9ad531432b2e6481569"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="59cd6f1f5bdb6c476210af20fc9de0092fe74a6f7a9655ab219f04b740134fd3"}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20000111}, 0x4) r3 = syz_io_uring_complete(0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000800)={0x401, 0xe1, 0x2, 0x6, 0x16, "513940e988c716e2b3f23c8602f3bf10d08971"}) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000880)='net/connector\x00') sendmsg$nl_generic(r1, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x10c, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfd, {0x19}, [@generic="dc9b1a186e0d91bc17f8662c67383853f452812353b2ae3b7e20c18e0d6332d4756b58ad759905a42b1cc06ed942ea120d85415a4ebc453f24ed3f52ce2caa22f746c2bce6dcefb522d41f478f406d8c1c9ac438dd36f08eaf195497854b9d0f79a1a35bf7f297540f7b2cf7409164e1432077cf8e148e1c87bb08265132de53ed3263c34e53617e569ba1fad078e5be2cc5e1aaeaa488a1895b974e9b9a7d2b04198a1ff8f4123ce22add95f606d616d546e9ef35723ffc29bb627d5b9ab39862a2ef2f5605ccfbe58dcb79ca98ef37a94b3cf07e3a33c8ca97780e7988c8a43ca7bf6e2c3035d4ade9c4ef88a598435a985d6cc00d"]}, 0x10c}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x6, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x10, 0xc9, 0x0, 0x9, [0x877, 0x4, 0x9]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, 0x12, 0x800, 0x70bd2c, 0x25dfdbff, {0x1a, 0x1, 0xeb, 0x8, {0x4e21, 0x4e22, [0x1ff, 0x40, 0x5, 0x7fffffff], [0x10000, 0x2, 0x80000000, 0x3], r6, [0x2, 0x4]}, 0x9, 0x800}, [@INET_DIAG_REQ_BYTECODE={0x22, 0x1, "428b882dc0a86dcb23796d4c3a7e0c7b164a84826fff0ec15c2d21a484c8"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000cc0)={0x8000, 0x2, 0xf, 0x8, 0x16, "be1639abb2921844f70d54ee9819c9acbe839b"}) socket$inet6(0xa, 0x80000, 0xd1b) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001280)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', r6, 0x20, 0x7800, 0x215a, 0x6154, {{0x22, 0x4, 0x2, 0x1a, 0x88, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x7, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x10000}]}, @lsrr={0x83, 0x7, 0x4d, [@remote]}, @end, @lsrr={0x83, 0x13, 0x85, [@empty, @multicast1, @private=0xa010102, @multicast1]}, @cipso={0x86, 0x26, 0x0, [{0x1, 0x12, "477a8d8423e656bfc8a2f597e6fab8f2"}, {0x2, 0x9, "9dc106dfb1fa4e"}, {0x6, 0x5, "20d56d"}]}, @end, @timestamp={0x44, 0x1c, 0x22, 0x0, 0x0, [0x2, 0x7, 0x31, 0x612, 0x5, 0x7]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000d40)="81af816f8d17de3cd8799bda091450add9a7be0f5cf71021ac055a56e40218dcfb5d5cb16f342f23d871988cb4215e0b2f4b0117d72f9c4db92e7a2114f867da9dcefbae03408b0db438915e4495ef57bb58ebad49643a6ff872e5371ad1a1fdf1b332ee9f6955579229520f1b36ebf5cd481bc5b90a2128ff98", 0x7a}, {&(0x7f0000000dc0)="2db3769bccfe036be39719923c8d4b39f7d69dc9d13c71a5ec7b60347e850e1eb7f852e0e546f45d640f3acb2b33e332ea85dcc5eb59bfbfcf92c12ff567148167dd39ecbbb410daf5", 0x49}, {&(0x7f0000000e40)="98eaed81218e78fe99d92e6a1b905ac7d44206c964ab24be678f6d887059a6577f03a2a7559375251cc9bbbe115c2427d96f09f3b9e7f03e0fe62452391494a9e86d553a358adaa467", 0x49}], 0x3, &(0x7f0000000f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f40)="5c853dd549a160a08fca116e7b17e49834f39debdfbab0359cfb31437f82e8de2f7743abf5eb1f2069750703111321c4182a5f638f7a9f08013c985b0262ebee967003f91e9309b00741a40f812048f777391f47a845bb4c515c7dc0066f76b407a3809e6799ab8a7c37935c639c02d9a41a694ef4a7c3fa16361e77f0b26792aab900f50d2c78557f0189cabde97d6ff4ea10c083eac64fbd57dc99486fbfb1e2809a582038947d07ba53eabe2e97b581fd8e872cc17d9fa7a28484d36a545587b9972adf7526e0a5fc0a648f3690137c1d945fba666bcd20d7aee1ffb51fb0", 0xe0}, {&(0x7f0000001040)="39b5b23d8247640553ff09bfc6b5b5b2e7f3869e17b5665217f41293fba9e6985e30fd053f4e0a7ca439ad30ff7ec308964883217b0d1e897ba319dedc92867a545acc8577ea64b6a734018238a75cd367566966a0d0eae4951bef4ff93eb4056878df2879b0c04bf553138498f4f0c6e8fc3670040e64f21444b04321690fc5d3680650eb97537354f0a2bc2fe281c49596cf73495878e5979defaab7113679ade3e3fe7e5202e467db2a215f048ff11bc7af2a6a08b2ef283412400f9847fa2bf66edf9497d81c96a46a97be4a8c99e385d4ae304906bdbfce55482af10f48c77f035f4671e4132a714fca89d40dc8b5e1", 0xf2}, {&(0x7f0000001140)="c5ebf168c89e", 0x6}], 0x3, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x1, [{@remote, 0x7}, {@loopback}]}, @generic={0x86, 0x3, "97"}, @end, @noop, @timestamp_addr={0x44, 0x54, 0x20, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@empty, 0x800}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x26}, {@broadcast, 0xf4c}, {@empty, 0xb}, {@remote, 0x5f}, {@empty, 0x253}, {@broadcast, 0x40}, {@multicast1, 0x7f}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x4, 0xbf, 0x3, 0xf}, @noop, @cipso={0x86, 0x11, 0x1, [{0x0, 0xb, "d15f32abacc171497c"}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x18, 0xbf, 0x0, 0x8, [0x2, 0x7f, 0x2, 0x4, 0x5df]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x4d, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x32}, @empty]}, @ssrr={0x89, 0x17, 0xfc, [@local, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x1c0}}], 0x2, 0x4000010) r9 = syz_io_uring_complete(0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000001500)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r11, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x37}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040880}, 0x40) r12 = syz_genetlink_get_family_id$team(&(0x7f00000016c0), r9) getsockname$packet(r5, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x9c, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x6847849b9a93360b}, 0x24000810) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f00000028c0)={{0x0, 0x7f, 0x200, 0x5, 0x5, 0xfffffffffffffffb, 0x7, 0x1, 0x1ff, 0x1000, 0xc0, 0xb, 0x3, 0x4, 0x81}}) 11m14.963056914s ago: executing program 0 (id=26631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x0, 0x5, 0x0, "3b6c75de8bff735cb051ab9cf928877dfb52edc328488a04673efdab6eb5823f05a0271805745b841406ea8e32469f280f87f72de452426d7e13ddba21d30e3cf2f0e1ebffefd44a81a035114420c53f"}, 0xd8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x3b3f1810cf658634, 0x0, 0x0}, &(0x7f0000000240)=0x38) io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x7, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x99, 0x21, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ix:\x88\xfe\xf7\x01') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast}) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000100)=0xc5f5, 0x4) read$FUSE(r4, &(0x7f00000009c0)={0x2020}, 0x2020) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\a\x00\x00\x00SP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r&\"\xff\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00\x00\x00\x00\x00', 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x3, 0x323}, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x128a, 0x2}) 11m14.794844157s ago: executing program 0 (id=26637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x3a, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11m14.15692724s ago: executing program 0 (id=26644): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x38) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000580)=[@register_looper], 0x50, 0x0, &(0x7f0000000380)="1fce63e57ef79da5feeb549048569f9df0394db3281f6b0f06fea102cf5823cb8bf2ddf7a9aa367892054588c9ec71273f3ec2d052603bc34a8e1189f9a6a89a075121723d0dd79a5f4e6bb9e847d571"}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0x6, 0x0, 0x9, 0xb, 0xb, 0x6, 0x0, 0x0, 0x80}}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@enter_looper, @dead_binder_done], 0x50, 0x0, &(0x7f0000000200)="a8832123c58aac3a631568ab441028aa1a71f0a9f5830a3e477b57d2adaf922a3eacb90ab8d5cc186bc9e5b38d8b6a53c223d36084148dd58e1206ce9cb71180679443bbd2414212f2331328545a3f69"}) 11m14.109523221s ago: executing program 0 (id=26645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000180)=0xd, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000400)={0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc00000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa32030000020000000200020000000000000000000000ffff3f00000100000000000000000000ffff0a01010200000000000000000000000000000000fc0200000000000000000000000000003c00048a3083f134f8c06db6b1880000c19a7803bbe9c691c9679000000000020008005361f88c063547b12214e8e12499408f0a4de91f4247da143dddfea2f70000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x1, 0xc3c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x2b, 0xa01, 0x0, 0x0, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 11m14.040987302s ago: executing program 0 (id=26646): setuid(0xee00) (async) setuid(0xee00) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x2e8, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, 0x0) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x80000000, &(0x7f0000000500)) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x3, 0x4, 0x9, 0xe, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3, 0x14}]}, 0x70}}, 0xc010) (async) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x3, 0x4, 0x9, 0xe, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3, 0x14}]}, 0x70}}, 0xc010) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syncfs(r2) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x12000, &(0x7f0000000280)={[{@favordynmods}, {@name={'name', 0x3d, '@{'}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, '/dev/snapshot\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000340)=""/98, 0x0, 0x0, 0x9, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000340)=""/98, 0x0, 0x0, 0x9, 0x2}, 0x20) r6 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x12, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x53}}}}}]}}]}}, 0x0) (async) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x12, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x53}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x808081, 0x0) writev(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001240)="d1", 0x1}], 0x2) (async) writev(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001240)="d1", 0x1}], 0x2) fcntl$setstatus(r6, 0x4, 0x44400) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m13.890134975s ago: executing program 0 (id=26648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0e000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000000001010411000000000000000200fffd240001801400010da4000100e0000001080e0200e00000010c000280050001000000000024000280140001800800010000800000080002007f0000010c000280050001000000000008000740000000000c0006800800010064010101"], 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (rerun: 32) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812"], 0x65) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f00000000c0)=0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) r7 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000000440)={{r1}, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 11m13.834009156s ago: executing program 48 (id=26648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa0e000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000000001010411000000000000000200fffd240001801400010da4000100e0000001080e0200e00000010c000280050001000000000024000280140001800800010000800000080002007f0000010c000280050001000000000008000740000000000c0006800800010064010101"], 0x70}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (rerun: 32) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812"], 0x65) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f00000000c0)=0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) r7 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000000440)={{r1}, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 4m23.479902862s ago: executing program 8 (id=32354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000180)=""/204, 0xcc) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000003c0)) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe24, 0x5, @loopback, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async) sendfile(r4, r4, 0x0, 0x1000007fd) 4m23.323673355s ago: executing program 8 (id=32356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x40000002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20) unshare(0x62040200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) personality(0x5400004) io_setup(0x9, &(0x7f0000000280)) unshare(0x58050400) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000680)=ANY=[@ANYBLOB="f007000001000000816aebc7ab1a52f88885073b8ef84b52ca15ef62208c285fd5627c7b4e50ed2a63cc0baee202347afc88862b22c66e809414406b6605667aa91cc0ec8641d94fe316c0110f9abc8a968885486c40afd555a866b0118bedf34db41edee0b04287a7fa14bea665b4f638de700491876e8b806b3a1704e7f7a8bb5f6a"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xf8, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0xab, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/190, 0xbe, 0x2, 0x200}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000540)={0xffffffff, {{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}, {{0xa, 0x4e21, 0xf, @private2, 0x1}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x40000002}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={0x4, 0x0, 0x20000}, 0x20) (async) unshare(0x62040200) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) personality(0x5400004) (async) io_setup(0x9, &(0x7f0000000280)) (async) unshare(0x58050400) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) (async) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000680)=ANY=[@ANYBLOB="f007000001000000816aebc7ab1a52f88885073b8ef84b52ca15ef62208c285fd5627c7b4e50ed2a63cc0baee202347afc88862b22c66e809414406b6605667aa91cc0ec8641d94fe316c0110f9abc8a968885486c40afd555a866b0118bedf34db41edee0b04287a7fa14bea665b4f638de700491876e8b806b3a1704e7f7a8bb5f6a"]) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xf8, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0xab, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/190, 0xbe, 0x2, 0x200}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000540)={0xffffffff, {{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}, {{0xa, 0x4e21, 0xf, @private2, 0x1}}}, 0x108) (async) 4m23.323195425s ago: executing program 8 (id=32357): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x8fe67000) (async) fadvise64(r0, 0x7, 0xf9c, 0x5) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r1, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x85b83000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x9200000000000000) (async) r6 = dup(r3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async) openat$kvm(0x0, 0x0, 0x102, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="fa000700ff7fe86f7f7b0180c20000030180c20000"], 0x1c) (async) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) (async) clock_gettime(0x6, 0x0) 4m23.268916666s ago: executing program 8 (id=32358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x10000, &(0x7f0000000000)=0x0) eventfd(0x10000) eventfd(0x7) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x5, 0x0, 0x4}]) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002680), 0x0, 0x0, 0x0}) 4m23.104052889s ago: executing program 8 (id=32359): syslog(0x9, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000001280)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000000000001000000018000180140002007665746830000000000000000000000008000f00"], 0x34}}, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x1, 0x2, 0x14, 0x7}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000140)=0x1e) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000040)={0x3f, 0x9}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x670, 0x0, 0x0, 0x401, 0x0, 0x2}) prctl$PR_SET_SECUREBITS(0x1c, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00fb15050d4f1994610deed17c5e94b2070264837d"], 0x15, 0x0) accept4$tipc(r8, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, r0, 0xffffc000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 4m23.006005511s ago: executing program 8 (id=32360): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') statx(r1, 0x0, 0x7000, 0x200, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x2, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3c}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x4}}, 0xe8) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 64) r2 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='|', 0x1, 0x101, 0x0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x0) (async) madvise(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000001c0)) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r8, 0x40, 0x1d97, 0x1) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) keyctl$set_reqkey_keyring(0xe, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m22.966384652s ago: executing program 49 (id=32360): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') statx(r1, 0x0, 0x7000, 0x200, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x2, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3c}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x4}}, 0xe8) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000300)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 64) r2 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='|', 0x1, 0x101, 0x0, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x0) (async) madvise(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000001c0)) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r8, 0x40, 0x1d97, 0x1) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) keyctl$set_reqkey_keyring(0xe, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.932978478s ago: executing program 7 (id=35826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001b00010a000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x24040800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 6.883877559s ago: executing program 7 (id=35828): pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0xfffffffffffffce9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r3 = socket(0x2, 0x3, 0xff) syz_usb_connect$uac1(0x0, 0xe6, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0xf, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x526, 0x2f}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x3, "935bd4c246af"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x2f, "1a"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x6, 0x5, 0x10}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x9d, "e373a95d"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x2, 0x5, 0xacdd, 0x2, 0xdb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x84, 0x4, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xf2, 0x0, 0x10, "775ae16bfa"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x46, 0xfb, "f6f0f47a"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x0, 0x6, {0x7, 0x25, 0x1, 0x0, 0xc9, 0x51f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0xee, 0x3, "b50808"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xf2, 0xc, 0xe, "47835b"}, @as_header={0x7, 0x24, 0x1, 0x40, 0xe6, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x9, 0x0, {0x7, 0x25, 0x1, 0x80, 0x5, 0x81}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xb, 0x5, 0xc, 0x20, 0x5}, 0x23, &(0x7f0000000140)={0x5, 0xf, 0x23, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x4, 0xf, 0x6, [0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x95, 0xf1, 0x9, 0x0, 0x9}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}, {0xc6, &(0x7f0000000340)=@string={0xc6, 0x3, "e07c0964cd346cc2fb93fd0425ddee8cc7bea2ba27e471f8580234dbc301dbd2c385846db48d040d0c25fa6d7386dffb63c4315cd656f0f003d26932afcd14eeae6f7c717594bec976927958c610929e8843a67f97eccf668aadc8ded66505e2d92f78be1e1b2ce2fa68cf1e2e00ba10b03900dc7b5bca6ad697d1cf02fc1e5961b3e8c29b6f2a06ff6afa9d1b9b36e0a035719e8ee5b8830f213d2d03207f06b105d0537c206bc115aeb683f8f1daefe587671d3c2730f41a79e334df7b57fd6a4131ab"}}, {0xbf, &(0x7f0000000440)=@string={0xbf, 0x3, "79448eff07f12f032cc3f939d1c92ef04c49fbbe33d5e96c144840381eaa150911d96f4a143251723f5d39058810398dccd90116bb4796c0c7cf1c4f06bf8260abb11a40c1f6c8c4fe48b72659a91969316b0644f9780885da60a0c509b8e4518e7579d2b3f55682e95cf75440b1cf47a33744e88f5497afd66d5c7b0af050ea84245235da6d8eb74f87c58a59df61ca33ac263dfc0e97c89ecfe2549cf4d442a267e1f3a3e7fa3c2a53208432f5e1a8d88c7247eb4711fd0cdcb5e583"}}, {0x4e, &(0x7f0000000500)=@string={0x4e, 0x3, "d8ad2c8062e0633041285aa96c4bfd7dfab62a717d63fbf612254f008c7a1f890e8ad8b9142b93471e1acbbfffceec2e4101593a4467168798a7b3561f4ccf8fc5a486da7b1b61c53cb4b90b"}}]}) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (async) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000600), 0x0, 0x80080) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 3.650608571s ago: executing program 7 (id=35851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x1, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 2.138234689s ago: executing program 9 (id=35858): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0x0, 0x0) syz_clone3(&(0x7f0000001000)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x449) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x80000006) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x2, 0x3, 0xfffffffffffffffc, 0x3, 0x3e, 0x5, 0x100, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x0, 0x7, 0x2, 0x1}}, 0x40) write(r0, &(0x7f0000000400)="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", 0x1f000) 2.032955861s ago: executing program 9 (id=35859): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0xfffffffe, 0x0, 0x0) unshare(0x62040200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4072, 0xfe8, 0xd37) 2.012578272s ago: executing program 9 (id=35860): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000140)=""/237, &(0x7f0000000080)=0xed) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r2, 0x3, 0x0, 0x4) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.864993224s ago: executing program 5 (id=35862): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair(0x1f, 0x800, 0x2, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x8000000000000000, 0x101000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1.864442034s ago: executing program 9 (id=35863): r0 = socket$packet(0x11, 0x3, 0x300) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x27, 0x1}) setsockopt$packet_int(r0, 0x107, 0x17, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="6d61783d30303030303a0e5ebf1338241ea73030303030303030303030303030303030312c73746174733d676c6f62436c2c737461747324f973a9f571993d676c6f62616c2c6d61783d303030303030304a3030303030302a30303030303030332c6d61783d303030303030303030303030303030303030303030313a2c73696c656e742c726f6f"]) setrlimit(0xb, &(0x7f0000000100)={0xfff, 0x5}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x1, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000080)) 1.691088198s ago: executing program 5 (id=35865): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async, rerun: 32) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e2280, 0x0) (async, rerun: 32) syz_usb_connect$uac1(0x2, 0xb9, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a700030156c0000904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0c240206000205060200060e0c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010910009301050725010003480f0904020000010200000904020101010200000905820920001002040725018b62b0e2"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) (async) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0xd0, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@generic="bfe36da0addb948300cfdad488025519a9a70acc0014ae211f58d72548c606d027761255117260b0ceda3d2e150ce941feefee4f5c6877d5bef427a9712ec5950592efbeb03941ca861cfc4d0f23c48076c7e344cae91b912bf753f26158b353b50cb1f114b6c590e75bced1a1e40c8e3605a3a4c3c808cdf7317104246007d4e42d294052839cb13d8ec142a31b5de5c9dad0a2629b5f5e119e24ec5a6e75a4b991d5591c44eebc569a6a4fae70", @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0xfff}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x101e, 0x2}) (rerun: 32) 1.688326418s ago: executing program 3 (id=35866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe880000000000000000582e880101837ba10280050001adfee0ca7e6700d140000000002c000d8014000400fc0200a5e323f13386057000000000e013000500fe8000000000000000000000000000bb"], 0xc0}}, 0x48044) (async) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000400)=0x4000000) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x8080000, 0xa7, &(0x7f000001fc80)=""/167}]}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000280)=0x1) r4 = socket(0x10, 0x80002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) (async, rerun: 32) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) readlink(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/35, 0x23) (rerun: 64) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x2000, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@cache_readahead}], [{@fowner_gt={'fowner>', r7}}, {@fowner_lt={'fowner<', r5}}, {@euid_gt={'euid>', r6}}, {@euid_lt={'euid<', r7}}, {@audit}]}}) (async) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) (async, rerun: 64) r8 = accept4$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x1cd, 0x14}, 0x18) (async) write$tcp_congestion(r13, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="ce7d8b032fa67e3fa84d12f60ac192fcd0f157856f9d8b4874d1df68e27f92101b156adfc01d5e75bcffe0d8352cbd1fb8a3cde7e78a54fee786b20dc129dcf23c3b5e958c18aa8dfe06f6202a56eafe500e4bfa75adea182350e4a04a8e0d1700009183e732acfb176352be07f0a21bde31ffa40d1fd6b5d9e079efc565512344f70ef4726446e4d249aaaf824a1f3e57dbf206dcfcd50e507ea0627a74f93b816c7b3546c0c7db448333d4d95568c2757b128699bc579299e2b7b4e4361a3ee9a99b16cba600b965a7928f55f2eaba5dd078b2ac604c328741334c27448011a820732d909f1ec4c56bc97261c24b46979e2b4cd3be0eb6b56a0130c2b62887a3d05e9fcd9dcb287c1db56a8ecaceb124577dfeafc636d5710f5d4014792a607f518ae112627bd7d154b3860d54f47ad89c8ce8f5b46aaf0228dc81a503697872fb3fd30cc62c994447386bb7b2a618f2e2f32131a9b7e80ceb47fb7c279022cac528bb56beb0d730029b", @ANYRES16=r10, @ANYBLOB="010000000000000000001a000000200001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=r14, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async, rerun: 32) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000300)={r14, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000001c0)=@fragment={0x29, 0x0, 0x0, 0x1, 0x0, 0x15, 0x66}, 0x8) (async) fcntl$lock(r11, 0x25, &(0x7f0000000900)={0x1, 0x0, 0x4, 0x9}) (async) mount$binderfs(0x0, &(0x7f0000000380)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000940)=ANY=[@ANYBLOB="6f08005f726f6c653d23bc402c008636bfe03e80ad820b4640424a8d5cbc19a2d4a827bcfbccd0e99b635a3298820bb39397376f8bf4db199e48ba96b5037023db8562d5be99e8b1af36a9ad5ff779d67518176674a22bd9bb29c0a9cea8d4c3e362bea2f0b6ad5d8f370ecf9793a21142ba0185f13df1445d7ef1a933905fc2bf5c25d2"]) 1.600801669s ago: executing program 5 (id=35867): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0), 0x4) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$unix(r6, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x64, 0x14, 0xf, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3a) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r7, &(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r0, 0x85b83000) 1.531477751s ago: executing program 3 (id=35868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1.438497212s ago: executing program 3 (id=35869): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0xa, r2}, 0x10) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x8008770b, 0x2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x5d3cc0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x1}}, 0x30) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r6) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10010, r1, 0x8a42c000) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) sendfile(r4, r4, 0x0, 0x7ffff000) 1.344805874s ago: executing program 3 (id=35870): r0 = socket$inet(0x2, 0xa, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000001d80)=0xa) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000004, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000002240)="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", 0x681, 0x4000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000035c0)=""/4106, 0x100a}, {0x0}, {&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000540)=""/140, 0x8c}], 0x4, 0x0, 0x0, 0x407006}, 0x104) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0xa3d846ff51ab7fae}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDGETKEYCODE(r6, 0x4b4c, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4c, 0x0, 0x5}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.344451834s ago: executing program 5 (id=35871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) prlimit64(r4, 0x2, &(0x7f00000002c0)={0xfffffffffffff972}, &(0x7f0000000300)) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000080)='.\x00', 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYRESDEC], 0x80}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x5, 0xffffffff}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x58, 0x0, &(0x7f0000000400)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}, 0x400}], 0x54, 0x0, &(0x7f0000000480)="f433f37e209b678f1b09a098aa77d9ba5718a19491b7ee8db65998f822616f652515d96f86c8d6f86100a1e006ca600cf8d0590b6aea74aadd60ae2f3b8fe3f66c5305f2e2d6d7e102ce60e1e849537011171512"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1.213951917s ago: executing program 5 (id=35872): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000001180)={0x2, 0x0, @pic={0x1, 0xd, 0xb9, 0x5, 0x1, 0xf9, 0x8, 0x8, 0x5, 0x40, 0xe, 0xfb, 0x2, 0x5, 0x3, 0x8}}) dup3(r2, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48eb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcad}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) (async) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@clear_death], 0x0, 0x0, 0x0}) fcntl$setstatus(r1, 0x4, 0x2400) 1.05201397s ago: executing program 3 (id=35873): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x7, 0x91, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x10, 0x40, 0x2, 0xd57}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8994, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100530}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044094) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20240, 0x15a) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002740)={'vlan0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000280)="f4416eb4e8d263afa99fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r8, 0x1, 0x4, 0x6, @broadcast}, 0x14) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000580)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@flag='silent'}, {@fowner_eq={'fowner', 0x3d, r10}}]}}) fadvise64(r5, 0x3, 0x8, 0x1) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r12 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000900)={0x50, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r12}], 0x0, 0x0, 0x0}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r14, &(0x7f00000005c0)={0x2020}, 0x2020) 804.940494ms ago: executing program 5 (id=35874): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$BTRFS_IOC_RM_DEV(r3, 0x8004b709, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="04e0d6", 0x3}], 0x1}, 0x0) read(r5, &(0x7f0000000040)=""/98, 0x3a) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x7, 0x0, 0x8000}) 384.123603ms ago: executing program 7 (id=35875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\n\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x3cd180, 0x0) writev(r2, &(0x7f0000000240), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x5, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, r2, 0x0) 350.720833ms ago: executing program 9 (id=35876): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) (async) mmap(&(0x7f000048e000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0xffffc000) 228.925106ms ago: executing program 9 (id=35877): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0xc, 0x30, 0x2, 0xfffffffffffffff9, 0x5, 0x62b8, 0x5, 0x8000, 0xfffffffe, 0x4, 0x0, 0xa, 0xffffffffffffffff, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r1, 0x2}) ioprio_set$uid(0x3, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 228.544785ms ago: executing program 7 (id=35878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xd8}) (async) fsopen(0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) 50.308739ms ago: executing program 3 (id=35879): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000025000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x5, 0x5, {{0x13, 0x4, 0x1, 0x5, 0x4c, 0x68, 0x0, 0xff, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x28, [@multicast2]}, @end, @cipso={0x86, 0x18, 0x1, [{0x1, 0x3, '\v'}, {0x6, 0x6, "87c70d53"}, {0x5, 0x9, "55cb2987189ab0"}]}, @cipso={0x86, 0x17, 0x3, [{0x2, 0x11, "c4dfbccfde7fbb179005adcf87976b"}]}]}}}}}) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@loopback, 0x4e24, 0x3, 0x7, 0x8, 0xa, 0x80, 0x60, 0x84, r3, r4}, {0x8001, 0xfffffffffffffffd, 0x5, 0x5, 0x3, 0xf, 0x1, 0x5b6bb303}, {0x7, 0x9, 0x6, 0xb}, 0xba8, 0x6e6bbf, 0x2, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d2, 0xff}, 0x2, @in=@private=0xa010100, 0x3501, 0x4, 0x0, 0x5, 0x9, 0x2, 0x7}}, 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="1c0000001c000704ab5b2509b868030002ab087a0100000001481093", 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 0s ago: executing program 7 (id=35880): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, &(0x7f0000000200)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ation only supports local addresses [ 2495.873030][ T3129] 9pnet_fd: Insufficient options for proto=fd [ 2496.161813][ T3133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.33198'. [ 2496.229579][ T3133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.33198'. [ 2496.319663][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33200'. [ 2496.434173][ T3149] netlink: 80 bytes leftover after parsing attributes in process `syz.7.33202'. [ 2496.589666][ T3165] netlink: 'syz.9.33207': attribute type 1 has an invalid length. [ 2496.602687][ T3165] netlink: 'syz.9.33207': attribute type 2 has an invalid length. [ 2496.771229][ T3184] netlink: 288 bytes leftover after parsing attributes in process `syz.3.33209'. [ 2497.233623][ T3214] netlink: 'syz.5.33223': attribute type 25 has an invalid length. [ 2497.275693][ T3217] SELinux: failed to load policy [ 2497.406913][ T3230] 9pnet_fd: Insufficient options for proto=fd [ 2497.916538][ T3244] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=769 sclass=netlink_tcpdiag_socket pid=3244 comm=syz.5.33233 [ 2498.619777][ T3282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3282 comm=syz.5.33245 [ 2498.637861][ T3282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=3282 comm=syz.5.33245 [ 2499.474327][ T3310] tipc: Enabling of bearer rejected, failed to enable media [ 2499.722082][ T36] kauditd_printk_skb: 1353 callbacks suppressed [ 2499.722126][ T36] audit: type=1400 audit(2000005466.068:288853): avc: denied { read write } for pid=700 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.753425][ T36] audit: type=1400 audit(2000005466.068:288854): avc: denied { read write open } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.778596][ T36] audit: type=1400 audit(2000005466.068:288855): avc: denied { ioctl } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.805947][ T36] audit: type=1400 audit(2000005466.153:288856): avc: denied { create } for pid=3318 comm="syz.3.33256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2499.874594][ T36] audit: type=1400 audit(2000005466.209:288857): avc: denied { read write } for pid=700 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.899169][ T36] audit: type=1400 audit(2000005466.209:288858): avc: denied { read write open } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.926207][ T36] audit: type=1400 audit(2000005466.209:288859): avc: denied { ioctl } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.952038][ T36] audit: type=1400 audit(2000005466.228:288860): avc: denied { read } for pid=3323 comm="syz.3.33257" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2499.981920][ T36] audit: type=1400 audit(2000005466.228:288861): avc: denied { read open } for pid=3323 comm="syz.3.33257" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2500.011262][ T36] audit: type=1400 audit(2000005466.237:288862): avc: denied { map } for pid=3323 comm="syz.3.33257" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 2500.115156][ T3332] fuseblk: Bad value for 'fd' [ 2500.283433][ T3470] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 2500.456495][ T3470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2500.467569][ T3470] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2500.480469][ T3470] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2500.489564][ T3470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2500.499459][ T3470] usb 4-1: config 0 descriptor?? [ 2500.506083][ T3326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2500.516080][ T3470] usbhid 4-1:0.0: can't add hid device: -22 [ 2500.522301][ T3470] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 2500.736416][ T3304] Bluetooth: hci0: Frame reassembly failed (-84) [ 2500.745240][ T3304] Bluetooth: hci0: Frame reassembly failed (-84) [ 2502.369984][ T3403] /dev/loop0: Can't lookup blockdev [ 2502.905518][T12382] Bluetooth: hci0: command 0x1003 tx timeout [ 2502.905865][T29500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2502.921970][ T3470] usb 4-1: USB disconnect, device number 27 [ 2503.538751][ T3444] overlayfs: failed to clone upperpath [ 2503.650397][ T3455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.33303'. [ 2504.417048][ T3475] overlay: filesystem on ./bus is read-only [ 2504.456220][ T3482] can0: slcan on ptm0. [ 2504.529511][ T3481] can0 (unregistered): slcan off ptm0. [ 2504.653241][ T3492] veth1: entered allmulticast mode [ 2504.669352][ T3494] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2504.835335][ T3510] overlayfs: disabling nfs_export due to verity=require [ 2504.866253][ T3510] overlayfs: overlapping lowerdir path [ 2505.072256][ T36] kauditd_printk_skb: 304 callbacks suppressed [ 2505.072278][ T36] audit: type=1400 audit(2000005471.088:289167): avc: denied { create } for pid=3520 comm="syz.3.33325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2505.106770][ T36] audit: type=1400 audit(2000005471.088:289168): avc: denied { create } for pid=3520 comm="syz.3.33325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2505.146025][ T36] audit: type=1400 audit(2000005471.088:289169): avc: denied { write } for pid=3520 comm="syz.3.33325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2505.167846][ T36] audit: type=1400 audit(2000005471.088:289170): avc: denied { nlmsg_write } for pid=3520 comm="syz.3.33325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2505.182620][ T3532] binder: Bad value for 'stats' [ 2505.188867][ T36] audit: type=1400 audit(2000005471.125:289171): avc: denied { create } for pid=3529 comm="syz.5.33327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2505.214137][ T36] audit: type=1400 audit(2000005471.125:289172): avc: denied { setopt } for pid=3529 comm="syz.5.33327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2505.235874][ T36] audit: type=1400 audit(2000005471.125:289173): avc: denied { create } for pid=3529 comm="syz.5.33327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2505.256139][ T36] audit: type=1400 audit(2000005471.125:289174): avc: denied { bind } for pid=3529 comm="syz.5.33327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2505.276101][ T36] audit: type=1400 audit(2000005471.125:289175): avc: denied { listen } for pid=3529 comm="syz.5.33327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2505.300670][ T36] audit: type=1400 audit(2000005471.125:289176): avc: denied { mounton } for pid=3529 comm="syz.5.33327" path="/373/file0" dev="tmpfs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2505.530918][ T3490] veth1: left allmulticast mode [ 2506.233314][ T3599] fuse: Bad value for 'fd' [ 2506.389248][ T3595] overlayfs: failed to clone lowerpath [ 2506.410177][ T3604] netlink: 44 bytes leftover after parsing attributes in process `syz.9.33353'. [ 2506.460335][ T3608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.483597][ T3608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2506.699957][ T377] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 2506.859801][ T377] usb 4-1: Invalid ep0 maxpacket: 32 [ 2506.997451][ T3634] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.33364'. [ 2506.999166][ T377] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 2507.169005][ T377] usb 4-1: Invalid ep0 maxpacket: 32 [ 2507.174500][ T377] usb usb4-port1: attempt power cycle [ 2507.541982][ T377] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 2507.564156][ T377] usb 4-1: Invalid ep0 maxpacket: 32 [ 2507.701840][ T377] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 2507.723941][ T377] usb 4-1: Invalid ep0 maxpacket: 32 [ 2507.734399][ T377] usb usb4-port1: unable to enumerate USB device [ 2507.849620][ T3666] batadv_slave_1: entered promiscuous mode [ 2507.857324][ T3665] batadv_slave_1: left promiscuous mode [ 2507.953579][ T3676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.33376'. [ 2508.911693][ T3734] fuse: Bad value for 'user_id' [ 2508.922673][ T3734] fuse: Bad value for 'user_id' [ 2509.685130][ T3766] veth1: entered allmulticast mode [ 2509.790650][ T3769] sit0: entered promiscuous mode [ 2509.796962][ T3769] netlink: 'syz.5.33406': attribute type 1 has an invalid length. [ 2509.822958][ T3769] netlink: 1 bytes leftover after parsing attributes in process `syz.5.33406'. [ 2509.835112][ T3769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=3769 comm=syz.5.33406 [ 2510.476758][ T36] kauditd_printk_skb: 374 callbacks suppressed [ 2510.476778][ T36] audit: type=1400 audit(2000005476.163:289551): avc: denied { create } for pid=3795 comm="syz.5.33416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2510.504497][ T36] audit: type=1400 audit(2000005476.163:289552): avc: denied { write } for pid=3795 comm="syz.5.33416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2510.525479][ T36] audit: type=1400 audit(2000005476.163:289553): avc: denied { write } for pid=3795 comm="syz.5.33416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2510.546316][ T36] audit: type=1400 audit(2000005476.172:289554): avc: denied { name_bind } for pid=3795 comm="syz.5.33416" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2510.570035][ T36] audit: type=1400 audit(2000005476.172:289555): avc: denied { node_bind } for pid=3795 comm="syz.5.33416" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2510.570451][ T3765] veth1: left allmulticast mode [ 2510.592388][ T36] audit: type=1400 audit(2000005476.210:289556): avc: denied { sys_module } for pid=3795 comm="syz.5.33416" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2510.658337][ T36] audit: type=1400 audit(2000005476.332:289557): avc: denied { read write } for pid=700 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2510.692640][ T36] audit: type=1400 audit(2000005476.360:289558): avc: denied { read write open } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2510.739925][ T36] audit: type=1400 audit(2000005476.360:289559): avc: denied { ioctl } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2510.807874][ T36] audit: type=1400 audit(2000005476.360:289560): avc: denied { create } for pid=3803 comm="syz.5.33418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2511.063584][ T3811] netlink: 'syz.3.33420': attribute type 27 has an invalid length. [ 2511.462612][ T3858] netlink: 'syz.7.33437': attribute type 46 has an invalid length. [ 2511.465627][ T3859] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2511.677375][T19536] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2511.837222][T19536] usb 4-1: Using ep0 maxpacket: 32 [ 2511.839754][ T3880] overlayfs: failed to clone upperpath [ 2511.851085][T19536] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2511.869178][T19536] usb 4-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 0 [ 2511.879254][T19536] usb 4-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 16 [ 2511.890255][T19536] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2511.900806][T19536] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2511.911496][T19536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.919596][T19536] usb 4-1: Product: syz [ 2511.923885][T19536] usb 4-1: Manufacturer: ⲉ⮅騚귷ﺗ갽뚭馦㉄ಪ뽝緝轋咅㿄殞샢쏣톃Ｉ뻠黜蜤ว퇢품䨓ᗆ텓챛襌﫛譧빟⨐끦䥽⢺廙鵲鿙⻳炋嘁顨碸纼숭㹿㾘鼿ꚙ⎸晴髧ൃ⦈༬泽䒵䵿㑻䆒郍䎯㛗餄ᣎ㐝ﴮ䫕胫奭迵缗㶂ꘗ塗徵፳ⵅ牄㰪䭦鑱偋Ό [ 2511.952963][T19536] usb 4-1: SerialNumber: syz [ 2511.961925][ T3853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2512.208611][T19536] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2512.237270][T19536] usb 4-1: USB disconnect, device number 32 [ 2512.249868][T32348] udevd[32348]: setting owner of /dev/bus/usb/004/032 to uid=0, gid=0 failed: No such file or directory [ 2512.718775][ T3910] overlay: Bad value for 'redirect_dir' [ 2512.733775][ T3910] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 2512.886851][ T3942] 9pnet_fd: Insufficient options for proto=fd [ 2513.011287][ T3956] netlink: 'syz.9.33471': attribute type 33 has an invalid length. [ 2513.042112][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.9.33471'. [ 2513.147422][ T3962] netlink: 'syz.9.33473': attribute type 1 has an invalid length. [ 2513.155353][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.33473'. [ 2513.265327][ T331] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2513.376385][ T3971] veth1: entered allmulticast mode [ 2513.425180][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 2513.434073][ T331] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 2513.442534][ T331] usb 4-1: config 250 has an invalid interface number: 0 but max is -1 [ 2513.450859][ T331] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2513.461175][ T331] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2513.473326][ T331] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2513.483659][ T331] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2513.492043][ T331] usb 4-1: Product: syz [ 2513.496289][ T331] usb 4-1: SerialNumber: syz [ 2513.506484][ T331] hub 4-1:250.0: bad descriptor, ignoring hub [ 2513.515910][ T331] hub 4-1:250.0: probe with driver hub failed with error -5 [ 2513.648208][ T3988] fuseblk: Bad value for 'fd' [ 2513.722893][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2513.741734][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2513.872880][ T331] usb 4-1: USB disconnect, device number 33 [ 2514.260857][ T3970] veth1: left allmulticast mode [ 2514.492021][ T4043] overlay: Unknown parameter 'audit' [ 2514.761076][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.33509'. [ 2514.771263][ T4068] netlink: 20 bytes leftover after parsing attributes in process `syz.9.33509'. [ 2515.320313][ T4082] tmpfs: Invalid uid '0x00000000ffffffff' [ 2515.568695][ T4114] netlink: 176 bytes leftover after parsing attributes in process `syz.3.33518'. [ 2515.580211][ T4114] /dev/sg0: Can't lookup blockdev [ 2515.855777][ T36] kauditd_printk_skb: 524 callbacks suppressed [ 2515.855798][ T36] audit: type=1400 audit(2000005488.210:290085): avc: denied { ioctl } for pid=4122 comm="syz.3.33527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2515.865652][ T4139] 9pnet_fd: p9_fd_create_tcp (4139): problem connecting socket to 127.0.0.1 [ 2515.924106][ T36] audit: type=1400 audit(2000005488.276:290086): avc: denied { create } for pid=4142 comm="syz.5.33534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2515.929860][ T377] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2515.954132][ T36] audit: type=1400 audit(2000005488.304:290087): avc: denied { ioctl } for pid=4122 comm="syz.3.33527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2515.980299][ T36] audit: type=1400 audit(2000005488.304:290088): avc: denied { ioctl } for pid=4122 comm="syz.3.33527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2516.006367][ T36] audit: type=1400 audit(2000005488.304:290089): avc: denied { ioctl } for pid=4122 comm="syz.3.33527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2516.015614][ T4145] overlayfs: failed to clone upperpath [ 2516.038309][ T36] audit: type=1400 audit(2000005488.304:290090): avc: denied { execmem } for pid=4142 comm="syz.5.33534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2516.059990][ T36] audit: type=1400 audit(2000005488.351:290091): avc: denied { mounton } for pid=4144 comm="syz.5.33535" path="/437/file0" dev="tmpfs" ino=2310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2516.111029][ T36] audit: type=1400 audit(2000005488.351:290092): avc: denied { mounton } for pid=4144 comm="syz.5.33535" path="/437/bus" dev="tmpfs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2516.135613][ T36] audit: type=1400 audit(2000005488.379:290093): avc: denied { ioctl } for pid=4122 comm="syz.3.33527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2516.161679][ T36] audit: type=1400 audit(2000005488.473:290094): avc: denied { mount } for pid=4156 comm="syz.5.33538" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2516.186539][ T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2516.196956][ T377] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2516.206050][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.228627][ T377] usb 4-1: config 0 descriptor?? [ 2516.256463][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.33540'. [ 2516.397190][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.9.33542'. [ 2516.406277][ T4172] bridge_slave_1: left allmulticast mode [ 2516.411996][ T4172] bridge_slave_1: left promiscuous mode [ 2516.417692][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 2516.425738][ T4172] bridge_slave_0: left allmulticast mode [ 2516.431551][ T4172] bridge_slave_0: left promiscuous mode [ 2516.437204][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 2516.686904][ T377] usbhid 4-1:0.0: can't add hid device: -71 [ 2516.703824][ T377] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2516.714209][ T377] usb 4-1: USB disconnect, device number 34 [ 2516.808603][ T4186] overlay: Unknown parameter 'func' [ 2517.282111][ T4241] overlayfs: failed to clone upperpath [ 2518.082122][ T4302] .N: renamed from veth0_to_bond (while UP) [ 2518.189490][T10181] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2518.352455][T10181] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2518.362097][T10181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.372244][T10181] usb 4-1: config 0 descriptor?? [ 2518.378940][ T4329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=4329 comm=syz.9.33591 [ 2518.395758][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.9.33591'. [ 2518.604682][T10181] usb 4-1: Cannot read MAC address [ 2518.623114][T10181] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2518.659039][T10181] usb 4-1: USB disconnect, device number 35 [ 2519.144873][ T4386] sit0: entered promiscuous mode [ 2519.152999][ T4386] netlink: 'syz.7.33614': attribute type 1 has an invalid length. [ 2519.161679][ T4386] netlink: 1 bytes leftover after parsing attributes in process `syz.7.33614'. [ 2519.553117][ T4433] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.33631'. [ 2519.691431][ T4450] netlink: 'syz.5.33635': attribute type 4 has an invalid length. [ 2519.705592][ T4450] netlink: 'syz.5.33635': attribute type 17 has an invalid length. [ 2519.788335][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2519.856835][ T4465] 9pnet_fd: Insufficient options for proto=fd [ 2519.958890][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2519.968512][ T4477] overlayfs: failed to clone upperpath [ 2519.970657][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2519.982436][ T10] usb 4-1: config 179 has no interface number 0 [ 2519.989054][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2520.004197][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2520.016741][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2520.028183][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2520.038397][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2520.056901][ T4476] tipc: Enabled bearer , priority 8 [ 2520.065423][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 2520.073058][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2520.082364][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.099724][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input163 [ 2520.318943][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2520.327992][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2520.376128][ T4499] netlink: 'syz.5.33653': attribute type 1 has an invalid length. [ 2520.384028][ T4499] netlink: 9 bytes leftover after parsing attributes in process `syz.5.33653'. [ 2520.463263][ T4502] netlink: 104 bytes leftover after parsing attributes in process `syz.7.33654'. [ 2520.476052][T19536] usb 4-1: USB disconnect, device number 36 [ 2520.496291][T19536] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2520.694820][ T4516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33661'. [ 2520.706400][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.33661'. [ 2520.763717][ T4524] 9pnet_fd: Insufficient options for proto=fd [ 2520.945090][ T4546] netlink: 'syz.7.33672': attribute type 1 has an invalid length. [ 2520.953139][ T4546] netlink: 24 bytes leftover after parsing attributes in process `syz.7.33672'. [ 2521.120629][ T377] tipc: Node number set to 2886997007 [ 2521.204797][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 2521.204819][ T36] audit: type=1400 audit(2000005493.220:290663): avc: denied { read write } for pid=700 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2521.256866][ T36] audit: type=1400 audit(2000005493.220:290664): avc: denied { read write open } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2521.301819][ T36] audit: type=1400 audit(2000005493.220:290665): avc: denied { ioctl } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2521.333783][ T36] audit: type=1400 audit(2000005493.267:290666): avc: denied { append } for pid=4564 comm="syz.3.33678" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2521.358430][ T36] audit: type=1400 audit(2000005493.267:290667): avc: denied { append } for pid=4564 comm="syz.3.33678" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2521.384036][ T36] audit: type=1400 audit(2000005493.267:290668): avc: denied { create } for pid=4564 comm="syz.3.33678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2521.412248][ T36] audit: type=1400 audit(2000005493.267:290669): avc: denied { ioctl } for pid=4564 comm="syz.3.33678" path="socket:[383991]" dev="sockfs" ino=383991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2521.436616][ T4573] netlink: 24 bytes leftover after parsing attributes in process `syz.7.33681'. [ 2521.440382][ T36] audit: type=1400 audit(2000005493.267:290670): avc: denied { bind } for pid=4564 comm="syz.3.33678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2521.479955][ T36] audit: type=1400 audit(2000005493.267:290671): avc: denied { setopt } for pid=4564 comm="syz.3.33678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2521.501062][ T4575] netlink: 'syz.5.33683': attribute type 4 has an invalid length. [ 2521.509499][ T4575] netlink: 17 bytes leftover after parsing attributes in process `syz.5.33683'. [ 2521.519089][ T36] audit: type=1400 audit(2000005493.267:290672): avc: denied { mounton } for pid=4564 comm="syz.3.33678" path="/149/file0" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2521.896446][ T4595] 9pnet_fd: Insufficient options for proto=fd [ 2522.346588][T19536] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 2522.509375][T19536] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 2522.518487][T19536] usb 4-1: config 16 has no interface number 0 [ 2522.528811][T19536] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 2522.538832][T19536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.546995][T19536] usb 4-1: Product: syz [ 2522.551316][T19536] usb 4-1: Manufacturer: syz [ 2522.555958][T19536] usb 4-1: SerialNumber: syz [ 2522.795678][T19536] usb 4-1: USB disconnect, device number 37 [ 2522.836814][T32348] udevd[32348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2523.238071][ T4656] netlink: 20 bytes leftover after parsing attributes in process `syz.9.33715'. [ 2523.552483][ T4670] 9pnet_fd: Insufficient options for proto=fd [ 2523.636096][T19536] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2523.817310][T19536] usb 4-1: Using ep0 maxpacket: 8 [ 2523.829240][T19536] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 2523.849427][T19536] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2523.859585][T19536] usb 4-1: config 0 has no interface number 0 [ 2523.879224][T19536] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2523.891697][T19536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.901277][T19536] usb 4-1: Product: syz [ 2523.907125][T19536] usb 4-1: Manufacturer: syz [ 2523.912020][T19536] usb 4-1: SerialNumber: syz [ 2523.923997][T19536] usb 4-1: config 0 descriptor?? [ 2523.936049][T19536] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 2523.944964][T19536] usb 4-1: No valid video chain found. [ 2524.152426][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33717'. [ 2524.163508][ T4661] FAT-fs (rnullb0): bogus number of reserved sectors [ 2524.170307][ T4661] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 2524.178294][ T377] usb 4-1: USB disconnect, device number 38 [ 2525.311266][ T4764] overlayfs: failed to clone lowerpath [ 2525.319688][ T4764] overlayfs: failed to clone upperpath [ 2525.568130][ T4783] fuseblk: Unknown parameter 'roP}G0400000000000000020000' [ 2525.568145][ T4782] fuseblk: Unknown parameter 'roP}G0400000000000000020000' [ 2525.598836][ T4782] overlay: ./file0 is not a directory [ 2525.921652][ T4822] netlink: 100 bytes leftover after parsing attributes in process `syz.3.33769'. [ 2525.962120][ T4825] 9pnet_fd: Insufficient options for proto=fd [ 2526.030302][ T4830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.33771'. [ 2526.042039][ T4830] fuseblk: Unknown parameter '00000000000000000006' [ 2526.135128][ T4840] netlink: 1 bytes leftover after parsing attributes in process `syz.5.33774'. [ 2526.567239][T10181] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2526.575824][ T36] kauditd_printk_skb: 589 callbacks suppressed [ 2526.575843][ T36] audit: type=1400 audit(2000005498.258:291262): avc: denied { ioctl } for pid=4849 comm="syz.3.33779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2526.611508][ T36] audit: type=1400 audit(2000005498.305:291263): avc: denied { ioctl } for pid=4849 comm="syz.3.33779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2526.638151][ T36] audit: type=1400 audit(2000005498.305:291264): avc: denied { ioctl } for pid=4849 comm="syz.3.33779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2526.669160][ T36] audit: type=1400 audit(2000005498.352:291265): avc: denied { create } for pid=4866 comm="syz.9.33785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2526.692514][ T36] audit: type=1400 audit(2000005498.371:291266): avc: denied { ioctl } for pid=4849 comm="syz.3.33779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2526.720133][ T36] audit: type=1400 audit(2000005498.371:291267): avc: denied { write } for pid=4866 comm="syz.9.33785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2526.742246][ T36] audit: type=1400 audit(2000005498.371:291268): avc: denied { nlmsg_write } for pid=4866 comm="syz.9.33785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2526.764840][ T36] audit: type=1400 audit(2000005498.446:291269): avc: denied { mounton } for pid=4866 comm="syz.9.33785" path="/192/file0" dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2526.781873][ T4869] fuse: blksize only supported for fuseblk [ 2526.788078][T10181] usb 4-1: Using ep0 maxpacket: 32 [ 2526.800281][ T36] audit: type=1400 audit(2000005498.474:291270): avc: denied { ioctl } for pid=4849 comm="syz.3.33779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2526.826405][ T36] audit: type=1400 audit(2000005498.502:291271): avc: denied { ioctl } for pid=4849 comm="syz.3.33779" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2526.831626][T10181] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2526.883772][T10181] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2526.898024][T10181] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2526.907293][T10181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2526.919766][T10181] usb 4-1: Product: syz [ 2526.923982][T10181] usb 4-1: Manufacturer: syz [ 2526.928610][T10181] usb 4-1: SerialNumber: syz [ 2526.937306][ T4850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2526.951400][ T4850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2527.187285][T10181] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 2527.198860][T10181] usb 4-1: USB disconnect, device number 39 [ 2527.643776][ T3770] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2527.809175][ T3770] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2527.818321][ T3770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2527.826365][ T3770] usb 4-1: Product: syz [ 2527.830567][ T3770] usb 4-1: Manufacturer: syz [ 2527.835257][ T3770] usb 4-1: SerialNumber: syz [ 2529.139106][ T3770] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2529.353779][T19536] usb 4-1: USB disconnect, device number 40 [ 2530.192015][ T3303] bridge_slave_1: left allmulticast mode [ 2530.197769][ T3303] bridge_slave_1: left promiscuous mode [ 2530.203521][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.211122][ T3303] bridge_slave_0: left allmulticast mode [ 2530.216873][ T3303] bridge_slave_0: left promiscuous mode [ 2530.222524][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2530.393976][ T3303] tipc: Disabling bearer [ 2530.399316][ T3303] tipc: Left network mode [ 2530.522534][ T3303] veth1_macvtap: left promiscuous mode [ 2530.528136][ T3303] veth0_vlan: left promiscuous mode [ 2533.633693][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 2533.633713][ T36] audit: type=1400 audit(2000005504.882:291346): avc: denied { create } for pid=4872 comm="syz.7.33788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2533.663397][ T36] audit: type=1400 audit(2000005504.882:291347): avc: denied { create } for pid=4871 comm="syz.5.33786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2533.684587][ T36] audit: type=1400 audit(2000005504.882:291348): avc: denied { write } for pid=4872 comm="syz.7.33788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2533.706215][ T36] audit: type=1400 audit(2000005504.882:291349): avc: denied { ioctl } for pid=4871 comm="syz.5.33786" path="socket:[384908]" dev="sockfs" ino=384908 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2533.733190][ T36] audit: type=1400 audit(2000005504.882:291350): avc: denied { mounton } for pid=4872 comm="syz.7.33788" path="/456/file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2533.757430][ T36] audit: type=1400 audit(2000005504.882:291351): avc: denied { mount } for pid=4872 comm="syz.7.33788" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2533.781964][ T36] audit: type=1400 audit(2000005504.882:291352): avc: denied { mounton } for pid=4872 comm="syz.7.33788" path="/456/file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2533.812497][ T36] audit: type=1400 audit(2000005504.882:291353): avc: denied { mount } for pid=4872 comm="syz.7.33788" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2533.874176][ T4894] /dev/nbd7: Can't lookup blockdev [ 2533.874182][ T4893] /dev/nbd7: Can't lookup blockdev [ 2533.874253][ T36] audit: type=1400 audit(2000005504.901:291354): avc: denied { ioctl } for pid=4871 comm="syz.5.33786" path="socket:[384908]" dev="sockfs" ino=384908 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2533.916086][ T36] audit: type=1400 audit(2000005504.901:291355): avc: denied { ioctl } for pid=4871 comm="syz.5.33786" path="socket:[384908]" dev="sockfs" ino=384908 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2533.921094][ T4898] /dev/loop0: Can't lookup blockdev [ 2533.947254][ T4897] can0: slcan on ptm0. [ 2534.882507][ T4896] can0 (unregistered): slcan off ptm0. [ 2534.993416][ T4963] fuse: Unknown parameter '' [ 2535.006228][ T4963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.33810'. [ 2535.028695][ T4963] netlink: 28 bytes leftover after parsing attributes in process `syz.7.33810'. [ 2535.047551][ T4963] veth1: entered allmulticast mode [ 2535.840292][ T377] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2535.873646][ T4960] veth1: left allmulticast mode [ 2536.032141][ T377] usb 4-1: Using ep0 maxpacket: 32 [ 2536.044576][ T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2536.064690][ T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2536.074587][ T377] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2536.087988][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.106893][ T377] usb 4-1: config 0 descriptor?? [ 2536.226632][ T5053] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 2536.423063][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.33840'. [ 2536.549683][ T377] kone 0003:1E7D:2CED.0076: unknown main item tag 0x0 [ 2536.565086][ T377] kone 0003:1E7D:2CED.0076: unknown main item tag 0x0 [ 2536.584438][ T377] kone 0003:1E7D:2CED.0076: unknown main item tag 0x0 [ 2536.591487][ T377] kone 0003:1E7D:2CED.0076: unknown main item tag 0x0 [ 2536.598391][ T377] kone 0003:1E7D:2CED.0076: unknown main item tag 0x0 [ 2536.607854][ T377] kone 0003:1E7D:2CED.0076: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 2536.773647][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33822'. [ 2536.782738][ T5013] bridge_slave_1: left allmulticast mode [ 2536.788522][ T5013] bridge_slave_1: left promiscuous mode [ 2536.794254][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 2536.802148][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 2536.830289][T16655] Bluetooth: hci0: Frame reassembly failed (-84) [ 2538.401984][ T5154] tipc: Enabling of bearer rejected, failed to enable media [ 2538.974002][T29500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2538.974051][T12382] Bluetooth: hci0: command 0x1003 tx timeout [ 2538.995278][ T377] kone 0003:1E7D:2CED.0076: couldn't init struct kone_device [ 2539.002727][ T377] kone 0003:1E7D:2CED.0076: couldn't install mouse [ 2539.022426][ T36] kauditd_printk_skb: 991 callbacks suppressed [ 2539.022449][ T36] audit: type=1400 audit(2000005509.929:292347): avc: denied { read write } for pid=700 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2539.056145][ T36] audit: type=1400 audit(2000005509.948:292348): avc: denied { read write open } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2539.057708][ T377] kone 0003:1E7D:2CED.0076: probe with driver kone failed with error -5 [ 2539.081579][ T36] audit: type=1400 audit(2000005509.948:292349): avc: denied { ioctl } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2539.121489][ T36] audit: type=1400 audit(2000005510.004:292350): avc: denied { read } for pid=5161 comm="syz.3.33873" dev="nsfs" ino=4026534340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2539.144535][ T377] usb 4-1: USB disconnect, device number 41 [ 2539.165847][ T36] audit: type=1400 audit(2000005510.004:292351): avc: denied { read open } for pid=5161 comm="syz.3.33873" path="net:[4026534340]" dev="nsfs" ino=4026534340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2539.192596][ T36] audit: type=1400 audit(2000005510.004:292352): avc: denied { create } for pid=5161 comm="syz.3.33873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2539.213561][ T36] audit: type=1400 audit(2000005510.070:292353): avc: denied { write } for pid=5161 comm="syz.3.33873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2539.251118][ T36] audit: type=1400 audit(2000005510.070:292354): avc: denied { read } for pid=5161 comm="syz.3.33873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2539.284696][ T36] audit: type=1400 audit(2000005510.070:292355): avc: denied { read } for pid=5161 comm="syz.3.33873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2539.305412][ T36] audit: type=1400 audit(2000005510.070:292356): avc: denied { write } for pid=5161 comm="syz.3.33873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2540.176564][ T5213] netlink: 'syz.7.33891': attribute type 16 has an invalid length. [ 2540.181703][ T5214] netlink: 'syz.7.33891': attribute type 16 has an invalid length. [ 2540.192650][T19536] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2540.362396][T19536] usb 4-1: descriptor type invalid, skip [ 2540.368810][T19536] usb 4-1: not running at top speed; connect to a high speed hub [ 2540.378380][T19536] usb 4-1: config 0 has no interfaces? [ 2540.386862][T19536] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2540.395990][T19536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.404020][T19536] usb 4-1: Product: syz [ 2540.408182][T19536] usb 4-1: Manufacturer: syz [ 2540.412904][T19536] usb 4-1: SerialNumber: syz [ 2540.423666][T19536] usb 4-1: config 0 descriptor?? [ 2540.655444][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2540.671134][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2540.690656][ T377] usb 4-1: USB disconnect, device number 42 [ 2540.964797][ T5245] fuseblk: Unknown parameter 'P/00000' [ 2541.268344][ T5257] tmpfs: Unknown parameter '.' [ 2541.295510][ T5260] overlayfs: failed to clone upperpath [ 2541.598948][ T3303] veth1_macvtap: left promiscuous mode [ 2541.604520][ T3303] veth0_vlan: left promiscuous mode [ 2541.830549][ T5282] devpts: called with bogus options [ 2542.151389][ T5308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32834 sclass=netlink_route_socket pid=5308 comm=syz.5.33924 [ 2542.565309][ T5322] netlink: 'syz.7.33928': attribute type 4 has an invalid length. [ 2542.588811][ T5322] netlink: 'syz.7.33928': attribute type 4 has an invalid length. [ 2542.907709][ T5340] netlink: 'syz.5.33934': attribute type 27 has an invalid length. [ 2542.930166][ T5340] incfs: Options parsing error. -22 [ 2542.935454][ T5340] incfs: mount failed -22 [ 2542.964762][ T5345] cgroup: Name too long [ 2543.403440][ T5356] overlay: Unknown parameter 'hash' [ 2543.943606][ T5366] netlink: 96 bytes leftover after parsing attributes in process `syz.3.33942'. [ 2544.009252][ T5369] netlink: 'syz.3.33943': attribute type 32 has an invalid length. [ 2544.062815][ T5371] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2544.072474][ T5371] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 2544.081021][ T5371] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2544.089197][ T5371] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 2544.151306][ T5377] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 2544.247198][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.33950'. [ 2544.256332][ T5385] bridge_slave_1: left allmulticast mode [ 2544.262084][ T5385] bridge_slave_1: left promiscuous mode [ 2544.268042][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 2544.277405][ T5385] bridge_slave_0: left allmulticast mode [ 2544.283345][ T5385] bridge_slave_0: left promiscuous mode [ 2544.289093][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 2544.648928][ T36] kauditd_printk_skb: 403 callbacks suppressed [ 2544.648951][ T36] audit: type=1400 audit(2000005515.221:292760): avc: denied { read write } for pid=700 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2544.681132][ T36] audit: type=1400 audit(2000005515.221:292761): avc: denied { read write open } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2544.707449][ T36] audit: type=1400 audit(2000005515.221:292762): avc: denied { ioctl } for pid=700 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2544.708478][ T5389] input: syz0 as /devices/virtual/input/input164 [ 2544.759334][ T36] audit: type=1400 audit(2000005515.258:292763): avc: denied { write } for pid=5388 comm="syz.3.33953" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2544.804298][ T36] audit: type=1400 audit(2000005515.258:292764): avc: denied { write open } for pid=5388 comm="syz.3.33953" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2544.849541][ T36] audit: type=1400 audit(2000005515.277:292765): avc: denied { read write } for pid=5388 comm="syz.3.33953" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2544.897986][ T36] audit: type=1400 audit(2000005515.277:292766): avc: denied { read } for pid=5388 comm="syz.3.33953" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2544.935428][ T36] audit: type=1400 audit(2000005515.277:292767): avc: denied { read open } for pid=5388 comm="syz.3.33953" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2544.960995][ T36] audit: type=1400 audit(2000005515.277:292768): avc: denied { read write open } for pid=5388 comm="syz.3.33953" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2545.000576][ T36] audit: type=1400 audit(2000005515.277:292769): avc: denied { ioctl } for pid=5388 comm="syz.3.33953" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2545.014503][ T5406] netlink: 'syz.7.33958': attribute type 8 has an invalid length. [ 2545.034092][ T5407] tipc: Started in network mode [ 2545.039128][ T5407] tipc: Node identity 2afd9e0f1a05, cluster identity 4711 [ 2545.046764][ T5407] tipc: Enabled bearer , priority 8 [ 2545.422517][T10181] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2545.582364][T10181] usb 4-1: Using ep0 maxpacket: 16 [ 2545.590478][T10181] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2545.602145][T10181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2545.616132][T10181] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2545.625861][T10181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.634016][T10181] usb 4-1: Product: syz [ 2545.638367][T10181] usb 4-1: Manufacturer: syz [ 2545.643332][T10181] usb 4-1: SerialNumber: syz [ 2545.816206][ T5451] netlink: 80 bytes leftover after parsing attributes in process `syz.5.33973'. [ 2546.107722][T10181] usb 4-1: cannot find UAC_HEADER [ 2546.132005][T10181] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2546.160185][T10181] usb 4-1: USB disconnect, device number 43 [ 2546.180007][ T5474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=5474 comm=syz.5.33980 [ 2546.232635][ T377] tipc: Node number set to 821599759 [ 2546.246242][ T5160] udevd[5160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2547.329746][ T5539] 9pnet_fd: Insufficient options for proto=fd [ 2547.776911][ T5574] overlayfs: failed to clone upperpath [ 2547.940154][ T5586] netlink: 37 bytes leftover after parsing attributes in process `syz.5.34017'. [ 2548.241889][ T5614] x_tables: unsorted underflow at hook 2 [ 2548.895966][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 2548.903202][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 2548.910445][ T5642] bridge_slave_0: entered allmulticast mode [ 2548.916993][ T5642] bridge_slave_0: entered promiscuous mode [ 2548.925064][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.932399][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 2548.939591][ T5642] bridge_slave_1: entered allmulticast mode [ 2548.946312][ T5642] bridge_slave_1: entered promiscuous mode [ 2549.143148][ T3303] tipc: Resetting bearer [ 2549.170370][ T3303] tipc: Disabling bearer [ 2549.337665][ T3303] tipc: Left network mode [ 2549.362128][ T3303] veth1_macvtap: left promiscuous mode [ 2549.368682][ T3303] veth0_vlan: left promiscuous mode [ 2549.530257][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.537479][ T5642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2549.544803][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.552438][ T5642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2549.655808][T16655] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.666794][T16655] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.683601][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.690718][ T3290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2549.705699][T16655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.712904][T16655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2549.836459][ T5642] veth0_vlan: entered promiscuous mode [ 2549.893924][ T5642] veth1_macvtap: entered promiscuous mode [ 2550.056326][ T36] kauditd_printk_skb: 1550 callbacks suppressed [ 2550.056346][ T36] audit: type=1400 audit(2000005520.287:294320): avc: denied { create } for pid=5698 comm="syz.3.34045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2550.091024][ T36] audit: type=1400 audit(2000005520.287:294321): avc: denied { write } for pid=5698 comm="syz.3.34045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2550.113729][ T36] audit: type=1400 audit(2000005520.306:294322): avc: denied { read write } for pid=5642 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2550.126826][ T5701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 2550.145770][ T5701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2550.156671][ T5701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 2550.176413][ T36] audit: type=1400 audit(2000005520.306:294323): avc: denied { read write open } for pid=5642 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2550.219142][ T36] audit: type=1400 audit(2000005520.306:294324): avc: denied { ioctl } for pid=5642 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2550.245795][ T36] audit: type=1400 audit(2000005520.353:294325): avc: denied { read } for pid=5700 comm="syz.5.34033" name="binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2550.270348][ T36] audit: type=1400 audit(2000005520.353:294326): avc: denied { read open } for pid=5700 comm="syz.5.34033" path="/dev/binderfs/binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2550.295947][ T36] audit: type=1400 audit(2000005520.353:294327): avc: denied { ioctl } for pid=5700 comm="syz.5.34033" path="/dev/binderfs/binder1" dev="binder" ino=50 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2550.337896][ T36] audit: type=1400 audit(2000005520.353:294328): avc: denied { set_context_mgr } for pid=5700 comm="syz.5.34033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2550.366841][ T36] audit: type=1400 audit(2000005520.353:294329): avc: denied { map } for pid=5700 comm="syz.5.34033" path="/dev/binderfs/binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2550.581292][ T3471] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2550.619241][ T5720] 9pnet_fd: Insufficient options for proto=fd [ 2550.745169][ T3471] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2550.755483][ T3471] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2550.768996][ T3471] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2550.779378][ T3471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2550.788213][ T3471] usb 6-1: SerialNumber: syz [ 2551.018193][ T3471] usb 6-1: 0:2 : does not exist [ 2551.041335][ T3471] usb 6-1: USB disconnect, device number 80 [ 2551.128934][ T5160] udevd[5160]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2551.290400][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.34064'. [ 2551.301346][ T5750] netlink: 188 bytes leftover after parsing attributes in process `syz.9.34064'. [ 2551.533715][ T5758] netlink: 'syz.9.34068': attribute type 12 has an invalid length. [ 2551.725411][ T5767] overlayfs: statfs failed on './file0' [ 2552.167633][ T5804] overlayfs: failed to clone upperpath [ 2552.196490][ T5794] rust_binder: 25: no such ref 4294967294 [ 2552.202439][ T5794] rust_binder: Write failure EINVAL in pid:25 [ 2552.586116][ T5833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5833 comm=syz.7.34093 [ 2553.515828][ T5865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 2553.721790][ T5896] netlink: 'syz.7.34114': attribute type 2 has an invalid length. [ 2553.813564][ T5899] fuse: Bad value for 'fd' [ 2553.917618][ T377] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2554.077358][ T377] usb 6-1: Using ep0 maxpacket: 8 [ 2554.085258][ T377] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 2554.093503][ T377] usb 6-1: config 0 has no interface number 0 [ 2554.103643][ T377] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2554.112977][ T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.121077][ T377] usb 6-1: Product: syz [ 2554.125329][ T377] usb 6-1: Manufacturer: syz [ 2554.129958][ T377] usb 6-1: SerialNumber: syz [ 2554.137119][ T377] usb 6-1: config 0 descriptor?? [ 2554.179034][ T5914] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 2554.392203][ T5916] netlink: 140 bytes leftover after parsing attributes in process `syz.3.34122'. [ 2555.266618][ T5974] tipc: Enabling of bearer rejected, failed to enable media [ 2555.498715][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 2555.498735][ T36] audit: type=1400 audit(2000005525.400:294940): avc: denied { create } for pid=5979 comm="syz.9.34142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2555.587181][ T36] audit: type=1400 audit(2000005525.485:294941): avc: denied { create } for pid=5982 comm="syz.9.34143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2555.607452][ T36] audit: type=1400 audit(2000005525.485:294942): avc: denied { setopt } for pid=5982 comm="syz.9.34143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2555.627566][ T36] audit: type=1400 audit(2000005525.485:294943): avc: denied { create } for pid=5982 comm="syz.9.34143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2555.916805][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34145'. [ 2555.959776][ T36] audit: type=1326 audit(2000005525.832:294944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.3.34146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f298298eec9 code=0x0 [ 2556.555814][ T36] audit: type=1400 audit(2000005526.395:294945): avc: denied { create } for pid=6003 comm="syz.7.34151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2556.576080][ T36] audit: type=1400 audit(2000005526.395:294946): avc: denied { ioctl } for pid=6003 comm="syz.7.34151" path="socket:[388785]" dev="sockfs" ino=388785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2556.601814][ T36] audit: type=1400 audit(2000005526.395:294947): avc: denied { setopt } for pid=6003 comm="syz.7.34151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2556.622051][ T36] audit: type=1400 audit(2000005526.395:294948): avc: denied { bind } for pid=6003 comm="syz.7.34151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2556.646189][ T377] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 2556.652657][ T377] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 2556.672134][ T36] audit: type=1400 audit(2000005526.395:294949): avc: denied { write } for pid=6003 comm="syz.7.34151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2556.699405][ T377] usb 6-1: USB disconnect, device number 81 [ 2557.180906][ T6040] 9pnet_fd: p9_fd_create_tcp (6040): problem connecting socket to 127.0.0.1 [ 2557.307945][ T6046] bridge_slave_0: entered promiscuous mode [ 2557.315554][ T6046] bridge_slave_0: entered allmulticast mode [ 2557.362311][ T6049] overlayfs: failed to clone lowerpath [ 2557.560813][ T6065] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2557.581163][ T6066] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2558.018750][ T6092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2558.018784][ T6092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:66 [ 2558.116971][ T6100] futex_wake_op: syz.7.34186 tries to shift op by -1; fix this program [ 2558.139300][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.34186'. [ 2558.235792][ T6103] overlayfs: failed to resolve './file0': -2 [ 2558.287136][ T6110] fuse: Bad value for 'group_id' [ 2558.292262][ T6110] fuse: Bad value for 'group_id' [ 2558.340829][ T3471] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 2558.503940][ T3471] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2558.515138][ T3471] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2558.525005][ T3471] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2558.531662][ T3471] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 2558.540748][ T3471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.550866][ T3471] usb 6-1: config 0 descriptor?? [ 2558.791578][ T6121] fuse: Bad value for 'user_id' [ 2558.796492][ T6121] fuse: Bad value for 'user_id' [ 2558.806043][ T6121] netlink: 68 bytes leftover after parsing attributes in process `syz.9.34193'. [ 2558.898814][ T6127] Invalid ELF header magic: != ELF [ 2558.999737][ T3471] lenovo 0003:17EF:6067.0077: unknown main item tag 0x0 [ 2559.006981][ T3471] lenovo 0003:17EF:6067.0077: unknown main item tag 0x0 [ 2559.018786][ T3471] lenovo 0003:17EF:6067.0077: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0 [ 2559.227109][ T3471] usb 6-1: USB disconnect, device number 82 [ 2559.498058][ T6138] overlayfs: failed to clone lowerpath [ 2559.844997][ T6163] /dev/rnullb0: Can't open blockdev [ 2559.855213][ T6161] /dev/rnullb0: Can't open blockdev [ 2559.967538][ T6169] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 2559.986695][ T6169] SELinux: failed to load policy [ 2560.117551][ T6184] overlayfs: failed to clone upperpath [ 2560.355343][ T377] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2560.526050][ T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2560.536266][ T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2560.552464][ T377] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2560.564215][ T377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.572904][ T377] usb 6-1: Product: syz [ 2560.578556][ T377] usb 6-1: Manufacturer: syz [ 2560.583913][ T377] usb 6-1: SerialNumber: syz [ 2560.598791][ T377] usb 6-1: config 0 descriptor?? [ 2560.614400][ T377] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 2560.833028][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.841507][ T36] kauditd_printk_skb: 384 callbacks suppressed [ 2560.841530][ T36] audit: type=1400 audit(2000000000.797:295334): avc: denied { read write } for pid=6168 comm="syz.5.34209" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2560.850559][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.877046][ T36] audit: type=1400 audit(2000000000.797:295335): avc: denied { read write open } for pid=6168 comm="syz.5.34209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2560.913197][ T377] usb 6-1: USB disconnect, device number 83 [ 2560.916786][ T36] audit: type=1400 audit(2000000000.797:295336): avc: denied { ioctl } for pid=6168 comm="syz.5.34209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2560.953402][ T36] audit: type=1400 audit(2000000000.797:295337): avc: denied { ioctl } for pid=6168 comm="syz.5.34209" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2560.989652][ T4904] udevd[4904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2561.105475][ T36] audit: type=1400 audit(2000000001.060:295338): avc: denied { create } for pid=6236 comm="syz.9.34230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2561.198689][ T36] audit: type=1326 audit(2000000001.144:295339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.3.34233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f298298eec9 code=0x0 [ 2561.460994][ T36] audit: type=1400 audit(2000000001.388:295340): avc: denied { read write } for pid=5642 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2561.486284][ T36] audit: type=1400 audit(2000000001.388:295341): avc: denied { read write open } for pid=5642 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2561.518819][ T36] audit: type=1400 audit(2000000001.388:295342): avc: denied { ioctl } for pid=5642 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2561.546091][ T36] audit: type=1400 audit(2000000001.444:295343): avc: denied { read write } for pid=6262 comm="syz.5.34239" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2562.173499][ T6297] overlayfs: overlapping lowerdir path [ 2562.327274][ T6303] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 2562.583078][T19536] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 2562.757235][T19536] usb 6-1: not running at top speed; connect to a high speed hub [ 2562.766674][T19536] usb 6-1: config 3 has an invalid interface number: 120 but max is 3 [ 2562.775025][T19536] usb 6-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 2562.785162][T19536] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 2562.795450][T19536] usb 6-1: config 3 has no interface number 0 [ 2562.802398][T19536] usb 6-1: config 3 interface 120 altsetting 90 has an invalid descriptor for endpoint zero, skipping [ 2562.813485][T19536] usb 6-1: config 3 interface 120 altsetting 90 has a duplicate endpoint with address 0x9, skipping [ 2562.824522][T19536] usb 6-1: config 3 interface 120 altsetting 90 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 2562.838105][T19536] usb 6-1: config 3 interface 120 has no altsetting 0 [ 2562.854224][T19536] usb 6-1: New USB device found, idVendor=0af0, idProduct=7051, bcdDevice=b7.7f [ 2562.872249][T19536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2562.880311][T19536] usb 6-1: Product: ꨃ䏺䷂윌ං﷝뷓ꨴཞ斨⢑믴홽㌄뵼坞挒涉Z嚴鈒吜寓碲嗑⣗᎚技鴆ﳂ鼀蜓笀徜᧥後균⽸겕ࠛ빆鬰誟ꍢ莢䛊⯏‡ꭿ䘣뙗뵡ఞ帷彫郉꿻ꩋ㼾ₜ帊彦⫲側ⅼ䋜旭촶䨸ᩗ [ 2562.916871][T19536] usb 6-1: Manufacturer: Ъ [ 2562.921450][T19536] usb 6-1: SerialNumber: 뿧둴몾盘໺⩤䦡쭝猏잙䍻㓠뱟늩퍀젏⺚롈밡걶̨躁븽࣐놪ꪕﵫ춿疂즫㬭Ⴢ溳䰕䘈돯ｫ⎁텻乓龈銖퇭ᵗ㟷ప旲߷痖蕨ל͚䅧癐鼒霞ṍ鍖ᢂ旧ㆪ຀ג碮㽁玥礷譐蘅퀌ʆꤒ췮䓒ﺿ핎뒙請툥蓋ᡍₜ룎梩ڵ꡺꧊캼獦겺⥟牱쑴逋笣䇪⥾ꓨƯⳎ㒦欠㚆줚柭ﻉ珻Қ熸 [ 2564.326706][ T6343] veth0_to_team: mtu greater than device maximum [ 2564.439872][ T6353] tmpfs: Bad value for 'nr_blocks' [ 2564.830143][ T6368] overlayfs: failed to clone lowerpath [ 2564.842381][ T6374] overlayfs: failed to clone upperpath [ 2565.340571][ T6386] 9pnet_fd: Insufficient options for proto=fd [ 2565.384515][ T6388] overlayfs: failed to clone upperpath [ 2565.492936][T19536] usb 6-1: USB disconnect, device number 84 [ 2566.151106][ T6463] 9pnet_fd: Insufficient options for proto=fd [ 2566.265719][ T36] kauditd_printk_skb: 376 callbacks suppressed [ 2566.265739][ T36] audit: type=1400 audit(2000000005.901:295720): avc: denied { mounton } for pid=6467 comm="syz.3.34311" path="/306/file0" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2566.293638][ T6468] fuse: Bad value for 'fd' [ 2566.296459][ T36] audit: type=1400 audit(2000000005.910:295721): avc: denied { execmem } for pid=6469 comm="syz.9.34310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2566.313244][ T6468] fuse: Bad value for 'fd' [ 2566.328377][ T36] audit: type=1400 audit(2000000005.910:295722): avc: denied { execute } for pid=6469 comm="syz.9.34310" path="/dev/rnullb0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2566.352389][ T36] audit: type=1400 audit(2000000005.938:295723): avc: denied { mounton } for pid=6467 comm="syz.3.34311" path="/306/file0" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2566.378336][ T36] audit: type=1400 audit(2000000005.957:295724): avc: denied { bpf } for pid=6467 comm="syz.3.34311" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2566.400831][ T36] audit: type=1400 audit(2000000005.985:295725): avc: denied { audit_read } for pid=6471 comm="syz.7.34312" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2566.451120][ T36] audit: type=1400 audit(2000000006.070:295726): avc: denied { mounton } for pid=6477 comm="syz.9.34313" path="/323/file0" dev="tmpfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2566.476708][ T36] audit: type=1400 audit(2000000006.098:295727): avc: denied { remount } for pid=6477 comm="syz.9.34313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2566.501863][ T36] audit: type=1400 audit(2000000006.117:295728): avc: denied { create } for pid=6479 comm="syz.7.34316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2566.526000][ T36] audit: type=1400 audit(2000000006.117:295729): avc: denied { setopt } for pid=6479 comm="syz.7.34316" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2566.604787][ T6489] bpf: Bad value for 'gid' [ 2566.810404][ T3303] tipc: Subscription rejected, illegal request [ 2566.960075][ T6531] fuse: Unknown parameter 'fd-0xffffffffffffffff' [ 2567.027875][ T6538] batadv_slave_0: entered promiscuous mode [ 2567.035663][ T6538] batadv_slave_0: left promiscuous mode [ 2568.076640][ T6581] fuse: Bad value for 'fd' [ 2568.139567][ T6583] netlink: 'syz.3.34348': attribute type 5 has an invalid length. [ 2568.170154][ T6586] netlink: 64 bytes leftover after parsing attributes in process `syz.9.34349'. [ 2568.231230][ T6595] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2568.351476][ T6608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6608 comm=syz.5.34357 [ 2568.383918][ T6612] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2568.469148][ T6623] overlayfs: failed to clone lowerpath [ 2568.478719][ T6623] overlayfs: failed to clone lowerpath [ 2568.487137][ T6623] overlayfs: failed to clone lowerpath [ 2568.495285][ T6623] overlayfs: failed to clone lowerpath [ 2568.503140][ T6623] overlayfs: failed to clone lowerpath [ 2568.511370][ T6623] overlayfs: failed to clone lowerpath [ 2568.519474][ T6623] overlayfs: failed to clone lowerpath [ 2568.677717][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34366'. [ 2568.872400][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34373'. [ 2568.964895][ T6669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6669 comm=syz.9.34376 [ 2569.079899][ T6676] tipc: New replicast peer: 255.255.255.255 [ 2569.086141][ T6676] tipc: Enabled bearer , priority 10 [ 2569.096797][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34378'. [ 2569.761198][ T6707] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 2570.072370][ T6734] cgroup2: Unknown parameter 'memory' [ 2570.143847][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.34401'. [ 2570.153027][ T6744] bridge_slave_1: left allmulticast mode [ 2570.158747][ T6744] bridge_slave_1: left promiscuous mode [ 2570.164483][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.172574][ T6744] bridge_slave_0: left allmulticast mode [ 2570.178495][ T6744] bridge_slave_0: left promiscuous mode [ 2570.184399][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 2570.554362][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2570.561677][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2570.568924][ T6747] bridge_slave_0: entered allmulticast mode [ 2570.575320][ T6747] bridge_slave_0: entered promiscuous mode [ 2570.583375][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2570.590627][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.597711][ T6747] bridge_slave_1: entered allmulticast mode [ 2570.604326][ T6747] bridge_slave_1: entered promiscuous mode [ 2570.693413][ T6759] veth1: entered allmulticast mode [ 2570.757704][ T6764] /dev/rnullb0: Can't lookup blockdev [ 2570.901902][ T6758] veth1: left allmulticast mode [ 2570.943252][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2570.950349][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2570.957636][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2570.964822][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2570.975942][T16655] tipc: Left network mode [ 2571.046052][ T6794] overlayfs: failed to clone upperpath [ 2571.048768][ T6795] overlayfs: failed to clone lowerpath [ 2571.057817][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2571.068705][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.091029][T16655] veth1_macvtap: left promiscuous mode [ 2571.096588][T16655] veth0_vlan: left promiscuous mode [ 2571.183622][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2571.190730][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2571.221159][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2571.228273][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2571.302897][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34419'. [ 2571.341910][ T6747] veth0_vlan: entered promiscuous mode [ 2571.393046][ T6747] veth1_macvtap: entered promiscuous mode [ 2571.520277][ T6814] sit0: entered promiscuous mode [ 2571.527024][ T6814] netlink: 'syz.9.34422': attribute type 1 has an invalid length. [ 2571.547836][ T6814] netlink: 9 bytes leftover after parsing attributes in process `syz.9.34422'. [ 2571.630252][ T36] kauditd_printk_skb: 731 callbacks suppressed [ 2571.630280][ T36] audit: type=1400 audit(2000000010.930:296461): avc: denied { create } for pid=6816 comm="syz.7.34402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2571.658235][ T36] audit: type=1400 audit(2000000010.939:296462): avc: denied { write } for pid=6816 comm="syz.7.34402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2571.683327][ T36] audit: type=1400 audit(2000000010.939:296463): avc: denied { write } for pid=6816 comm="syz.7.34402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2571.728987][ T36] audit: type=1400 audit(2000000010.939:296464): avc: denied { read } for pid=6816 comm="syz.7.34402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2571.751134][ T36] audit: type=1400 audit(2000000010.939:296465): avc: denied { write } for pid=6816 comm="syz.7.34402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2571.773550][ T36] audit: type=1326 audit(2000000010.939:296466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.34419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298298eec9 code=0x7ffc0000 [ 2571.808098][ T36] audit: type=1326 audit(2000000010.939:296467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.34419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298298eec9 code=0x7ffc0000 [ 2571.833317][ T36] audit: type=1326 audit(2000000010.939:296468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.34419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f298298d710 code=0x7ffc0000 [ 2571.848445][ T6825] netlink: 328 bytes leftover after parsing attributes in process `syz.5.34426'. [ 2571.865323][ T36] audit: type=1326 audit(2000000010.939:296469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.34419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298298eec9 code=0x7ffc0000 [ 2571.898937][ T36] audit: type=1326 audit(2000000010.939:296470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.3.34419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298298eec9 code=0x7ffc0000 [ 2572.019143][ T6835] overlayfs: failed to clone upperpath [ 2572.040624][ T6837] netlink: 44 bytes leftover after parsing attributes in process `syz.7.34430'. [ 2572.051179][ T6837] netlink: 51 bytes leftover after parsing attributes in process `syz.7.34430'. [ 2572.060558][ T6837] netlink: 'syz.7.34430': attribute type 4 has an invalid length. [ 2572.198996][ T6848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10242 sclass=netlink_route_socket pid=6848 comm=syz.5.34434 [ 2572.469007][ T6857] binder: Unknown parameter '' [ 2573.294060][ T6866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6866 comm=syz.5.34440 [ 2573.607111][ T6876] 9pnet_fd: Insufficient options for proto=fd [ 2573.682596][ T6878] VFS: Mount too revealing [ 2573.742162][ T6884] fuse: Bad value for 'fd' [ 2573.795815][ T6882] 9pnet_fd: Insufficient options for proto=fd [ 2573.973210][ T6894] __vm_enough_memory: pid: 6894, comm: syz.7.34451, bytes: 18014402804453376 not enough memory for the allocation [ 2574.237989][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2574.247308][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2574.591480][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34459'. [ 2574.608668][ T6920] /dev/rnullb0: Can't lookup blockdev [ 2574.612912][ T6922] netlink: 68 bytes leftover after parsing attributes in process `syz.9.34462'. [ 2575.697794][ T6977] fuse: Unknown parameter '#`' [ 2576.358949][ T7007] overlayfs: failed to clone upperpath [ 2576.396447][ T7009] 9pnet_fd: Insufficient options for proto=fd [ 2576.412295][ T7012] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2576.421297][ T7012] overlayfs: conflicting options: userxattr,verity=require [ 2576.961571][ T36] kauditd_printk_skb: 503 callbacks suppressed [ 2576.961591][ T36] audit: type=1400 audit(2000000015.930:296974): avc: denied { write } for pid=7030 comm="syz.9.34502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2576.998131][ T36] audit: type=1400 audit(2000000015.968:296975): avc: denied { create } for pid=7030 comm="syz.9.34502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2577.193599][ T36] audit: type=1400 audit(2000000016.146:296976): avc: denied { write } for pid=7030 comm="syz.9.34502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2577.238311][ T36] audit: type=1400 audit(2000000016.174:296977): avc: denied { create } for pid=7030 comm="syz.9.34502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2577.270095][ T7041] netlink: 'syz.5.34507': attribute type 4 has an invalid length. [ 2577.290135][ T36] audit: type=1400 audit(2000000016.183:296978): avc: denied { connect } for pid=7030 comm="syz.9.34502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2577.316377][ T36] audit: type=1400 audit(2000000016.183:296979): avc: denied { write } for pid=7030 comm="syz.9.34502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2577.337303][ T36] audit: type=1400 audit(2000000016.221:296980): avc: denied { create } for pid=7039 comm="syz.5.34507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2577.358578][ T36] audit: type=1400 audit(2000000016.221:296981): avc: denied { create } for pid=7040 comm="syz.3.34506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2577.379915][ T36] audit: type=1400 audit(2000000016.221:296982): avc: denied { write } for pid=7039 comm="syz.5.34507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2577.400718][ T36] audit: type=1400 audit(2000000016.230:296983): avc: denied { write } for pid=7040 comm="syz.3.34506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2577.477859][ T7054] tipc: Started in network mode [ 2577.482908][ T7054] tipc: Node identity ac14140f, cluster identity 4711 [ 2577.489980][ T7054] tipc: Enabling of bearer rejected, failed to enable media [ 2577.668673][ T7061] binder: Bad value for 'max' [ 2578.019094][ T7078] rust_binder: 57: no such ref 0 [ 2579.483792][ T7133] netlink: 'syz.5.34540': attribute type 4 has an invalid length. [ 2579.950764][ T7150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34546'. [ 2579.959881][ T7150] netlink: 'syz.3.34546': attribute type 6 has an invalid length. [ 2579.968050][ T7150] netlink: 'syz.3.34546': attribute type 5 has an invalid length. [ 2579.976009][ T7150] netlink: 'syz.3.34546': attribute type 4 has an invalid length. [ 2580.132927][ T7158] netlink: 'syz.3.34549': attribute type 3 has an invalid length. [ 2581.567925][ T7179] rust_binder: Write failure EFAULT in pid:63 [ 2581.616897][ T3303] tipc: Subscription rejected, illegal request [ 2582.410591][ T36] kauditd_printk_skb: 311 callbacks suppressed [ 2582.410663][ T36] audit: type=1400 audit(2000000021.043:297295): avc: denied { mounton } for pid=7210 comm="syz.9.34569" path="/395/file0" dev="tmpfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2582.424731][ T7211] fuse: Unknown parameter 'fd-0x0000000000000003' [ 2582.440283][ T36] audit: type=1400 audit(2000000021.043:297296): avc: denied { create } for pid=7208 comm="syz.3.34570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2582.466652][ T36] audit: type=1400 audit(2000000021.043:297297): avc: denied { create } for pid=7208 comm="syz.3.34570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2582.488940][ T36] audit: type=1400 audit(2000000021.043:297298): avc: denied { write } for pid=7208 comm="syz.3.34570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2582.509596][ T36] audit: type=1400 audit(2000000021.081:297299): avc: denied { create } for pid=7210 comm="syz.9.34569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2582.530524][ T36] audit: type=1400 audit(2000000021.109:297300): avc: denied { create } for pid=7210 comm="syz.9.34569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2582.593791][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.9.34572'. [ 2582.604808][ T36] audit: type=1400 audit(2000000021.231:297301): avc: denied { create } for pid=7218 comm="syz.9.34572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2582.624727][ T36] audit: type=1400 audit(2000000021.231:297302): avc: denied { connect } for pid=7218 comm="syz.9.34572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2582.646234][ T36] audit: type=1400 audit(2000000021.231:297303): avc: denied { read } for pid=7218 comm="syz.9.34572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2582.664441][ T7220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7220 comm=syz.9.34572 [ 2582.666275][ T36] audit: type=1400 audit(2000000021.278:297304): avc: denied { write } for pid=7218 comm="syz.9.34572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2584.010540][ T7258] /dev/rnullb0: Can't lookup blockdev [ 2584.057730][ T7263] 9pnet_fd: Insufficient options for proto=fd [ 2584.072188][ T7264] 9pnet_fd: Insufficient options for proto=fd [ 2584.208031][ T7276] netlink: 'syz.9.34592': attribute type 11 has an invalid length. [ 2584.427768][ T7282] tipc: Started in network mode [ 2584.432690][ T7282] tipc: Node identity 4, cluster identity 4711 [ 2584.439032][ T7282] tipc: Node number set to 4 [ 2585.097262][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34603'. [ 2585.183970][ T7318] overlayfs: failed to clone upperpath [ 2585.679290][ T7364] overlayfs: failed to clone upperpath [ 2586.135251][ T7404] netlink: 104 bytes leftover after parsing attributes in process `syz.3.34634'. [ 2586.685612][ T7424] 9pnet_fd: Insufficient options for proto=fd [ 2586.737376][ T7426] overlay: Bad value for 'metacopy' [ 2586.776201][ T7428] netlink: 'syz.9.34643': attribute type 1 has an invalid length. [ 2586.784152][ T7428] netlink: 1 bytes leftover after parsing attributes in process `syz.9.34643'. [ 2587.188997][ T7452] netlink: 'syz.9.34651': attribute type 16 has an invalid length. [ 2587.197002][ T7452] netlink: 64122 bytes leftover after parsing attributes in process `syz.9.34651'. [ 2587.549383][ T7478] fuse: Unknown parameter 'grouP_' [ 2587.821932][ T36] kauditd_printk_skb: 455 callbacks suppressed [ 2587.821953][ T36] audit: type=1400 audit(2000000026.119:297760): avc: denied { create } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2587.847987][ T36] audit: type=1400 audit(2000000026.128:297761): avc: denied { write } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2587.867609][ T36] audit: type=1400 audit(2000000026.128:297762): avc: denied { create } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2587.887486][ T36] audit: type=1400 audit(2000000026.128:297763): avc: denied { execmem } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2587.907343][ T36] audit: type=1400 audit(2000000026.128:297764): avc: denied { create } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2587.928229][ T36] audit: type=1400 audit(2000000026.128:297765): avc: denied { write } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2587.949034][ T36] audit: type=1400 audit(2000000026.128:297766): avc: denied { read } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2587.969794][ T36] audit: type=1400 audit(2000000026.128:297767): avc: denied { read } for pid=7493 comm="syz.5.34667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2587.998705][ T36] audit: type=1400 audit(2000000026.288:297768): avc: denied { execmem } for pid=7495 comm="syz.5.34668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2588.136644][ T36] audit: type=1400 audit(2000000026.419:297769): avc: denied { create } for pid=7504 comm="syz.5.34670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2588.345696][ T7520] rust_binder: Write failure EFAULT in pid:71 [ 2588.403803][ T7522] tc_dump_action: action bad kind [ 2588.762892][ T7551] netlink: 'syz.9.34686': attribute type 12 has an invalid length. [ 2588.812108][ T7557] futex_wake_op: syz.9.34689 tries to shift op by 144; fix this program [ 2589.174769][ T7567] netlink: 188 bytes leftover after parsing attributes in process `syz.5.34693'. [ 2589.683588][ T7592] netlink: 140 bytes leftover after parsing attributes in process `syz.5.34701'. [ 2589.697809][ T7578] overlayfs: failed to clone lowerpath [ 2589.789460][ T7595] netlink: 64 bytes leftover after parsing attributes in process `syz.9.34702'. [ 2589.802921][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.9.34702'. [ 2589.813198][ T7595] netlink: 59 bytes leftover after parsing attributes in process `syz.9.34702'. [ 2589.823828][ T7595] netlink: 59 bytes leftover after parsing attributes in process `syz.9.34702'. [ 2590.016418][ T7609] netlink: 88 bytes leftover after parsing attributes in process `syz.7.34708'. [ 2590.253757][ T3303] tipc: Subscription rejected, illegal request [ 2592.366005][ T7687] overlayfs: conflicting options: metacopy=off,verity=require [ 2592.523969][ T7698] netlink: 'syz.3.34742': attribute type 22 has an invalid length. [ 2592.598918][ T7702] VFS: Mount too revealing [ 2593.333347][ T36] kauditd_printk_skb: 615 callbacks suppressed [ 2593.333370][ T36] audit: type=1400 audit(2000000031.288:298385): avc: denied { read write } for pid=6747 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2593.404850][ T36] audit: type=1400 audit(2000000031.288:298386): avc: denied { read write open } for pid=6747 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2593.430461][ T36] audit: type=1400 audit(2000000031.288:298387): avc: denied { ioctl } for pid=6747 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2593.456680][ T36] audit: type=1400 audit(2000000031.317:298388): avc: denied { create } for pid=7724 comm="syz.7.34751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2593.477976][ T36] audit: type=1400 audit(2000000031.317:298389): avc: denied { write } for pid=7724 comm="syz.7.34751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2593.498865][ T36] audit: type=1400 audit(2000000031.317:298390): avc: denied { read } for pid=7724 comm="syz.7.34751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2593.519826][ T36] audit: type=1400 audit(2000000031.317:298391): avc: denied { read } for pid=7724 comm="syz.7.34751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2593.540786][ T36] audit: type=1400 audit(2000000031.317:298392): avc: denied { write } for pid=7724 comm="syz.7.34751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2593.563805][ T36] audit: type=1400 audit(2000000031.317:298393): avc: denied { mounton } for pid=7724 comm="syz.7.34751" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2593.588102][ T36] audit: type=1400 audit(2000000031.335:298394): avc: denied { read write } for pid=6747 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2593.787026][ T7739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7739 comm=syz.5.34756 [ 2594.402669][ T7782] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2595.266274][ T7816] netlink: 120 bytes leftover after parsing attributes in process `syz.3.34780'. [ 2595.608116][ T7827] IPv6: Can't replace route, no match found [ 2597.265169][ T7877] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 2597.305016][ T7881] overlay: Unknown parameter 'audit' [ 2597.411724][ T7884] rust_binder: Error while translating object. [ 2597.411775][ T7884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2597.418895][ T7884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 2597.441859][ T7888] overlayfs: failed to clone upperpath [ 2597.568063][ T7895] rust_binder: Error while translating object. [ 2597.568119][ T7895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2597.574343][ T7895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:117 [ 2597.885817][ T7901] rust_binder: Write failure EFAULT in pid:119 [ 2597.925627][ T7926] netlink: 124 bytes leftover after parsing attributes in process `syz.9.34819'. [ 2598.141884][ T7944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9635 sclass=netlink_route_socket pid=7944 comm=syz.9.34825 [ 2598.719706][ T36] kauditd_printk_skb: 328 callbacks suppressed [ 2598.719727][ T36] audit: type=1400 audit(2000000036.345:298723): avc: denied { read write } for pid=6747 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2598.752409][ T36] audit: type=1400 audit(2000000036.345:298724): avc: denied { read write open } for pid=6747 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2598.779954][ T36] audit: type=1400 audit(2000000036.345:298725): avc: denied { ioctl } for pid=6747 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2598.812988][ T36] audit: type=1400 audit(2000000036.402:298726): avc: denied { read } for pid=7953 comm="syz.7.34829" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 2598.852431][ T36] audit: type=1400 audit(2000000036.402:298727): avc: denied { read open } for pid=7953 comm="syz.7.34829" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 2598.883058][ T36] audit: type=1400 audit(2000000036.430:298728): avc: denied { ioctl } for pid=7953 comm="syz.7.34829" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 2598.926876][ T36] audit: type=1400 audit(2000000036.505:298729): avc: denied { create } for pid=7956 comm="syz.5.34830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2598.950043][ T36] audit: type=1400 audit(2000000036.505:298730): avc: denied { write } for pid=7956 comm="syz.5.34830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2598.973390][ T36] audit: type=1400 audit(2000000036.505:298731): avc: denied { nlmsg_write } for pid=7956 comm="syz.5.34830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2599.008970][ T36] audit: type=1400 audit(2000000036.542:298732): avc: denied { read write } for pid=6747 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2601.173694][ T8085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8085 comm=syz.9.34873 [ 2601.216920][ T8088] netlink: 'syz.9.34874': attribute type 4 has an invalid length. [ 2601.476436][ T8125] veth1: entered allmulticast mode [ 2601.512666][ T8127] fuse: Invalid rootmode [ 2602.361818][ T8122] veth1: left allmulticast mode [ 2602.549646][ T8158] netlink: 108 bytes leftover after parsing attributes in process `syz.9.34895'. [ 2603.868972][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.34911'. [ 2603.910016][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.9.34913'. [ 2603.924383][ T8214] 9pnet_fd: Insufficient options for proto=fd [ 2604.063084][ T36] kauditd_printk_skb: 280 callbacks suppressed [ 2604.063106][ T36] audit: type=1400 audit(2000000041.355:299013): avc: denied { create } for pid=8211 comm="syz.3.34912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2604.111074][ T36] audit: type=1400 audit(2000000041.384:299014): avc: denied { setopt } for pid=8211 comm="syz.3.34912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2604.131449][ T36] audit: type=1400 audit(2000000041.412:299015): avc: denied { create } for pid=8230 comm="syz.9.34919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2604.151374][ T36] audit: type=1400 audit(2000000041.412:299016): avc: denied { write } for pid=8230 comm="syz.9.34919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2604.172351][ T36] audit: type=1400 audit(2000000041.440:299017): avc: denied { execmem } for pid=8234 comm="syz.3.34920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2604.196822][ T36] audit: type=1400 audit(2000000041.440:299018): avc: denied { execute } for pid=8234 comm="syz.3.34920" path="/dev/rnullb0" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2604.232674][ T36] audit: type=1400 audit(2000000041.515:299019): avc: denied { create } for pid=8239 comm="syz.9.34922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2604.254831][ T36] audit: type=1400 audit(2000000041.534:299020): avc: denied { write } for pid=8239 comm="syz.9.34922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2604.278506][ T36] audit: type=1400 audit(2000000041.543:299021): avc: denied { execmem } for pid=8236 comm="syz.3.34921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2604.299167][ T36] audit: type=1400 audit(2000000041.543:299022): avc: denied { execute } for pid=8236 comm="syz.3.34921" path="/dev/rnullb0" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2604.380216][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.9.34924'. [ 2604.532005][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34926'. [ 2604.550679][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34926'. [ 2604.627272][ T8271] cgroup: Name too long [ 2605.208661][ T8279] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060000000000000000000018446744073709551615' [ 2605.614590][ T8324] devpts: called with bogus options [ 2605.943748][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.34954'. [ 2605.981105][ T8327] 9pnet_virtio: no channels available for device [ 2605.997140][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.34954'. [ 2606.007513][ T8341] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2606.149761][ T8346] /dev/rnullb0: Can't lookup blockdev [ 2606.315176][ T8350] incfs: Error accessing: ./file0. [ 2606.332859][ T8350] incfs: mount failed -20 [ 2606.946359][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.34964'. [ 2606.963584][ T8368] bridge_slave_1: left allmulticast mode [ 2606.969371][ T8368] bridge_slave_1: left promiscuous mode [ 2606.976349][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 2606.985277][ T8368] bridge_slave_0: left allmulticast mode [ 2606.991053][ T8368] bridge_slave_0: left promiscuous mode [ 2606.996757][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 2607.075137][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.34964'. [ 2607.165898][ T8382] random: crng reseeded on system resumption [ 2607.263714][ T8387] veth1: entered allmulticast mode [ 2607.328318][ T8389] veth1: left allmulticast mode [ 2607.452338][ T8391] fuse: Unknown parameter 'fd' [ 2608.231270][ T8423] __nla_validate_parse: 1 callbacks suppressed [ 2608.231294][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.7.34987'. [ 2608.254722][ T4870] Bluetooth: hci0: Frame reassembly failed (-84) [ 2608.725785][ T8435] netlink: 64 bytes leftover after parsing attributes in process `syz.3.34990'. [ 2608.955306][ T8443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1795 sclass=netlink_tcpdiag_socket pid=8443 comm=syz.3.34993 [ 2609.117846][ T8467] /dev/rnullb0: Can't lookup blockdev [ 2609.129653][ T8467] /dev/rnullb0: Can't lookup blockdev [ 2609.182533][ T8471] overlayfs: missing 'lowerdir' [ 2609.230904][ T8481] fuse: Unknown parameter 'KO [ 2617.334971][ T3303] tipc: Disabling bearer [ 2617.417513][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2617.424625][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2617.431917][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 2617.438987][ T8867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2617.476975][ T3303] tipc: Disabling bearer [ 2617.482391][ T3303] tipc: Left network mode [ 2617.500908][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2617.508367][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2617.524077][T16655] bridge0: port 1(bridge_slave_0) entered blocking state [ 2617.531194][T16655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2617.542486][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 2617.549597][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2617.644551][ T8867] veth0_vlan: entered promiscuous mode [ 2617.658973][ T3303] veth1_macvtap: left promiscuous mode [ 2617.664632][ T3303] veth0_vlan: left promiscuous mode [ 2617.743809][ T8867] veth1_macvtap: entered promiscuous mode [ 2617.910985][ T8897] netlink: 96 bytes leftover after parsing attributes in process `syz.3.35132'. [ 2617.921374][ T8897] rust_binder: Error in use_page_slow: ESRCH [ 2617.921410][ T8897] rust_binder: use_range failure ESRCH [ 2617.927605][ T8897] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2617.933094][ T8897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2617.941362][ T8897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 2618.275364][ T8910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2497789344 (159858518016 ns) > initial count (120546769792 ns). Using initial count to start timer. [ 2618.303995][ T8910] tipc: Started in network mode [ 2618.309518][ T8910] tipc: Node identity 925a7dc05882, cluster identity 4711 [ 2618.316827][ T8910] tipc: Enabled bearer , priority 0 [ 2618.458243][ T8910] tipc: Disabling bearer [ 2618.745412][ T8929] 9pnet_fd: Insufficient options for proto=fd [ 2618.781287][ T8931] tipc: Enabling of bearer rejected, failed to enable media [ 2619.319398][ T8960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2619.675914][ T8986] /dev/rnullb0: Can't open blockdev [ 2619.787790][ T8991] binder: Unknown parameter '0000000000000000000000000000000000000003' [ 2619.980124][T10181] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2620.066617][ T9007] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 2620.151389][T10181] usb 4-1: Using ep0 maxpacket: 8 [ 2620.158987][T10181] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 2620.169325][T10181] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2620.182331][T10181] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2620.193265][T10181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.203907][T10181] usb 4-1: Product: syz [ 2620.208110][T10181] usb 4-1: Manufacturer: и [ 2620.212653][T10181] usb 4-1: SerialNumber: syz [ 2620.657396][ T36] kauditd_printk_skb: 588 callbacks suppressed [ 2620.657416][ T36] audit: type=1400 audit(2000000056.929:300563): avc: denied { mounton } for pid=9011 comm="syz.9.35177" path="/545/file0" dev="tmpfs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2620.667745][ T8988] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 2620.686969][ T36] audit: type=1400 audit(2000000056.929:300564): avc: denied { mount } for pid=9011 comm="syz.9.35177" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2620.692282][T10181] usb 4-1: 0:2 : does not exist [ 2620.708496][ T36] audit: type=1400 audit(2000000056.939:300565): avc: denied { ioctl } for pid=8987 comm="syz.3.35166" path="/dev/binderfs/binder1" dev="binder" ino=58 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2620.723719][T10181] usb 4-1: USB disconnect, device number 44 [ 2620.748024][ T36] audit: type=1400 audit(2000000056.939:300566): avc: denied { set_context_mgr } for pid=8987 comm="syz.3.35166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2620.774183][ T36] audit: type=1400 audit(2000000056.939:300567): avc: denied { ioctl } for pid=8987 comm="syz.3.35166" path="/dev/binderfs/binder1" dev="binder" ino=58 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2620.799965][ T36] audit: type=1400 audit(2000000056.939:300568): avc: denied { call } for pid=8987 comm="syz.3.35166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2620.820553][ T36] audit: type=1400 audit(2000000056.958:300569): avc: denied { create } for pid=9011 comm="syz.9.35177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2620.846587][ T7906] udevd[7906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2620.978009][ T36] audit: type=1400 audit(2000000057.230:300570): avc: denied { create } for pid=9019 comm="syz.9.35179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2621.283181][ T36] audit: type=1400 audit(2000000057.521:300571): avc: denied { read write } for pid=8867 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2621.307718][ T36] audit: type=1400 audit(2000000057.521:300572): avc: denied { read write open } for pid=8867 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2621.496750][ T9033] __vm_enough_memory: pid: 9033, comm: syz.3.35182, bytes: 18014402804453376 not enough memory for the allocation [ 2621.509173][ T9032] __vm_enough_memory: pid: 9032, comm: syz.3.35182, bytes: 18014402804453376 not enough memory for the allocation [ 2621.678924][ T9047] syz.3.35189: attempt to access beyond end of device [ 2621.678924][ T9047] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2621.692313][ T9047] EXT4-fs (loop3): unable to read superblock [ 2621.934828][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35195'. [ 2622.357012][T28300] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2622.399372][ T9089] netlink: 44 bytes leftover after parsing attributes in process `syz.9.35205'. [ 2622.437380][ T9091] futex_wake_op: syz.9.35206 tries to shift op by -1; fix this program [ 2622.519233][T28300] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 2622.528387][T28300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.538018][T28300] usb 4-1: config 0 descriptor?? [ 2622.547001][T28300] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2622.555621][T28300] usb-storage 4-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 2622.555621][T28300] Please send a copy of this message to and [ 2622.767580][T28300] usb 4-1: USB disconnect, device number 45 [ 2623.045626][ T9097] netlink: 'syz.9.35208': attribute type 2 has an invalid length. [ 2623.117372][ T9102] 9pnet_fd: Insufficient options for proto=fd [ 2623.403378][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35218'. [ 2623.549116][ T9136] netlink: 80 bytes leftover after parsing attributes in process `syz.3.35221'. [ 2623.558683][ T9141] netlink: 80 bytes leftover after parsing attributes in process `syz.3.35221'. [ 2623.570747][ T9136] rust_binder: Error in use_page_slow: ESRCH [ 2623.570764][ T9136] rust_binder: use_range failure ESRCH [ 2623.576817][ T9136] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2623.582328][ T9136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2623.590444][ T9136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:74 [ 2623.798307][ T9153] fuse: Unknown parameter 'rootmodeO9G>' [ 2625.009333][ T9202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2625.009370][ T9202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 2625.306397][ T9238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2625.306437][ T9238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:98 [ 2625.842414][T10181] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2625.994480][ T36] kauditd_printk_skb: 582 callbacks suppressed [ 2625.994500][ T36] audit: type=1400 audit(2000000061.939:301155): avc: denied { create } for pid=9254 comm="syz.9.35259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2626.020787][ T36] audit: type=1400 audit(2000000061.939:301156): avc: denied { setopt } for pid=9254 comm="syz.9.35259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2626.040878][T10181] usb 4-1: Using ep0 maxpacket: 16 [ 2626.042321][ T36] audit: type=1400 audit(2000000061.939:301157): avc: denied { setopt } for pid=9254 comm="syz.9.35259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2626.049357][T10181] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 2626.067823][ T36] audit: type=1400 audit(2000000061.939:301158): avc: denied { ioctl } for pid=9254 comm="syz.9.35259" path="socket:[399845]" dev="sockfs" ino=399845 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2626.075131][T10181] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2626.102789][ T36] audit: type=1400 audit(2000000061.986:301159): avc: denied { ioctl } for pid=9247 comm="syz.3.35256" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2626.109942][T10181] usb 4-1: config 0 has no interface number 0 [ 2626.140828][ T36] audit: type=1400 audit(2000000061.986:301160): avc: denied { ioctl } for pid=9247 comm="syz.3.35256" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2626.143295][T10181] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.1e [ 2626.168100][ T36] audit: type=1400 audit(2000000061.986:301161): avc: denied { ioctl } for pid=9247 comm="syz.3.35256" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2626.183474][T10181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.201070][ T36] audit: type=1400 audit(2000000061.986:301162): avc: denied { ioctl } for pid=9247 comm="syz.3.35256" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2626.213047][T10181] usb 4-1: config 0 descriptor?? [ 2626.235557][ T36] audit: type=1400 audit(2000000061.986:301163): avc: denied { ioctl } for pid=9247 comm="syz.3.35256" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2626.271012][T10181] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 2626.277948][T10181] usb 4-1: No valid video chain found. [ 2626.295694][ T36] audit: type=1400 audit(2000000062.015:301164): avc: denied { ioctl } for pid=9247 comm="syz.3.35256" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2626.345582][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.35261'. [ 2627.248411][ T9288] binder: Unknown parameter 'fscontext?}' [ 2628.721287][T12323] usb 4-1: USB disconnect, device number 46 [ 2628.812204][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35286'. [ 2628.839482][ T9331] rust_binder: Read failure Err(EAGAIN) in pid:114 [ 2628.839856][ T9331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 2628.855783][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35287'. [ 2629.101411][ T9357] tipc: Enabling of bearer rejected, failed to enable media [ 2629.434412][T12323] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 2629.597234][T12323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2629.608456][T12323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2629.621626][T12323] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2629.630751][T12323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.645499][T12323] usb 4-1: config 0 descriptor?? [ 2629.652194][ T9360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2629.663337][T12323] usbhid 4-1:0.0: can't add hid device: -22 [ 2629.669416][T12323] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 2629.878048][ T3470] usb 4-1: USB disconnect, device number 47 [ 2630.090002][ T9404] veth1: entered allmulticast mode [ 2630.974899][ T9403] veth1: left allmulticast mode [ 2631.357789][ T36] kauditd_printk_skb: 384 callbacks suppressed [ 2631.357811][ T36] audit: type=1400 audit(2000000066.970:301549): avc: denied { read } for pid=9427 comm="syz.7.35318" name="binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.366809][ T9430] rust_binder: Error while translating object. [ 2631.406582][ T9430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2631.412835][ T9430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 2631.433868][ T9431] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 2631.438226][ T36] audit: type=1400 audit(2000000066.970:301550): avc: denied { read open } for pid=9427 comm="syz.7.35318" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.456248][ T9431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:252 [ 2631.482789][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35321'. [ 2631.508898][ T36] audit: type=1400 audit(2000000066.970:301551): avc: denied { read } for pid=9427 comm="syz.7.35318" name="binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.532740][ T36] audit: type=1400 audit(2000000066.970:301552): avc: denied { read open } for pid=9427 comm="syz.7.35318" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.567305][ T36] audit: type=1400 audit(2000000066.970:301553): avc: denied { ioctl } for pid=9427 comm="syz.7.35318" path="/dev/binderfs/binder0" dev="binder" ino=54 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.601589][ T36] audit: type=1400 audit(2000000066.980:301554): avc: denied { set_context_mgr } for pid=9427 comm="syz.7.35318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2631.626556][ T36] audit: type=1400 audit(2000000066.980:301555): avc: denied { map } for pid=9427 comm="syz.7.35318" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.651560][ T36] audit: type=1400 audit(2000000066.980:301556): avc: denied { read } for pid=9427 comm="syz.7.35318" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.676237][ T36] audit: type=1400 audit(2000000066.980:301557): avc: denied { ioctl } for pid=9427 comm="syz.7.35318" path="/dev/binderfs/binder0" dev="binder" ino=54 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2631.702173][ T36] audit: type=1400 audit(2000000066.980:301558): avc: denied { call } for pid=9427 comm="syz.7.35318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2632.600146][T28300] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2632.761496][T28300] usb 4-1: not running at top speed; connect to a high speed hub [ 2632.771691][T28300] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2632.787200][T28300] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2632.799284][T28300] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.40 [ 2632.809763][T28300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2632.818650][T28300] usb 4-1: Product: 鵹뚛Ⓗᑀ䜺⯤멝ꐼ硇魨柾㨐⮩ᡈ儇》콸浫㳚閈큕꽶祓臾秦錴흷箻毴寮ᓐ岌⨃䕾얛훜縤抈䆚ᕘʖ矤镠뽢᪢镲ꅘ㶇脅俎㖪ފ㛞끍姲⓼缇ꊟ螣ꘊ [ 2632.840186][T28300] usb 4-1: Manufacturer: ࠝ [ 2632.846575][T28300] usb 4-1: SerialNumber: 雇林詐썬䌬䫧ﾎ杂ᄹ찀䈪᙭䪽ᶣ럽格已ꗯ絈籠⦳浛亰བ瀉糜饁 [ 2632.867342][ T9458] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2633.116246][ T9472] cgroup: noprefix used incorrectly [ 2633.318194][T28300] usbhid 4-1:1.0: can't add hid device: -71 [ 2633.330411][T28300] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2633.345894][T28300] usb 4-1: USB disconnect, device number 48 [ 2634.436536][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.443967][ T9499] bridge0: port 1(bridge_slave_0) entered disabled state [ 2634.451393][ T9499] bridge_slave_0: entered allmulticast mode [ 2634.458095][ T9499] bridge_slave_0: entered promiscuous mode [ 2634.466111][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.473272][ T9499] bridge0: port 2(bridge_slave_1) entered disabled state [ 2634.480744][ T9499] bridge_slave_1: entered allmulticast mode [ 2634.487381][ T9499] bridge_slave_1: entered promiscuous mode [ 2634.608222][ T9499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2634.615340][ T9499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2634.622675][ T9499] bridge0: port 1(bridge_slave_0) entered blocking state [ 2634.629780][ T9499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2634.777825][ T9517] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 2634.871759][ T9519] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 2634.894669][ T9519] rust_binder: Write failure EINVAL in pid:164 [ 2634.914814][ T9521] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2634.969028][ T9521] overlayfs: missing 'lowerdir' [ 2635.039100][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 2635.052521][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 2635.074900][ T3290] veth1_macvtap: left promiscuous mode [ 2635.081304][ T9527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2635.085466][ T9527] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 2635.091505][ T3290] veth0_vlan: left promiscuous mode [ 2635.171731][ T9535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2635.172626][ T9535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2635.179183][ T9535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:168 [ 2635.261295][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.277728][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2635.299423][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 2635.306509][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2635.403563][ T9542] can0: slcan on ptm0. [ 2635.488580][ T9541] can0 (unregistered): slcan off ptm0. [ 2635.524121][ T9499] veth0_vlan: entered promiscuous mode [ 2635.622599][ T9499] veth1_macvtap: entered promiscuous mode [ 2635.918578][ T9568] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 2636.082236][ T9571] netlink: 80 bytes leftover after parsing attributes in process `syz.9.35357'. [ 2636.148360][ T9575] x_tables: unsorted entry at hook 2 [ 2636.161178][ T9577] netlink: 'syz.5.35359': attribute type 30 has an invalid length. [ 2636.311838][ T9585] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2636.311866][ T9585] rust_binder: Read failure Err(EFAULT) in pid:181 [ 2636.704154][ T36] kauditd_printk_skb: 1655 callbacks suppressed [ 2636.704177][ T36] audit: type=1400 audit(2000000071.990:303214): avc: denied { search } for pid=9604 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2636.778777][ T36] audit: type=1400 audit(2000000071.990:303215): avc: denied { read } for pid=9604 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2636.819644][ T36] audit: type=1400 audit(2000000071.990:303216): avc: denied { read open } for pid=9604 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2636.904597][ T9499] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2636.909638][ T36] audit: type=1400 audit(2000000071.990:303217): avc: denied { getattr } for pid=9604 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2636.920222][ T9499] audit: audit_lost=504 audit_rate_limit=0 audit_backlog_limit=64 [ 2636.955156][ T9609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2636.961050][ T36] audit: type=1400 audit(2000000071.999:303218): avc: denied { search } for pid=9586 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2636.961862][ T9609] audit: audit_lost=505 audit_rate_limit=0 audit_backlog_limit=64 [ 2636.992196][ T9499] audit: backlog limit exceeded [ 2637.035388][ T9611] rust_binder: 8: no such ref 2 [ 2637.385829][T12323] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2637.521610][ T9620] veth1: entered allmulticast mode [ 2637.527461][ T9619] veth1: left allmulticast mode [ 2637.545706][T12323] usb 10-1: Using ep0 maxpacket: 32 [ 2637.555129][T12323] usb 10-1: config 3 has an invalid interface number: 15 but max is 2 [ 2637.563499][T12323] usb 10-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2637.573771][T12323] usb 10-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 2637.582781][T12323] usb 10-1: config 3 has no interface number 0 [ 2637.589069][T12323] usb 10-1: config 3 interface 15 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2637.602345][T12323] usb 10-1: config 3 interface 15 has no altsetting 0 [ 2637.617432][T12323] usb 10-1: New USB device found, idVendor=17ef, idProduct=9971, bcdDevice=1f.2f [ 2637.627119][T12323] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2637.637248][T12323] usb 10-1: Product: ᐇ [ 2637.642270][T12323] usb 10-1: Manufacturer: 詭ƹ穈䎠핹ˋ㗋黓臤㏑޹闾朢ꥳ牊쟗ﭱ᫪쳫⚨ગ䙚戙፫伊軉₾餫咛ﻏ눮㆕ᰫủ酷伇谝礰蔚⥢䷙焦䣛ꯀ稊ݵ늴⦁녹쀂嶽쉻úﺸ∸㝤ꑬ䗎䟧痭묜贷쿩屭遬݇笃睆⤽঻鎑㰀鎉䊕⯾╌驩樘镯⭵䬉愇ᴥ諈鸺耱淙᪜䡈뻉 [ 2637.673017][T12323] usb 10-1: SerialNumber: ࠬ [ 2638.149351][T12323] usb 10-1: USB disconnect, device number 75 [ 2638.222981][ T9644] netlink: 'syz.7.35377': attribute type 4 has an invalid length. [ 2638.254700][ T9644] netlink: 'syz.7.35377': attribute type 4 has an invalid length. [ 2638.272292][ T9644] netlink: 'syz.7.35377': attribute type 4 has an invalid length. [ 2638.284798][ T9645] rust_binder: Error while translating object. [ 2638.284832][ T9645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2638.291113][ T9645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:263 [ 2639.815293][ T9676] rust_binder: Error while translating object. [ 2639.835252][ T9676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2639.841536][ T9676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 2640.149901][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35390'. [ 2640.288218][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35390'. [ 2640.293360][ T9697] netlink: 44 bytes leftover after parsing attributes in process `syz.9.35392'. [ 2640.297359][ T9689] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2640.487984][ T9710] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 2640.501622][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.502427][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.511922][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.530518][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.550348][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.561174][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.575863][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.591486][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.609198][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.639888][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.649471][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.656263][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.663114][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.671023][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.679606][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.686405][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.695878][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.705739][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.713609][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.720608][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.728634][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.743289][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.771570][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.785909][ T377] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2640.800508][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.800846][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.814963][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.823708][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.830520][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.837331][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.844116][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.850940][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.857743][ T9708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2640.984715][ T377] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2641.000545][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.008891][ T377] usb 4-1: Product: syz [ 2641.013249][ T377] usb 4-1: Manufacturer: syz [ 2641.017941][ T377] usb 4-1: SerialNumber: syz [ 2642.049243][ T36] kauditd_printk_skb: 930 callbacks suppressed [ 2642.049263][ T36] audit: type=1400 audit(2000000077.000:304145): avc: denied { read write } for pid=9499 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2642.101337][ T36] audit: type=1400 audit(2000000077.028:304146): avc: denied { read write open } for pid=9499 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2642.116991][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35417'. [ 2642.130074][ T36] audit: type=1400 audit(2000000077.028:304147): avc: denied { ioctl } for pid=9499 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2642.162505][ T9762] rust_binder: Write failure EFAULT in pid:44 [ 2642.163926][ T9761] netlink: 31 bytes leftover after parsing attributes in process `syz.5.35417'. [ 2642.190412][ T9761] netlink: 'syz.5.35417': attribute type 3 has an invalid length. [ 2642.220376][ T36] audit: type=1400 audit(2000000077.046:304148): avc: denied { create } for pid=9759 comm="syz.5.35417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2642.249184][ T9761] netlink: 'syz.5.35417': attribute type 2 has an invalid length. [ 2642.268694][ T36] audit: type=1400 audit(2000000077.056:304149): avc: denied { ioctl } for pid=9759 comm="syz.5.35417" path="socket:[402031]" dev="sockfs" ino=402031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2642.289420][ T9761] netlink: 31 bytes leftover after parsing attributes in process `syz.5.35417'. [ 2642.304425][ T36] audit: type=1400 audit(2000000077.056:304150): avc: denied { create } for pid=9759 comm="syz.5.35417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2642.321700][ T9769] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2642.327073][ T36] audit: type=1400 audit(2000000077.056:304151): avc: denied { write } for pid=9759 comm="syz.5.35417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2642.332708][ T9769] rust_binder: Write failure EINVAL in pid:49 [ 2642.353646][ T36] audit: type=1400 audit(2000000077.084:304152): avc: denied { read } for pid=9760 comm="syz.9.35416" name="binder1" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2642.383081][ T36] audit: type=1400 audit(2000000077.084:304153): avc: denied { read open } for pid=9760 comm="syz.9.35416" path="/dev/binderfs/binder1" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2642.419007][ T36] audit: type=1400 audit(2000000077.103:304154): avc: denied { map } for pid=9760 comm="syz.9.35416" path="/dev/binderfs/binder1" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2642.535985][ T9779] overlayfs: failed to clone upperpath [ 2642.693823][T28300] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2642.771532][ T9799] netlink: 'syz.5.35431': attribute type 12 has an invalid length. [ 2642.865186][T28300] usb 10-1: too many configurations: 186, using maximum allowed: 8 [ 2642.878992][T28300] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2642.887216][T28300] usb 10-1: can't read configurations, error -61 [ 2643.027592][T28300] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2643.231252][T28300] usb 10-1: too many configurations: 186, using maximum allowed: 8 [ 2643.248615][T28300] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2643.269386][T28300] usb 10-1: can't read configurations, error -61 [ 2643.290739][T28300] usb usb10-port1: attempt power cycle [ 2643.380121][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.7.35440'. [ 2643.653075][T28300] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2643.691732][T28300] usb 10-1: too many configurations: 186, using maximum allowed: 8 [ 2643.692784][T12323] usb 4-1: USB disconnect, device number 49 [ 2643.719815][T28300] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2643.734758][T28300] usb 10-1: can't read configurations, error -61 [ 2643.898249][T28300] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 2643.932058][T28300] usb 10-1: too many configurations: 186, using maximum allowed: 8 [ 2643.951912][T28300] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 2643.960952][T28300] usb 10-1: can't read configurations, error -61 [ 2643.973255][T28300] usb usb10-port1: unable to enumerate USB device [ 2644.206814][ T9852] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 2644.432617][ T9853] rust_binder: Write failure EFAULT in pid:289 [ 2644.440998][ T9854] rust_binder: Write failure EFAULT in pid:289 [ 2644.518007][ T9861] rust_binder: Write failure EINVAL in pid:222 [ 2644.869973][ T9884] 9pnet: p9_errstr2errno: server reported unknown error [ 2645.054944][ T9864] netlink: 72 bytes leftover after parsing attributes in process `syz.5.35452'. [ 2645.187942][T12323] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2645.337170][T12323] usb 4-1: device descriptor read/64, error -71 [ 2645.592970][T12323] usb 4-1: device descriptor read/64, error -71 [ 2645.837367][ T9902] binder: Bad value for 'max' [ 2645.850091][ T9903] binder: Bad value for 'max' [ 2645.859450][T12323] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 2646.051312][T12323] usb 4-1: device descriptor read/64, error -71 [ 2646.200540][T28300] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2646.307114][T12323] usb 4-1: device descriptor read/64, error -71 [ 2646.363012][T28300] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2646.373125][T28300] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2646.386326][T28300] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2646.395674][T28300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.404449][T28300] usb 10-1: Product: syz [ 2646.408730][T28300] usb 10-1: Manufacturer: syz [ 2646.413479][T28300] usb 10-1: SerialNumber: syz [ 2646.420142][T28300] usb 10-1: config 0 descriptor?? [ 2646.429154][ T9910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2646.435480][T12323] usb usb4-port1: attempt power cycle [ 2646.437053][ T9910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2646.666679][ T9910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2646.674427][ T9910] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2646.797438][T12323] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 2646.821432][T12323] usb 4-1: device descriptor read/8, error -71 [ 2646.960328][T12323] usb 4-1: device descriptor read/8, error -71 [ 2647.111491][T28300] Error reading MAC address [ 2647.184758][ T9937] rust_binder: Error while translating object. [ 2647.184806][ T9937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2647.191057][ T9937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 2647.213112][T12323] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2647.248170][T12323] usb 4-1: device descriptor read/8, error -71 [ 2647.384331][ T36] kauditd_printk_skb: 541 callbacks suppressed [ 2647.384351][ T36] audit: type=1400 audit(2000000082.010:304696): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.418340][ T36] audit: type=1400 audit(2000000082.010:304697): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.419860][T12323] usb 4-1: device descriptor read/8, error -71 [ 2647.445509][ T36] audit: type=1400 audit(2000000082.038:304698): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.476387][ T36] audit: type=1400 audit(2000000082.038:304699): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.502505][ T36] audit: type=1400 audit(2000000082.038:304700): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.527732][ T36] audit: type=1400 audit(2000000082.066:304701): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.552898][ T36] audit: type=1400 audit(2000000082.113:304702): avc: denied { execmem } for pid=9953 comm="syz.5.35478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2647.586592][ T36] audit: type=1400 audit(2000000082.197:304703): avc: denied { ioctl } for pid=9883 comm="syz.3.35458" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2647.586619][T12323] usb usb4-port1: unable to enumerate USB device [ 2647.722639][ T36] audit: type=1400 audit(2000000082.319:304704): avc: denied { create } for pid=9962 comm="syz.5.35481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2647.742597][ T36] audit: type=1400 audit(2000000082.329:304705): avc: denied { create } for pid=9962 comm="syz.5.35481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2647.839445][ T9967] overlayfs: failed to clone upperpath [ 2648.166733][ T9973] 9pnet_fd: Insufficient options for proto=fd [ 2648.386972][ T9981] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2648.737283][T28300] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2648.808295][ T9993] overlayfs: failed to clone lowerpath [ 2648.897162][T28300] usb 4-1: Using ep0 maxpacket: 8 [ 2648.905294][T28300] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 2648.914374][T28300] usb 4-1: config 250 has an invalid interface number: 0 but max is -1 [ 2648.922893][T28300] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2648.933975][T28300] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2648.947121][T28300] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2648.957554][T28300] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2648.966693][T28300] usb 4-1: Product: syz [ 2648.971014][T28300] usb 4-1: SerialNumber: syz [ 2648.981315][T28300] hub 4-1:250.0: bad descriptor, ignoring hub [ 2648.993092][T28300] hub 4-1:250.0: probe with driver hub failed with error -5 [ 2649.164415][ T377] usb 10-1: USB disconnect, device number 80 [ 2649.472919][T10181] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 2649.632622][T28300] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2649.643470][T10181] usb 4-1: device firmware changed [ 2649.648779][T10181] usb 4-1: USB disconnect, device number 54 [ 2649.794939][T28300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2649.806043][T28300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2649.815899][T28300] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2649.828953][T28300] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2649.838343][T28300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.848024][T28300] usb 10-1: config 0 descriptor?? [ 2649.973720][T10181] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2650.133565][T10181] usb 4-1: Using ep0 maxpacket: 8 [ 2650.141052][T10181] usb 4-1: config 0 has no interfaces? [ 2650.149738][T10181] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2650.159313][T10181] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2650.169373][T10181] usb 4-1: Product: syz [ 2650.173561][T10181] usb 4-1: SerialNumber: syz [ 2650.181540][T10181] usb 4-1: config 0 descriptor?? [ 2650.290181][T28300] plantronics 0003:047F:FFFF.0078: No inputs registered, leaving [ 2650.304775][T28300] plantronics 0003:047F:FFFF.0078: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2650.408081][T28300] usb 4-1: USB disconnect, device number 55 [ 2650.543224][ T4870] veth1_macvtap: left promiscuous mode [ 2650.550249][ T4870] veth0_vlan: left promiscuous mode [ 2650.763177][T28300] usb 10-1: USB disconnect, device number 81 [ 2651.220767][T12323] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2651.380626][T12323] usb 4-1: Using ep0 maxpacket: 8 [ 2651.403999][T12323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2651.417612][T12323] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 2651.428328][T12323] usb 4-1: config 6 has no interface number 0 [ 2651.435179][T12323] usb 4-1: config 6 interface 248 has no altsetting 0 [ 2651.454123][T12323] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2651.463291][T12323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.472820][T12323] usb 4-1: Product: syz [ 2651.478012][T12323] usb 4-1: Manufacturer: syz [ 2651.482651][T12323] usb 4-1: SerialNumber: syz [ 2651.725237][T12323] ums-karma 4-1:6.248: USB Mass Storage device detected [ 2651.792086][T12323] usb 4-1: USB disconnect, device number 56 [ 2652.898626][ T36] kauditd_printk_skb: 725 callbacks suppressed [ 2652.898647][ T36] audit: type=1400 audit(2000000087.179:305431): avc: denied { read append } for pid=10107 comm="syz.9.35530" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 2652.952058][ T36] audit: type=1400 audit(2000000087.179:305432): avc: denied { read append open } for pid=10107 comm="syz.9.35530" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 2652.982006][ T36] audit: type=1400 audit(2000000087.179:305433): avc: denied { ioctl } for pid=10107 comm="syz.9.35530" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 2653.012800][ T36] audit: type=1400 audit(2000000087.188:305434): avc: denied { read write } for pid=10107 comm="syz.9.35530" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.038276][ T36] audit: type=1400 audit(2000000087.188:305435): avc: denied { read write open } for pid=10107 comm="syz.9.35530" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.063880][ T36] audit: type=1400 audit(2000000087.188:305436): avc: denied { ioctl } for pid=10107 comm="syz.9.35530" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.089952][ T36] audit: type=1400 audit(2000000087.188:305437): avc: denied { ioctl } for pid=10107 comm="syz.9.35530" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.116695][ T36] audit: type=1400 audit(2000000087.188:305438): avc: denied { ioctl } for pid=10107 comm="syz.9.35530" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.142075][ T36] audit: type=1400 audit(2000000087.188:305439): avc: denied { ioctl } for pid=10107 comm="syz.9.35530" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.167434][ T36] audit: type=1400 audit(2000000087.310:305440): avc: denied { ioctl } for pid=10107 comm="syz.9.35530" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2653.171306][T28300] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2653.352506][T28300] usb 10-1: Using ep0 maxpacket: 8 [ 2653.360309][T28300] usb 10-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 16 [ 2653.370465][T28300] usb 10-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2653.380620][T28300] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2653.391811][T28300] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2653.401102][T28300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2653.409495][T28300] usb 10-1: Product: syz [ 2653.413932][T28300] usb 10-1: Manufacturer: 俗苺漆ᓇꔛ㥨幀빠枤䕀墀︐裿䷌࿟䄲諟빢꾮═⒩臈륀옖ꗡ蚧맒釠꨺觌됷⇌쳦ꀵ㱼腽ਧ蘾ਿ莤鑱藽䙊鯻ఁ㷝蜌許緂딟녳땒젹⥨句㜁 [ 2653.435424][T28300] usb 10-1: SerialNumber: syz [ 2653.445281][T10109] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2653.453059][T10109] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2653.683737][T28300] usblp0: Disabling reads from problematic bidirectional printer [ 2653.702249][T28300] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 6 proto 3 vid 0x03F0 pid 0x0004 [ 2653.717490][T28300] usb 10-1: USB disconnect, device number 82 [ 2653.726725][T28300] usblp0: removed [ 2655.387281][T10163] veth1: entered allmulticast mode [ 2655.484287][T28300] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2655.654795][T28300] usb 10-1: Using ep0 maxpacket: 8 [ 2655.663530][T28300] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2655.674669][T28300] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 2655.683031][T28300] usb 10-1: config 6 has no interface number 0 [ 2655.689307][T28300] usb 10-1: config 6 interface 248 has no altsetting 0 [ 2655.699692][T28300] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2655.708937][T28300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.717096][T28300] usb 10-1: Product: syz [ 2655.721401][T28300] usb 10-1: Manufacturer: syz [ 2655.726128][T28300] usb 10-1: SerialNumber: syz [ 2655.832948][T10166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:268 [ 2655.952979][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2655.977994][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2655.994883][T28300] ums-karma 10-1:6.248: USB Mass Storage device detected [ 2656.064292][T28300] usb 10-1: USB disconnect, device number 83 [ 2656.112368][T10183] netlink: 'syz.5.35553': attribute type 46 has an invalid length. [ 2656.145090][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2656.270054][T10161] veth1: left allmulticast mode [ 2656.326331][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 2656.335673][ T10] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 2656.345502][ T10] usb 4-1: config 250 has an invalid interface number: 0 but max is -1 [ 2656.354499][ T10] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2656.365588][ T10] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2656.380218][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2656.394178][ T10] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2656.404570][ T10] usb 4-1: Product: syz [ 2656.408929][ T10] usb 4-1: SerialNumber: syz [ 2656.423624][ T10] hub 4-1:250.0: bad descriptor, ignoring hub [ 2656.432206][ T10] hub 4-1:250.0: probe with driver hub failed with error -5 [ 2656.751087][T10207] rust_binder: Write failure EINVAL in pid:126 [ 2656.912804][T19536] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 2657.015662][T10216] netlink: 'syz.9.35563': attribute type 46 has an invalid length. [ 2657.095357][T19536] usb 4-1: device firmware changed [ 2657.100870][T19536] usb 4-1: USB disconnect, device number 57 [ 2657.413565][T19536] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2657.573347][T19536] usb 4-1: Using ep0 maxpacket: 8 [ 2657.580946][T19536] usb 4-1: config 0 has no interfaces? [ 2657.589624][T19536] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2657.599397][T19536] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2657.607746][T19536] usb 4-1: Product: syz [ 2657.611941][T19536] usb 4-1: SerialNumber: syz [ 2657.618530][T19536] usb 4-1: config 0 descriptor?? [ 2657.841483][T28300] usb 4-1: USB disconnect, device number 58 [ 2658.387656][ T36] kauditd_printk_skb: 412 callbacks suppressed [ 2658.387693][ T36] audit: type=1400 audit(2000000092.330:305853): avc: denied { read write } for pid=8867 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2658.417111][T10244] can0: slcan on ttyS3. [ 2658.420276][ T36] audit: type=1400 audit(2000000092.330:305854): avc: denied { read write open } for pid=8867 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2658.458985][T10245] rust_binder: Write failure EFAULT in pid:272 [ 2658.466987][ T36] audit: type=1400 audit(2000000092.330:305855): avc: denied { ioctl } for pid=8867 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2658.513597][T10243] can0 (unregistered): slcan off ttyS3. [ 2658.581463][ T36] audit: type=1400 audit(2000000092.367:305856): avc: denied { read } for pid=10243 comm="syz.3.35571" name="binder1" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2658.628546][ T36] audit: type=1400 audit(2000000092.367:305857): avc: denied { read open } for pid=10243 comm="syz.3.35571" path="/dev/binderfs/binder1" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2658.675249][ T36] audit: type=1400 audit(2000000092.377:305858): avc: denied { map } for pid=10243 comm="syz.3.35571" path="/dev/binderfs/binder1" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2658.731512][T10261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.752063][T10262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2658.752617][T10263] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2658.765413][ T36] audit: type=1400 audit(2000000092.377:305859): avc: denied { read } for pid=10243 comm="syz.3.35571" path="/dev/binderfs/binder1" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2658.767145][T10262] audit: audit_lost=507 audit_rate_limit=0 audit_backlog_limit=64 [ 2658.808670][T10261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.837633][T10261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.850670][T10261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2659.242132][T10293] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 2659.242161][T10293] rust_binder: Error while translating object. [ 2659.252520][T10293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2659.259554][T10293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 2659.355051][T10293] /dev/rnullb0: Can't open blockdev [ 2659.415579][T10304] __vm_enough_memory: pid: 10304, comm: syz.3.35586, bytes: 18014402804453376 not enough memory for the allocation [ 2659.833115][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35591'. [ 2659.842125][T10333] bridge_slave_1: left allmulticast mode [ 2659.847877][T10333] bridge_slave_1: left promiscuous mode [ 2659.853710][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 2659.861828][T10333] bridge_slave_0: left allmulticast mode [ 2659.867611][T10333] bridge_slave_0: left promiscuous mode [ 2659.873356][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 2659.929873][T10338] netlink: 188 bytes leftover after parsing attributes in process `syz.5.35592'. [ 2659.970691][T10340] lo: entered allmulticast mode [ 2659.976559][T10340] lo: left allmulticast mode [ 2660.050065][T10344] kvm: user requested TSC rate below hardware speed [ 2660.094086][T10344] binder: Binderfs stats mode cannot be changed during a remount [ 2660.186608][T10360] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 160, size: 249) [ 2660.186637][T10360] rust_binder: Error while translating object. [ 2660.198218][T10360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2660.204511][T10360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 2660.368279][T10366] rust_binder: Write failure EFAULT in pid:327 [ 2660.390630][T10368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2660.407821][T10368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:140 [ 2661.282590][T10181] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 2661.445016][T10181] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2661.456116][T10181] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2661.470122][T10181] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2661.483217][T10181] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2661.492525][T10181] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2661.502661][T10181] usb 10-1: config 0 descriptor?? [ 2661.677185][ T3470] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2661.836899][ T3470] usb 4-1: Using ep0 maxpacket: 8 [ 2661.844634][ T3470] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 2661.853139][ T3470] usb 4-1: config 250 has an invalid interface number: 4 but max is -1 [ 2661.861643][ T3470] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 2661.872099][ T3470] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2661.883322][ T3470] usb 4-1: config 250 has no interface number 0 [ 2661.892794][ T3470] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2661.901947][ T3470] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2661.910222][ T3470] usb 4-1: Product: syz [ 2661.914443][ T3470] usb 4-1: SerialNumber: syz [ 2661.923530][ T3470] hub 4-1:250.4: bad descriptor, ignoring hub [ 2661.929742][ T3470] hub 4-1:250.4: probe with driver hub failed with error -5 [ 2661.968714][T10181] usbhid 10-1:0.0: can't add hid device: -71 [ 2661.974808][T10181] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2662.000633][T10181] usb 10-1: USB disconnect, device number 84 [ 2662.081698][T10426] rust_binder: Got transaction with invalid offset. [ 2662.081746][T10426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2662.100651][T10426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 2662.263281][ T10] usb 4-1: USB disconnect, device number 60 [ 2662.582544][T10428] __vm_enough_memory: pid: 10428, comm: syz.9.35623, bytes: 18014402804453376 not enough memory for the allocation [ 2663.456993][ T3470] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 2663.606193][ T3470] usb 10-1: device descriptor read/64, error -71 [ 2663.616870][T19536] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2663.724289][ T36] kauditd_printk_skb: 2639 callbacks suppressed [ 2663.724308][ T36] audit: type=1400 audit(2000000097.340:308487): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.756535][ T36] audit: type=1400 audit(2000000097.340:308488): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.782071][ T36] audit: type=1400 audit(2000000097.368:308489): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.807410][ T36] audit: type=1400 audit(2000000097.387:308490): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.832874][ T36] audit: type=1400 audit(2000000097.415:308491): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.858322][ T36] audit: type=1400 audit(2000000097.443:308492): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.883658][ T36] audit: type=1400 audit(2000000097.443:308493): avc: denied { ioctl } for pid=10461 comm="syz.9.35637" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.909445][ T36] audit: type=1400 audit(2000000097.443:308494): avc: denied { ioctl } for pid=10469 comm="syz.3.35641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.934835][T19536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2663.935397][ T36] audit: type=1400 audit(2000000097.462:308495): avc: denied { ioctl } for pid=10469 comm="syz.3.35641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.945852][T19536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2663.972917][ T36] audit: type=1400 audit(2000000097.490:308496): avc: denied { ioctl } for pid=10469 comm="syz.3.35641" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2663.980914][ T3470] usb 10-1: device descriptor read/64, error -71 [ 2664.012943][T19536] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2664.025888][T19536] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2664.034979][T19536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2664.044912][T19536] usb 4-1: config 0 descriptor?? [ 2664.288346][ T3470] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2664.437625][ T3470] usb 10-1: device descriptor read/64, error -71 [ 2664.483587][T19536] plantronics 0003:047F:FFFF.0079: item fetching failed at offset 12/15 [ 2664.489608][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.35649'. [ 2664.496108][T19536] plantronics 0003:047F:FFFF.0079: parse failed [ 2664.508545][T19536] plantronics 0003:047F:FFFF.0079: probe with driver plantronics failed with error -22 [ 2664.704057][ T3470] usb 10-1: device descriptor read/64, error -71 [ 2664.714848][T19536] usb 4-1: USB disconnect, device number 61 [ 2664.821403][ T3470] usb usb10-port1: attempt power cycle [ 2665.123354][T10492] netlink: 'syz.5.35651': attribute type 4 has an invalid length. [ 2665.184210][ T3470] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 2665.199480][T10499] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 2665.208202][ T3470] usb 10-1: device descriptor read/8, error -71 [ 2665.367766][ T3470] usb 10-1: device descriptor read/8, error -71 [ 2665.511507][T10521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 2665.622683][ T3470] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 2665.665963][ T3470] usb 10-1: device descriptor read/8, error -71 [ 2665.804391][ T3470] usb 10-1: device descriptor read/8, error -71 [ 2665.865830][T10181] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2665.919226][ T3470] usb usb10-port1: unable to enumerate USB device [ 2666.038561][T10181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2666.049719][T10181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2666.059593][T10181] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2666.072541][T10181] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2666.081636][T10181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2666.091215][T10181] usb 4-1: config 0 descriptor?? [ 2666.272420][T10531] rust_binder: Write failure EFAULT in pid:334 [ 2666.390449][T10535] rust_binder: 10535 RLIMIT_NICE not set [ 2666.446850][ T3471] rust_binder: 10534: removing orphan mapping 0:1048 [ 2666.537054][T10181] plantronics 0003:047F:FFFF.007A: No inputs registered, leaving [ 2666.564632][T10541] rust_binder: Write failure EFAULT in pid:338 [ 2666.598251][T10181] plantronics 0003:047F:FFFF.007A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2666.686562][T10181] usb 4-1: USB disconnect, device number 62 [ 2666.802321][T10557] rust_binder: Write failure EFAULT in pid:340 [ 2666.846916][T10561] __vm_enough_memory: pid: 10561, comm: syz.9.35669, bytes: 18014402804453376 not enough memory for the allocation [ 2666.896948][T10555] fido_id[10555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2667.475339][ T3471] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 2667.567201][T10577] IPv6: NLM_F_CREATE should be specified when creating new route [ 2667.649236][ T3471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2667.667121][ T3471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2667.686370][ T3471] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2667.695711][ T3471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.705339][ T3471] usb 4-1: config 0 descriptor?? [ 2667.720454][T10571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2667.736793][ T3471] usbhid 4-1:0.0: can't add hid device: -22 [ 2667.749993][ T3471] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 2667.776778][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.9.35681'. [ 2667.957061][T28300] usb 4-1: USB disconnect, device number 63 [ 2668.485904][T10601] overlayfs: failed to clone upperpath [ 2668.677800][T10607] overlayfs: failed to clone upperpath [ 2668.797291][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35689'. [ 2668.855447][T10618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:378 [ 2668.988380][T10625] binder: Bad value for 'stats' [ 2669.004024][T10625] binder: Bad value for 'stats' [ 2669.011674][T10625] binder: Bad value for 'stats' [ 2669.018030][T10625] binder: Bad value for 'stats' [ 2669.024351][T10625] binder: Bad value for 'stats' [ 2669.030365][T10625] binder: Bad value for 'stats' [ 2669.036625][T10625] binder: Bad value for 'stats' [ 2669.042968][T10625] binder: Bad value for 'stats' [ 2669.049025][T10625] binder: Bad value for 'stats' [ 2669.055320][T10625] binder: Bad value for 'stats' [ 2669.061391][T10625] binder: Bad value for 'stats' [ 2669.067655][ T36] kauditd_printk_skb: 503 callbacks suppressed [ 2669.067674][ T36] audit: type=1400 audit(2000000102.350:309000): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.067850][T10625] binder: Bad value for 'stats' [ 2669.103058][ T36] audit: type=1400 audit(2000000102.378:309001): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.103413][T10625] binder: Bad value for 'stats' [ 2669.132633][T10625] binder: Bad value for 'stats' [ 2669.138076][ T36] audit: type=1400 audit(2000000102.406:309002): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.143245][T10625] binder: Bad value for 'stats' [ 2669.161496][ T36] audit: type=1400 audit(2000000102.415:309003): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.169837][T10625] binder: Bad value for 'stats' [ 2669.190288][ T36] audit: type=1400 audit(2000000102.434:309004): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.197756][T10625] binder: Bad value for 'stats' [ 2669.218577][ T36] audit: type=1400 audit(2000000102.472:309005): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.226070][T10625] binder: Bad value for 'stats' [ 2669.247001][ T36] audit: type=1400 audit(2000000102.490:309006): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.254461][T10625] binder: Bad value for 'stats' [ 2669.275701][ T36] audit: type=1400 audit(2000000102.519:309007): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.284000][T10625] binder: Bad value for 'stats' [ 2669.303973][ T36] audit: type=1400 audit(2000000102.547:309008): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.311550][T10625] binder: Bad value for 'stats' [ 2669.332662][ T36] audit: type=1400 audit(2000000102.575:309009): avc: denied { mounton } for pid=10623 comm="syz.9.35692" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2669.342922][T10625] binder: Bad value for 'stats' [ 2669.366816][T10625] binder: Bad value for 'stats' [ 2669.373171][T10625] binder: Bad value for 'stats' [ 2669.379228][T10625] binder: Bad value for 'stats' [ 2669.385471][T10625] binder: Bad value for 'stats' [ 2669.391517][T10625] binder: Bad value for 'stats' [ 2669.397745][T10625] binder: Bad value for 'stats' [ 2669.403780][T10625] binder: Bad value for 'stats' [ 2669.410030][T10625] binder: Bad value for 'stats' [ 2669.416262][T10625] binder: Bad value for 'stats' [ 2669.422198][T10625] binder: Bad value for 'stats' [ 2669.428476][T10625] binder: Bad value for 'stats' [ 2669.473817][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.35693'. [ 2670.229121][T10664] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2670.236298][T10664] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 2670.243357][T10664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220 [ 2670.406414][ T3470] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2670.457377][T10670] netlink: 'syz.9.35710': attribute type 13 has an invalid length. [ 2670.465909][T10670] erspan0: refused to change device tx_queue_len [ 2670.558652][T10674] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 2670.558681][T10674] rust_binder: Error while translating object. [ 2670.574902][T10674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2670.581263][T10674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 2670.598313][ T3470] usb 4-1: device descriptor read/64, error -71 [ 2670.876013][ T3470] usb 4-1: device descriptor read/64, error -71 [ 2671.131240][ T3470] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2671.280458][ T3470] usb 4-1: device descriptor read/64, error -71 [ 2671.536277][ T3470] usb 4-1: device descriptor read/64, error -71 [ 2671.653648][ T3470] usb usb4-port1: attempt power cycle [ 2671.792076][T28300] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 2671.945379][T10726] fuse: Bad value for 'fd' [ 2671.956223][T28300] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2671.967991][T28300] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2671.979102][T28300] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2671.991806][T28300] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2672.003668][T28300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.016472][ T3470] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2672.027752][T10714] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2672.052510][ T3470] usb 4-1: device descriptor read/8, error -71 [ 2672.210986][ T3470] usb 4-1: device descriptor read/8, error -71 [ 2672.463602][ T3470] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2672.487644][ T3470] usb 4-1: device descriptor read/8, error -71 [ 2672.626160][ T3470] usb 4-1: device descriptor read/8, error -71 [ 2672.740797][ T3470] usb usb4-port1: unable to enumerate USB device [ 2672.922163][T28300] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 2672.929993][T28300] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input172 [ 2672.946640][T28300] usb 10-1: USB disconnect, device number 89 [ 2672.952816][ C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2673.468260][T10749] fuse: Unknown parameter '$R0x0000000000000003' [ 2673.634076][T10763] rust_binder: Error while translating object. [ 2673.634643][T10763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2673.641967][T10763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:395 [ 2673.883497][T10771] rust_binder: Error while translating object. [ 2673.916401][T10771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 2673.922640][T10771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:244 [ 2674.078901][T10787] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 2674.116081][T10787] rust_binder: Write failure EINVAL in pid:402 [ 2674.270775][T10799] binder: Bad value for 'defcontext' [ 2674.358431][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35753'. [ 2674.385417][ T3304] Bluetooth: hci0: Frame reassembly failed (-84) [ 2674.394565][ T3304] Bluetooth: hci0: Frame reassembly failed (-84) [ 2674.402207][T10803] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 2674.402234][T10803] rust_binder: Error while translating object. [ 2674.411006][ T36] kauditd_printk_skb: 742 callbacks suppressed [ 2674.411028][ T36] audit: type=1400 audit(2000000107.350:309752): avc: denied { ioctl } for pid=10802 comm="syz.9.35754" path="/dev/binderfs/binder1" dev="binder" ino=65 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2674.456779][T10803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2674.456819][T10803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 2674.458460][ T36] audit: type=1400 audit(2000000107.350:309753): avc: denied { call } for pid=10802 comm="syz.9.35754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2674.497098][ T36] audit: type=1400 audit(2000000107.444:309754): avc: denied { read write } for pid=9499 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2674.522143][ T36] audit: type=1400 audit(2000000107.444:309755): avc: denied { read write open } for pid=9499 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2674.563308][ T36] audit: type=1400 audit(2000000107.444:309756): avc: denied { ioctl } for pid=9499 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2674.607530][ T36] audit: type=1400 audit(2000000107.463:309757): avc: denied { ioctl } for pid=10800 comm="syz.3.35753" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2674.634664][ T36] audit: type=1400 audit(2000000107.500:309758): avc: denied { read write } for pid=6747 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2674.659250][T28300] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2674.672899][ T36] audit: type=1400 audit(2000000107.500:309759): avc: denied { read write open } for pid=6747 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2674.713816][ T36] audit: type=1400 audit(2000000107.500:309760): avc: denied { ioctl } for pid=6747 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2674.772599][ T36] audit: type=1400 audit(2000000107.538:309761): avc: denied { ioctl } for pid=10800 comm="syz.3.35753" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2674.832930][T28300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2674.842772][T28300] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2674.851919][T28300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2674.861937][T28300] usb 4-1: config 0 descriptor?? [ 2674.889527][T10814] /dev/rnullb0: Can't open blockdev [ 2674.913476][T10814] 9pnet_fd: p9_fd_create_tcp (10814): problem connecting socket to 127.0.0.1 [ 2674.936373][ T10] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 2675.058666][T10818] netlink: 56 bytes leftover after parsing attributes in process `syz.5.35760'. [ 2675.110190][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2675.122871][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2675.133381][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2675.171722][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2675.186432][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.198739][ T10] usb 10-1: config 0 descriptor?? [ 2675.318596][T28300] lenovo 0003:17EF:6047.007B: item fetching failed at offset 2/5 [ 2675.327380][T28300] lenovo 0003:17EF:6047.007B: hid_parse failed [ 2675.333699][T28300] lenovo 0003:17EF:6047.007B: probe with driver lenovo failed with error -22 [ 2675.531948][T19536] usb 4-1: USB disconnect, device number 68 [ 2675.649273][ T10] plantronics 0003:047F:FFFF.007C: item fetching failed at offset 11/15 [ 2675.658070][ T10] plantronics 0003:047F:FFFF.007C: parse failed [ 2675.664434][ T10] plantronics 0003:047F:FFFF.007C: probe with driver plantronics failed with error -22 [ 2675.864887][T28300] usb 10-1: USB disconnect, device number 90 [ 2675.875789][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.5.35767'. [ 2675.894876][T10834] netlink: 308 bytes leftover after parsing attributes in process `syz.5.35767'. [ 2675.905655][T10834] IPv6: NLM_F_CREATE should be specified when creating new route [ 2676.513872][T12382] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2676.558578][T10861] rust_binder: 10858 RLIMIT_NICE not set [ 2676.812330][ T10] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 2676.982893][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 2676.991575][ T10] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 2676.999684][ T10] usb 10-1: can't read configurations, error -22 [ 2677.111864][T10863] SELinux: syz.3.35776 (10863) set checkreqprot to 1. This is no longer supported. [ 2677.142724][ T10] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 2677.166725][T10865] ./cgroup: Can't lookup blockdev [ 2677.233247][T10867] /dev/loop0: Can't lookup blockdev [ 2677.313273][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 2677.322831][ T10] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 2677.332321][ T10] usb 10-1: can't read configurations, error -22 [ 2677.339964][ T10] usb usb10-port1: attempt power cycle [ 2677.391827][T10880] IPv6: Can't replace route, no match found [ 2677.707790][ T10] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 2677.729805][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 2677.738539][ T10] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 2677.746653][ T10] usb 10-1: can't read configurations, error -22 [ 2677.888870][ T10] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 2677.911056][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 2677.919648][ T10] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 2677.927766][ T10] usb 10-1: can't read configurations, error -22 [ 2677.934322][ T10] usb usb10-port1: unable to enumerate USB device [ 2678.677638][ T3471] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2678.704011][T10909] /dev/loop5: Can't lookup blockdev [ 2678.848165][ T3471] usb 4-1: Using ep0 maxpacket: 8 [ 2678.855749][ T3471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2678.866760][ T3471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2678.876606][ T3471] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 2678.885766][ T3471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.895987][ T3471] usb 4-1: config 0 descriptor?? [ 2678.945412][T10914] veth1: entered allmulticast mode [ 2679.333701][ T3471] cherry 0003:046A:0027.007D: unknown main item tag 0x0 [ 2679.340785][ T3471] cherry 0003:046A:0027.007D: item fetching failed at offset 19/69 [ 2679.350211][ T3471] cherry 0003:046A:0027.007D: probe with driver cherry failed with error -22 [ 2679.549498][ T3471] usb 4-1: USB disconnect, device number 69 [ 2679.679104][T28300] rust_binder: 10857: removing orphan mapping 0:24 [ 2679.764259][ T36] kauditd_printk_skb: 329 callbacks suppressed [ 2679.764280][ T36] audit: type=1400 audit(2000000112.379:310091): avc: denied { read } for pid=10921 comm="syz.9.35797" name="binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.794176][ T36] audit: type=1400 audit(2000000112.379:310092): avc: denied { read open } for pid=10921 comm="syz.9.35797" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.822506][ T36] audit: type=1400 audit(2000000112.388:310093): avc: denied { ioctl } for pid=10921 comm="syz.9.35797" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.828935][T10913] veth1: left allmulticast mode [ 2679.849320][ T36] audit: type=1400 audit(2000000112.388:310094): avc: denied { set_context_mgr } for pid=10921 comm="syz.9.35797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2679.878645][ T36] audit: type=1400 audit(2000000112.388:310095): avc: denied { map } for pid=10921 comm="syz.9.35797" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.906656][ T36] audit: type=1400 audit(2000000112.388:310096): avc: denied { read } for pid=10921 comm="syz.9.35797" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.936221][ T36] audit: type=1400 audit(2000000112.388:310097): avc: denied { read } for pid=10921 comm="syz.9.35797" name="binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.960339][ T36] audit: type=1400 audit(2000000112.388:310098): avc: denied { read open } for pid=10921 comm="syz.9.35797" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2679.988274][ T36] audit: type=1400 audit(2000000112.388:310099): avc: denied { ioctl } for pid=10921 comm="syz.9.35797" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2680.015030][ T36] audit: type=1400 audit(2000000112.417:310100): avc: denied { read write } for pid=9499 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2680.169799][ T3470] usb 10-1: new low-speed USB device number 95 using dummy_hcd [ 2680.226268][T10932] overlay: filesystem on ./bus not supported as upperdir [ 2680.235854][T10932] overlay: filesystem on ./bus not supported as upperdir [ 2680.257107][T10932] overlay: filesystem on ./bus not supported as upperdir [ 2680.277767][T10932] overlay: filesystem on ./bus not supported as upperdir [ 2680.292226][T10932] overlay: filesystem on ./bus not supported as upperdir [ 2680.352150][ T3470] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x1 is Bulk; changing to Interrupt [ 2680.367663][ T3470] usb 10-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2680.388917][ T3470] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2680.402681][ T3470] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2680.413639][ T3470] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.422906][ T3470] usb 10-1: Product: 艮〗勽Ԥ寿롙㽵ꇺ➇ꌗꗏ꼀⑤铛］㖶㷿췢ᚭ뷞醙࡬瀵珈Ⳮ뽌苍譍黔䚱懃埐䠡몷쩏쇷馾㷟検㮃鉨썖௰蘈탑伋ྺ乶僢ᇻ헳渴燣폩䡚灙幨蜳࿻搿쐱旆淈餱䢭槾ꃧ婶ᬭ튛㫃婄끎࣎䎟Ꙟ誎䲼熥詸鰘ￓ鷶簿ㄇⷎꄬ惮橙㚧靖ꑉὐ鵾뻔婓舫蜭을䘮 [ 2680.456317][ T3470] usb 10-1: Manufacturer: ӎዩ떐離脂搶썎濤㺡⨳䢜㈠䯓縆묧뼂屰뀗板防ᆎ삣膗ồ殹䮞譠鯳❨䡆㕋ᔄᖡ絵걠ꢓꐿ⁉㯓޹衽픥㓘㍽懱ᨷ⽗쫯쉇ጲԁ祢∿罕為ꝡⷀ츼厗嬘衉䳀Ⲹ䶗뛊 [ 2680.480215][ T3470] usb 10-1: SerialNumber: Њ [ 2680.483094][T10944] rust_binder: 10943 RLIMIT_NICE not set [ 2680.486219][T10943] rust_binder: Error while translating object. [ 2680.491970][T10943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2680.499469][T10926] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2680.510732][T10943] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 2680.515974][T10943] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:429 [ 2680.518427][T10926] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2680.629809][T10948] fuse: Bad value for 'group_id' [ 2680.634827][T10948] fuse: Bad value for 'group_id' [ 2680.894625][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2680.967534][T10950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64797 sclass=netlink_route_socket pid=10950 comm=syz.5.35808 [ 2680.985484][T10950] netlink: 'syz.5.35808': attribute type 1 has an invalid length. [ 2680.987477][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2681.011993][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2681.033848][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2681.050716][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2681.070040][ T3470] usb 10-1: USB disconnect, device number 95 [ 2681.076378][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.097532][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2681.111103][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2681.122291][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2681.139738][ T10] usb 4-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 2681.147958][ T10] usb 4-1: Product: syz [ 2681.153932][ T10] usb 4-1: Manufacturer: syz [ 2681.158571][ T10] usb 4-1: SerialNumber: syz [ 2681.182584][ T10] cdc_ncm 4-1:1.0: skipping garbage [ 2681.187854][ T10] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 2681.202649][ T10] cdc_ncm 4-1:1.0: bind() failure [ 2681.208876][T10956] netlink: 'syz.5.35810': attribute type 4 has an invalid length. [ 2681.230956][T10957] netlink: 'syz.5.35810': attribute type 4 has an invalid length. [ 2681.569082][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.576218][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.583424][T10968] bridge_slave_0: entered allmulticast mode [ 2681.589773][T10968] bridge_slave_0: entered promiscuous mode [ 2681.597074][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 2681.605962][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 2681.615443][T10968] bridge_slave_1: entered allmulticast mode [ 2681.630552][T10968] bridge_slave_1: entered promiscuous mode [ 2681.857070][T10974] rust_binder: inc_ref_done called when no active inc_refs [ 2681.927368][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 2681.941758][T10968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2681.949087][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.956185][T10968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.034228][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 2682.042716][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 2682.063923][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.071058][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.085555][T10977] overlayfs: maximum fs stacking depth exceeded [ 2682.100058][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.107192][ T3290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.292620][T10968] veth0_vlan: entered promiscuous mode [ 2682.303569][T10990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2682.303880][T10990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2682.329969][T10995] rust_binder: 10995 RLIMIT_NICE not set [ 2682.368004][T10968] veth1_macvtap: entered promiscuous mode [ 2682.432431][ T3470] rust_binder: 10991: removing orphan mapping 0:1048 [ 2683.192005][ T4870] bridge_slave_1: left allmulticast mode [ 2683.199699][ T4870] bridge_slave_1: left promiscuous mode [ 2683.205476][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 2683.216368][ T4870] bridge_slave_0: left allmulticast mode [ 2683.224120][ T4870] bridge_slave_0: left promiscuous mode [ 2683.231425][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 2683.338342][T11026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.35827'. [ 2683.432109][ T4870] tipc: Left network mode [ 2683.542553][ T4870] veth1_macvtap: left promiscuous mode [ 2683.663381][T11039] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2683.786445][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35832'. [ 2683.817178][T11043] __vm_enough_memory: pid: 11043, comm: syz.5.35832, bytes: 18014402804453376 not enough memory for the allocation [ 2683.838040][ T3470] usb 4-1: USB disconnect, device number 70 [ 2683.968962][T11047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 2684.071416][T11053] rust_binder: Error while translating object. [ 2684.080677][T11053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2684.099056][T11053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:440 [ 2684.118429][T11049] rust_binder: 36: no such ref 0 [ 2684.294715][ T3470] usb 10-1: new full-speed USB device number 96 using dummy_hcd [ 2684.294786][T11056] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2684.329698][T11056] rust_binder: Error while translating object. [ 2684.348114][T11056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2684.355872][T11066] binder: Unknown parameter '' [ 2684.372120][T11056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 2684.477522][ T3470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2684.512755][ T3470] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2684.539993][ T3470] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2684.561102][ T3470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2684.573004][ T3470] usb 10-1: config 0 descriptor?? [ 2684.581566][T11045] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2684.590713][ T3470] usbhid 10-1:0.0: can't add hid device: -22 [ 2684.603847][ T3470] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 2684.705596][T11073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 2684.752784][T11077] netlink: 48 bytes leftover after parsing attributes in process `syz.5.35844'. [ 2684.797248][T11073] rust_binder: Error while translating object. [ 2684.797292][T11073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2684.803635][T11073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 2684.815713][ T3470] usb 10-1: USB disconnect, device number 96 [ 2684.991601][T11084] SELinux: failed to load policy [ 2685.116251][ T36] kauditd_printk_skb: 690 callbacks suppressed [ 2685.116272][ T36] audit: type=1400 audit(2000000117.408:310791): avc: denied { ioctl } for pid=11083 comm="syz.3.35846" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.148276][T28300] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2685.156485][ T36] audit: type=1400 audit(2000000117.436:310792): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.181952][ T36] audit: type=1400 audit(2000000117.436:310793): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.207959][ T36] audit: type=1400 audit(2000000117.436:310794): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.233316][ T36] audit: type=1400 audit(2000000117.436:310795): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.258579][ T36] audit: type=1400 audit(2000000117.445:310796): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.284013][ T3471] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2685.287277][ T36] audit: type=1400 audit(2000000117.445:310797): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.316892][T28300] usb 6-1: device descriptor read/64, error -71 [ 2685.316891][ T36] audit: type=1400 audit(2000000117.445:310798): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.316931][ T36] audit: type=1400 audit(2000000117.492:310799): avc: denied { ioctl } for pid=11083 comm="syz.3.35846" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.316966][ T36] audit: type=1400 audit(2000000117.520:310800): avc: denied { ioctl } for pid=11081 comm="syz.5.35845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2685.481467][ T3471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2685.492659][ T3471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2685.503835][ T3471] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2685.517442][ T3471] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2685.526552][ T3471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.536527][ T3471] usb 4-1: config 0 descriptor?? [ 2685.573807][T28300] usb 6-1: device descriptor read/64, error -71 [ 2685.708488][T11093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2685.708553][T11093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 2685.829596][T28300] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2685.976341][ T3471] plantronics 0003:047F:FFFF.007E: No inputs registered, leaving [ 2685.979016][T28300] usb 6-1: device descriptor read/64, error -71 [ 2685.988118][ T3471] plantronics 0003:047F:FFFF.007E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2686.021439][ T10] usb 10-1: new low-speed USB device number 97 using dummy_hcd [ 2686.212458][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2686.231520][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2686.239540][ T10] usb 10-1: can't read configurations, error -71 [ 2686.266617][T28300] usb 6-1: device descriptor read/64, error -71 [ 2686.342583][ T3471] usb 4-1: USB disconnect, device number 71 [ 2686.388462][T28300] usb usb6-port1: attempt power cycle [ 2686.746264][T28300] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2686.771164][T28300] usb 6-1: device descriptor read/8, error -71 [ 2686.868318][T11102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2686.868350][T11102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:299 [ 2686.882536][T11104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2686.911373][T28300] usb 6-1: device descriptor read/8, error -71 [ 2687.183245][T28300] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2687.206857][T28300] usb 6-1: device descriptor read/8, error -71 [ 2687.345455][T28300] usb 6-1: device descriptor read/8, error -71 [ 2687.460448][T28300] usb usb6-port1: unable to enumerate USB device [ 2688.173140][T11132] binder: Bad value for 'max' [ 2688.347464][T11143] netlink: 52 bytes leftover after parsing attributes in process `syz.3.35866'. [ 2688.388235][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35866'. [ 2688.462275][T19536] usb 10-1: new full-speed USB device number 99 using dummy_hcd [ 2688.526335][T11152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2688.526370][T11152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:470 [ 2688.598676][T11149] __vm_enough_memory: pid: 11149, comm: syz.5.35867, bytes: 18014402804453376 not enough memory for the allocation [ 2688.648909][T19536] usb 10-1: config index 0 descriptor too short (expected 2075, got 27) [ 2688.665811][T19536] usb 10-1: config 0 has an invalid interface number: 200 but max is 0 [ 2688.685954][T19536] usb 10-1: config 0 has no interface number 0 [ 2688.695748][T19536] usb 10-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2688.716656][T19536] usb 10-1: config 0 interface 200 has no altsetting 0 [ 2688.740377][T19536] usb 10-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 2688.760439][T19536] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.780068][T19536] usb 10-1: Product: syz [ 2688.785068][T19536] usb 10-1: Manufacturer: syz [ 2688.789850][T19536] usb 10-1: SerialNumber: syz [ 2688.803588][T19536] usb 10-1: config 0 descriptor?? [ 2689.005967][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35873'. [ 2689.044398][T19536] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.200/input/input177 [ 2689.079982][T19536] usb 10-1: USB disconnect, device number 99 [ 2690.464722][ T36] kauditd_printk_skb: 634 callbacks suppressed [ 2690.464744][ T36] audit: type=1400 audit(2000000122.418:311435): avc: denied { mounton } for pid=11201 comm="syz.3.35883" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2690.562018][ T36] audit: type=1400 audit(2000000122.455:311436): avc: denied { mount } for pid=11201 comm="syz.3.35883" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2690.641432][ T36] audit: type=1400 audit(2000000122.465:311437): avc: denied { create } for pid=11202 comm="syz.7.35885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2690.663633][T11219] binder: Unknown parameter '"0gXmt' [ 2690.703398][T11221] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2690.703490][T10968] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2690.711346][T11222] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2690.721763][T11218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2690.743301][T11218] audit: audit_lost=512 audit_rate_limit=0 audit_backlog_limit=64 [ 2690.743858][T11221] audit: audit_lost=513 audit_rate_limit=0 audit_backlog_limit=64 [ 2690.751154][T11218] audit: backlog limit exceeded [ 2901.476776][ T4870] tipc: Left network mode [ 2901.541304][ T4870] veth1_macvtap: left promiscuous mode [ 2901.546838][ T4870] veth0_vlan: left promiscuous mode