last executing test programs: 11m51.060461767s ago: executing program 32 (id=44): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 64) syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x10001}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 11m18.064191227s ago: executing program 33 (id=484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x0, 0x4000000000}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x30}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0xffffffffffffffd1}}}], 0x0, 0x0, 0x0}) 10m31.478681682s ago: executing program 34 (id=903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) (async, rerun: 64) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) stat(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)) (async) clock_adjtime(0x0, &(0x7f0000000340)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x9, 0xffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 10m29.737693492s ago: executing program 35 (id=832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000002}) fcntl$dupfd(r0, 0x406, r1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x90, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x3, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x1, 0x18}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x5, 0x40, 0x7, 0x10, 0x3}, 0xf0, &(0x7f0000000340)={0x5, 0xf, 0xf0, 0x1, [@generic={0xeb, 0x10, 0x4, "a485dd2a19304852a735f8c5bc099338ff49e2cf0ca82947accfeef0f0c427b4007a6c547690428753e887734c66a882fc3c1e55d587e0584038c107253927a02dd2d9dbd6e9cd92134db9edc16d24cac211ea4d0b84cd532d4e747a96ead1c4bb6615a8eed19d5302a2727ad5bc142779c3a572ff9fde09db75566f44c736cfc159ea28812ffbf3c695ca8aab61d56e4bba9c81734ff18c93fdcf1df6ddd754548f4f0e89a56875441dae50ba4924ed59a5d5a98a2294f122726f1901f0884662bdcf00e2720e4444167df0343efcd1cfa09b74144b46f2f5aae5fbdde4a4d8945a140ecee198d1"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x447}}]}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) close_range(r2, 0xffffffffffffffff, 0x0) 10m14.841917449s ago: executing program 36 (id=1007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200400c1) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)={0x66666666666689b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) 9m32.208771585s ago: executing program 37 (id=1194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x0) r2 = userfaultfd(0x400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r3, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000200)=0x10) preadv2(r5, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000200000d0000000d9cffff00"/32]) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x1002400, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@code={0xa, 0x5e, {"400f01784f440f20c03501000000440f22c0420f01c9f3470f01bbf9000000f00fbb7d88672b3666baf80cb85c5a6c8eef66bafc0c0f09ef460f07b9800000c035001000000f3064450f005006"}}, @code={0xa, 0x57, {"c4817917a200000000f30fc775f4b9f9020000b807000000ba000000000f300f6ed226460f070f01d12e660fdae9646642d07cbb0666b8a000410f20610fc78d8cad65300000"}}], 0xb5}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r13, 0x4008ae6a, &(0x7f00000003c0)={0x7, 0x0, [{0x2, 0x3, 0x1, 0x0, @sint={0x2, 0x6}}, {0x7, 0x2, 0x1, 0x0, @sint={0x0, 0x389}}, {0xb9e6, 0x1, 0x1, 0x0, @sint={0xb, 0xbd61}}, {0x3, 0x2, 0x0, 0x0, @irqchip={0x4, 0x1}}, {0xe, 0x5, 0x0, 0x0, @msi={0x2, 0xe, 0x100, 0xfffffc01}}, {0x3, 0x3, 0x1, 0x0, @irqchip={0xb, 0x8}}, {0x7fffffff, 0x7a2612a79877f6cb, 0x0, 0x0, @sint={0xffffffff, 0x81}}]}) 9m31.795022443s ago: executing program 38 (id=1199): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000040)='selinuxfs\x00', 0x120b040, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = getuid() statx(0xffffffffffffffff, &(0x7f0000000280)='./cgroup/file0\x00', 0x100, 0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000140), 0x20, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x0, 0x64, 0x62, 0x38, 0x35, 0x32, 0x30], 0x2d, [0x64, 0x35, 0x30, 0x62], 0x2d, [0x38, 0x32, 0x34, 0x62], 0x2d, [0x39, 0x62, 0x30, 0x61], 0x2d, [0x38, 0x63, 0x35, 0x37, 0x64, 0x34, 0x61, 0x5]}}}, {@subj_role={'subj_role', 0x3d, '$'}}, {@subj_role={'subj_role', 0x3d, '/dev/rnullb0\x00'}}, {@uid_lt={'uid<', r3}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x33, 0x39, 0x39, 0x37, 0x39, 0x66], 0x2d, [0x33, 0x63, 0x62, 0x32], 0x2d, [0x0, 0x61, 0x38, 0x64], 0x2d, [0x61, 0x38, 0x33, 0x36], 0x2d, [0x35, 0x63, 0x37, 0x63, 0x33, 0x61, 0x62, 0x39]}}}, {@euid_gt={'euid>', r5}}]}}) 7m40.78208047s ago: executing program 39 (id=2600): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x8, 0x7, 0x88, 0x81}, {0x9, 0x5, 0xe, 0x2, 0x8, 0x7, 0x6, 0x7e}, {0x9, 0x5, 0x0, 0x3, 0x10, 0x8f, 0x3, 0x49}}}}}}]}}, 0x0) syz_usb_ep_read(r4, 0x20, 0xb0, &(0x7f0000000100)=""/176) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}]}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 7m27.871361373s ago: executing program 40 (id=2742): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r3, &(0x7f00000009c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6m43.838052924s ago: executing program 41 (id=3385): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) (async) close(0x3) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000100)=0x8, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') r6 = eventfd2(0xf, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r5, 0x5, 0x1, r6}) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1, 0xfff, 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 6m25.509235731s ago: executing program 42 (id=3428): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x80000, 0x20) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r5, r5, 0x0, 0x800000007) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}]}}) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x0) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x87) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000000)) ioctl$EVIOCSABS0(r6, 0x401845c0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x80000, 0x20) (async) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r0) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) (async) sendfile(r5, r5, 0x0, 0x800000007) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}]}}) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x87) (async) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000000)) (async) ioctl$EVIOCSABS0(r6, 0x401845c0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) (async) 5m32.684273353s ago: executing program 43 (id=3864): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x181100, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x6e22, 0x40000, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66b1e8b46e0ca6499646635771513b8471642c724a646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 5m21.923209289s ago: executing program 2 (id=3969): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xa4, 0x0, 0x1030, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 5m21.645205544s ago: executing program 2 (id=3970): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) lgetxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@random={'user.', '[\x00'}, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f00000042c0)={0x2020}, 0x2020) socket$inet(0x2, 0x3, 0x2) 5m21.643934054s ago: executing program 2 (id=3971): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x3, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x800, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x2, r0, 0x3, 0x4, 0x6, 0x3, 0x0, 0x3, 0xfff}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000140)="c3143385a07574e7b2fb98c8d2ca35803ade36a687fa471f3584e1ce9ccf3122773439ee57743ab1053753f8b878c20726333c8e01b0778a57a8ab7139ddaf364eb5dff5d95130fa5dcccf87ecea0e080797eb3feec287bbd1858c2e5c884a93bb28ff76135f0a937339dab9dc72fd2080294db5ef81b23046e1a2aa306ef8613223f218ba12e5e2bd3afea8a68d5bac6eef88b3bacf9f506642af41019c04747dd372753c0c9b79d081eb4460c34502693026569f4da6", &(0x7f0000000200)="f9a3b5edc7dc63a972fb0239f264397a1d1da6cc69896fc1ecda7cb396a6294a5f0753490c53f499cb92bd5a9955c03c3b8e2c1f4b4010b330d6cf875e80c8a0d8c24c29b01face54a838bf0b3c73f1133d629dab98076d8b87cbd22f027683f451428eba6eee01a4f598b9aa857836b6c5247911a0580820da74c7f2cee62ab9bb04d89896b45c837baa9871310ed8fec96ab53bddaae4f5dfad2c5ce7b0a7f6394e91c09c99582886d4fb0c5601c6a26d9a05b974a6bf631cbe55ac710bd5997facc0de10fbc82fb7cfe1425c3b06f2ddce0e3a7421cc6084702478f01ad4b1c910eef896b88d00efaa8f679fb03826c349f590e5416"}}, &(0x7f0000000300)) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, 0x8) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) rmdir(&(0x7f00000002c0)='./file1\x00') chdir(&(0x7f0000000140)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') fchdir(0xffffffffffffffff) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 5m20.7363369s ago: executing program 2 (id=3980): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0xffc99a3b00000000, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='openpromfs\x00', 0x2800, &(0x7f0000000280)='mountinfo\x00') 5m20.663014581s ago: executing program 2 (id=3982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f000034e000/0x4000)=nil, 0x4000, &(0x7f0000000fc0)=""/236) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0xc0, 0x0, &(0x7f0000000440)=[@increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x2a}, @fda={0x66646185, 0x3, 0x2, 0x4}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x400}, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/217, 0xd9, 0x2, 0x26}, @fda={0x66646185, 0x7, 0x0, 0x17}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x3}], 0x1000, 0x0, &(0x7f00000010c0)="912a7e198afe3889a3041b5046b2493d8552fbf4a49c1656956b8683de43f05ba24eb7b06de055cf2e13697f68eec984ef55a8e132786531b64f3b5d9431581652e7c3763dfd9de675204a367c7e8d1154d3c1e348c85b2f9ab8c5c5d4abf036829366a74f2fed12e4b44fc4010a314516565df10c54790c62790734b3ed6c05e77a5458dbd9f77bd2d31b776ab3171cab8dbaa1b22b0531d09974067142830f9795f89bb427718bcc3f43fcde3938054adfafc52c631bc4e6a2d3439161673cddc81227ef30216b9d86d489e06b18350a5c823b9e90358da479e96c0032d0f7ced205900468a6d9130d5b115d87636b3027b699115e1b13856713f5e5b2579446a7059335e0a7af7058b478517d7074bd580b951c8d82e898628e473ed29d10070e470486fcc6e1a943ed0850bcb506dd4b702e244786e3ead0c5fa24c17a65b5917d2e883b4832ef69325a74767c3ec8e7332cf973f00cbde3dc7f8cfedcfca7d7d2c1d114e631175ee1d15e6c5fae4cab5f396de1cd3ae13ba80cff8827110e1e9820bf22244f4ea6e396116a23941991ec5648f0d40e2ae71c3d78d86a055818f6b6e99b4d9ffb10c84f7913d63a33a89c24b6e0fb22733dde1b6684150d8117d529eb53effb8f4cbd91fd608382d4c1a79c90a44a8cf6dae9adde8905a4d630f4935bb0c764b15d25019a100dd628c7757c2fe197b62535d68118d041a55399934fbfd1f04751a778ebaeb5550499873a11c01bcf9aa42031f856569019be09aa49b2a089643fc242cb8945e2f0c84c98ed6305c0d22485593ed5e07c6d1fbd78817d5ac21680f207908a3d9161f5451f5b6ae33acdbc8c6b7ffba87a0e684701bd2b32fd9411d8342232d63c624ea3cc765ee86b7c9c9de2c0154ec701fc035ccd1ac2b0fb4d4bba11fac80c1766b600ca982553db9e890477c76981757cdc072a53e6d74a2e741d98bc06e9bfd919fb3e7f44cbe858c1d59cfb694959cd9a50ec53a3f3dfd6c201df2698ca2c63df08e17d645f51759781707e69666bfc281a8376881f1d5f11515461f5a5b13290d1a6be61e198fe256397431d20a46b206329a4a16d63f66832b4ba51d68b84035ec0b3db96d7ea25eb0a4c16f233cdabae2a42e2876c2079a912646e8b9b76414448d9e72e2edd282f43fe593db0c3cddd9c550aded4e08097b7c5384cac94d6578adf996e477d93e8ec42e2d1d808fad9553c1293aa267104bcfc6b1d386673dc1d4bad1a95f69f2072f5cfe6437095a7537324c914c08aa6337ccb55a54c6c328015a0a69bcc1345ded2752ec2a9e4e48806e1584345d1e478ed43a8495daf09019e44f3942d0bf4aa9798029197abdacd536676e246399333085b1795042dd3bdcd21ded51b7ecf00674eaad94afcffc804a2b4adf8582d92dba1fe7ffce97f63734a9649047b4fc92ccbfbfdc92847bb420c01dda8c675dcaa1958534d08441a0a9fc3e1a1d4849939d05f57a2592c4913a2d62523a7b7e86ad099c6f575483ece8c6e7d470a27889b691362cb6ad4a0f8a14cdf8b0229c9530b306577384a0c7dedc00309b602b08706dda0462826175bd0e0c0eff67f97a197e76b5f420c99700cac37cb58695b138d85db4111bd8fbed5125958396ba9b7d7c0af9009830b5834f7ee9a1ac87b14f8387563c5eeafdbd7b6268ed3a3d01c64d62407c9404f6c40af14d0b050e021685110915e6d34339bd8046d622d2680d4fa5034632239b5bee2138029f9a882d05c149960faee7f7e1c2c20d68fc9c97466118f4bc798ed577d5337fcd0f4fc5c177a5c0413d2494a95c5bd21140bd0158bd517c567c6000df4599e7d627046f47325ee9df498befe7e9aa3a2b3aa3104fcc337ab3baaae73f44cbca5183652d03b95ef0ff8bec6edaacd8f985e887d411a45f39d119302da394a05ee9a6de773b09c86db62eeadeb51b66b3b6bbc025d9262a3a4e9d9f2f2a7cbe6da00cbae94cab4170d6c4e7cf879cdb1756bcec99f29fc1d86599677ec03ef82877c6903f588847d6da5d9153608d76f31d18eb360a5cd4bbb4fce494a1f34ba76c0e5b2ee3cde1fe01e7d62ffebd585d56c4d4c3fa0b8846d7cb9e24e31cfa38ed423f567186be6dcb6955d7ed3a39d265d7673d775a981cbe1108e2519e93f66b5623ff8360ff574d3ce79459bc2241c75be38a4a6752a6505b2163cdfc3d0b1cbaca3d2a62281f192ba2c76f03b9332b16bcc5e8a7752c25bc1b99cd39a1972a31bf8dbdd46bf36733f4c6221eca5ea37f3d75050377f6e726b095d36ae48de628a53793fe46e3a58549f03b7e2117acb448740c7fda4cbf56c8d71ccf38befd5a48c61b534bcd0eefd7cc918cb729dc36b9b475ac029604c3bdbea76c0d7d8fd0637dd01f467f1265238c3cc8ef2ac51d075335bffbcc77a23c7d639128e71e258959100ebf672d2ab9e290a0e2b390e617d9a5a9b212b7a8f890e37b72eef3080dbd11be2c941fc3a8ef4a78a080f388cfbb616a87469e70ec9546d6ebd66a1716eac4cd96f6f7bbce7444ba7bce236d1c6161c3ed836c4400e295a6b7275fc97268ab437d49799394eee414d25fed74c809e23db86a32b47790f8a70658cda333b297324d84db0da40d6c8f470a83c6c905eec6d9187cf6197cab559e875de3450efcbac3c9340bcb69e23f4d05de932a0df4e56a9d5015861945c566074eb1239fa65b69b9864b36b0c0b70953f9906a98824ece0f77a9d707015d5708bd3153cd7dd49cf221e132885b8055835607b485223f4927985292c710ed17d8c19394426cfe1da1fb6280e198da44ef92de4b627f3a490e04bc49d46f5f0e92c04bdf5484f71a98e7af78702dbe92c99bdfa1f05cd386823d8742692e42a1285783b81833a93161942fc44d22cdca08ef555d2137a9894be3dc4070679051e7cc7e9c002f53b1ff6b32640faffe040dfc348d6c74238a550507b8780bee5dbf921cdb3980a0ab73c3988c64cb22896c2034d0ab1d2f4efb95d3e0059bf085a250b7c64c76ee2e2655549a7328cda755e3317d8f764f512424556f99562f4a59b098d054601d0483b902dcf52d0f08811dfb770c471b879f65a1e503ea724e2385a92e186cfe4235437c7ff925cbbbfa87fab668c0e5cb8428d28715f3301e4bac0b4f48736922feacd252de3531f4c48d1a0790c2474acd08c4499db0c1893239dba456c5caf747eddc78db612678dad97a004500879d1f5c955e2fec2b3c129a0f5d821fa342a8f751037f221d6d66456ed6fdc83f75b913d0ad37de4ba4d82e78ae6d3fe710a6669dcee1115a43f2dde45831a9d16679a853d3577b12dcf715f9f1af1aa0c7aa18adf702f0ac7f413851d83c9417e739f4b03dd33ba708e373471fa578a42636a7645834c007cea91f7d19281054618a6a56472029eff5072f55aa18d2e398dab7b93453ae387f27de8892c292287747383093d59c2357c62441be0e3e84a0629d19af4193317cd1fa5ebf1cef4616cf3b5cf91b5eb45319edccf9b31394bf0f8fe43c79453035eceed609343dee06730432fba8a3ab394375b0a9bdfc2bf0d1184f751a54ba1572d2946436a593ca7ef1b4e37a38b83f361c3d377e199d79bf008f1db9a041be922a5e947fb158cadafb8a18246c49e63f09d9a143fbd5e1612b94c23602232b37b669eb2da778f51562a0722e302ffd043ead48dd28c47a4e1910d3f1060dec78d6b7fa4e72a12305215b07154591d4c6d4f07a0be5d5898b69c90d509105afe838c068574f01e00a12e7d4cfc521ef9b27ab8d387bd243dcccde55f72e2dfde14bacb22e4c6d389dd2703130320be81144a9b223633dac4adfc4955f08158f880b04fccb3d8d7036368d1f4b4218e3dd89b0ab25fb0d6c7c13c5d021e9060a465b5b5c700274b8d354ff7d92988f99f675bf2a79513261cf75e13818a7ac2c573efcbce0d973bb6672fd436f8ca2edab2c00bcd134f7d90dfb61be0945e4b2b720c2960863e5119291979510f9ce8d6a9d699717d8d45777bd4e585d66610e7349117a638b36a2ea25652272f78b6555136ab0a0e89ec0d2f1db7bd354b90ac68e4ee24954c5e3c6d37730b02c42208688243a09f1c54a2a5634da3932b3081a25bbee323b5b9e9d6c06f0dbac45edce50e73d984e5fb846a7d1d8f61a1914cd7f7fdd2719e24bec20a025d119fb2503eb4d4bdccf0407513bd98321eca14d20631ce6563b5a7790fb1d97d106010902cf1aba757f53c4279a9eb1ef5310b1f34a92e8bb7a6c97c6d25af5fa01de1d299c05742f539b4f709c99531bcb17a7687f1881cc91d87999f019b6c43c0f725098ed0afb7579d65870224ed6910974d809db2d9c174bb7046ae48d1cbda90e90842a85b99d12f4a186ce00ea413fab6c3096adc4f5ef576bbaa8e6fc089fa48423f2cf669f8c07bb299a8f872d1d0e47f987916644a31db297d555b49b83ef16f3c5bd0be6de74e455f130e0f1ead44ad51c93fb52bca035b47e59367328e201f3d6ffda182cbcba222e3d030ec78da4384c04d51133752af72a000916171d536ab84d05fb8420650d04913beef673fbcbd59bce7df21938bc42fec8c3b1781220dd28cc2bc4d5d169f86e38d6b5e931c3377209775f6dd71f7f5e870132abd99ed7db649dce396495384214180fbf58d65e33b08c9c2921f0cdd99517b328fc12313be4fa4e13596e8578bee9cb877d6585b83888e5a01cd59f7d80ef74d70e98a50128a973c7cada4b066612c7ef59fbd09a882e55f659a0f460a969eb36212b6b100f0757aedd4ce2b19e9824e6d370e0e398ea5ae28aa87cfa0c2a0ac82a48a668c65e1db1091455deab994e3b1fe999ce10f10871067bfb022abf7f4561b47c247cdfba346d840cdbbfa771ac3b137e3a7b00cb06e21f5491348e642ca10ef8ecfd73d21666f6730d54b210dd9b924d01a1cbdf5b03ec4db4cd7e1f8cfc1ff5df8d93b81c6f7d867c217bcbdbadce0f1f6427ca5231e86ad41a7ec4844a2900dfb0693fa615a8e86578a016001b597bfee546e9ba6a04bb095c1f3d039a96222b02c493fd54fb73ffb63664e38c190887774f61ef1e66f6667ecfe2ce5698100b279c4d1d4abb977ec091a16821a171608b85314a9a25d03518342ff17b5f7ffffe137dc682e2f4103bb11153a549ad37b1d770f19ee703b6fd9e0a858fc07bec5902c0b362acf7539b059ee2c2057632801205222bed91629c5497eebf3a6f536b33e5b9f7d48cd5535a6aeb860862311a5c2715ef067b08d45f4bf5d02de2e4d9f71886307caedbce419cbc1628a05f21a08194be3c5c27a8d8a127d1514f58f88040b3a0f51d2eb6a8425a5208b3e1324a43fdc0edd6ccff4a6ddddf74bde93780d4748460256de2e20c68bc863dd5e0f3de5a9d3fb8e17b8fcd796ad39671ea79674eb76ea5e6f8528338cf7021e098f4dddca9a7ea3cb377be87046931d4b33c15434916d53f3d34a924918e0a297276fa142cca0a2e80034d8b06f97cd5fe49cea5efc277e45d17e388d7c993208c8a3c9fb750bc8937eeda1d65d6759221fffada50245fc290b92587fb1578b4654eb2ed98f22a78430fdcad7b67069edbf3d9dffc66f407856433f1ea9fd4e781b12a3f5afc45264f4e808c06f128614871faf462d1c809a109462f76b1117bcf34e9933ebd76aaf5d909b704cc9166bd4f518ab9041b07b0f713b1117b2f6049f0f1573fac0737de35fdb41ece3d30b0ec7ea171ddc9866470e698f14dbf38f9f297b693e8f159ec470ead67a5732b49c30a4"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 5m20.537201413s ago: executing program 2 (id=3984): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ext2\x00', 0x22e1c27, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x1000}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000180)={0x90, 0xfffffffffffffffe, r3, {0x4, 0x2, 0x83, 0x7ff, 0x29, 0x509, {0x4, 0xfffffffffffffffd, 0x1210, 0x80000001, 0x8, 0x9, 0x80000b, 0x81, 0x7, 0x4000, 0xd, r2, 0xffffffffffffffff, 0x3, 0x4}}}, 0x90) 5m20.519153454s ago: executing program 44 (id=3984): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ext2\x00', 0x22e1c27, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x1000}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000180)={0x90, 0xfffffffffffffffe, r3, {0x4, 0x2, 0x83, 0x7ff, 0x29, 0x509, {0x4, 0xfffffffffffffffd, 0x1210, 0x80000001, 0x8, 0x9, 0x80000b, 0x81, 0x7, 0x4000, 0xd, r2, 0xffffffffffffffff, 0x3, 0x4}}}, 0x90) 4m51.027080983s ago: executing program 7 (id=4235): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') (async) userfaultfd(0x0) 4m50.866841426s ago: executing program 7 (id=4238): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0fe4f2c57536e73350", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r3], 0x10) sendfile(r1, r0, 0x0, 0xffffffff) 4m49.881235803s ago: executing program 7 (id=4252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000080}, 0x14004084) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2100, &(0x7f0000000180)={0x0, 0x989680}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000440)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 4m49.753138375s ago: executing program 7 (id=4256): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x119) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x10e142) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b90c8, 0x0) (async) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x4000000) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x1, 0x7f, 0x2, 0x3a3}, {0x2, 0x3, 0x2, 0x5}, {0x1, 0x91, 0x7, 0xf}, {0xd, 0xf0, 0x3, 0x8}, {0xc110, 0x9, 0xfa, 0x3}, {0x7, 0x0, 0xc, 0x1}, {0xbe8, 0x34, 0xbd, 0x3}, {0x3fea, 0xf8, 0x4, 0x2}]}, 0x10) (async) move_mount(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', r3, &(0x7f0000000340)='./file0/file0\x00', 0x167) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080)=0x3, 0x4) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000002700)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000002680)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r7, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x28}}, 0x8000) (async) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='debugfs\x00', 0x80000, 0x0) 4m49.537310129s ago: executing program 7 (id=4258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000002000000200003fd31340e92c4b9866cb00915b8206ebf2ab7cdbc3ce4339851dbcef871cafa5b1483d769eac9a22b41d1eb15a06f6c5268cf25a12b4fb9f6fffe669b5cddab4681d2a9b0c491552c08e0752f9288b315500100000032406d2b11ead16e46d5e3d0c89ea0600000000000000af58fa06e0b7825c83248daf2877cc614a7dbd0514d5dcd441b3ec90ec9439edace56861c47430f0294a58337cc247f6e08d61593bc7649868a585f56e38a0f0ce0685b6107fbb51392efe4eba350e6fa4b672e07bbb51"], 0x48}, 0x300}, 0x8040) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4000000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 4m49.097225777s ago: executing program 7 (id=4262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') (async) r3 = syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') close_range(r0, r3, 0x0) 4m49.089940236s ago: executing program 45 (id=4262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') (async) r3 = syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') close_range(r0, r3, 0x0) 4m17.827164777s ago: executing program 8 (id=4588): getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) setregid(0xffffffffffffffff, r0) openat$snapshot(0xffffffffffffff9c, 0x0, 0xa00, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002740)={0x131c, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1028, 0xfb, 0x0, 0x1, [@nested={0x1019, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x208, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @nested={0x1f3, 0xa5, 0x0, 0x1, [@generic="b86738b356f5dc409bc567abfe574cf77cf40a9f14f55606f858620de196c3c4547c4dddb2b5aa03055e5804c69d5eb52871c316ca59f7e198ba63cac67cc1d16bee12d5425081a358031c28046d505e787a588e63f9320499069e7d09f510e54f62597208f53245eef23b751a0ed19b08d0adaee9bcfd9fa2653af2109a41dc103d8eeb0e686c0521bb813a1233664034023b553d4d0d3c3cb6aae45ce85b4c825722782157d37a5274c7ee0443e386bf556769dd72", @nested={0xb3, 0x120, 0x0, 0x1, [@generic="7387a3a85279aa9fc2f0d4f009ddc6a8355c05204a474b76f42192af642c06f2b39fe70b8b17b1601aa4f2b95826721b96ec0dc89c7a64b56853d9a1d8c84e01a05c59d0063350c6beee0d434f7be021e9cda8a5b005cb82b116174d501aa293031a11fdb3f72bf66894d788730f928468dad7fd791ff2cb11c02c673e30ceb80e364d2b005aace8336e8c577d1768ea17c2f15ff51795a8195821924e60109ae6116c5b0da0a29cd905e522f55eb6"]}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0xa421}, @generic="7c5280a71b80aaf22704a3f90eeaaf15486025d818d0ad5cd09a667d0ad28598406d992948120502f4934f2ca7de4b2f3d53cb51c0d81d0cca5ec1bab7b6214b07d97ee165124db75bb3dbb146d082d9196902934137fc2d58cedaa56217b9c38e9d1046b85045608e19df8958", @typed={0xc, 0x27, 0x0, 0x0, @u64=0x4}]}]}]}, 0x131c}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x28, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}]}, 0x18}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a"], 0x1c}], 0x1}, 0x4000080) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_PIT2(r11, 0x4040ae77, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) 4m17.725108078s ago: executing program 8 (id=4589): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0x8}, @sack_perm], 0x4) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x8) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x1, @thr={&(0x7f0000000200)="3b019478e0a956da0abeb8d5b833fb0e68c1f6ea30a51bd7f232893c94a204463c2123b617f32758e909e51f", &(0x7f0000000300)="7d6b3484e90ee71e96c3b3226a7bf8fe4f29638de4d5194c9dc46fc295f84de62a31e7f7f619e0366c9f910cd7a53772fadccdb75300768bfa1dab76ed21b1f08af5d5ed0e5259e1784bf9ca0ffa4921e1f4d25ee74888690843d031be5a7f28eb1f9cfb4ad511eecf40d405d5d1c0eb6951e74d2b6a95b024c0188c254ac080c8776b7b41515315"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x24) rmdir(&(0x7f0000000040)='./control\x00') r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r4, r4, 0x0, 0x8000002) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r7 = syz_open_pts(r6, 0x20800) dup3(r7, r6, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x8, 0xe514, 0x1, 0x202, 0x5, "29cf29c2b287426ddb33f844374acd18bfcf4f", 0x4, 0x1000000}) 4m17.654728s ago: executing program 8 (id=4591): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80940, 0x0) readv(r0, &(0x7f0000001040)=[{&(0x7f0000001080)=""/4120, 0x1018}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) (async) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) 4m17.62751823s ago: executing program 8 (id=4593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/160, 0xa0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000400)) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000080), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x71, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed395b1245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c93fbe3a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b82a016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f782563e7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a80000969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x403, {0x1, 0x2, 0x0, '\x00', {0x2, 0xad7, 0x8, 0x8, r6, r7, 0x2000, '\x00', 0x40000001, 0x4000000000004, 0x9, 0x6, {0x2f4033e, 0x3}, {0x4}, {0x10000ffff, 0x9}, {0x8, 0xa04}, 0x10004, 0x800047, 0xfffffffe, 0x3}}}}) 4m17.384840434s ago: executing program 8 (id=4596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x43, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x28}}], 0x1, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x24004800) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x2e, 0x5, 0x915}}) umount2(&(0x7f0000000040)='.\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000040)={0xffff1000, 0x0, 0x1, 0x1, 0x3}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001dc0)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x20000000002, 0x6, 0x9, {0x4, 0x638, 0xfffffffffffffff8, 0xb, 0x0, 0x79, 0x412, 0x9, 0x10001, 0x1000, 0x5, r8, r9, 0xfff, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x7, {0x5, 0x3, 0x8000000000000003, 0x2, 0xfffffffd, 0xd5, {0xffffffffffffffff, 0xfffffffffffffffc, 0x100000004, 0x100000000004, 0x7, 0x7e, 0x7, 0x7, 0x8, 0xa000, 0x8028001, r8, r9, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) fallocate(r1, 0x21, 0xbc, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) fchmod(r2, 0x20) 4m17.242348987s ago: executing program 8 (id=4598): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') unshare(0x62040200) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x0, 0x6}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x7003, [0xffff, 0x3ff, 0xa, 0x80000000]}, &(0x7f0000000000)=0x54) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000700)={{r6}, r7, 0x14, @unused=[0x28, 0xfffffffffffffff7, 0x0, 0xfff], @subvolid=0x1}) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r8, &(0x7f0000000140)=""/120, 0x78, 0x7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 4m17.204621147s ago: executing program 46 (id=4598): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') unshare(0x62040200) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000000c0)={0x0, 0x6}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5c, 0x80000) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x7003, [0xffff, 0x3ff, 0xa, 0x80000000]}, &(0x7f0000000000)=0x54) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000700)={{r6}, r7, 0x14, @unused=[0x28, 0xfffffffffffffff7, 0x0, 0xfff], @subvolid=0x1}) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r8, &(0x7f0000000140)=""/120, 0x78, 0x7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 2m23.484328581s ago: executing program 6 (id=5713): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = userfaultfd(0x801) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000680)='N', 0x1) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) read$FUSE(r1, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00", @ANYBLOB="ce033aaa2d53d07adbc42598ac364c40cedfb594b4949982f75f70c7fa76469cfeebfc5921e975aa126e572143a3848e7bab8f3a4706e1b110221b400869a7df7c390434246336d859cc3a39f90109137e95c8becc4df6e545722817127c1e504bebc39811e7802a20067a27ac84eac8c775fa42b599c5928ce0c858d633dab45b03cf2fb66d2ec330aa7b8f5ad6db0f670e5cd740e211af97674db9a64aa90225add62e7dd3987d67ee026df61e0e4a6171980aacedb15108e76f4b18eb1bde8ad423daa5e5d6", @ANYRES32=r4, @ANYRES8=r6, @ANYBLOB="83213bb75b716fcc57aa3e925b4ee857301f6ab084ea69bc47515a88af251f389b1e30ee6f12697b0f9be7d99e1f949268a4d3141b79ca458ae9b47f75539acfa0591211d47e38c5b3c4c7e40ab23cd3e32890893a64922dbad4fd42461dd4dd7e4993ef9559ad385653241dbcf2819672c42ca9b471c6aa79088cb277614e3fe344251da6d055dce9d7fe2a69257c1ca4dbadb52b2910dc409a5c657af96e45d43c90f8f6eb4c1b86ed1ed281a0bff4ea32f2756fd37fa884a75f8e75c32cad1e803a97d27b072dd2be419f2cfef54e9603b19b0adc77a98458e1626219ed7ad9864b721b446ab1def1560d73be6726cbf8c834cf9f2d7b69f4e5"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r7) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) clock_gettime(0x3, &(0x7f0000000040)) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3d, 0x1000, 0xa, 0x7ff, 0xf83, 0x3}, 0x1c) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r11, 0x1, 0xf, 0x6, @remote}, 0x14) sendto$packet(r10, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r11}, 0x14) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0200ff00", @ANYRES16=r8, @ANYBLOB="000828bd7000fedbdf250100000006000a004e23000008000b00", @ANYRES32=r11, @ANYBLOB="14000900fe8000000000000000000000000000bb"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r12, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000200)={0x1f, 0xffffffffffffffff}, 0x6) 2m22.089351086s ago: executing program 6 (id=5734): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x181141, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000000080)=0x4) r2 = dup(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000000c0)) read$FUSE(r2, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, r3, {0x6}}, 0x18) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) 2m21.984400807s ago: executing program 6 (id=5737): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r0 = socket(0x1e, 0x4, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="001005000000050e751cd0c9120fb42e5fa1fd69190ed59ee325f2f880e3dd2a346db398459e3dadd12e153a9d9d8fe048a2dbb2f8658197937aafd95db72b02e8bc24699faf98bb5d237fa0a7fef34cb7a2b0d56389bd4124c049de2138053f9330d424e64c2b619e0cbc4cafa14dc17f47c4b228f7e1be633e04000000423882b72d7ae1b9fb24cd2bd597dc51b55adb250eecce7c747e"], 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfe, 0x1, {0x22, 0x5f4}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) (async) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') close_range(r2, 0xffffffffffffffff, 0x0) 2m20.65132104s ago: executing program 6 (id=5750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m20.596865332s ago: executing program 6 (id=5752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4044057) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)="e93265a36ae0172e5e67b8a4a040383c09c7", 0x12}, {&(0x7f0000000200)="e52178456581f415517e0113d953cd29408e6c018cb53e72bcb8dcd9b434dfb8e52d0ee0e99fbb5128a17d5f5ee4d51d1d18ae0af83fbc6500c1d9170ba7eab0c8cba2fe37f9d534a7567911e30828f03134c6092da783f4d6327812232b60b8d560f28fce70d29a747051dee3ecf41a5009a8091aee21a174cfd7c2d313e580aa055498dca2e4a5d2dc63eaaf8adafbb2a09ea0e6ae8a2b61cb07ba06714ced4bfec20b6d11ae19628566a1143ec520dfa598994dfc4c5deafe27af04157b5e6e96fb1e43c4f875733cf5051297feb1d884c339ce31211a0573bb00", 0xdc}], 0x2) 2m20.348027426s ago: executing program 6 (id=5758): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='udf\x00', 0x10040, &(0x7f0000000180)='pipefs\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x2) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = inotify_init() close_range(r2, r3, 0x0) write$P9_RLCREATE(r0, &(0x7f0000002300)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x6}, 0x5}}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000002340)=0x9, 0x4) setxattr$trusted_overlay_origin(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f0000002400), 0x2, 0x2) write$selinux_load(r0, &(0x7f0000002440)={0xf97cff8c, 0x8, 'SE Linux', "4403d3b0c465cd5c5a103b99f7aee1b515eccc0c15824436877d9a3b1a5ffb5d30e047173c7983113a06337e101935725437af05b4cba26ffa89"}, 0x4a) readlink(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)=""/33, 0x21) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002540)={0x0, @private, @broadcast}, &(0x7f0000002580)=0xc) bind$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x6, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000002600)={0x0, 0x4, 0x9, 0xb62}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000002640)=0x1000000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002680)={0xffff, 0xfffffff2, 0x7, 0x7fffffff, 0x2, 0x1}) r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r6 = fcntl$dupfd(r5, 0x406, r2) mkdirat(r6, &(0x7f00000026c0)='./file0\x00', 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x34800, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) getpeername$packet(r8, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000027c0)=0x14) sendfile(r3, r7, &(0x7f0000002800)=0x1, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000002840)) 2m20.338253766s ago: executing program 47 (id=5758): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='udf\x00', 0x10040, &(0x7f0000000180)='pipefs\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x2) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = inotify_init() close_range(r2, r3, 0x0) write$P9_RLCREATE(r0, &(0x7f0000002300)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x6}, 0x5}}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000002340)=0x9, 0x4) setxattr$trusted_overlay_origin(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f0000002400), 0x2, 0x2) write$selinux_load(r0, &(0x7f0000002440)={0xf97cff8c, 0x8, 'SE Linux', "4403d3b0c465cd5c5a103b99f7aee1b515eccc0c15824436877d9a3b1a5ffb5d30e047173c7983113a06337e101935725437af05b4cba26ffa89"}, 0x4a) readlink(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)=""/33, 0x21) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002540)={0x0, @private, @broadcast}, &(0x7f0000002580)=0xc) bind$packet(0xffffffffffffffff, &(0x7f00000025c0)={0x11, 0x6, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000002600)={0x0, 0x4, 0x9, 0xb62}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000002640)=0x1000000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000002680)={0xffff, 0xfffffff2, 0x7, 0x7fffffff, 0x2, 0x1}) r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r6 = fcntl$dupfd(r5, 0x406, r2) mkdirat(r6, &(0x7f00000026c0)='./file0\x00', 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x34800, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) getpeername$packet(r8, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000027c0)=0x14) sendfile(r3, r7, &(0x7f0000002800)=0x1, 0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000002840)) 1m22.23331561s ago: executing program 5 (id=6517): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) 1m22.20629023s ago: executing program 5 (id=6518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='cramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6c, 0x0, 0xfffffffffffffd43) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.139313871s ago: executing program 5 (id=6519): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x1}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x4) (async) fgetxattr(r0, &(0x7f0000000140)=@random={'system.', './\x00-^1/$\x00'}, &(0x7f0000000180)=""/171, 0xab) (async) r2 = socket$inet6(0xa, 0x2, 0x4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000280)={{r1}, 0x4, &(0x7f0000000240)=[0x1750, 0x2, 0x488157e1, 0x4], 0x6, 0xa}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[@wrmsr={0x1e, 0x20, {0x40000097, 0x8000}}], 0x20}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000380)="c442e0f2db2e3e0f72e1910f01c48edb66baf80cb880e3f780ef66bafc0ced36420ff81f66baf80cb86677678eef66bafc0c66edf20f06f30f1efbb91c030000b80a000000ba000000000f30", 0x4c}], 0x1, 0x3f, &(0x7f0000000440), 0x0) (async) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) (async) r5 = syz_open_dev$hidraw(&(0x7f0000000480), 0x1000, 0x180) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000500), 0x2775, 0x8400) poll(&(0x7f0000000540)=[{r0, 0x4060}, {r2, 0x514}, {r4, 0x88}, {r5, 0x200}, {r0, 0x200}, {r6, 0x200}, {r7, 0x100}], 0x7, 0x3) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x2) (async) write$UHID_CREATE2(r4, &(0x7f0000000580)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1e, 0x8, 0x4, 0x8000, 0x8, 0x1, "057c823c8463e118b977416873fa8f44f223bb0ac2abd58271246d9a92c6"}}, 0x136) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000016c0)={{r8, 0x4, 0xff, 0x6, 0x400000000000, 0xfffffffffffffff7, 0xa77, 0x6, 0x3, 0x3, 0x10, 0xff, 0x5, 0xc, 0x401}, 0x8, [0x0]}) (async) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000001740)) (async) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x74, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4e96cf5f}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2ca0}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) (async) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000018c0)=0x1, 0x4) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000001940)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000001900)=0x10000}) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) (async) read$FUSE(r4, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000039c0)=r9) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003a40), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b40)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x54, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000003b80)={0x90000000, 0x15c5}) 1m22.061199563s ago: executing program 5 (id=6520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) sendto$packet(r1, 0x0, 0x0, 0x81, &(0x7f0000000200)={0x11, 0xd, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1m22.060843093s ago: executing program 5 (id=6521): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setgid(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x6b) sendto$inet6(r2, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x800002) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000000000000010000400600000002000000080000000c000000070000000800000000000000000000000000000001008a6001d0bc7239d200000d00000002000000fcffffffff07000000000000000000000000000001000000050000000200000006000000fbb60000000000000000000900"/128]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) close(r9) lsm_list_modules(0x0, 0x0, 0x18) ioctl$KVM_RUN(r7, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m21.998277964s ago: executing program 5 (id=6522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x8e, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x22000, 0xfa) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) accept$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffffe) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x80000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0xfffffffe, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x32}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x26}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(r4, &(0x7f0000000580)="f877f08ab86437fe153abba13959f5fb8dadb5d9a1a0c6fedb49f84c7123de9d57995ffc8a5cb45555f5098c8564279c8c10f572ad1399aa5b4964a9f2f65c6766c626dc98d0da7e87d603827b7290", 0x4f) 1m21.971726884s ago: executing program 48 (id=6522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x8e, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x22000, 0xfa) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) accept$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xfffffffffffffffe) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x80000000, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0xfffffffe, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x32}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x26}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) write(r4, &(0x7f0000000580)="f877f08ab86437fe153abba13959f5fb8dadb5d9a1a0c6fedb49f84c7123de9d57995ffc8a5cb45555f5098c8564279c8c10f572ad1399aa5b4964a9f2f65c6766c626dc98d0da7e87d603827b7290", 0x4f) 1m0.330811648s ago: executing program 4 (id=6709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r8}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r8}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044884}, 0x4800) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fcntl$setpipe(r9, 0x407, 0x3b05553f) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet(0x2, 0x6, 0x7) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r11, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x41000) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) 59.437519214s ago: executing program 4 (id=6710): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{}, {}, {r1, 0x9008}], 0x3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000200), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x1, 0x9}, 0x20) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 58.49061601s ago: executing program 4 (id=6721): bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, 0x8}, 0xa) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="3eb6c3d11767f30f096566660f3a080900ddca66b9800000c00f326635001000000f300f8a97e766b9f70300000f32f30f09", 0x32}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x5836, 0x6, 0x100000001, 0x7fffffffffffffff, 0x1, 0x5479, 0x1041, 0xc80000000000, 0x2, 0x1000000000000000, 0xfffffffffffffffe, 0x100000001, 0x0, 0xfbff, 0x8000000000005, 0x1], 0xd000, 0x20280}) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001040)=0x2, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) (async) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x0, 0x20}}}, 0x10, 0x0}, 0x4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffff1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r6, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 32) syz_io_uring_setup(0x61a3, &(0x7f0000000280)={0x0, 0xaf05, 0x10, 0x0, 0x107}, 0x0, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) close(0x3) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4804, &(0x7f0000000080)=ANY=[@ANYBLOB='bOsixacl,\x00']) (async) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 55.231018676s ago: executing program 4 (id=6755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x8000000}], 0x0, 0x1000000, 0x0}) 55.147311708s ago: executing program 4 (id=6756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) munmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="656664362664660f388121b800078ed064ddc166d8f10f7861300f352e36f30f1efa36262e660ffaaf001081f400800f20d0", 0x32}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) close_range(r0, 0xffffffffffffffff, 0x0) 55.037137729s ago: executing program 4 (id=6757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x1000, 0x8000}) lseek(r3, 0x2, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESOCT=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x800004, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) pipe2$9p(&(0x7f00000001c0), 0x0) getrlimit(0x6, &(0x7f0000000180)) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x147342, 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 55.0355714s ago: executing program 49 (id=6757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x1000, 0x8000}) lseek(r3, 0x2, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff", @ANYRESOCT=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x800004, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) pipe2$9p(&(0x7f00000001c0), 0x0) getrlimit(0x6, &(0x7f0000000180)) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x147342, 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 24.88879095s ago: executing program 9 (id=7114): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) signalfd4(r1, &(0x7f0000000000)={[0xde04]}, 0x8, 0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) close(0x3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0xb6, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208380300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x37, 0x32, 0x36, 0x36]}}, {@inode32}, {@size={'size', 0x3d, [0x78, 0x6d, 0x32, 0x37, 0x67, 0x32, 0x30]}}, {@huge_within_size}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x67]}}, {@quota}, {@size={'size', 0x3d, [0x6d, 0x38]}}], [{@smackfshat={'smackfshat', 0x3d, '/dev/rnullb0\x00'}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '@'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) 24.238021542s ago: executing program 9 (id=7116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000020c001980080001000e0000003c0001802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb0c000280050001003a"], 0x5c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0xa, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0x9, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xd, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x7f, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x3, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x4000002, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)={0x7, 0x0, [{0x7, 0x2, 0x3, 0x5, 0x18c5de18, 0xc, 0x8}, {0x2, 0x3, 0x2, 0x6, 0x5, 0x5, 0x3}, {0xa, 0xfffffffe, 0x1, 0x0, 0x80000000, 0x0, 0xff}, {0x40000001, 0x4, 0x1, 0x7, 0x0, 0x1000, 0x8}, {0x4, 0x80000, 0x6, 0x3, 0x3, 0x7, 0x9}, {0x40000000, 0x7ff, 0x3, 0xfffffffb, 0xd8, 0xd, 0x40}, {0x80000001, 0x5, 0x3, 0xffff, 0x1, 0x81, 0x7c9c7b0b}]}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x6f, {"b9030100c0b823000000ba000000000f300f1b2b6536f20f70be12a0b37b6c66baf80cb80a62d98bef66bafc0cb036eeb9c80200000f32400f3066ba4200ecc74424001d000000c74424029fdd0000ff2c242e0f302e2e0f12ad00300000"}}], 0x6f}) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000300)={0x3, 0x0, [{0x40000001, 0x6, 0x2, 0x8, 0xc, 0x7, 0x8}, {0x1, 0xf9, 0x0, 0xd, 0x2, 0x4f2f2d3f, 0x7ff}, {0x1, 0x5, 0x2, 0x6, 0xb6fb, 0xffffffcb, 0x3}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.669164401s ago: executing program 9 (id=7120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x541b6104d5f326ad}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/221, 0xdd, 0x1, 0x15}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x7b, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764"}) 23.549966303s ago: executing program 9 (id=7123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="36260f06cef30fc7360f009d0f238bf3f236f30f48ffc0d5b0ba4100ec0f5c926d38", 0x22}], 0x1, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) r4 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/212, 0xd4}], 0x2, &(0x7f0000000440)=""/65, 0x41}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 22.467669782s ago: executing program 9 (id=7135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x9, 0x10, {0x10, 0xbcfd5ea04c22d6fa, "8294d4fb1cf6423220914eb85103"}}, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x911) write(r0, &(0x7f0000000380)="c462332fc46a87f4c8433dccbe9d7d2fcb9dbd849bde790b68b416c946bb00a18e8276019046471faed4fcfa4bec0d54a191141227a24f1aad15707f02d7bda6cc6fa87e580c06b6045cc4c5c0aed6d6d38412a33b92c2c2e8727bb6a7217b0dee8f1bef6883d7152466722a60fb87b28576717c10164c4b5328287ce3d97ca17254e992b9a8f55c4411f4230f3a10e865a8a107", 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$binfmt_script(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0xb01, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x134, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe7, 0x6, "79b37e9f3b107a6faf0b844f64b1d0099f7459a6abce6262d6f5cd2db36c6e9f46e0884298cd92c9a0e4c1688fecf076d0f58577f370d52b0e1437c068ac38068e4e0d34acff7bf694d7bf830f1d7b7ab12e22f70fd65bc6851674317b125b755ad2c750b755ab9cb72497b47c9862bf035366b8e56c03796b4d9c22041f178ec3fba52e25571182dae7790eba4a3e0aad9582f02691e7cdbcc14db0cf884c825b0e4fd8bab9f9e5b2b149a9ca64c8237eb0131b87656462789e7212a43c1cffd632e7559034a8a93ef36f9e85bd7f639f566a8b602c3f756bfbdd7d9f698c6e7a98fc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x24004801}, 0x44) close_range(r0, 0xffffffffffffffff, 0x0) 22.306008165s ago: executing program 9 (id=7138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="c10000000000000001000080"]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB='O\x00']) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000839e21ae2a"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "9600"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, 0x0, 0x0, &(0x7f00000001c0)={0x40, 0x19, 0x2, "ab00"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 22.275446475s ago: executing program 50 (id=7138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="c10000000000000001000080"]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB='O\x00']) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000839e21ae2a"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "9600"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, 0x0, 0x0, &(0x7f00000001c0)={0x40, 0x19, 0x2, "ab00"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 9.792604621s ago: executing program 0 (id=7172): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 9.789057391s ago: executing program 1 (id=7173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) pselect6(0x2a, 0x0, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x5, 0xf039, 0xffff, 0x2, 0x7}, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.788224981s ago: executing program 3 (id=7174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x2, 0x2, 0x2, 0x5, 0x3}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) setresuid(0x0, 0x0, r3) setuid(r3) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xcb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x2}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x284d01, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x12) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x9) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 8.036517861s ago: executing program 0 (id=7175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 8.035868601s ago: executing program 1 (id=7176): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x1f972000) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000003c0)=0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@delsa={0x1e0, 0x11, 0x10, 0x70bd2c, 0x25dfdbfd, {@in6=@mcast1, 0x4d2, 0xa}, [@policy_type={0xa}, @policy_type={0xa, 0x10, {0x1}}, @policy={0xac, 0x7, {{@in=@private=0xa010101, @in=@remote, 0x4e23, 0xfff7, 0x4e20, 0x1, 0x2, 0x20, 0xa0, 0x73, r7, r8}, {0x6, 0x9, 0x4, 0xffffffffffffffb5, 0x10, 0x7e5, 0xe, 0x427d}, {0x0, 0xe, 0x5ba, 0x2}, 0x2, 0x6e6bb4, 0x1, 0x1, 0x3, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @proto={0x5, 0x19, 0xff}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e21, 0x44c, 0x4e21, 0x7f, 0xa, 0x20, 0x20, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, {0xffffffffffffffc0, 0x5, 0x4, 0x8, 0x83, 0xa2, 0x800, 0x4}, {0x7c, 0x0, 0xa5, 0x7fffffffffffffff}, {0x1, 0x100000, 0x1}, 0x70bd2b, 0x3506, 0xa, 0x1, 0x4, 0x4}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}, 0x1, 0xf0}, 0x8840) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3424bf000000", @ANYRES16=r9, @ANYBLOB="00022abd7000ffdbdf250a0000002000068008000600010000800400050008000100020000000400020004000200"], 0x34}}, 0x800) 8.034960842s ago: executing program 3 (id=7177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002e19d80fe807ec25ae7a20e652130085a041052010156020301090212000106bd200f0904f808007af54c05"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "7293d66e9102447fddbc725a3c3ed6d4"}, 0x11, 0x1) 8.033911252s ago: executing program 0 (id=7178): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x100000000001f, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x8001, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24040450, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x50, r5, 0xf5d93000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6.164944184s ago: executing program 1 (id=7179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x8e, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="4c0000002000000825bd7000fedbdf25ff000000ff010000000000000000000000000001ac14140d0000000000000000000000004e2100074e2203ff0a002020110000003c908764a95eae06220545ac1cb5995468d8c59d3c046378ac", @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x200040c4) r2 = socket$tipc(0x1e, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsopen(0x0, 0x1) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000004c0)=0xffffffff80000002, 0x12) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x3d, 0x3, 0x1a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x800, 0x9}}) sendmmsg$inet(r2, &(0x7f00000047c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000080)="d63eeb86ee520d290cec", 0xa}, {&(0x7f0000000580)="a3a01d7b34e5e74933b8aa920792de7e194cad4be507f14b634b68463ce4e2817199b005e16123c84eb9b6db0fae7accfeb886f4051eea3847058ab51cdb97a1d35a03ffa6cc8ca030b16cde5542ebd5f7fda85dfb83a661e56826e13f854e54e2d5ec", 0x63}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000004900)="c6b94c7649052a7e5f3948984caad76ca0424d248c7cddc906cdc9247e0d039734a43cccca10638f9edc9f77ea309590e1e781853517dec031ad8f032bc0cae87a366cb633fd5b2a2470ad6c43e8e531ca82bd17065d8f536263bd426e77c513b12bbae9bc088a674e5a5f9b0931d74c899e5a45e9513ab7dae35b3bcf3f050c15d0fd0be5f72996e25b8a2be15849f64d5d74afd3939c17c6515f4add756d1d2985df042567713c6ecbf3a5b7f8633f5fb9731448eb2e265a3e4045f2a49f74c02a9080f6362542d694d2ee354c3f8a1b09d187337c60a952c23751403a93", 0xdf}, {&(0x7f0000001700)="1902fa25258361e96acd7fd9892b3d820e6635d93b4aa76e018e4f063686d5c9ce75412d76e4512babeb888418ec5ba2a82d5a4a28984f1901584bae918e5221aa3a6a457c2e7e68daf82bd81c253cdc4b1b013cdcb2344d9855b6345c2d9b3ae9a8f594305969a01e9e33c894622276f323300aad41e99414728c65e04f603f5b92d5886c123ac725882f68c9d05ee9084bb00c34353f36ceab9cb27781595b7e2e62bb2dba538fac90e6d4ec68881659", 0xb1}], 0x5, &(0x7f0000004b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbf}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x67, [@empty, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010100, @multicast1, @local, @private=0xa010101, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x54, 0x7f, 0x3, 0x4, [{@local, 0x9}, {@local, 0xffffff4f}, {@rand_addr=0x64010100, 0x80000000}, {@local, 0xc}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8011}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@rand_addr=0x64010100, 0x3}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x37, 0x0, [{0x0, 0x2}, {0x1, 0x9, "322c611d63d180"}, {0x7, 0x10, "33fffe759ab5d25c139bd311dead"}, {0x5, 0x12, "e1b345407c5f68e393d750b0bd679ff4"}, {0x6, 0x4, "fbe6"}]}, @generic={0x0, 0x12, "73c216d36781fb231bb749bda3666ce5"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x114, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xcf, 0x1, 0x1, [{@multicast2, 0x2}, {@private=0xa010102, 0x6}, {@remote, 0x7f}, {@multicast2, 0x5}, {@multicast1, 0x8}, {@multicast2, 0x7}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xe0, 0x3, 0x0, [{@local}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x9, [{@remote, 0xe7dd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x1}, {@rand_addr=0x64010102, 0x3}, {@empty, 0xaed4}]}, @noop, @lsrr={0x83, 0xf, 0x4b, [@rand_addr=0x64010100, @empty, @private=0xa010101]}, @ssrr={0x89, 0xb, 0xaf, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x65, 0x1, 0xf, [{@multicast2, 0xfff}, {@loopback, 0x9}, {@loopback, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xfff}, {@remote, 0x2}, {@loopback}, {@remote, 0xe0a00000}]}, @lsrr={0x83, 0x2b, 0x12, [@private=0xa010102, @loopback, @private=0xa010101, @remote, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @multicast1, @private=0xa010102]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x278}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000048c0)="7dd96f52812b9c5c6280cb2c2c46a9c41491f71615d06938ea199b4466ac24a4f32eb68371426aec3c", 0x29}], 0x1, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x50}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000003080)=[{&(0x7f0000001ac0)="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", 0xfc}, {&(0x7f0000001bc0)="d19ff379da4394d21de2f7595d0d81f21fc974049cb4c3bc85077331b8a0882aa15f718c0c5ed9427f97a5e8082f864e97e72e473f2f4eca", 0x38}, {&(0x7f0000001c00)="1fe648b249764dec2242d40a8a9a47276638a3b275e0f2cae8c46914562465670e742bae7fb151a52c922330b5f77e80ad9ca5434753fe2b9982e1133a7cdb4e95150fa7fae45c2b615f8f0df13c811a3ce6df7b83aa96", 0x57}, {&(0x7f0000001c80)="52daf75536ecdd8cec63c9e5c3db1752277b8f1048548b476d9c4b52b8b0e3b13f13ee448a3505065abead8aff719a111c4e9307d762a9935e9f17b196ff669cac9808004ce84b03599b6cd77693d816bc0cc376302368fd74f88a7e6770fcef4460bc7aaa6c3b885e1bf0aa848d20e6844526041d4045b605f2b88961479d2eb7ae06fd2300a2e718a300885f1ffcc8091fb2d324947afba57bcf849fc10501aa2b4834d92358dbc67012262c64834b3cf3ea1256924af70dc43dc187fddf47e411f359c7d40936145dae8d5da523239f29c90d339e2dde94d5e2e39e89050a2577b48c3ff41a929c2cc50ef3e23f7860732b38", 0xf4}, {&(0x7f0000001d80)="153225d783351e6ebd854245665147deea701bd71a935c480695a4e34b", 0x1d}, {&(0x7f0000001dc0)="ac5ee4d93dcd", 0x6}, {&(0x7f0000001e00)="266bb4cf418592ecfce94ac62fd3f2021f2fc4b0431744ee045339e6f078a90264ce76fbd0fc2a51af873a4722d30882f19b620f4d3dabe4f5089d0ff251f649c8584695f553c0e6b4bf8161cac1198d4df7c074a64074780a4cbdffc5cb7d4234e358731bba88cffd4d50cdd6", 0x6d}, {&(0x7f0000001e80)="8a9355fb1a70d7cc11862d57a05acb8d0256772380c5f6d98361ca5b75b600375a3bcba429df4dd5d6e02d7edc5c60e79ca3a6a9844cdca1174595ddb400d722dbb72fd551213216b8067d77016242d8e75bafd1816556ce67be7642552a9663e368f64b3127fc4a19ebc4ac3d3b226ec62a426c8f329a65c87c9b256f576142c710dc8d8db77f829ce6fccae57c20b11aebc949b3d64c315ade952be3f98fb99ddb62324fee21382f433c48f2c856d3165aab9fffd82d5396ff38961251d7380f560af8150ce309cc3331d19aafc8", 0xcf}, {&(0x7f0000001f80)="f199fc2aca9848beee60eb0aa41ec458698eea819b2e83ff123912ad7259a03c3b4baaab46ce36b8d6bc715fdc9990c7ea30d5c44de66e15fee6cd3cff5b689393a1e4657330677d5ea3eb7870889ac5cda747e8c36ad20edf31cb71a5449716b676106467acf1c68ab20cfd43e52dc2a8c4eac903e293cfcff724522e8ed1e2b552d6f4084bb9b88fdc97fe2a4bf7992fd465fc60fc49364316045a2c408e2c9cd06f8a03c2bb2b11f011c0875e62b13c99ffda2aa82a063e22234e9f4554ba6aa46197ee94df4b735a7008a0c0dbe4f8fde7e1b5e0073dc134b5e804b5305168a1276981be64f552", 0xe9}, {&(0x7f0000002080)="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", 0x1000}], 0xa, &(0x7f0000003140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x30}}, {{&(0x7f0000003180)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000004700)=[{&(0x7f00000031c0)="cac997f3a85da96435d2bf9ef21b86ebe97cfe42ff3915e4549f7ace87f10cf7383ed081512abf561e9665c215bba3d2abe32b4aedc4f6ef6a026a0ac84cc74c0cd41bfb8ef7bcc1184f7a170f73f543e00718e5430074faa42c868ae130e90e45c00c175c23fe3fef824a219e284fef2a9e4bf3541ba63bc19b66052ea74628bd66d8fc4d0faee4c438bae70fbddd3741049fca7838f24f065b715ae9bb21", 0x9f}, {&(0x7f0000003280)="439a6774122211266da67288238f00fdf211f17718bce89f46456ebed3e3d86abb4fe6cec214c8c56d5054f49fb38839ab049b82b993d5c0ad2e4cf0e19e945fe77864cc92b4e8b380dfd38a544e3b0c9d934b778ee570473ca9519ccdeede58f5244a0ae9de4197facea45c4ec1e53202a2001554ea261fb310d2495949b53a9e0c29a1b7163334921f8b0f3d351c7a83cb78349f7adbb02fafa3f0cd34fe0fb7000504a8a33236108aa841a365a07d0ac7d07b02d55924f0e5ad1e117eacfbc7ecd974585b5ee10d974a6f7df9a859569c127dc73de00178c7c99cb083cd24789db66f5003282b2cf6ccc9f7e68bc7c230c57c08afd43edc656ef04b6817365ef1ad32aeeb4ced18516335333a5c739504415d75b29fe595816eae8b68389ad6c9b41db1c1f49c7a790abb13a61c0d218c3ba0ac427f9c4a55a9a7a5b6ce0fd7d3b671fc19e5e3564d588b592adb7569c3183d4c4be4952c14551224269132cae0b95535e2ca5917f0e6519b11dc43b2046e2f28d629894484f79934cdc224b8767253a20f7bb81dcd73c715cbfd33019e0f99dfd3d888cbe693e55918b7fc3899f58eb691dcd48ddff2347ecc917de5b2b1789d7911b1fde94d0be06d2f3770b3247ae038a719c3e3013309fbfbaa3dc726ef59acfbd9b094895767b63878daa7c6d1d4e6d346c38e836c6e5b66f96e6661ad5fba059336f442931604baa6c25027823e21fe4e55ecd964332b6f2f1ca2f1222c5317d378fa814c4478fb698bf1273f9d6534ea0633a9be9eb507838e2ae55b58735d5aa1a82150e4d10df5096e9bea84717b3a84591387dfe7ba6eda4f0ba8c00275563d3f0979b25f5a1f0fd0382a605d72523b9e9d79a124248444bb58d2111e82119f85aeb935737b989298d23144f19b96d99979974dbc076e2854f92be677cf28e76abd5465a92ae5ac656aa24ec88759679f70e7339525558f8311847426d9187ddf7bc0235d2587a130bc9a57df100b7fa1459ccdc6a032d971c9786406575b29962c5a7dbf3699b76768dd068ce08ef83ba4c68c8331bb4452dc664cb09702f5677e50a06d6b1ef9746a0a5091f0161ede35e5f9b681c56d93cb2a589846ee33020beae3e027371cf616497e8b35246ac36aff46edd151059e6fef7c7e66acb1cfcf59416cd980214499355e819e89506d7219366f99cf25cfeba49958af58a0f34a5ff0f61e195f8881ba930cf08ea8a1753cb30ed3f023502eaedc004307d3a94d28e1dabffa4ef8d90a9405bbfc8ba941c26051819c24cd387f74c48ee6eb83411e4d1bcbde41dec5f545cc5b26763ff6177f411f93a9c5a3b7ee325db36ebdb2940ec5c8ef3649d846663e80f009643117d1ffa0d78b0f5fe5718068558f763b7a6a8fea59a94cc46b87e0bf75289c5d42257bf33737c70148b0de15ac748c21fedf4480695539e192f7288424e2e89bfc1d32ea50d1abed08846242edff6ce9165229eef278920eac6200b10ad2353615e6de8b65fe42e56ff67965e5b9f31ad1b67f66abf9cc7044d54fc52a3a343b3db5a86548e682f2f8f06415d47d9201881df1165c1f4c522ac697a7054579587d8b60263abb51aaae0dabe068892aeebab4ae775fe14a8fcc1311eb493b7d68ebdee85e4d253354327df1605ca4acf925946d478a0bbfb8bdf0effe1240ff0b2006088aa62d4c8685f8bb2299667fb8a876da602e64e1ef0414608498510c3653b932490dab8f1be965e84f1f76b81d668a4c97326f5e41a3d70c1642ee080d883671fd12ada278abe35708a6dfe6f1c3eb50609f9da269501037387c4ce4735594049a10ed66be55b9d14002045ea8bf5a42ba8c808e4544e7946ec18f4508b6dcf35bc863410b73b2ba5cdaa0ff90b4d41c7842cc671febfbd6075e205ebaa755e73baafed532bcf46d52ba91b985dcaa20c75ebc518d438ae17a34b3b377fb3e9fb784efeb77aac20c86db0750643b5eb2974330d29a283a42d04a2bf32934a786007dfd513a0c4a79bd9c180ad6a957b8687f92bf68b3b41c7ab1ca16c630952d3d6c5af76352169f489f068a5efc162421e92eaf071a92e849cb3adbbb6cb64aca847f928fcc04576858429f34172e782c97058499afef21e5dac9b87a7eb80ce9bc00a8ddb56865f202c62f275aa4024f3ff07298bd773e7e7fe6d5fe70050ae40964415a57826deaa73afe79821a5df3d159c5ad259439c14a67367579bffa19459ce073b7c450eafe37cabf7346c64c041427ad9353722f8477fe41b62fc754b009ceafd0ca10837cea425c9aecd55090e4e0682ae5799135a32db6a20f95719809aa5911a5cccf7aa09ccaca242d923017fe97d9ab741759103e664a1ae9179685164191a29f27893e45c5dfb40d31f9496e95105b0fa4f8d154488c52bd004e0284b85917caf0f843cb9fe322ab895cb9ac222ae9bda48d185e07e95c3d5edd3ad85d14c67251d3f52896701b2ea9accf0f5fa2ddf0a1a3d5aa8a13ff8cc651ca5ab717a14f7d8987c3dd0fecff97f57bb866cda467783301d14f2e622ea87d8b77f891789ad7e4fe9e7d754a663948ea54456fb807063cb3705232b4636a9e6075af130ee4593702849cffc6562c89a4dd844ac4da92d9074453f6e443d9f9a78cd290eb5c190f6b68c22d068f67f253731ec007038dcf605d97f09e86e63df7a23621fb267b96934bec10e4c921f1274fee40a6138d5ec0a953a7bd80f5f57122714a94074eb858a1f23a67932ce3fda5013d67aafd48e7f9ed1ac7efb830cf7b2b897daeca35b15631f3ac191cbd9f8fc7423a92fea4acbbc6de83da2f79483057e5377098acde7c9a659bf4808fb0d501975696bd7cc61f5d3ef61baba7fd091ba91c9b8cbaaeac54e2cc680c5910330d6b331b0048a04df4723c296bf1eddf0a7c6ded067fbd60ce66528418d72c92928b79c26512c0ba0b34bf15eab9db7a204ac7206049dbe88880abe1fb7023fa259f34f3bf23ef7c03540cb0122c328192ecb0b7dc58092e9ff7f93482ca6c3f494acf69dbffe569d9c738ea99cc33adcba12ef1aac8cddae0b14d92573f03a4c7ca5bbc70e3cc08c4ac0afe0fbdd19b07b2919011c5297f1d996d0985091d1fb6c4bdc38cc6b69a572102bc4435b2ad75cc4eea26e78a4493d9f0177f9c1037a610030fe36d6268f940881eb22667f9a06d0e090c9f417686eb0b150a4677e00a02594ec9a9ea44c7b44fb28b06a6f266a4367e1ffcc28cff114c2815f415931977b9c0935e0ef739a6a0cdb60edec88c2536241444134031161ec686249e0f09f439127b1eddc5492aa3b16253b08aa758feca955a3a562a266269c1b9c83a1cfd3a68c336f366fb880d7233c5cadb11c6efb27d46e6cd8cef53a3a68ee5984f375328eade2a585c0226a2b10e4164d0c2e4a64ed99e63de242d72338320791c83a9342e5d38200d9415b830b8b5b3b8d6afb5f4726769088b033688b49a55e6cb8d236a190a7c7601dd47032c96f0afa120d6d3f72f79c75eb16aae97a9d06d7dcfdcba87452135315fd655763e4759a1367ea576b94f78dd0aaa0fd976563a47819b68cc49941d446b000b7b69e92b9e09a806214add7f2f477b9689aca82fce4f34c707f5afa6c6010459e470401d972684f645b540eae6c0bc8a569da60bc7b734c8c000da1eb4f14d3fce55f5f44064d2bf599b782be51f24401229b121feeebb475c79989420420d10bfc3e4e43998c72272e34849c7f019cb44f9d74745e2effa1e94db40c818bf94936eef15bd2459a7a73ef8bfaf873e79dda1d3ef4a8449b90e93a9979e39172b0efe41c3e3a3097d0946c1a0b876102854b2da52ecca6ed9e4ef6bbd143b1563ba362d4296826a7c7347a974703560116f6cdf3a7e0bfcd6b861084000494a36e24575729c6f79a4886225d383c3b716591b0611b55ea762727f7dfb82dc1a68e1747d08cbd89361914c662e8b4ef009289b1fade862956ebdbba1ff82ec8bb1493622747eb9761b524b898896de80a0691c165120a609f259adae81730473e3f24f3e1319d0c3d40a3786c529cafb94b7af5ff84e8f2e7caa9e632c7a98ab2ae6049056587d0eb809e879aae04957022652dc5b9efa2c2531691cefe994a727a90d86fc7d6af6340e5ec5f25e8e9ee432a377e44ed09f78856c88236360e9922968482bee1519a4f365bed0fa07fad1f4491b3ffe4c67407170414aae2ba9d6f22fc4a1419f47b4c0b17b5a11b7e1a44853866495bf6d48a6cba4ac9b12e76f52d43da21f2559d5741b402c6e727cce575b62f81bd19dd7dda86fbae93bf46fcb0cd4ddc06b531ac9db8709feb964cf03375a4995ee42ac6b0ec3680cd2511d9f194ac1cebf358d9d368300b0ed9b235a19a49f435a73fe607481bbe76c33f7dfb075b8889f4c80aba8268c8c1e134c5948898595b538901e9e54ca3129d577fda0dafd01f69650c6871e9374f52f34d78e345fa58d4415adb88e3fabe5a23c726670748122f072db725302afa61ffec54f184db3b232b734e87c7ae3acce6d392898b849218ff914fd976e4387a0fcbbdb89471aa95c751e8cf9df120817b994d82e54d8c56fd923bab9093ac7f7edd0ca770a83319a66499bf24472d04c751237684388ef6614879e8b5333da8cc51026c4872668de67691eb3de65859d8bcd981f469c254fa61d9f492830f9634922a65fc0a72e44370935999c44141c1f053079f1ccff6ab5f41583339e6ce4c1897f54c9cdca96edeea6778349fb237d69d08c400ebdfffc608647047f9f828d13e6c22b162f01bfff29a4a968a786f5c1d751545d2816cadc85cde0192133fe121d4ec35f9765530c6886a17f00a7786bf903b2181ba896613740251d2b850c5889b7901a8b14492089f3c7062389124d0363311d77873deebbaea545de40851c9820e648779d3998772a1206eeb287014c32e2c42862655e9736da28690a3e0c7134cc4e04eba1423fa9a39ee2efa1fb56c7f4747a66a8c40f8d50d211b47e188a1cb7142867ec8110c2eeb41d6cb62d5952b29d400dd2cc27eeade6605792d5e8d71e930465c0175fe9f753d9d05679e748a160eee304e9848faa5326b964738b940fb03948118198c11e4685dc3695c72273ef26a00a082fd2e5f6c5ca7bd9ccc8a712ab95dda4cf40313f740f4e99e7c383966949cb9a8732a363cd76892c1c20e7439fd482d89fedd9b26a3fd3175cde1d829425028a8f68378e1a2402920f98460d8c19090ae3f22892512365bdce413f30660cc0f246157fe51a6fe35bd789f8e75607a5db4386dfcf1a553d26f79622dddec764c1b60a9f083522891635abd76f083e101eedd7e1bfcba57ca47ce5b6ef3e77c6139642594abee0b4f113a37ba7a7319a91418a70fca17feea7b14365d9a3227bea197e0576541a2891b7a06c5bf9b62b5ec60700b5fe19eb6a033cafe402de887bd06924bf4ac7a020f0f1cbd2fa542d9fdbc9027b9f9bcc9cdccf1dfe174dd0af0cecf5f8d24bec5d594e49dcce8e0a29bb0d386b94519714f81265cc6152b27cedf7702aa3bd31f5f9a86ab2dba05200342377b87fec7cb9a60dece6ae54c8975cd38c46962bc9536b26abe7188214a90113b133b1988dd21e50a7040d887a9052e771c814de374b80f9586f32250ce997f07d266b0f31baac2ce720fe20e42aa9239f010319675b74baf5b94232d3cd48578a9fafae8d8319e8c4f3189fa0475f12f40d45d7fd065c0dff4104889750065d487cd3d12eb85445c1f22ee41f563fe7cf4f3c279b87", 0x1000}, {&(0x7f0000004280)="dc77ddbaf3152b85f329dc1b74c39a6595be5f14c295a12f6abf3c265d9ecf8bb4cfa321c825740806aeebc3f6e7e5664638a2193c2d2b9c14301eb457b993e3456603cfe071fba01365887846af0bec89e9a15b321869f499c226267fec16a5693122691265e54b4afbf937193d9a085896df8ad790df779d72e460084db6be262fbfd561597a191122cd", 0x8b}, {&(0x7f0000004340)="df16d288238b437be70977fd2d71599ac5625399ea2d49d08327e5d763781e0e0390c1b8fdc0941b3a534a9df43c4edb936f87f580f9831883d60a40d630c43a923c8ade45bc63367fe5a4c4b1409d1b60f6500d22aa833987a44630aa94cc479c3d664ec47ade65864363ecb72c06424d2d17fad3", 0x75}, {&(0x7f00000043c0)="1eb6eaa47a4d921de97569a4dc9e71feb433ba16b3f2511f9b0a6ed3ce7e019a7661fa0f3ce1a24254bfca2b96b6b70a7ebec6e763dcd79a628c0d77d3335ac69e283d931ec5659a1e6d8767e2eee85e7771f52d8d1a30e71c67e64015002239181ef2b3ae9029bc9cfaa848ba9d3a7b89a496129b1a280a096d03adc37f65a0935a17393e813cd76bb4d573ff6ee24e4f73eb5c0f2a1adfbebbe461934d4751b4529dc895416a6c0092c3a54c661a4141aecba3095871c778b66c620bfef5b792f3d33719aee35cc87a1edcbe175556a4c96d3609299cebe579550d", 0xdc}, {&(0x7f00000044c0)="77e7b3973d52835eeec36403d988b2fd6bab50b92468f514c69f0c6f8c5aad11cfe3adae731e71d832296e2b38defe69867b20b9030cd5c24c13a3b79c78a9e6c98854e369a4360b39e38f220d7315dd148e83a7d20d423daf4296c352c3e6bd1553fb9197161b311c5b55bbf19729734296ed65642ea58dfd26fbe46422d50313e36b9bd14902ddca4cb1254555d895c36982de2ed90b2ff94750ca4b6983c2ae83905382d692010e704fa6a6c700ad913ca78a36ee953acfbbb11bd943", 0xbe}, {&(0x7f0000004580)="ef62d873d556da25cb48a586bcc565b0454d15c4ee152d80126ac4e50f5fccff8d8caac4db22950cd0d14c4cece38ed42f3065b89721fb991aeea9ddb22071d06fb6ec3af7999f7b01b8027998366aa6815fb0c5aeac1e245016feee06d182819291271d9d8604185661c46d4deec84c222e4aa3af6c4c6ba2b163ab326216ec5c86609033d00f54899e82fd58dcdf66af2d1894a941516b30349d44b8f74f65b8d5b45167d98adaeda8e487cda24c4358b6e848c31c5e7e4a734f8eb2fa0592f88091e0b2c1c3767290a0c00393d4b7479e814ec49a2279d4ba84f3c3", 0xdd}, {&(0x7f0000004680)="2563921a0f7b4d83b8117c", 0xb}, {&(0x7f00000046c0)="8e416c4a78b65fad2c649a7ec779da22c74bb97a3aa9fb5430593c4218fdc72b", 0x20}], 0x9}}], 0x4, 0x4084) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f0000000140)=""/37, 0x25}], 0x1, 0x1, 0x1) r8 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000001600)={[0x8, 0x7fffffff, 0xd3, 0x8000000000000001, 0x8000000000000001, 0x81, 0x5, 0x0, 0xffffffffffffffaf, 0xc1, 0x7ff, 0x101, 0x0, 0x5e, 0x39, 0x8], 0x80a0000, 0x40082}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0) write$tcp_mem(r8, &(0x7f0000000100)={0x0, 0x2d, 0x800, 0xa, 0x40000000000009, 0x2c}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0xfffffffe, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x22}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 6.164460074s ago: executing program 3 (id=7180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) open(0x0, 0xa5941, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) epoll_pwait2(r1, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$P9_RWSTAT(r1, &(0x7f0000000200)={0x7, 0x7f, 0x2}, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000100)=[@cr0={0x0, 0x40026}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mount(0x0, 0x0, 0x0, 0x10, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 4.269376797s ago: executing program 0 (id=7181): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendfile(r0, r0, 0x0, 0x5) (async) sendfile(r0, r0, 0x0, 0x5) 4.264705076s ago: executing program 1 (id=7182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) mlockall(0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r4 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x40, 0x4, 0xaa, 0x1c0000}, {0x5, 0xb, 0x0, 0x399a874d}, {0x11, 0x4, 0x6, 0xba}, {0xa9a, 0x4, 0x3, 0x34}, {0x4f6c, 0x81, 0x9, 0x8}, {0x100, 0x18, 0xb}, {0x81, 0xfe, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r6, 0x2, r0}) syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 4.264061117s ago: executing program 3 (id=7183): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7fffffff, 0x121400) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x24202, 0x0) r4 = fsopen(&(0x7f00000001c0)='jfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x86) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x2, 0x8001, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x8, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x97, 0x5, 0x9, '\x00', 0xfe}, {0x9, 0x0, 0x6, '\x00', 0x10}, {0x7, 0x4, 0x8, '\x00', 0xb3}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x83, 0x6, 0x6}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x1b, 0x3, '\x00', 0x74}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0xa3, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0xa5, 0x7, 0x0, '\x00', 0x7}, {0x3, 0xc, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf5, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) fchdir(r6) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x2dc0d000) 2.218976222s ago: executing program 0 (id=7184): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) splice(r0, 0x0, r1, 0x0, 0x9, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x30500000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x478682) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe0000000000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000001c0)={[{@redirect_dir_follow}], [{@subj_role={'subj_role', 0x3d, '/proc/asound/timers\x00'}}, {@appraise_type}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/timer\x00'}}, {@subj_role={'subj_role', 0x3d, ')\\\\!/#@!'}}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001cc0)={0x2020}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.218578762s ago: executing program 1 (id=7185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 2.218034032s ago: executing program 3 (id=7186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x9, 0x8b}, 0x0) (async) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x9, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) eventfd(0x2) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) (async) close(0x3) dup(r5) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x20, 0x0, &(0x7f0000000040)=[@free_buffer, @increfs_done={0x40106308, 0x1}], 0x49, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f256815f9d4e9407e9696e9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542b60ae4f88822"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x20, 0x0, &(0x7f0000000040)=[@free_buffer, @increfs_done={0x40106308, 0x1}], 0x49, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f256815f9d4e9407e9696e9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542b60ae4f88822"}) 1.14127ms ago: executing program 0 (id=7187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='\x00', 0x1, 0x4895, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000680)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000e0060000"]) lseek(0xffffffffffffffff, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f000092a000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r8, &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9e, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xd2, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 908.661µs ago: executing program 1 (id=7188): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x181, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) open(0x0, 0x1a1342, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x57, 0x8004, 0x0, 0xffffff98) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)={0x2e}, 0x8) setsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tvans=fd\\rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x181, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) (async) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) (async) open(0x0, 0x1a1342, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x57, 0x8004, 0x0, 0xffffff98) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) getpid() (async) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r2}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)={0x2e}, 0x8) (async) setsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tvans=fd\\rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) 0s ago: executing program 3 (id=7189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000180)=0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup(r1) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) sendto$inet(r2, &(0x7f0000000100)="f78dafcf6cb752445c948092ba64d466dfd64e3f51f4aec1ab4e659bb5eca2873e07ace83751e0ebbd9145a475df", 0x2e, 0x40, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x15000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x60}}, 0x84) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}) kernel console output (not intermixed with test programs): 3][T15666] hid-multitouch 0003:0457:FFFF.0053: hidraw0: USB HID v0.00 Device [HID 0457:ffff] on usb-dummy_hcd.0-1/input0 [ 553.731121][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5203'. [ 553.748561][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5203'. [ 553.908868][T17363] rust_binder: Error while translating object. [ 553.908900][T17363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 553.915164][T17363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:811 [ 553.929068][T15666] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 553.949331][T15666] hid-generic 0000:0000:0000.0054: hidraw1: HID v0.00 Device [syz1] on syz0 [ 554.790760][T17389] overlayfs: missing 'lowerdir' [ 554.910482][T17393] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 134217728 [ 554.918707][T17393] rust_binder: Write failure EINVAL in pid:819 [ 555.839674][T17412] @: renamed from vlan0 (while UP) [ 555.872865][ T657] usb 1-1: USB disconnect, device number 30 [ 555.957986][T17419] binder: Binderfs stats mode cannot be changed during a remount [ 556.021460][T17423] pim6reg1: entered promiscuous mode [ 556.026875][T17423] pim6reg1: entered allmulticast mode [ 556.236664][T17432] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5229'. [ 556.275222][T17437] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 556.292457][T17437] rust_binder: Read failure Err(EAGAIN) in pid:119 [ 556.459789][ T657] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 556.476009][T17448] overlayfs: failed to resolve './bus': -2 [ 556.535170][T17450] binder: Bad value for 'max' [ 556.599787][T17455] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 556.602172][T17457] netlink: 'syz.5.5238': attribute type 32 has an invalid length. [ 556.622115][ T657] usb 5-1: device descriptor read/64, error -71 [ 556.876928][ T657] usb 5-1: device descriptor read/64, error -71 [ 556.908616][T17474] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5244'. [ 557.144289][ T657] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 557.283321][ T657] usb 5-1: device descriptor read/64, error -71 [ 557.540013][ T657] usb 5-1: device descriptor read/64, error -71 [ 557.658566][ T657] usb usb5-port1: attempt power cycle [ 557.701061][T17486] overlay: Unknown parameter 'obj_role' [ 557.962173][T17501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.032362][ T657] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 558.107835][ T36] kauditd_printk_skb: 747 callbacks suppressed [ 558.107853][ T36] audit: type=1400 audit(2016777574.809:55625): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.202377][ T36] audit: type=1400 audit(2016777574.809:55626): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.248248][ T657] usb 5-1: device descriptor read/8, error -71 [ 558.263108][ T36] audit: type=1400 audit(2016777574.809:55627): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.320720][ T36] audit: type=1400 audit(2016777574.809:55628): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.347875][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5262'. [ 558.416981][ T36] audit: type=1400 audit(2016777574.809:55629): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.429656][T17525] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.468018][ T36] audit: type=1400 audit(2016777574.809:55630): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.476825][T13249] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.515461][ T36] audit: type=1400 audit(2016777574.809:55631): avc: denied { mounton } for pid=17509 comm="syz.0.5258" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 558.555262][T17525] audit: audit_lost=207 audit_rate_limit=0 audit_backlog_limit=64 [ 558.617023][ T657] usb 5-1: device descriptor read/8, error -71 [ 558.796005][T17555] __vm_enough_memory: pid: 17555, comm: syz.6.5270, bytes: 18014402804453376 not enough memory for the allocation [ 558.876893][ T657] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 558.929668][ T657] usb 5-1: device descriptor read/8, error -71 [ 559.081472][ T657] usb 5-1: device descriptor read/8, error -71 [ 559.126364][ T335] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 559.197877][ T657] usb usb5-port1: unable to enumerate USB device [ 559.304711][ T335] usb 7-1: Using ep0 maxpacket: 8 [ 559.312804][ T335] usb 7-1: unable to get BOS descriptor or descriptor too short [ 559.322255][ T335] usb 7-1: config 6 has an invalid interface number: 194 but max is 0 [ 559.330479][ T335] usb 7-1: config 6 has no interface number 0 [ 559.336606][ T335] usb 7-1: config 6 interface 194 has no altsetting 0 [ 559.346391][ T335] usb 7-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 559.355459][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.363505][ T335] usb 7-1: Product: syz [ 559.367669][ T335] usb 7-1: Manufacturer: syz [ 559.372302][ T335] usb 7-1: SerialNumber: syz [ 559.692797][T17579] rust_binder: Error while translating object. [ 559.692859][T17579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 559.699085][T17579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 559.850142][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 560.024282][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.035885][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.061585][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.089599][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.102826][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.116523][ T10] usb 5-1: config 0 descriptor?? [ 560.641239][ T10] plantronics 0003:047F:FFFF.0055: ignoring exceeding usage max [ 560.668527][ T10] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving [ 560.707006][ T10] plantronics 0003:047F:FFFF.0055: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 560.954063][T17608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 560.956330][T17608] bridge0: port 3(macsec0) entered blocking state [ 560.969477][T17608] bridge0: port 3(macsec0) entered disabled state [ 560.976024][T17608] macsec0: entered allmulticast mode [ 560.981532][T17608] veth1_macvtap: entered allmulticast mode [ 560.988813][T17608] macsec0: entered promiscuous mode [ 561.009567][T17608] bridge0: port 3(macsec0) entered blocking state [ 561.016064][T17608] bridge0: port 3(macsec0) entered forwarding state [ 561.032567][T17607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 561.032595][T17607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:175 [ 561.104089][T17614] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5291'. [ 561.123136][T17614] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 561.123156][T17614] rust_binder: Read failure Err(EFAULT) in pid:179 [ 561.145425][T17614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 561.308655][T17576] netlink: 'syz.4.5279': attribute type 13 has an invalid length. [ 561.490416][T17628] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 561.490444][T17628] rust_binder: Error while translating object. [ 561.508438][T17628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 561.514728][T17628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 561.569671][ T4155] usb 5-1: USB disconnect, device number 102 [ 561.828723][T17641] overlayfs: failed to resolve './file1/file0': -2 [ 562.055322][T17638] kvm: kvm [17637]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 562.064359][T17638] kvm: kvm [17637]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 562.090682][ T335] ftdi_sio 7-1:6.194: FTDI USB Serial Device converter detected [ 562.092915][T17638] kvm: kvm [17637]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc800 [ 562.107447][T17638] kvm: kvm [17637]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc800 [ 562.109600][ T335] usb 7-1: Detected FT233HP [ 562.149747][ T335] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 562.158656][ T335] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 562.174946][ T335] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 562.198035][ T335] usb 7-1: USB disconnect, device number 69 [ 562.223532][ T335] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 562.255890][ T335] ftdi_sio 7-1:6.194: device disconnected [ 562.714942][T17675] rust_binder: Write failure EINVAL in pid:877 [ 562.815004][T17681] rust_binder: Error while translating object. [ 562.821356][T17681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 562.827592][T17681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 562.867478][T17686] option changes via remount are deprecated (pid=17685 comm=syz.0.5313) [ 562.887486][T17686] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 562.887517][T17686] rust_binder: Read failure Err(EFAULT) in pid:205 [ 562.932270][T17688] rust_binder: Error while translating object. [ 562.938840][T17688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 562.945871][T17688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 562.955327][T17688] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 562.964513][T17688] rust_binder: Read failure Err(EFAULT) in pid:207 [ 563.008627][T17690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5315'. [ 563.122596][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 563.465811][ T36] kauditd_printk_skb: 1008 callbacks suppressed [ 563.465825][ T36] audit: type=1400 audit(2016777579.821:56631): avc: denied { ioctl } for pid=17704 comm="syz.4.5320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.499195][ T36] audit: type=1400 audit(2016777579.849:56632): avc: denied { create } for pid=17699 comm="syz.5.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 563.519960][ T36] audit: type=1400 audit(2016777579.849:56633): avc: denied { create } for pid=17699 comm="syz.5.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 563.541949][ T36] audit: type=1400 audit(2016777579.849:56634): avc: denied { write } for pid=17699 comm="syz.5.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 563.562993][ T36] audit: type=1400 audit(2016777579.849:56635): avc: denied { read } for pid=17699 comm="syz.5.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 563.583658][ T36] audit: type=1400 audit(2016777579.849:56636): avc: denied { read } for pid=17699 comm="syz.5.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 563.604183][ T36] audit: type=1400 audit(2016777579.896:56637): avc: denied { ioctl } for pid=17704 comm="syz.4.5320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.629541][ T389] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 563.638589][ T36] audit: type=1400 audit(2016777579.980:56638): avc: denied { ioctl } for pid=17704 comm="syz.4.5320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.665491][ T36] audit: type=1400 audit(2016777579.980:56639): avc: denied { ioctl } for pid=17704 comm="syz.4.5320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.696923][ T36] audit: type=1400 audit(2016777579.980:56640): avc: denied { ioctl } for pid=17704 comm="syz.4.5320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 563.795354][T17711] binfmt_misc: register: failed to install interpreter file ./file0 [ 563.807372][ T389] usb 5-1: Invalid ep0 maxpacket: 64 [ 563.946416][ T389] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 564.116068][ T389] usb 5-1: Invalid ep0 maxpacket: 64 [ 564.121568][ T389] usb usb5-port1: attempt power cycle [ 564.129142][T17726] netlink: 'syz.5.5326': attribute type 16 has an invalid length. [ 564.481171][ T389] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 564.503710][ T389] usb 5-1: Invalid ep0 maxpacket: 64 [ 564.515826][T17750] cgroup: Unknown subsys name 'measure' [ 564.551384][T17752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5334'. [ 564.646858][ T389] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 564.674802][ T389] usb 5-1: Invalid ep0 maxpacket: 64 [ 564.680337][ T389] usb usb5-port1: unable to enumerate USB device [ 565.261911][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 565.272630][ T10] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 565.445770][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.456722][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.466498][ T10] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 565.475536][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.485000][ T10] usb 7-1: config 0 descriptor?? [ 565.572080][ T4155] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 565.732488][ T4155] usb 1-1: Using ep0 maxpacket: 32 [ 565.740076][ T4155] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 565.748532][ T4155] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 565.757195][ T4155] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 565.766275][ T4155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.775980][ T4155] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.785624][ T4155] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.798674][ T4155] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 565.807779][ T4155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.817342][ T4155] usb 1-1: config 0 descriptor?? [ 566.043527][ T4155] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 566.056794][ T4155] usb 1-1: USB disconnect, device number 31 [ 566.064669][ T4155] usblp0: removed [ 566.355292][ T10] hid-led 0003:27B8:01ED.0056: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 566.368972][ T10] hid-led 0003:27B8:01ED.0056: ThingM blink(1) initialized [ 566.513275][ T389] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 566.573952][ T657] usb 7-1: USB disconnect, device number 70 [ 566.597497][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 566.673738][ T389] usb 1-1: Using ep0 maxpacket: 32 [ 566.680916][ T389] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 566.689395][ T389] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 566.698077][ T389] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 566.707097][ T389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.717953][ T389] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.727683][ T389] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 566.740774][ T389] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 566.749889][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.760142][ T389] usb 1-1: config 0 descriptor?? [ 566.986663][ T389] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 567.147508][T17768] incfs: Options parsing error. -22 [ 567.153592][T17768] incfs: mount failed -22 [ 567.208035][ T10] usb 1-1: USB disconnect, device number 32 [ 567.224860][ T10] usblp0: removed [ 568.186476][T17812] binder: Unknown parameter 'measure' [ 568.277546][T17816] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 568.277567][T17816] rust_binder: Read failure Err(EFAULT) in pid:227 [ 568.770639][T13681] Bluetooth: hci0: command 0x1003 tx timeout [ 568.783316][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 568.823919][ T36] kauditd_printk_skb: 888 callbacks suppressed [ 568.823937][ T36] audit: type=1400 audit(2016777584.833:57529): avc: denied { bind } for pid=17866 comm="syz.6.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 568.850660][ T36] audit: type=1400 audit(2016777584.833:57530): avc: denied { create } for pid=17866 comm="syz.6.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 568.871352][ T36] audit: type=1400 audit(2016777584.833:57531): avc: denied { ioctl } for pid=17866 comm="syz.6.5370" path="socket:[95702]" dev="sockfs" ino=95702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 568.897056][ T36] audit: type=1400 audit(2016777584.833:57532): avc: denied { bind } for pid=17866 comm="syz.6.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 568.918103][ T36] audit: type=1400 audit(2016777584.833:57533): avc: denied { read write } for pid=14109 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.920975][T17869] batadv_slave_0: mtu less than device minimum [ 568.943465][ T36] audit: type=1400 audit(2016777584.833:57534): avc: denied { read write open } for pid=14109 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.973766][ T36] audit: type=1400 audit(2016777584.833:57535): avc: denied { ioctl } for pid=14109 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.999635][ T36] audit: type=1400 audit(2016777584.945:57536): avc: denied { read write } for pid=17868 comm="syz.4.5371" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 569.023099][ T36] audit: type=1400 audit(2016777584.945:57537): avc: denied { read open } for pid=17868 comm="syz.4.5371" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 569.046879][ T36] audit: type=1400 audit(2016777584.945:57538): avc: denied { map } for pid=17868 comm="syz.4.5371" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 569.323940][T17887] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 569.323984][T17887] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 569.332852][T17887] rust_binder: Read failure Err(EFAULT) in pid:935 [ 569.553011][T17896] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 569.566754][T17896] rust_binder: Write failure EINVAL in pid:617 [ 569.569759][T17897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.612404][T17901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.621213][T17901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 569.628783][T17901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:622 [ 570.120127][T17922] netlink: 'syz.0.5389': attribute type 11 has an invalid length. [ 570.148057][T17922] netlink: 'syz.0.5389': attribute type 2 has an invalid length. [ 570.270494][T17924] can0: slcan on ttyS3. [ 570.275181][T17927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:938 [ 570.374204][T17924] can0 (unregistered): slcan off ttyS3. [ 571.026662][ T10] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 571.208435][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 571.220641][ T10] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 571.228758][ T10] usb 7-1: config 0 has no interface number 0 [ 571.254454][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 571.272641][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.280675][ T10] usb 7-1: Product: syz [ 571.293986][ T10] usb 7-1: Manufacturer: syz [ 571.298624][ T10] usb 7-1: SerialNumber: syz [ 571.315651][ T10] usb 7-1: config 0 descriptor?? [ 571.326234][ T10] smsc95xx v2.0.0 [ 571.668486][T17955] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 571.729050][T17957] binder: Unknown parameter 'sôats' [ 571.758334][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 571.770512][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 571.974930][T17963] rust_binder: 651: no such ref 0 [ 571.987600][T17963] rust_binder: 651: no such ref 3 [ 572.234546][ T10] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 572.278030][ T10] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 572.285895][T17988] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 572.298138][ T10] usb 7-1: USB disconnect, device number 71 [ 572.372402][T17990] rust_binder: 950: no such ref 3 [ 572.425427][T17990] rust_binder: Write failure EINVAL in pid:950 [ 572.506625][T17998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1169731583 (18715705328 ns) > initial count (14827118032 ns). Using initial count to start timer. [ 572.552773][T18002] __vm_enough_memory: pid: 18002, comm: syz.4.5414, bytes: 18014402804453376 not enough memory for the allocation [ 573.771486][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5425'. [ 573.839450][ T657] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 574.001908][ T657] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 574.010650][ T657] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 574.019594][ T657] usb 7-1: config 1 has no interface number 1 [ 574.025709][ T657] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 574.038644][ T657] usb 7-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 574.050488][ T657] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 212, changing to 7 [ 574.061551][ T657] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x81 has invalid maxpacket 50429, setting to 1024 [ 574.075489][ T657] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.084545][ T657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.092565][ T657] usb 7-1: Product: syz [ 574.096776][ T657] usb 7-1: Manufacturer: syz [ 574.101363][ T657] usb 7-1: SerialNumber: syz [ 574.329299][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 574.329317][ T36] audit: type=1400 audit(2016777589.975:58113): avc: denied { mounton } for pid=18024 comm="syz.6.5422" path="/302/bus" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 574.329671][T18025] overlayfs: conflicting options: userxattr,verity=require [ 574.369720][ T36] audit: type=1400 audit(2016777590.012:58114): avc: denied { create } for pid=18024 comm="syz.6.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.390584][ T36] audit: type=1400 audit(2016777590.012:58115): avc: denied { write } for pid=18024 comm="syz.6.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.412924][ T36] audit: type=1400 audit(2016777590.012:58116): avc: denied { read } for pid=18024 comm="syz.6.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.415737][ T657] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 574.442439][ T657] usb 7-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 574.451222][ T36] audit: type=1400 audit(2016777590.012:58117): avc: denied { read } for pid=18024 comm="syz.6.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.464573][ T657] usb 7-1: USB disconnect, device number 72 [ 574.490095][ T36] audit: type=1400 audit(2016777590.115:58118): avc: denied { create } for pid=18043 comm="syz.5.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 574.517189][ T36] audit: type=1400 audit(2016777590.115:58119): avc: denied { create } for pid=18043 comm="syz.5.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 574.547381][ T36] audit: type=1400 audit(2016777590.115:58120): avc: denied { setopt } for pid=18043 comm="syz.5.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 574.567879][T18044] overlayfs: missing 'lowerdir' [ 574.568022][ T36] audit: type=1400 audit(2016777590.115:58121): avc: denied { read } for pid=18043 comm="syz.5.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 574.573251][T16530] udevd[16530]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 574.593719][ T36] audit: type=1400 audit(2016777590.181:58122): avc: denied { write } for pid=18043 comm="syz.5.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 575.739003][T18098] rust_binder: Write failure EINVAL in pid:700 [ 576.135151][T18110] overlayfs: failed to clone upperpath [ 576.149270][T18110] overlayfs: failed to clone upperpath [ 576.156229][ T657] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 576.331422][ T657] usb 5-1: Using ep0 maxpacket: 32 [ 576.346379][ T657] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 576.356979][ T657] usb 5-1: config 0 has no interface number 0 [ 576.364438][ T657] usb 5-1: config 0 interface 184 has no altsetting 0 [ 576.431591][ T657] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 576.441286][ T657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.449644][ T657] usb 5-1: Product: syz [ 576.454467][ T657] usb 5-1: Manufacturer: syz [ 576.459099][ T657] usb 5-1: SerialNumber: syz [ 576.465413][ T657] usb 5-1: config 0 descriptor?? [ 576.481611][ T657] smsc75xx v1.0.0 [ 576.497340][T18126] 9pnet_fd: Insufficient options for proto=fd [ 577.189743][ T657] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 577.200649][ T657] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 577.856014][ T657] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 577.867084][ T657] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 577.867285][T18147] veth0_to_bond: entered allmulticast mode [ 577.878023][ T657] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 577.885624][T18147] veth0_to_bond: entered promiscuous mode [ 577.893144][ T657] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 577.959355][T18148] 9pnet_fd: Insufficient options for proto=fd [ 578.011806][T18146] veth0_to_bond: left promiscuous mode [ 578.017393][T18146] veth0_to_bond: left allmulticast mode [ 578.094703][T18155] sit0: entered promiscuous mode [ 578.100651][T18155] netlink: 'syz.5.5462': attribute type 1 has an invalid length. [ 578.108477][T18155] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5462'. [ 578.484819][T18182] overlay: ./file0 is not a directory [ 579.166283][ T657] usb 5-1: USB disconnect, device number 107 [ 579.493499][T18207] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5479'. [ 579.690837][ T36] kauditd_printk_skb: 473 callbacks suppressed [ 579.690856][ T36] audit: type=1400 audit(2016777594.993:58596): avc: denied { create } for pid=18221 comm="syz.6.5484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 579.720823][T18223] netlink: 'syz.6.5484': attribute type 27 has an invalid length. [ 579.735241][T18223] sit0: left promiscuous mode [ 579.736212][ T36] audit: type=1400 audit(2016777595.030:58597): avc: denied { mounton } for pid=18224 comm="syz.0.5485" path="/102/bus" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 579.740136][T18225] overlayfs: failed to clone upperpath [ 579.775472][T18223] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.782683][T18223] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.790816][ T36] audit: type=1400 audit(2016777595.077:58598): avc: denied { setopt } for pid=18221 comm="syz.6.5484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 579.812287][ T36] audit: type=1400 audit(2016777595.086:58599): avc: denied { read } for pid=18221 comm="syz.6.5484" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 579.849300][ T36] audit: type=1400 audit(2016777595.086:58600): avc: denied { read open } for pid=18221 comm="syz.6.5484" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 579.874673][ T36] audit: type=1400 audit(2016777595.086:58601): avc: denied { ioctl } for pid=18221 comm="syz.6.5484" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 579.953971][ T36] audit: type=1400 audit(2016777595.236:58602): avc: denied { read write } for pid=14109 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.982295][ T36] audit: type=1400 audit(2016777595.236:58603): avc: denied { read write open } for pid=14109 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 580.021413][ T36] audit: type=1400 audit(2016777595.236:58604): avc: denied { ioctl } for pid=14109 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 580.048621][ T36] audit: type=1400 audit(2016777595.292:58605): avc: denied { read write } for pid=18230 comm="syz.4.5486" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 580.077925][T18223] netlink: 'syz.6.5484': attribute type 27 has an invalid length. [ 580.087100][T18223] lo: entered promiscuous mode [ 580.106900][T18223] lo: entered allmulticast mode [ 580.122879][T18223] tunl0: entered promiscuous mode [ 580.137405][T18223] tunl0: entered allmulticast mode [ 580.144346][T18223] gre0: entered promiscuous mode [ 580.149383][T18223] gre0: entered allmulticast mode [ 580.156376][T18223] gretap0: entered promiscuous mode [ 580.165427][T18223] gretap0: entered allmulticast mode [ 580.171555][T18223] erspan0: entered promiscuous mode [ 580.176876][T18223] erspan0: entered allmulticast mode [ 580.183017][T18223] ip_vti0: entered promiscuous mode [ 580.188285][T18223] ip_vti0: entered allmulticast mode [ 580.196305][T18223] ip6_vti0: entered promiscuous mode [ 580.210464][T18223] ip6_vti0: entered allmulticast mode [ 580.226259][T18223] sit0: entered promiscuous mode [ 580.235827][T18223] sit0: entered allmulticast mode [ 580.242516][T18223] ip6tnl0: entered promiscuous mode [ 580.256970][T18223] ip6tnl0: entered allmulticast mode [ 580.263006][T18223] ip6gre0: entered promiscuous mode [ 580.268328][T18223] ip6gre0: entered allmulticast mode [ 580.274514][T18223] syz_tun: entered promiscuous mode [ 580.280090][T18223] syz_tun: entered allmulticast mode [ 580.286459][T18223] ip6gretap0: entered promiscuous mode [ 580.292221][T18223] ip6gretap0: entered allmulticast mode [ 580.299031][T18223] bridge0: entered promiscuous mode [ 580.304425][T18223] bridge0: entered allmulticast mode [ 580.310561][T18223] vcan0: entered promiscuous mode [ 580.315672][T18223] vcan0: entered allmulticast mode [ 580.331725][T18223] dummy0: entered promiscuous mode [ 580.346055][T18223] dummy0: entered allmulticast mode [ 580.357501][T18223] veth0: entered promiscuous mode [ 580.380791][T18223] veth0: entered allmulticast mode [ 580.387780][T18223] veth1: entered promiscuous mode [ 580.392839][T18223] veth1: entered allmulticast mode [ 580.406401][T18223] wg0: entered promiscuous mode [ 580.411315][T18223] wg0: entered allmulticast mode [ 580.434913][T18223] wg1: entered promiscuous mode [ 580.440690][T18223] wg1: entered allmulticast mode [ 580.446469][T18223] wg2: entered promiscuous mode [ 580.459758][T18223] wg2: entered allmulticast mode [ 580.468070][T18223] veth0_to_bridge: entered promiscuous mode [ 580.477635][T18223] veth0_to_bridge: entered allmulticast mode [ 580.484883][T18223] veth1_to_bridge: entered promiscuous mode [ 580.491649][T18223] veth1_to_bridge: entered allmulticast mode [ 580.499866][T18223] veth0_to_bond: entered promiscuous mode [ 580.505693][T18223] veth0_to_bond: entered allmulticast mode [ 580.511997][T18223] bond_slave_0: entered promiscuous mode [ 580.517897][T18223] bond_slave_0: entered allmulticast mode [ 580.525124][T18223] veth1_to_bond: entered promiscuous mode [ 580.531028][T18223] veth1_to_bond: entered allmulticast mode [ 580.537792][T18223] bond_slave_1: entered promiscuous mode [ 580.543647][T18223] bond_slave_1: entered allmulticast mode [ 580.549847][T18223] veth0_to_team: entered promiscuous mode [ 580.555798][T18223] veth0_to_team: entered allmulticast mode [ 580.565283][T18223] team_slave_0: entered promiscuous mode [ 580.571740][T18223] team_slave_0: entered allmulticast mode [ 580.578125][T18223] veth1_to_team: entered promiscuous mode [ 580.584476][T18223] veth1_to_team: entered allmulticast mode [ 580.594667][T18223] team_slave_1: entered promiscuous mode [ 580.608662][T18223] team_slave_1: entered allmulticast mode [ 580.615588][T18223] veth0_to_batadv: entered promiscuous mode [ 580.622256][T18223] veth0_to_batadv: entered allmulticast mode [ 580.635828][T18223] batadv_slave_0: entered promiscuous mode [ 580.644338][T18223] batadv_slave_0: entered allmulticast mode [ 580.651048][T18223] veth1_to_batadv: entered promiscuous mode [ 580.659445][T18223] veth1_to_batadv: entered allmulticast mode [ 580.666189][T18223] batadv_slave_1: entered promiscuous mode [ 580.672095][T18223] batadv_slave_1: entered allmulticast mode [ 580.678903][T18223] xfrm0: entered promiscuous mode [ 580.684044][T18223] xfrm0: entered allmulticast mode [ 580.689927][T18223] veth0_to_hsr: entered promiscuous mode [ 580.695660][T18223] veth0_to_hsr: entered allmulticast mode [ 580.701824][T18223] hsr_slave_0: entered promiscuous mode [ 580.707406][T18223] hsr_slave_0: entered allmulticast mode [ 580.713375][T18223] veth1_to_hsr: entered promiscuous mode [ 580.719106][T18223] veth1_to_hsr: entered allmulticast mode [ 580.725250][T18223] hsr_slave_1: entered promiscuous mode [ 580.730863][T18223] hsr_slave_1: entered allmulticast mode [ 580.736819][T18223] veth1_virt_wifi: entered promiscuous mode [ 580.742776][T18223] veth1_virt_wifi: entered allmulticast mode [ 580.759827][T18223] veth0_virt_wifi: entered promiscuous mode [ 580.765763][T18223] veth0_virt_wifi: entered allmulticast mode [ 580.788770][T18223] veth1_vlan: entered promiscuous mode [ 580.802008][T18223] veth1_vlan: entered allmulticast mode [ 580.808293][T18223] veth0_vlan: left promiscuous mode [ 580.813824][T18223] veth0_vlan: entered promiscuous mode [ 580.819563][T18223] veth0_vlan: entered allmulticast mode [ 580.826992][T18223] vlan0: entered promiscuous mode [ 580.832174][T18223] vlan0: entered allmulticast mode [ 580.837755][T18223] vlan1: entered promiscuous mode [ 580.842950][T18223] vlan1: entered allmulticast mode [ 580.848461][T18223] veth1_macvtap: left promiscuous mode [ 580.853973][T18223] veth1_macvtap: entered promiscuous mode [ 580.859773][T18223] veth1_macvtap: entered allmulticast mode [ 580.866309][T18223] veth0_macvtap: entered promiscuous mode [ 580.872052][T18223] veth0_macvtap: entered allmulticast mode [ 580.883786][T18223] macsec0: entered promiscuous mode [ 580.889144][T18223] macsec0: entered allmulticast mode [ 580.896252][T18223] syztnl0: entered promiscuous mode [ 580.901909][T18223] syztnl0: entered allmulticast mode [ 580.932679][T18223] syzkaller0: entered promiscuous mode [ 580.938235][T18223] syzkaller0: entered allmulticast mode [ 580.948915][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.956010][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.971639][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.978719][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.080574][T18271] netlink: 'syz.6.5497': attribute type 63 has an invalid length. [ 581.088419][T18271] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5497'. [ 581.144286][T18271] gretap0: left promiscuous mode [ 581.149618][T18271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 581.401629][ T497] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 581.533515][T18310] __vm_enough_memory: pid: 18310, comm: syz.4.5510, bytes: 18014402804453376 not enough memory for the allocation [ 581.615069][T18318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5513'. [ 581.657441][T18318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5513'. [ 581.679499][T18318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5513'. [ 581.796727][T18327] rust_binder: Write failure EFAULT in pid:770 [ 581.926302][T18331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5517'. [ 582.031002][T18336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18336 comm=syz.4.5518 [ 582.108690][T18345] overlayfs: unescaped trailing colons in lowerdir mount option. [ 582.160305][ T657] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 582.192864][T18356] rust_binder: 18343 RLIMIT_NICE not set [ 582.215035][T18362] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5526'. [ 582.267621][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 582.275317][T18373] overlayfs: failed to clone upperpath [ 582.283883][T14573] rust_binder: 0: removing orphan mapping 0:24 [ 582.320823][ T657] usb 7-1: Using ep0 maxpacket: 16 [ 582.336971][ T657] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 582.349997][ T657] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.361154][ T657] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.386956][ T657] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.413054][ T657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.422007][ T657] usb 7-1: Product: syz [ 582.432467][ T657] usb 7-1: Manufacturer: syz [ 582.437123][ T657] usb 7-1: SerialNumber: syz [ 582.528442][T18375] can0: slcan on ttyS3. [ 582.580137][T18374] can0 (unregistered): slcan off ttyS3. [ 582.887327][ T657] usb 7-1: 0:2 : does not exist [ 582.965861][T18419] netlink: 'syz.5.5542': attribute type 10 has an invalid length. [ 582.976960][T18418] netlink: 'syz.5.5542': attribute type 10 has an invalid length. [ 583.028895][T18412] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 238) [ 583.028921][T18412] rust_binder: Error while translating object. [ 583.040540][T18412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 583.046822][T18412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:789 [ 583.133437][T18427] netlink: 'syz.5.5545': attribute type 1 has an invalid length. [ 583.151027][T18427] netlink: 'syz.5.5545': attribute type 2 has an invalid length. [ 583.271226][T18430] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 583.271269][T18430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 583.279402][T18430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:792 [ 583.513955][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5547'. [ 583.533470][T18432] fuse: Unknown parameter '00000000004294967295ÿÿÿÿÿÿÿÿ„òߘÄ´r•1†G¦.:¬¤NêæÊŽšafeѤL†»hëÈïYV[Õ3ûÐG`¹É²¡då\œc­ß)Þ…ôgl‹%6GZužËÆs´?Ó’:åæÂ07¡©U›q¯ “C½Ý01777777777777777777777÷¥ò'ùüÝcÊ{J :èàz+à"ýüv•Õ²%Ön-pµX7âK>Í:̽Kþbè1Ìï–j:_Ò„ð­s˜DkT7 }' [ 583.754355][ T10] usb 7-1: USB disconnect, device number 73 [ 584.415043][T18468] rust_binder: Write failure EINVAL in pid:1012 [ 584.415398][T18468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1012 [ 584.556824][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 584.612749][T18472] binder: Unknown parameter ']w' [ 584.727252][T18482] rust_binder: Got transaction with invalid offset. [ 584.727288][T18482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 584.733923][T18482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 584.752904][T18484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 584.766133][T18486] rust_binder: Got transaction with invalid offset. [ 584.773897][T18486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 584.781326][T18486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 585.008494][T18499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1019 [ 585.022289][T18499] rust_binder: Read failure Err(EFAULT) in pid:1019 [ 585.062568][ T36] kauditd_printk_skb: 746 callbacks suppressed [ 585.062587][ T36] audit: type=1400 audit(2016777602.009:59352): avc: denied { read } for pid=18500 comm="syz.6.5571" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.066075][T18501] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 585.081037][ T36] audit: type=1400 audit(2016777602.009:59353): avc: denied { read open } for pid=18500 comm="syz.6.5571" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.130218][ T36] audit: type=1400 audit(2016777602.009:59354): avc: denied { map } for pid=18500 comm="syz.6.5571" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.134805][T18501] rust_binder: Read failure Err(EAGAIN) in pid:1021 [ 585.155561][ T36] audit: type=1400 audit(2016777602.009:59355): avc: denied { read } for pid=18500 comm="syz.6.5571" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.191066][ T36] audit: type=1400 audit(2016777602.009:59356): avc: denied { ioctl } for pid=18500 comm="syz.6.5571" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.226470][ T36] audit: type=1400 audit(2016777602.009:59357): avc: denied { set_context_mgr } for pid=18500 comm="syz.6.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 585.248329][ T36] audit: type=1400 audit(2016777602.009:59358): avc: denied { read } for pid=18500 comm="syz.6.5571" dev="nsfs" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 585.248804][T18508] rust_binder: 18508 RLIMIT_NICE not set [ 585.283462][ T36] audit: type=1400 audit(2016777602.009:59359): avc: denied { read open } for pid=18500 comm="syz.6.5571" path="net:[4026532496]" dev="nsfs" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 585.313223][T18508] rust_binder: Read failure Err(EFAULT) in pid:1026 [ 585.313294][ T36] audit: type=1400 audit(2016777602.009:59360): avc: denied { create } for pid=18500 comm="syz.6.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 585.368887][ T36] audit: type=1400 audit(2016777602.009:59361): avc: denied { ioctl } for pid=18500 comm="syz.6.5571" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 585.944046][T18574] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5593'. [ 585.962098][T18574] rust_binder: Error while translating object. [ 585.962136][T18574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 585.968563][T18574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1040 [ 586.053391][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 586.306981][T18596] overlay: filesystem on ./bus not supported as upperdir [ 586.641591][ T4155] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 586.791318][ T4155] usb 5-1: device descriptor read/64, error -71 [ 586.798840][T18636] tipc: Enabling of bearer rejected, failed to enable media [ 586.808833][T18635] tipc: Enabling of bearer rejected, failed to enable media [ 587.058741][ T4155] usb 5-1: device descriptor read/64, error -71 [ 587.315400][ T4155] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 587.454510][ T4155] usb 5-1: device descriptor read/64, error -71 [ 587.711142][ T4155] usb 5-1: device descriptor read/64, error -71 [ 587.828835][ T4155] usb usb5-port1: attempt power cycle [ 588.004083][T18680] 9pnet_fd: Insufficient options for proto=fd [ 588.192468][ T4155] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 588.216149][ T4155] usb 5-1: device descriptor read/8, error -71 [ 588.355241][ T4155] usb 5-1: device descriptor read/8, error -71 [ 588.609508][ T4155] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 588.633501][ T4155] usb 5-1: device descriptor read/8, error -71 [ 588.772081][ T4155] usb 5-1: device descriptor read/8, error -71 [ 588.887717][ T4155] usb usb5-port1: unable to enumerate USB device [ 589.091812][T18717] overlayfs: failed to clone upperpath [ 589.140293][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5644'. [ 589.668984][ T657] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 589.841297][T18742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 589.860864][ T657] usb 7-1: Using ep0 maxpacket: 32 [ 589.863220][T18742] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 589.874461][ T657] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 589.891877][ T657] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 589.908003][ T657] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 589.925916][T18745] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5655'. [ 589.927893][ T657] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.989231][ T657] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.998919][ T657] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 590.046112][ T657] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 590.066039][ T657] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.078353][ T657] usb 7-1: config 0 descriptor?? [ 590.187647][T18756] overlayfs: failed to clone upperpath [ 590.311473][ T657] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 590.341021][ T657] usb 7-1: USB disconnect, device number 74 [ 590.348924][ T657] usblp0: removed [ 590.381031][T18765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5660'. [ 590.393852][T18764] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5660'. [ 590.508149][ T36] kauditd_printk_skb: 779 callbacks suppressed [ 590.508166][ T36] audit: type=1400 audit(2016777607.104:60141): avc: denied { write } for pid=18762 comm="syz.4.5660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.520431][T18765] fuse: Unknown parameter '000000000000000000000070x000000000000000d0x000000000000000c000000000000000000000x0000000000000007³†!Ü–† ·i'óXVR˱! ~霺êÈ/vǪ‹ï@¸g¼—xê7¯¢ua¼+ͻƒËz@ãóû½dnÒh3ëE`ÅÄîÐ ³@À^òe¿ö(±ïƒå' [ 590.536044][ T36] audit: type=1400 audit(2016777607.104:60142): avc: denied { write } for pid=18762 comm="syz.4.5660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.577524][ T36] audit: type=1400 audit(2016777607.104:60143): avc: denied { read } for pid=18762 comm="syz.4.5660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.598296][ T36] audit: type=1400 audit(2016777607.104:60144): avc: denied { read } for pid=18762 comm="syz.4.5660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.619757][ T36] audit: type=1400 audit(2016777607.104:60145): avc: denied { read } for pid=18762 comm="syz.4.5660" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 590.644463][ T36] audit: type=1400 audit(2016777607.104:60146): avc: denied { read open } for pid=18762 comm="syz.4.5660" path="/dev/binderfs/binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 590.672851][ T36] audit: type=1400 audit(2016777607.114:60147): avc: denied { read write } for pid=18762 comm="syz.4.5660" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 590.697830][ T36] audit: type=1400 audit(2016777607.114:60148): avc: denied { read write open } for pid=18762 comm="syz.4.5660" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 590.725176][ T36] audit: type=1400 audit(2016777607.114:60149): avc: denied { mounton } for pid=18762 comm="syz.4.5660" path="/266/file0" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 590.754788][ T36] audit: type=1400 audit(2016777607.151:60150): avc: denied { write } for pid=18724 comm="syz.6.5645" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 590.790623][T18779] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5663'. [ 590.799653][T18779] 0ªö»ôM: renamed from gretap0 (while UP) [ 590.807230][T18779] 0ªö»ôM: entered allmulticast mode [ 590.812905][T18779] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 590.983876][ T389] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 591.149889][ T389] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.161005][ T389] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.170967][ T389] usb 7-1: config 0 interface 0 has no altsetting 0 [ 591.177637][ T389] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.186675][ T389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.196531][ T389] usb 7-1: config 0 descriptor?? [ 591.716316][T18775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.724916][T18775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.977818][ T389] usbhid 7-1:0.0: can't add hid device: -71 [ 592.983935][ T389] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 592.996285][ T389] usb 7-1: USB disconnect, device number 75 [ 593.087250][T18841] netlink: 'syz.6.5683': attribute type 4 has an invalid length. [ 593.192125][T18848] 9p: Unknown access argument : -22 [ 593.215927][T18848] binder: Bad value for 'max' [ 593.428045][T18862] kvm: kvm [18861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 593.443061][T18862] kvm: kvm [18861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 593.516172][T18858] netlink: 1351 bytes leftover after parsing attributes in process `syz.0.5688'. [ 593.530871][T18862] kvm: kvm [18861]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 593.643483][T18876] 9pnet_fd: Insufficient options for proto=fd [ 593.647134][T18879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1069 [ 593.652774][T18877] 9pnet_fd: Insufficient options for proto=fd [ 593.716810][T18883] 9pnet_fd: Insufficient options for proto=fd [ 593.781762][T18890] netlink: 'syz.6.5697': attribute type 11 has an invalid length. [ 593.848781][T18898] overlayfs: failed to clone upperpath [ 593.858900][T18898] overlayfs: failed to clone upperpath [ 594.036030][T18914] overlayfs: failed to clone upperpath [ 594.534638][ T4155] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 594.707921][ T4155] usb 7-1: config 27 has an invalid descriptor of length 58, skipping remainder of the config [ 594.718293][ T4155] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 594.727384][ T4155] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.736458][ T4155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.984031][T14573] usb 7-1: USB disconnect, device number 76 [ 595.211702][T18962] devpts: called with bogus options [ 595.903149][ T36] kauditd_printk_skb: 638 callbacks suppressed [ 595.903165][ T36] audit: type=1400 audit(2016777612.144:60789): avc: denied { read write } for pid=14109 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 595.933698][ T389] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 595.948892][ T36] audit: type=1400 audit(2016777612.144:60790): avc: denied { read write open } for pid=14109 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 595.974337][ T36] audit: type=1400 audit(2016777612.153:60791): avc: denied { ioctl } for pid=14109 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.000342][ T36] audit: type=1400 audit(2016777612.191:60792): avc: denied { ioctl } for pid=18998 comm="syz.6.5737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.026141][ T36] audit: type=1400 audit(2016777612.191:60793): avc: denied { ioctl } for pid=18998 comm="syz.6.5737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.051433][ T36] audit: type=1400 audit(2016777612.191:60794): avc: denied { ioctl } for pid=18998 comm="syz.6.5737" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.076925][ T36] audit: type=1400 audit(2016777612.191:60795): avc: denied { read } for pid=19003 comm="syz.4.5739" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 596.100103][ T36] audit: type=1400 audit(2016777612.191:60796): avc: denied { read open } for pid=19003 comm="syz.4.5739" path="/dev/binderfs/binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 596.124655][ T36] audit: type=1400 audit(2016777612.200:60797): avc: denied { ioctl } for pid=19003 comm="syz.4.5739" path="/dev/binderfs/binder0" dev="binder" ino=33 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 596.150784][ T36] audit: type=1400 audit(2016777612.200:60798): avc: denied { set_context_mgr } for pid=19003 comm="syz.4.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 596.160423][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 596.178755][ T389] usb 7-1: Using ep0 maxpacket: 32 [ 596.214711][ T389] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.228359][ T389] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.249095][ T389] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 596.266028][ T389] usb 7-1: config 0 interface 0 has no altsetting 0 [ 596.273431][ T389] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 596.284385][ T389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.297278][ T389] usb 7-1: config 0 descriptor?? [ 596.565682][T19024] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 596.584565][ T389] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 596.592784][ T389] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 596.601593][ T389] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 596.610386][ T389] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 596.618243][ T389] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 596.628885][ T389] hid-thrustmaster 0003:044F:B65D.0057: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 596.634903][T19027] netlink: 'syz.0.5748': attribute type 1 has an invalid length. [ 596.641957][ T389] hid-thrustmaster 0003:044F:B65D.0057: Wrong number of endpoints? [ 596.886106][ C1] hid-thrustmaster 0003:044F:B65D.0057: Unknown packet type 0x0, unable to proceed further with wheel init [ 596.913253][ T4155] usb 7-1: USB disconnect, device number 77 [ 596.933598][T19034] overlayfs: failed to clone lowerpath [ 596.965488][T19030] fido_id[19030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 596.999046][T19036] rust_binder: Error while translating object. [ 596.999080][T19036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 597.013152][T19036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1096 [ 597.034836][T19038] fuse: Unknown parameter '®RÞ³­££¹XMºp6fdU0x0000000000000005' [ 597.111387][T19011] overlayfs: statfs failed on './file0' [ 597.256605][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.267609][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.435224][T19054] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.442323][T19054] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.449578][T19054] bridge_slave_0: entered allmulticast mode [ 597.456050][T19054] bridge_slave_0: entered promiscuous mode [ 597.492216][T19054] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.499350][T19054] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.506531][T19054] bridge_slave_1: entered allmulticast mode [ 597.512767][T19054] bridge_slave_1: entered promiscuous mode [ 597.586228][T19054] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.593288][T19054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.600757][T19054] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.607810][T19054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.651168][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.658582][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.672607][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.679712][T16621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.691411][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.698509][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.768327][T19054] veth0_vlan: entered promiscuous mode [ 597.798610][T19054] veth1_macvtap: entered promiscuous mode [ 598.138967][ T389] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 598.301716][ T389] usb 10-1: config 26 has an invalid interface number: 102 but max is 1 [ 598.310220][ T389] usb 10-1: config 26 has an invalid interface number: 124 but max is 1 [ 598.318612][ T389] usb 10-1: config 26 has no interface number 0 [ 598.325931][ T389] usb 10-1: config 26 has no interface number 1 [ 598.333925][ T389] usb 10-1: config 26 interface 102 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 598.345905][ T389] usb 10-1: config 26 interface 124 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt [ 598.357042][ T389] usb 10-1: config 26 interface 124 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.368238][ T389] usb 10-1: config 26 interface 124 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 598.380227][ T389] usb 10-1: config 26 interface 102 has no altsetting 0 [ 598.387996][ T389] usb 10-1: config 26 interface 124 has no altsetting 0 [ 598.400282][ T389] usb 10-1: string descriptor 0 read error: -22 [ 598.406643][ T389] usb 10-1: New USB device found, idVendor=12d1, idProduct=9e5d, bcdDevice=f4.8f [ 598.415812][ T389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.629390][T19082] netlink: 'syz.4.5766': attribute type 25 has an invalid length. [ 598.652976][T19066] fuse: Bad value for 'user_id' [ 598.657855][T19066] fuse: Bad value for 'user_id' [ 598.666358][T14573] usb 10-1: USB disconnect, device number 33 [ 598.681921][T19089] fuseblk: Bad value for 'fd' [ 599.497203][ T389] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 599.668416][ T389] usb 10-1: Using ep0 maxpacket: 8 [ 599.675546][ T389] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.686880][ T389] usb 10-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 599.696275][ T389] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.705991][ T389] usb 10-1: config 0 descriptor?? [ 599.770705][T19107] 9pnet_fd: Insufficient options for proto=fd [ 599.809578][T19112] tipc: Enabling of bearer rejected, failed to enable media [ 599.959876][ T389] usbhid 10-1:0.0: can't add hid device: -71 [ 599.966017][ T389] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 599.988169][ T389] usb 10-1: USB disconnect, device number 34 [ 600.381676][T19126] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5779'. [ 601.130526][T19166] veth0_virt_wifi: entered allmulticast mode [ 601.137946][T19165] veth0_virt_wifi: left allmulticast mode [ 601.201703][T19181] 9pnet_fd: Insufficient options for proto=fd [ 601.270146][ T36] kauditd_printk_skb: 1609 callbacks suppressed [ 601.270165][ T36] audit: type=1400 audit(2016777617.165:62408): avc: denied { unlink } for pid=16674 comm="syz-executor" name="file2" dev="tmpfs" ino=1090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 601.318747][ T36] audit: type=1400 audit(2016777617.174:62409): avc: denied { execute } for pid=19191 comm="syz.5.5801" path="/dev/rnullb0" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 601.343749][ T36] audit: type=1400 audit(2016777617.174:62410): avc: denied { create } for pid=19191 comm="syz.5.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 601.377169][ T36] audit: type=1400 audit(2016777617.174:62411): avc: denied { create } for pid=19191 comm="syz.5.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.411568][ T36] audit: type=1400 audit(2016777617.174:62412): avc: denied { create } for pid=19191 comm="syz.5.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.443752][ T36] audit: type=1400 audit(2016777617.212:62413): avc: denied { create } for pid=19194 comm="syz.0.5802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.475541][ T36] audit: type=1400 audit(2016777617.212:62414): avc: denied { write } for pid=19194 comm="syz.0.5802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.496219][ T36] audit: type=1400 audit(2016777617.212:62415): avc: denied { read } for pid=19194 comm="syz.0.5802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.517343][ T36] audit: type=1400 audit(2016777617.212:62416): avc: denied { read } for pid=19194 comm="syz.0.5802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 601.539299][ T36] audit: type=1400 audit(2016777617.333:62417): avc: denied { execute } for pid=19204 comm="syz.0.5806" path=2F6D656D66643A1033717D329ACEAF0386E7C0148F5ED5FDA10DAC374194EBCD09202864656C6574656429 dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 602.237151][T19231] overlayfs: failed to clone upperpath [ 602.298817][T19233] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5817'. [ 602.750853][T19274] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 602.804503][T19281] tipc: Enabling of bearer rejected, failed to enable media [ 604.010579][T19327] overlay: ./file0 is not a directory [ 604.033370][T19327] incfs: Error accessing: ./file0. [ 604.038546][T19327] incfs: mount failed -20 [ 604.137802][T19329] kvm: pic: non byte write [ 604.331003][ T645] rust_binder: 19338: removing orphan mapping 0:4208 [ 605.254975][T19358] 9pnet_fd: Insufficient options for proto=fd [ 606.339963][T19395] fuse: Unknown parameter 'bâͨ_¸)àËP tÅ>õ:Ì6SUË”|{*ËI [ 606.339963][T19395] ' [ 606.903078][ T36] kauditd_printk_skb: 30209 callbacks suppressed [ 606.903096][ T36] audit: type=1400 audit(2016777622.429:92627): avc: denied { create } for pid=19401 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 606.937506][ T36] audit: type=1400 audit(2016777622.429:92628): avc: denied { create } for pid=19401 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 606.961731][ T36] audit: type=1400 audit(2016777622.429:92629): avc: denied { write } for pid=19401 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 606.974472][T19405] overlayfs: failed to clone upperpath [ 606.982620][ T36] audit: type=1400 audit(2016777622.429:92630): avc: denied { connect } for pid=19401 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.006872][ T36] audit: type=1400 audit(2016777622.429:92631): avc: denied { create } for pid=19401 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.027392][ T36] audit: type=1400 audit(2016777622.429:92632): avc: denied { connect } for pid=19401 comm="syz.4.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.051852][ T36] audit: type=1400 audit(2016777622.448:92633): avc: denied { ioctl } for pid=19401 comm="syz.4.5869" path="socket:[103614]" dev="sockfs" ino=103614 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.078093][ T36] audit: type=1400 audit(2016777622.495:92634): avc: denied { create } for pid=19404 comm="syz.0.5871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 607.099669][ T36] audit: type=1400 audit(2016777622.495:92635): avc: denied { getopt } for pid=19404 comm="syz.0.5871" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 607.121763][ T36] audit: type=1400 audit(2016777622.495:92636): avc: denied { execmem } for pid=19404 comm="syz.0.5871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 607.177793][T19415] /dev/loop0: Can't lookup blockdev [ 607.351782][T19433] netlink: 'syz.4.5878': attribute type 2 has an invalid length. [ 607.388553][T19441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5881'. [ 607.434929][T19447] overlayfs: failed to clone upperpath [ 607.669777][T19460] rust_binder: 30: no such ref 3 [ 607.683200][T19460] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 607.692484][T19460] rust_binder: Write failure EINVAL in pid:30 [ 607.696258][T19461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 607.844327][T19467] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 608.384979][ T10] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 608.548368][ T10] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 608.561911][ T10] usb 10-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.575027][ T10] usb 10-1: config 1 interface 0 has no altsetting 0 [ 608.587368][ T10] usb 10-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 608.596672][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.604794][ T10] usb 10-1: Product: syz [ 608.609051][ T10] usb 10-1: SerialNumber: syz [ 608.842283][ T10] usbhid 10-1:1.0: can't add hid device: -71 [ 608.851894][ T10] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 608.861841][ T10] usb 10-1: USB disconnect, device number 35 [ 609.614963][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5900'. [ 609.722213][T19531] overlayfs: failed to resolve './file1': -2 [ 610.438152][T19547] tipc: MTU too low for tipc bearer [ 610.472601][T19550] overlayfs: failed to clone upperpath [ 610.487824][T19550] overlayfs: failed to clone upperpath [ 610.555385][T19554] binder: Unknown parameter 'contextÌðÔð[7’' [ 610.648843][T19561] rust_binder: Read failure Err(EAGAIN) in pid:53 [ 610.701453][T19568] rust_binder: 57: no such ref 3 [ 610.716773][T19568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 610.783069][T19577] fuse: Unknown parameter 'PáÒ/•' [ 610.876030][T19582] rust_binder: Error while translating object. [ 610.876067][T19582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 610.887039][T19582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 610.897882][T19582] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 610.908055][T19582] rust_binder: Read failure Err(EFAULT) in pid:64 [ 610.986042][T19598] usb usb8: usbfs: process 19598 (syz.9.5931) did not claim interface 63 before use [ 611.497247][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 611.596536][T19618] cgroup: Unknown subsys name 'measure' [ 611.636461][ T10] usb 10-1: device descriptor read/64, error -71 [ 611.894245][ T10] usb 10-1: device descriptor read/64, error -71 [ 612.149650][ T10] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 612.288658][ T10] usb 10-1: device descriptor read/64, error -71 [ 612.406878][ T36] kauditd_printk_skb: 562 callbacks suppressed [ 612.406933][ T36] audit: type=1400 audit(2016777627.581:93199): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.438231][ T36] audit: type=1400 audit(2016777627.581:93200): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.463693][ T36] audit: type=1400 audit(2016777627.637:93201): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.488885][ T36] audit: type=1400 audit(2016777627.637:93202): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.514104][ T36] audit: type=1400 audit(2016777627.656:93203): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.539259][ T36] audit: type=1400 audit(2016777627.684:93204): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.564579][ T36] audit: type=1400 audit(2016777627.684:93205): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.595974][ T36] audit: type=1400 audit(2016777627.759:93206): avc: denied { ioctl } for pid=19612 comm="syz.9.5936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.652298][ T10] usb 10-1: device descriptor read/64, error -71 [ 612.661818][ T36] audit: type=1400 audit(2016777627.815:93207): avc: denied { create } for pid=19638 comm="syz.5.5945" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 612.683640][ T36] audit: type=1400 audit(2016777627.815:93208): avc: denied { ioctl } for pid=19638 comm="syz.5.5945" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=104046 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 612.770802][ T10] usb usb10-port1: attempt power cycle [ 612.773741][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5947'. [ 613.133596][ T10] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 613.156827][ T10] usb 10-1: device descriptor read/8, error -71 [ 613.236393][T19656] overlayfs: missing 'lowerdir' [ 613.296602][ T10] usb 10-1: device descriptor read/8, error -71 [ 613.561400][ T10] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 613.585376][ T10] usb 10-1: device descriptor read/8, error -71 [ 613.624591][T19683] netlink: 'syz.5.5962': attribute type 4 has an invalid length. [ 613.632432][T19683] netlink: 'syz.5.5962': attribute type 2 has an invalid length. [ 613.642070][T19683] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5962'. [ 613.726704][ T10] usb 10-1: device descriptor read/8, error -71 [ 613.852088][ T10] usb usb10-port1: unable to enumerate USB device [ 614.868773][T19735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 614.932274][T19736] rust_binder: 19735 RLIMIT_NICE not set [ 614.954619][ T10] rust_binder: 19732: removing orphan mapping 0:4248 [ 615.359017][T19759] rust_binder: Write failure EINVAL in pid:103 [ 624.441294][ T36] kauditd_printk_skb: 326 callbacks suppressed [ 624.441323][ T36] audit: type=1400 audit(2016777638.829:93535): avc: denied { name_bind } for pid=19815 comm="syz.5.6006" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 624.444859][T19817] overlayfs: failed to clone upperpath [ 624.453804][ T36] audit: type=1400 audit(2016777638.829:93536): avc: denied { node_bind } for pid=19815 comm="syz.5.6006" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 624.508351][ T36] audit: type=1400 audit(2016777638.829:93537): avc: denied { mounton } for pid=19812 comm="syz.0.6004" path="/244/bus" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 624.515444][T19817] overlayfs: failed to clone upperpath [ 624.531097][ T36] audit: type=1326 audit(2016777638.894:93538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19813 comm="syz.9.6007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32bb98eba9 code=0x0 [ 624.559691][ T36] audit: type=1400 audit(2016777638.894:93539): avc: denied { mounton } for pid=19812 comm="syz.0.6004" path="/244/file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 624.568433][T19817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 624.587562][ T36] audit: type=1400 audit(2016777638.894:93540): avc: denied { mount } for pid=19812 comm="syz.0.6004" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 624.601700][T19817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 624.614354][ T36] audit: type=1400 audit(2016777638.894:93541): avc: denied { mounton } for pid=19812 comm="syz.0.6004" path="/244/bus" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 624.646250][ T36] audit: type=1400 audit(2016777638.941:93542): avc: denied { mounton } for pid=19812 comm="syz.0.6004" path="/244/bus" dev="tmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 624.729661][ T36] audit: type=1400 audit(2016777639.007:93543): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.780622][ T36] audit: type=1400 audit(2016777639.007:93544): avc: denied { read write open } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.229831][ T10] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 625.390256][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 625.397483][ T10] usb 10-1: config 0 has an invalid interface number: 134 but max is 0 [ 625.405896][ T10] usb 10-1: config 0 has no interface number 0 [ 625.414636][ T10] usb 10-1: New USB device found, idVendor=1e2d, idProduct=004a, bcdDevice=be.0a [ 625.424078][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.432181][ T10] usb 10-1: Product: syz [ 625.436653][ T10] usb 10-1: Manufacturer: syz [ 625.441332][ T10] usb 10-1: SerialNumber: syz [ 625.447611][ T10] usb 10-1: config 0 descriptor?? [ 625.671121][ T645] usb 10-1: USB disconnect, device number 40 [ 625.916496][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6024'. [ 627.649092][T19951] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6061'. [ 627.854442][T19959] binder: Unknown parameter 'defcontext01777777777777777777777' [ 628.089699][T19985] overlay: Unknown parameter 'dont_appraise' [ 628.347668][T20009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6081'. [ 628.575766][T20025] __vm_enough_memory: pid: 20025, comm: syz.9.6085, bytes: 18014402804453376 not enough memory for the allocation [ 628.592840][T20033] cgroup: No subsys list or none specified [ 629.636064][T20114] tipc: Enabling of bearer rejected, failed to enable media [ 629.774982][T20125] overlayfs: failed to clone upperpath [ 629.806253][ T36] kauditd_printk_skb: 466 callbacks suppressed [ 629.806271][ T36] audit: type=1400 audit(2016777643.841:94011): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.861242][ T36] audit: type=1400 audit(2016777643.878:94012): avc: denied { read write open } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.887239][ T36] audit: type=1400 audit(2016777643.878:94013): avc: denied { ioctl } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.918222][ T36] audit: type=1400 audit(2016777643.953:94014): avc: denied { read } for pid=20128 comm="syz.9.6116" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.941838][ T36] audit: type=1400 audit(2016777643.953:94015): avc: denied { read open } for pid=20128 comm="syz.9.6116" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.966283][ T36] audit: type=1400 audit(2016777643.953:94016): avc: denied { read } for pid=20128 comm="syz.9.6116" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.989927][ T36] audit: type=1400 audit(2016777643.953:94017): avc: denied { read open } for pid=20128 comm="syz.9.6116" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 629.991817][T20131] audit: audit_backlog=65 > audit_backlog_limit=64 [ 630.014696][ T36] audit: type=1400 audit(2016777643.953:94018): avc: denied { read } for pid=20128 comm="syz.9.6116" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 630.043797][ T36] audit: type=1400 audit(2016777643.953:94019): avc: denied { read open } for pid=20128 comm="syz.9.6116" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 630.172857][T20135] input: syz0 as /devices/virtual/input/input126 [ 630.343855][T20138] erofs: dax options not supported [ 631.131473][T20212] IPv4: Oversized IP packet from 172.20.20.170 [ 631.137907][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 631.144155][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 631.179969][T20212] IPv4: Oversized IP packet from 172.20.20.170 [ 631.186405][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 631.192708][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 631.217310][T20212] IPv4: Oversized IP packet from 172.20.20.170 [ 631.223722][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 631.229999][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 631.257480][T20212] IPv4: Oversized IP packet from 172.20.20.170 [ 631.388739][T20227] overlayfs: failed to clone upperpath [ 631.401387][ T10] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 631.521731][T20242] tipc: Enabling of bearer rejected, failed to enable media [ 631.572262][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 631.580186][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 631.593942][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 631.610139][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 631.626485][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.646958][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 631.656931][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 631.679040][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 631.688278][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.720759][ T10] usb 10-1: config 0 descriptor?? [ 631.903837][T20267] overlayfs: failed to resolve './bus': -2 [ 631.954960][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 631.967154][ T10] usb 10-1: USB disconnect, device number 41 [ 631.980039][ T10] usblp0: removed [ 632.173499][T20210] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6138'. [ 632.438413][ T10] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 632.573570][T20334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=20334 comm=syz.0.6181 [ 632.573585][T20333] netlink: 'syz.0.6181': attribute type 4 has an invalid length. [ 632.573600][T20333] netlink: 3673 bytes leftover after parsing attributes in process `syz.0.6181'. [ 632.588124][ T10] usb 10-1: device descriptor read/64, error -71 [ 632.866209][ T10] usb 10-1: device descriptor read/64, error -71 [ 633.122878][ T10] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 633.206691][T20370] overlayfs: failed to clone upperpath [ 633.273113][ T10] usb 10-1: device descriptor read/64, error -71 [ 633.529309][ T10] usb 10-1: device descriptor read/64, error -71 [ 633.647376][ T10] usb usb10-port1: attempt power cycle [ 634.010603][ T10] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 634.033844][ T10] usb 10-1: device descriptor read/8, error -71 [ 634.172903][ T10] usb 10-1: device descriptor read/8, error -71 [ 634.652304][ T10] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 634.684382][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 634.692541][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 634.698334][T20426] /dev/loop0: Can't lookup blockdev [ 634.701494][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 634.715294][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 634.725258][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.735084][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 634.744988][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 634.758064][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 634.767307][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.777316][ T10] usb 10-1: config 0 descriptor?? [ 635.002634][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 635.026801][ T10] usb 10-1: USB disconnect, device number 45 [ 635.034345][ T10] usblp0: removed [ 635.218837][ T36] kauditd_printk_skb: 605 callbacks suppressed [ 635.218856][ T36] audit: type=1400 audit(2016777648.899:94620): avc: denied { read write } for pid=20423 comm="syz.9.6212" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.249088][ T36] audit: type=1400 audit(2016777648.899:94621): avc: denied { read write open } for pid=20423 comm="syz.9.6212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.273595][ T36] audit: type=1400 audit(2016777648.918:94622): avc: denied { ioctl } for pid=20423 comm="syz.9.6212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.298639][ T36] audit: type=1400 audit(2016777648.918:94623): avc: denied { ioctl } for pid=20423 comm="syz.9.6212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.323759][ T36] audit: type=1400 audit(2016777648.918:94624): avc: denied { ioctl } for pid=20423 comm="syz.9.6212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.348807][ T36] audit: type=1400 audit(2016777648.918:94625): avc: denied { ioctl } for pid=20423 comm="syz.9.6212" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.376413][ T36] audit: type=1400 audit(2016777649.058:94626): avc: denied { mounton } for pid=20440 comm="syz.5.6219" path="/516/file0" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 635.399452][ T36] audit: type=1400 audit(2016777649.058:94627): avc: denied { mount } for pid=20440 comm="syz.5.6219" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 635.432392][ T36] audit: type=1400 audit(2016777649.105:94628): avc: denied { create } for pid=20442 comm="syz.5.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 635.454352][ T36] audit: type=1400 audit(2016777649.105:94629): avc: denied { create } for pid=20442 comm="syz.5.6220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 635.463106][T20448] 9pnet_fd: Insufficient options for proto=fd [ 635.582850][ T10] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 635.678536][T20467] overlayfs: failed to clone upperpath [ 635.743206][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 635.757592][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 635.774801][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 635.784108][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 635.793950][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.803842][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 635.813813][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.816969][T20479] /dev/loop0: Can't lookup blockdev [ 635.827024][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 635.842771][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.856966][ T10] usb 10-1: config 0 descriptor?? [ 636.099322][ T10] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 636.331004][ T10] usb 10-1: USB disconnect, device number 46 [ 636.343139][ T10] usblp0: removed [ 637.104893][T20517] binder: Unknown parameter 'ÿ ' [ 637.160032][T20526] overlayfs: missing 'workdir' [ 637.262341][T20533] netlink: 'syz.4.6253': attribute type 11 has an invalid length. [ 637.349512][T20543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 637.407218][T20544] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 637.416962][T20544] rust_binder: Error in use_page_slow: ESRCH [ 637.423566][T20544] rust_binder: use_range failure ESRCH [ 637.429713][T20544] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 637.435387][T20544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 637.443405][T20544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:220 [ 637.454601][T20544] rust_binder: Error in use_page_slow: ESRCH [ 637.463659][T20544] rust_binder: use_range failure ESRCH [ 637.469754][T20544] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 637.475236][T20544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 637.483648][T20544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:220 [ 638.000016][ T645] syz_tun: tun_net_xmit 90 [ 638.379309][T20595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20595 comm=syz.5.6275 [ 638.395721][ T10] syz_tun: tun_net_xmit 90 [ 638.663406][T20606] overlayfs: failed to clone upperpath [ 639.433045][ T645] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 639.595501][ T645] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.606563][ T645] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.616454][ T645] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 639.625709][ T645] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.635123][ T645] usb 10-1: config 0 descriptor?? [ 639.933815][T20647] netlink: 'syz.0.6294': attribute type 4 has an invalid length. [ 639.941673][T20647] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6294'. [ 639.974893][T20647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=20647 comm=syz.0.6294 [ 640.515193][ T645] hid-led 0003:27B8:01ED.0058: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 640.540698][ T645] hid-led 0003:27B8:01ED.0058: ThingM blink(1) initialized [ 640.607340][ T36] kauditd_printk_skb: 403 callbacks suppressed [ 640.607370][ T36] audit: type=1400 audit(2016777653.948:95033): avc: denied { execmem } for pid=20669 comm="syz.0.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 640.794093][ T645] usb 10-1: USB disconnect, device number 47 [ 640.991641][ T36] audit: type=1400 audit(2016777654.303:95034): avc: denied { create } for pid=20672 comm="syz.4.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.011890][ T36] audit: type=1400 audit(2016777654.303:95035): avc: denied { create } for pid=20672 comm="syz.4.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 641.031669][ T36] audit: type=1400 audit(2016777654.303:95036): avc: denied { write } for pid=20672 comm="syz.4.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 641.177714][ T36] audit: type=1400 audit(2016777654.481:95037): avc: denied { execmem } for pid=20674 comm="syz.5.6305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 641.197258][ T36] audit: type=1400 audit(2016777654.481:95038): avc: denied { execute } for pid=20674 comm="syz.5.6305" path="/dev/rnullb0" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 641.221158][ T36] audit: type=1400 audit(2016777654.500:95039): avc: denied { create } for pid=20674 comm="syz.5.6305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 641.272621][ T36] audit: type=1400 audit(2016777654.537:95040): avc: denied { execmem } for pid=20676 comm="syz.5.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 641.311903][ T36] audit: type=1400 audit(2016777654.602:95041): avc: denied { create } for pid=20679 comm="syz.0.6307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 641.342133][ T36] audit: type=1400 audit(2016777654.602:95042): avc: denied { setopt } for pid=20679 comm="syz.0.6307" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 641.668368][ T389] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 641.757502][T20696] 9pnet: Could not find request transport: ´]য়&5fd0x0000000000000004 [ 641.839457][ T389] usb 10-1: Using ep0 maxpacket: 16 [ 641.846761][ T389] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.857010][ T389] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 641.868600][ T389] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 641.877796][ T389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.886097][ T389] usb 10-1: Product: syz [ 641.890359][ T389] usb 10-1: Manufacturer: syz [ 641.895096][ T389] usb 10-1: SerialNumber: syz [ 641.911056][ T389] usb 10-1: config 0 descriptor?? [ 642.167823][ T657] usb 10-1: USB disconnect, device number 48 [ 642.710853][T20770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20770 comm=syz.4.6339 [ 642.726586][T20770] 9pnet_fd: Insufficient options for proto=fd [ 642.873026][T20784] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 643.094139][T20809] overlayfs: failed to clone upperpath [ 643.110275][T20809] overlayfs: failed to clone upperpath [ 643.222426][T20825] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 643.251850][T20800] netlink: 'syz.9.6348': attribute type 11 has an invalid length. [ 643.852828][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6365'. [ 644.192073][T20895] syzkaller0: entered allmulticast mode [ 644.198434][T20895] syzkaller0: entered promiscuous mode [ 644.206572][T20895] syzkaller0 (unregistering): left promiscuous mode [ 644.214142][T20895] syzkaller0 (unregistering): left allmulticast mode [ 644.749125][ T10] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 644.881197][T20952] overlayfs: failed to clone upperpath [ 644.891734][T20952] overlayfs: failed to clone upperpath [ 644.933043][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 644.946607][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 644.964145][ T10] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 644.974439][ T10] usb 10-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 644.991088][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.003728][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.013639][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.022215][ T10] usb 10-1: Product: syz [ 645.026542][ T10] usb 10-1: Manufacturer: syz [ 645.031268][ T10] usb 10-1: SerialNumber: syz [ 645.264312][T20928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.283727][T20928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.297764][ T10] usb 10-1: 0:6 : does not exist [ 645.311954][ T10] usb 10-1: 0:36 : does not exist [ 645.331141][ T10] usb 10-1: USB disconnect, device number 49 [ 645.398340][T19855] udevd[19855]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 645.754773][T20972] veth0_virt_wifi: entered allmulticast mode [ 645.761037][T20971] veth0_virt_wifi: left allmulticast mode [ 645.970285][ T36] kauditd_printk_skb: 511 callbacks suppressed [ 645.970303][ T36] audit: type=1400 audit(2016777658.960:95554): avc: denied { map } for pid=20974 comm="syz.9.6408" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.001489][ T36] audit: type=1400 audit(2016777658.960:95555): avc: denied { read } for pid=20974 comm="syz.9.6408" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.001609][ T10] rust_binder: 20974: removing orphan mapping 0:24 [ 646.026619][ T36] audit: type=1400 audit(2016777658.960:95556): avc: denied { ioctl } for pid=20974 comm="syz.9.6408" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.059396][ T36] audit: type=1400 audit(2016777658.960:95557): avc: denied { call } for pid=20974 comm="syz.9.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 646.085288][ T36] audit: type=1400 audit(2016777658.960:95558): avc: denied { ioctl } for pid=20974 comm="syz.9.6408" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.110926][ T36] audit: type=1400 audit(2016777659.025:95559): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.135233][ T36] audit: type=1400 audit(2016777659.025:95560): avc: denied { read write open } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.160538][ T36] audit: type=1400 audit(2016777659.025:95561): avc: denied { ioctl } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.186209][ T36] audit: type=1400 audit(2016777659.072:95562): avc: denied { create } for pid=20977 comm="syz.9.6409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 646.275531][ T36] audit: type=1400 audit(2016777659.240:95563): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 646.311848][T20981] rust_binder: Error in use_page_slow: ESRCH [ 646.311871][T20981] rust_binder: use_range failure ESRCH [ 646.312080][T20982] rust_binder: Error in use_page_slow: ESRCH [ 646.318070][T20981] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 646.336137][T20981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 646.343862][T20982] rust_binder: use_range failure ESRCH [ 646.354172][T20982] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 646.360158][T20982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 646.360815][T20981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:254 [ 646.372318][T20982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:254 [ 648.752285][T21036] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6426'. [ 648.770436][T21036] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6426'. [ 648.834415][T21044] __vm_enough_memory: pid: 21044, comm: syz.5.6428, bytes: 21199775789056 not enough memory for the allocation [ 650.019552][T21115] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.031950][T21115] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.039069][T21115] bridge_slave_0: entered allmulticast mode [ 650.045440][T21115] bridge_slave_0: entered promiscuous mode [ 650.053032][T21115] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.078598][T21115] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.085759][T21115] bridge_slave_1: entered allmulticast mode [ 650.092095][T21115] bridge_slave_1: entered promiscuous mode [ 650.149612][ T389] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 650.259821][T21115] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.266898][T21115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.274210][T21115] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.281270][T21115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.321200][ T389] usb 10-1: Using ep0 maxpacket: 8 [ 650.326595][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.334920][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.337015][ T389] usb 10-1: unable to get BOS descriptor or descriptor too short [ 650.351786][ T389] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 650.358463][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.363531][ T389] usb 10-1: config 6 has no interface number 0 [ 650.367129][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.373271][ T389] usb 10-1: config 6 interface 248 has no altsetting 0 [ 650.393522][ T389] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 650.405013][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.412130][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.420574][ T389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.428853][ T389] usb 10-1: Product: syz [ 650.433363][ T389] usb 10-1: Manufacturer: syz [ 650.439073][ T389] usb 10-1: SerialNumber: syz [ 650.541751][T21115] veth0_vlan: entered promiscuous mode [ 650.591331][T21115] veth1_macvtap: entered promiscuous mode [ 650.605930][T21164] /dev/loop0: Can't lookup blockdev [ 650.672048][ T389] ums-karma 10-1:6.248: USB Mass Storage device detected [ 650.743900][ T389] usb 10-1: USB disconnect, device number 50 [ 650.941089][ T776] usb 6-1: new low-speed USB device number 76 using dummy_hcd [ 651.108524][ T776] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 651.116892][ T776] usb 6-1: config 179 has no interface number 0 [ 651.123220][ T776] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 651.134423][ T776] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 651.145143][ T776] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 651.156507][ T776] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 651.165825][T21190] overlayfs: failed to clone upperpath [ 651.178033][T21190] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 651.185992][ T776] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 651.186912][T21190] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 651.208445][ T776] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 651.208476][ T776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.236711][T21166] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 651.294607][ T776] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 651.327903][ T776] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 651.348742][ T36] kauditd_printk_skb: 407 callbacks suppressed [ 651.348759][ T36] audit: type=1400 audit(2016777663.990:95971): avc: denied { read } for pid=21194 comm="syz.9.6480" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 651.392943][T21196] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 651.392978][T21196] rust_binder: Error in use_page_slow: EFAULT [ 651.414271][T21196] rust_binder: use_range failure EFAULT [ 651.420387][T21196] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 651.433063][ T36] audit: type=1400 audit(2016777663.990:95972): avc: denied { read open } for pid=21194 comm="syz.9.6480" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 651.452459][T21201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.475809][T21196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 651.475846][T21196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:266 [ 651.477015][T21201] audit: audit_lost=213 audit_rate_limit=0 audit_backlog_limit=64 [ 651.494808][T21197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.504926][T21204] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.509195][T21166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.517259][T21201] audit: backlog limit exceeded [ 651.522121][ T36] audit: type=1400 audit(2016777664.018:95973): avc: denied { ioctl } for pid=21194 comm="syz.9.6480" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 651.529049][T21204] audit: audit_lost=214 audit_rate_limit=0 audit_backlog_limit=64 [ 651.769405][T21197] netlink: 'syz.4.6479': attribute type 12 has an invalid length. [ 651.772217][ T776] usb 6-1: USB disconnect, device number 76 [ 651.965475][T21226] overlayfs: failed to clone lowerpath [ 652.212010][T21235] overlayfs: failed to clone upperpath [ 652.246050][ T776] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 652.363603][ T389] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 652.409268][ T776] usb 6-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 652.420959][ T776] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 652.431024][ T776] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.447068][ T776] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.456720][ T776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.465360][ T776] usb 6-1: Product: syz [ 652.469529][ T776] usb 6-1: Manufacturer: syz [ 652.474786][ T776] usb 6-1: SerialNumber: syz [ 652.502595][ T389] usb 10-1: device descriptor read/64, error -71 [ 652.759313][ T389] usb 10-1: device descriptor read/64, error -71 [ 652.853802][T21251] 9pnet_fd: Insufficient options for proto=fd [ 653.015975][ T389] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 653.147852][T21262] netlink: 'syz.4.6501': attribute type 1 has an invalid length. [ 653.155030][ T389] usb 10-1: device descriptor read/64, error -71 [ 653.158846][T21262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 653.411667][ T389] usb 10-1: device descriptor read/64, error -71 [ 653.529493][ T389] usb usb10-port1: attempt power cycle [ 653.892971][ T389] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 653.917642][ T389] usb 10-1: device descriptor read/8, error -71 [ 653.965945][T21281] tipc: Enabling of bearer rejected, failed to enable media [ 654.032093][T21287] netlink: 'syz.4.6509': attribute type 32 has an invalid length. [ 654.055665][ T389] usb 10-1: device descriptor read/8, error -71 [ 654.310040][ T389] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 654.335766][ T389] usb 10-1: device descriptor read/8, error -71 [ 654.342697][ T497] bridge_slave_1: left allmulticast mode [ 654.348379][ T497] bridge_slave_1: left promiscuous mode [ 654.354131][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.361685][ T497] bridge_slave_0: left allmulticast mode [ 654.367530][ T497] bridge_slave_0: left promiscuous mode [ 654.373162][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.483363][ T389] usb 10-1: device descriptor read/8, error -71 [ 654.494805][ T497] veth1_macvtap: left promiscuous mode [ 654.500376][ T497] veth0_vlan: left promiscuous mode [ 654.599922][ T389] usb usb10-port1: unable to enumerate USB device [ 655.186303][ T776] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 655.193357][ T776] cdc_ncm 6-1:1.0: bind() failure [ 655.219838][ T776] usb 6-1: USB disconnect, device number 77 [ 655.276409][T21300] rust_binder: Error while translating object. [ 655.276458][T21300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 655.294032][T21300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 655.383436][T21306] __vm_enough_memory: pid: 21306, comm: syz.5.6517, bytes: 18014402804453376 not enough memory for the allocation [ 655.553627][T21315] /dev/rnullb0: Can't open blockdev [ 655.753924][ T389] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 655.767442][T21317] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.774502][T21317] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.781661][T21317] bridge_slave_0: entered allmulticast mode [ 655.788116][T21317] bridge_slave_0: entered promiscuous mode [ 655.796212][T21317] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.803519][T21317] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.810909][T21317] bridge_slave_1: entered allmulticast mode [ 655.817277][T21317] bridge_slave_1: entered promiscuous mode [ 655.914318][ T389] usb 10-1: Using ep0 maxpacket: 32 [ 655.931653][ T389] usb 10-1: unable to get BOS descriptor or descriptor too short [ 655.942926][ T389] usb 10-1: config 1 has no interfaces? [ 655.958743][ T389] usb 10-1: New USB device found, idVendor=12d1, idProduct=7eb9, bcdDevice=fa.73 [ 655.970107][T21327] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 655.972775][T21317] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.987229][T21317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.994575][T21317] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.001718][T21317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.011227][ T389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.019992][ T389] usb 10-1: Product: ᙸ䈑洮鮼茙퓥뽥䭹钺าæ¡ä­²â¶¾á‰·í︨鵻慕ᚊ꽰ë¹ã¹¥ïŠ“亽áŒï«¤ç»Œèªƒê²•ê†®é¤…烡å­çŒîˆ¨è¤žá¿°Üå«á¢«æ•±ã®í‚¶ï¶œë‚Žá¯Šïž‹êƒŽä¤¢ [ 656.041481][ T389] usb 10-1: Manufacturer:  [ 656.048514][ T389] usb 10-1: SerialNumber: syz [ 656.089035][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.097145][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.114226][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.121308][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.134239][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.141321][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.156496][T21338] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6527'. [ 656.165534][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6527'. [ 656.174550][T21338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6527'. [ 656.247000][T21317] veth0_vlan: entered promiscuous mode [ 656.281447][T21317] veth1_macvtap: entered promiscuous mode [ 656.368531][T21344] overlay: Unknown parameter 'func' [ 656.711141][ T36] kauditd_printk_skb: 1276 callbacks suppressed [ 656.711159][ T36] audit: type=1400 audit(2016777669.001:97236): avc: denied { ioctl } for pid=21354 comm="syz.3.6531" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=108443 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 656.745983][ T36] audit: type=1400 audit(2016777669.039:97237): avc: denied { relabelfrom } for pid=21354 comm="syz.3.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 656.766089][ T36] audit: type=1400 audit(2016777669.039:97238): avc: denied { relabelto } for pid=21354 comm="syz.3.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 656.833190][ T36] audit: type=1400 audit(2016777669.114:97239): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 656.876210][ T36] audit: type=1400 audit(2016777669.114:97240): avc: denied { read write open } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 656.889282][T21365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.913640][ T36] audit: type=1400 audit(2016777669.114:97241): avc: denied { ioctl } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 656.962505][ T36] audit: type=1400 audit(2016777669.151:97242): avc: denied { read write } for pid=21364 comm="syz.9.6534" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 656.962534][T21365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.994537][ T36] audit: type=1400 audit(2016777669.151:97243): avc: denied { read write open } for pid=21364 comm="syz.9.6534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 657.014981][T21365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.031020][ T36] audit: type=1400 audit(2016777669.151:97244): avc: denied { ioctl } for pid=21364 comm="syz.9.6534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 657.041757][T21365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.060624][ T36] audit: type=1400 audit(2016777669.151:97245): avc: denied { ioctl } for pid=21364 comm="syz.9.6534" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 657.146380][T21370] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 657.295072][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6540'. [ 657.497884][ T389] usb 10-1: USB disconnect, device number 55 [ 657.792334][T21399] netlink: 'syz.9.6548': attribute type 1 has an invalid length. [ 658.004492][T21407] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 658.171027][ T645] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 658.281184][T21418] overlayfs: failed to clone upperpath [ 658.310053][ T645] usb 10-1: device descriptor read/64, error -71 [ 658.525255][ T497] bridge_slave_1: left allmulticast mode [ 658.530927][ T497] bridge_slave_1: left promiscuous mode [ 658.536623][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.544102][ T497] bridge_slave_0: left allmulticast mode [ 658.549813][ T497] bridge_slave_0: left promiscuous mode [ 658.555532][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.566748][ T645] usb 10-1: device descriptor read/64, error -71 [ 658.686487][ T497] veth1_macvtap: left promiscuous mode [ 658.692027][ T497] veth0_vlan: left promiscuous mode [ 658.823437][ T645] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 658.962463][ T645] usb 10-1: device descriptor read/64, error -71 [ 659.219139][ T645] usb 10-1: device descriptor read/64, error -71 [ 659.294054][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 659.295093][T13681] Bluetooth: hci0: command 0x1003 tx timeout [ 659.336893][ T645] usb usb10-port1: attempt power cycle [ 659.668364][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 659.711167][ T645] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 659.734974][ T645] usb 10-1: device descriptor read/8, error -71 [ 659.831505][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.843304][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.854206][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 659.864155][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.875534][ T645] usb 10-1: device descriptor read/8, error -71 [ 659.885861][ T10] usb 4-1: config 0 descriptor?? [ 660.160328][ T645] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 660.164500][T21472] netlink: 'syz.4.6574': attribute type 11 has an invalid length. [ 660.185862][ T645] usb 10-1: device descriptor read/8, error -71 [ 660.201903][T21474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6575'. [ 660.333659][ T645] usb 10-1: device descriptor read/8, error -71 [ 660.449214][ T645] usb usb10-port1: unable to enumerate USB device [ 660.760237][ T10] hid-led 0003:27B8:01ED.0059: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 660.786364][ T10] hid-led 0003:27B8:01ED.0059: ThingM blink(1) initialized [ 660.804966][T21481] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6577'. [ 660.974235][ T657] usb 4-1: USB disconnect, device number 45 [ 669.610159][ T36] kauditd_printk_skb: 350 callbacks suppressed [ 669.610178][ T36] audit: type=1400 audit(2016777681.063:97596): avc: denied { create } for pid=21517 comm="syz.4.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 669.611401][T21523] /dev/rnullb0: Can't open blockdev [ 669.633393][ T36] audit: type=1400 audit(2016777681.063:97597): avc: denied { mounton } for pid=21519 comm="syz.3.6589" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 669.683371][T21524] cgroup2: Unknown parameter 'obj_user' [ 669.689022][ T36] audit: type=1400 audit(2016777681.072:97598): avc: denied { connect } for pid=21517 comm="syz.4.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 669.757115][ T36] audit: type=1400 audit(2016777681.072:97599): avc: denied { read write } for pid=21520 comm="syz.9.6590" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 669.809453][ T36] audit: type=1400 audit(2016777681.072:97600): avc: denied { read write open } for pid=21520 comm="syz.9.6590" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 669.854965][T21537] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.856097][ T36] audit: type=1400 audit(2016777681.072:97601): avc: denied { create } for pid=21517 comm="syz.4.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 669.875640][T21537] audit: audit_lost=220 audit_rate_limit=0 audit_backlog_limit=64 [ 669.889774][T21537] audit: backlog limit exceeded [ 669.902233][T21537] audit: audit_backlog=65 > audit_backlog_limit=64 [ 670.076920][T21552] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 670.100403][T21557] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6602'. [ 670.198221][T21559] rust_binder: Error in use_page_slow: ESRCH [ 670.198250][T21559] rust_binder: use_range failure ESRCH [ 670.205433][T21559] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 670.210921][T21559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 670.219751][T21559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:304 [ 670.231559][T21559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 670.342194][ T645] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 670.409522][T21575] can0: slcan on ttyS3. [ 670.515929][ T645] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.532377][ T645] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 670.544100][ T645] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.554717][T21575] can0 (unregistered): slcan off ttyS3. [ 670.560361][ T645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.599821][ T645] usb 4-1: invalid MIDI out EP 0 [ 670.622633][ T645] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 670.797423][T21580] udevd[21580]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 670.824334][T21552] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6601'. [ 670.843805][ T645] usb 4-1: USB disconnect, device number 46 [ 670.925932][T21599] fuse: Bad value for 'rootmode' [ 670.975536][T21602] rust_binder: Write failure EINVAL in pid:317 [ 671.149560][T21614] random: crng reseeded on system resumption [ 671.240224][T21614] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 671.279429][T21614] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 671.787307][T21653] netlink: 57 bytes leftover after parsing attributes in process `syz.0.6621'. [ 671.825578][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6619'. [ 671.880485][T21660] fuse: Bad value for 'user_id' [ 671.889927][T21660] fuse: Bad value for 'user_id' [ 671.899618][T21662] binder: Bad value for 'defcontext' [ 671.953112][T21664] rust_binder: Fixups oob 165 172 361 173 [ 671.953147][T21664] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 671.964881][T21664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 671.975393][T21664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 672.044381][T21669] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21669 comm=syz.9.6626 [ 672.080005][T21669] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 672.080032][T21669] rust_binder: Error while translating object. [ 672.100249][T21669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 672.109458][T21669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 672.120528][T21670] 9pnet_fd: Insufficient options for proto=fd [ 672.279312][T21685] 9pnet: p9_errstr2errno: server reported unknown error 2ê“’Û°|sdK [ 672.279312][T21685] ŽNšâÝ÷Ho" ¯×hb [ 672.372774][ T497] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.540255][T21697] netlink: 'syz.0.6633': attribute type 27 has an invalid length. [ 673.133898][T21703] overlayfs: missing 'workdir' [ 673.217759][T21710] netlink: 'syz.0.6638': attribute type 4 has an invalid length. [ 673.236229][T21710] netlink: 'syz.0.6638': attribute type 4 has an invalid length. [ 673.274331][T21710] netlink: 'syz.0.6638': attribute type 32 has an invalid length. [ 673.362287][T21717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354 [ 673.468957][T21723] kvm: kvm [21716]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 673.486854][T21723] kvm: kvm [21716]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 673.559761][T21723] kvm: kvm [21716]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 674.110145][T21746] overlayfs: missing 'workdir' [ 674.172640][T21750] netlink: 'syz.0.6651': attribute type 4 has an invalid length. [ 674.180451][T21750] netlink: 992 bytes leftover after parsing attributes in process `syz.0.6651'. [ 674.274969][T21759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21759 comm=syz.0.6654 [ 674.313204][T21761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 674.313547][T21761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 674.320830][T21762] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 674.523956][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 674.538128][T13681] Bluetooth: hci0: command 0x1003 tx timeout [ 674.980662][ T36] kauditd_printk_skb: 1190 callbacks suppressed [ 674.980680][ T36] audit: type=1400 audit(2016777686.084:98787): avc: denied { read write } for pid=21795 comm="syz.3.6668" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 675.011315][ T36] audit: type=1400 audit(2016777686.084:98788): avc: denied { read write open } for pid=21795 comm="syz.3.6668" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 675.037109][ T36] audit: type=1400 audit(2016777686.084:98789): avc: denied { ioctl } for pid=21795 comm="syz.3.6668" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 675.070557][ T36] audit: type=1400 audit(2016777686.084:98790): avc: denied { create } for pid=21795 comm="syz.3.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 675.090405][ T36] audit: type=1400 audit(2016777686.084:98791): avc: denied { write } for pid=21795 comm="syz.3.6668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 675.110028][ T36] audit: type=1400 audit(2016777686.112:98792): avc: denied { read write } for pid=21317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 675.155731][ T36] audit: type=1400 audit(2016777686.112:98793): avc: denied { read write open } for pid=21317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 675.194140][T21804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6671'. [ 675.218369][ T36] audit: type=1400 audit(2016777686.112:98794): avc: denied { ioctl } for pid=21317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 675.245524][ T36] audit: type=1400 audit(2016777686.168:98795): avc: denied { read write } for pid=21798 comm="syz.3.6669" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 675.284646][ T36] audit: type=1400 audit(2016777686.168:98796): avc: denied { read write open } for pid=21798 comm="syz.3.6669" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 675.313550][T21808] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 675.313585][T21808] rust_binder: Error in use_page_slow: EFAULT [ 675.327630][T21808] rust_binder: use_range failure EFAULT [ 675.333737][T21808] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 675.340066][T21808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 675.348561][T21808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:365 [ 675.371500][T21812] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 675.403855][T21812] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 675.591520][T21826] overlayfs: failed to clone upperpath [ 675.668332][ T645] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 675.695139][T21841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 675.695375][T21840] overlayfs: failed to clone upperpath [ 675.777766][T21845] tipc: Started in network mode [ 675.782653][T21845] tipc: Node identity ac14140f, cluster identity 4711 [ 675.789671][T21845] tipc: New replicast peer: 255.255.255.255 [ 675.796020][T21845] tipc: Enabled bearer , priority 10 [ 675.803174][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6686'. [ 675.812387][T21845] tipc: Disabling bearer [ 675.850186][ T645] usb 10-1: Using ep0 maxpacket: 8 [ 675.859042][ T645] usb 10-1: unable to get BOS descriptor or descriptor too short [ 675.869458][ T645] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 675.878844][ T645] usb 10-1: config 6 has no interface number 0 [ 675.885270][ T645] usb 10-1: config 6 interface 248 has no altsetting 0 [ 675.906664][ T645] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 675.926859][ T645] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.935017][ T645] usb 10-1: Product: syz [ 675.939773][ T645] usb 10-1: Manufacturer: syz [ 675.944469][ T645] usb 10-1: SerialNumber: syz [ 676.171218][ T645] ums-karma 10-1:6.248: USB Mass Storage device detected [ 676.218046][ T645] usb 10-1: USB disconnect, device number 60 [ 676.702712][T21882] rust_binder: 21882 RLIMIT_NICE not set [ 676.702850][T21882] rust_binder: Read failure Err(EFAULT) in pid:78 [ 676.793863][T21887] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 676.818749][T16751] Bluetooth: hci0: Frame reassembly failed (-84) [ 677.101487][ T645] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 677.261923][ T645] usb 10-1: Using ep0 maxpacket: 16 [ 677.275355][ T645] usb 10-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.288408][ T645] usb 10-1: config 1 interface 0 has no altsetting 0 [ 677.301229][ T645] usb 10-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 677.311324][ T645] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.320084][ T645] usb 10-1: Product: ﶧꂢ놽璥 [ 677.325252][ T645] usb 10-1: Manufacturer: à°Š [ 677.330796][ T645] usb 10-1: SerialNumber: á Š [ 677.556335][T21925] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.563474][T21925] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.572770][T21925] bridge_slave_0: entered allmulticast mode [ 677.579601][T21925] bridge_slave_0: entered promiscuous mode [ 677.587595][T21925] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.594676][T21925] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.601777][T21925] bridge_slave_1: entered allmulticast mode [ 677.609335][T21925] bridge_slave_1: entered promiscuous mode [ 677.641298][ T334] bridge_slave_1: left allmulticast mode [ 677.647089][ T334] bridge_slave_1: left promiscuous mode [ 677.652737][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.660839][ T334] bridge_slave_0: left allmulticast mode [ 677.666491][ T334] bridge_slave_0: left promiscuous mode [ 677.672304][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.769257][ T334] tipc: Left network mode [ 677.774895][ T334] veth1_macvtap: left promiscuous mode [ 677.780508][ T334] veth0_vlan: left promiscuous mode [ 677.793361][T21887] rust_binder: 369: no such ref 3 [ 677.798609][T21887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 677.800507][T21887] SELinux: Context system_u:object_r:dbusd_etc_t:s0 is not valid (left unmapped). [ 677.822835][T21887] rust_binder: Write failure EINVAL in pid:369 [ 677.825585][ T645] usbhid 10-1:1.0: can't add hid device: -71 [ 677.846173][ T645] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 677.859988][ T645] usb 10-1: USB disconnect, device number 61 [ 677.884894][T21925] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.891986][T21925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.899294][T21925] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.906350][T21925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.958452][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.965863][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.979117][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.986169][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.996861][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.003937][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.095437][T21925] veth0_vlan: entered promiscuous mode [ 678.129719][T21925] veth1_macvtap: entered promiscuous mode [ 678.228776][T21943] rust_binder: Write failure EINVAL in pid:2 [ 678.288838][T21944] /dev/rnullb0: Can't open blockdev [ 678.973463][T13681] Bluetooth: hci0: command 0x1003 tx timeout [ 678.974317][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 679.043947][T21955] rust_binder: Error while translating object. [ 679.043984][T21955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 679.050225][T21955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 679.061286][T21955] rust_binder: Read failure Err(EFAULT) in pid:84 [ 679.183659][T21965] netlink: 'syz.9.6720': attribute type 4 has an invalid length. [ 679.199771][T21966] netlink: 'syz.9.6720': attribute type 4 has an invalid length. [ 679.272268][T21962] netlink: 2885 bytes leftover after parsing attributes in process `syz.3.6719'. [ 679.454449][ T645] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 679.603630][T21977] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 679.622719][ T645] usb 5-1: device descriptor read/64, error -71 [ 679.631170][T21977] rust_binder: Write failure EINVAL in pid:387 [ 679.706016][T21979] /dev/loop0: Can't lookup blockdev [ 679.882432][ T645] usb 5-1: device descriptor read/64, error -71 [ 679.914018][T21987] /dev/rnullb0: Can't open blockdev [ 679.989220][ T389] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 680.077169][T21991] incfs: Can't find or create .index dir in ./bus [ 680.083675][T21991] incfs: mount failed -1 [ 680.090136][T21991] incfs: Can't find or create .index dir in ./bus [ 680.096641][T21991] incfs: mount failed -1 [ 680.149634][ T389] usb 10-1: Using ep0 maxpacket: 8 [ 680.149774][ T645] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 680.159140][ T389] usb 10-1: unable to get BOS descriptor or descriptor too short [ 680.172118][ T389] usb 10-1: config 6 has an invalid interface number: 248 but max is 0 [ 680.180378][ T389] usb 10-1: config 6 has no interface number 0 [ 680.186727][ T389] usb 10-1: config 6 interface 248 has no altsetting 0 [ 680.203266][ T389] usb 10-1: New USB device found, idVendor=8c5a, idProduct=4470, bcdDevice= 1.af [ 680.212520][ T389] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.220691][ T389] usb 10-1: Product: syz [ 680.225053][ T389] usb 10-1: Manufacturer: syz [ 680.229740][ T389] usb 10-1: SerialNumber: syz [ 680.299402][ T645] usb 5-1: device descriptor read/64, error -71 [ 680.339278][ T36] kauditd_printk_skb: 916 callbacks suppressed [ 680.339296][ T36] audit: type=1400 audit(2016777691.096:99713): avc: denied { name_bind } for pid=21996 comm="syz.0.6731" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 680.367735][ T36] audit: type=1400 audit(2016777691.105:99714): avc: denied { node_bind } for pid=21996 comm="syz.0.6731" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 680.388653][ T36] audit: type=1400 audit(2016777691.105:99715): avc: denied { read write } for pid=21998 comm="syz.3.6732" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.412272][ T36] audit: type=1400 audit(2016777691.105:99716): avc: denied { read write open } for pid=21998 comm="syz.3.6732" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.436873][ T36] audit: type=1400 audit(2016777691.105:99717): avc: denied { ioctl } for pid=21998 comm="syz.3.6732" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.461999][ T36] audit: type=1400 audit(2016777691.105:99718): avc: denied { ioctl } for pid=21998 comm="syz.3.6732" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.471799][ T389] usb 10-1: USB disconnect, device number 62 [ 680.486980][ T36] audit: type=1400 audit(2016777691.105:99719): avc: denied { read write } for pid=21998 comm="syz.3.6732" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.525704][ T36] audit: type=1400 audit(2016777691.105:99720): avc: denied { read write open } for pid=21998 comm="syz.3.6732" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.573032][ T36] audit: type=1400 audit(2016777691.105:99721): avc: denied { ioctl } for pid=21998 comm="syz.3.6732" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 680.609073][ T36] audit: type=1400 audit(2016777691.105:99722): avc: denied { ioctl } for pid=21998 comm="syz.3.6732" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 680.695075][ T645] usb 5-1: device descriptor read/64, error -71 [ 680.708722][T22017] ./file0: Can't lookup blockdev [ 680.812853][ T645] usb usb5-port1: attempt power cycle [ 680.848139][T22022] overlay: Unknown parameter 'dont_hash' [ 680.912829][T22024] rust_binder: 115: no such ref 1 [ 680.967971][T22025] rust_binder: Write failure EINVAL in pid:115 [ 681.046146][T22027] rust_binder: 391: no such ref 3 [ 681.058486][T22027] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 681.065850][T22027] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 681.073116][T22027] rust_binder: Write failure EFAULT in pid:391 [ 681.132185][T22032] overlayfs: failed to resolve './file1': -2 [ 681.146348][T22032] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 681.155100][T22032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 681.176375][ T645] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 681.206274][ T645] usb 5-1: device descriptor read/8, error -71 [ 681.238172][T22034] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6743'. [ 681.351780][ T645] usb 5-1: device descriptor read/8, error -71 [ 681.604071][T22039] rust_binder: Write failure EINVAL in pid:403 [ 681.615271][ T645] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 681.652054][ T645] usb 5-1: device descriptor read/8, error -71 [ 681.670899][T22039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 681.799383][ T645] usb 5-1: device descriptor read/8, error -71 [ 681.802137][T22058] rust_binder: 122: no such ref 0 [ 681.810674][T22058] rust_binder: 122: no such ref 0 [ 681.815693][T22058] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 681.822745][T22058] rust_binder: 122: no such ref 64 [ 681.827858][T22058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 681.850088][T22061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 681.860084][T22060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 681.866564][T22060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:124 [ 681.914422][ T645] usb usb5-port1: unable to enumerate USB device [ 681.946478][ T657] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 681.978484][T22065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 682.046102][T22066] kvm: kvm [22064]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 682.063897][T22066] kvm: kvm [22064]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 682.106827][ T657] usb 10-1: Using ep0 maxpacket: 32 [ 682.119322][ T657] usb 10-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 682.130567][ T657] usb 10-1: config 0 interface 0 has no altsetting 0 [ 682.135867][T22066] kvm: kvm [22064]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 682.137263][ T657] usb 10-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 682.157193][ T657] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.167855][ T657] usb 10-1: config 0 descriptor?? [ 682.537041][T16751] bridge_slave_1: left allmulticast mode [ 682.542724][T16751] bridge_slave_1: left promiscuous mode [ 682.550450][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.558848][T16751] bridge_slave_0: left allmulticast mode [ 682.564551][T16751] bridge_slave_0: left promiscuous mode [ 682.571414][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.620280][ T657] wacom 0003:056A:0003.005A: unknown main item tag 0x0 [ 682.633272][ T657] wacom 0003:056A:0003.005A: unknown main item tag 0x0 [ 682.644993][ T657] wacom 0003:056A:0003.005A: unknown main item tag 0x0 [ 682.652030][ T657] wacom 0003:056A:0003.005A: unknown main item tag 0x0 [ 682.660505][ T657] wacom 0003:056A:0003.005A: unknown main item tag 0x0 [ 682.668240][ T657] wacom 0003:056A:0003.005A: unknown main item tag 0x0 [ 682.680877][ T657] wacom 0003:056A:0003.005A: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 682.708714][T16751] veth1_macvtap: left promiscuous mode [ 682.716010][ T657] wacom 0003:056A:0003.005A: hidraw0: USB HID vb4.34 Device [HID 056a:0003] on usb-dummy_hcd.9-1/input0 [ 682.719644][T16751] veth0_vlan: left promiscuous mode [ 682.735422][ T657] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0003.005A/input/input129 [ 682.836622][T22039] rust_binder: 403: no such ref 1 [ 682.848386][T22077] netlink: 'syz.0.6758': attribute type 58 has an invalid length. [ 682.850630][T22039] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 682.856467][T22079] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.871379][T22039] rust_binder: Write failure EINVAL in pid:403 [ 682.890777][ T657] usb 10-1: USB disconnect, device number 63 [ 683.024231][T22075] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.038961][T22075] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.046085][T22075] bridge_slave_0: entered allmulticast mode [ 683.053882][T22075] bridge_slave_0: entered promiscuous mode [ 683.068739][T22087] tipc: Enabling of bearer rejected, media not registered [ 683.078594][T22075] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.090421][T22075] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.098222][T22075] bridge_slave_1: entered allmulticast mode [ 683.106083][T22075] bridge_slave_1: entered promiscuous mode [ 683.215033][T22075] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.222128][T22075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.229385][T22075] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.236524][T22075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.252210][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.262911][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.330790][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.337881][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.349564][T16751] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.356611][T16751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.436777][T22075] veth0_vlan: entered promiscuous mode [ 683.464254][T22075] veth1_macvtap: entered promiscuous mode [ 683.647210][ T45] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 683.717257][T22120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 683.783316][T22123] kvm: kvm [22119]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 683.801312][T22123] kvm: kvm [22119]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 683.836069][ T45] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 683.840123][T22127] tipc: Enabling of bearer rejected, failed to enable media [ 683.854417][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.866531][ T45] usb 4-1: config 0 descriptor?? [ 683.879482][ T45] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 683.894601][ T45] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 683.914191][T22123] kvm: kvm [22119]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 684.012223][T22134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=568208745 (2272834980 ns) > initial count (932309172 ns). Using initial count to start timer. [ 684.030101][T22134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2995060990 (11980243960 ns) > initial count (1840834408 ns). Using initial count to start timer. [ 684.215436][ T45] usb 4-1: USB disconnect, device number 48 [ 684.221803][ T45] ftdi_sio 4-1:0.0: device disconnected [ 684.667449][T22138] netlink: 'syz.1.6772': attribute type 19 has an invalid length. [ 684.834866][T22142] /dev/rnullb0: Can't open blockdev [ 684.896373][T22148] rust_binder: Write failure EFAULT in pid:155 [ 684.898064][T22147] rust_binder: Write failure EFAULT in pid:155 [ 685.079353][T22152] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 685.306301][T22156] rust_binder: Write failure EFAULT in pid:18 [ 685.344114][T22158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 685.416499][T22159] kvm: kvm [22157]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 685.434245][T22159] kvm: kvm [22157]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 685.488275][T22159] kvm: kvm [22157]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0 [ 685.780009][ T36] kauditd_printk_skb: 696 callbacks suppressed [ 685.780027][ T36] audit: type=1400 audit(2016777696.182:100419): avc: denied { read write } for pid=21317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.810642][ T36] audit: type=1400 audit(2016777696.182:100420): avc: denied { read write open } for pid=21317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.836408][ T36] audit: type=1400 audit(2016777696.182:100421): avc: denied { ioctl } for pid=21317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 685.861239][T22164] rust_binder: 22163 RLIMIT_NICE not set [ 685.862210][ T36] audit: type=1400 audit(2016777696.201:100422): avc: denied { read } for pid=22162 comm="syz.3.6781" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.890865][ T36] audit: type=1400 audit(2016777696.201:100423): avc: denied { read open } for pid=22162 comm="syz.3.6781" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.930697][ T36] audit: type=1400 audit(2016777696.201:100424): avc: denied { ioctl } for pid=22162 comm="syz.3.6781" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 685.956501][ T36] audit: type=1400 audit(2016777696.201:100425): avc: denied { set_context_mgr } for pid=22162 comm="syz.3.6781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 685.976616][ T36] audit: type=1400 audit(2016777696.201:100426): avc: denied { ioctl } for pid=22162 comm="syz.3.6781" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 686.003314][ T36] audit: type=1400 audit(2016777696.247:100427): avc: denied { map } for pid=22162 comm="syz.3.6781" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 686.032827][ T36] audit: type=1400 audit(2016777696.247:100428): avc: denied { read } for pid=22162 comm="syz.3.6781" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 686.785603][T22174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 686.785635][T22174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:164 [ 687.075003][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6789'. [ 687.241363][T22194] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 687.256458][T22194] rust_binder: Write failure EINVAL in pid:430 [ 687.362162][T22201] kvm: user requested TSC rate below hardware speed [ 687.391597][T22201] /dev/rnullb0: Can't open blockdev [ 687.518601][ T45] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 687.552300][T22220] veth0_virt_wifi: entered allmulticast mode [ 687.558850][T22219] veth0_virt_wifi: left allmulticast mode [ 687.679042][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 687.687735][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 687.697250][ T45] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 687.705562][ T45] usb 2-1: config 6 has no interface number 0 [ 687.712976][ T45] usb 2-1: config 6 interface 248 has no altsetting 0 [ 687.724441][ T45] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 687.733611][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.741609][ T45] usb 2-1: Product: syz [ 687.745878][ T45] usb 2-1: Manufacturer: syz [ 687.750821][ T45] usb 2-1: SerialNumber: syz [ 687.848502][T22230] fuseblk: Bad value for 'fd' [ 687.882251][T14573] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 687.889362][T22232] random: crng reseeded on system resumption [ 687.977196][ T45] ums-karma 2-1:6.248: USB Mass Storage device detected [ 688.005179][T22232] Unrecognized hibernate image header format! [ 688.010572][ T45] usb 2-1: USB disconnect, device number 68 [ 688.017014][T22232] PM: hibernation: Image mismatch: architecture specific data [ 688.042649][T14573] usb 10-1: Using ep0 maxpacket: 32 [ 688.055544][T14573] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 688.073545][T14573] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 688.084101][T14573] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 688.093353][T14573] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.103172][T14573] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 688.113425][T14573] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 688.126645][T14573] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 688.139964][T14573] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.155864][T14573] usb 10-1: config 0 descriptor?? [ 688.242099][T22239] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 688.250348][T22239] rust_binder: Write failure EINVAL in pid:191 [ 688.380837][T14573] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 688.400860][T14573] usb 10-1: USB disconnect, device number 64 [ 688.416352][T14573] usblp0: removed [ 688.485523][T22250] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 688.785317][T22282] rust_binder: Error while translating object. [ 688.785349][T22282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 688.791668][T22282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 688.876904][T14573] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 688.916043][T22286] rust_binder: Error while translating object. [ 688.916088][T22286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 688.923041][T22286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 689.037356][T14573] usb 10-1: device descriptor read/64, error -71 [ 689.150245][T22290] tap0: tun_chr_ioctl cmd 1074025676 [ 689.155687][T22290] tap0: owner set to 6 [ 689.304855][T14573] usb 10-1: device descriptor read/64, error -71 [ 689.411674][ T657] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 689.562491][T14573] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 689.572076][ T657] usb 4-1: Using ep0 maxpacket: 8 [ 689.580623][ T657] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 689.591410][ T657] usb 4-1: config 1 has no interface number 1 [ 689.598080][ T657] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.614293][ T657] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.623951][ T657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.634092][ T657] usb 4-1: Product: syz [ 689.638812][ T657] usb 4-1: Manufacturer: syz [ 689.643435][ T657] usb 4-1: SerialNumber: syz [ 689.711147][T14573] usb 10-1: device descriptor read/64, error -71 [ 689.882880][T22290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.902133][T22290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.914595][T22290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.923116][T22290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.957485][ T657] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 689.969033][ T657] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 689.974283][T14573] usb 10-1: device descriptor read/64, error -71 [ 689.983767][ T657] usb 4-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 689.999225][ T657] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 690.007750][ T657] usb 4-1: 2:1 : invalid channels 0 [ 690.018410][ T657] usb 4-1: USB disconnect, device number 49 [ 690.074002][T21576] udevd[21576]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 690.096235][T14573] usb usb10-port1: attempt power cycle [ 690.438445][ T389] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 690.459802][T14573] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 690.483777][T14573] usb 10-1: device descriptor read/8, error -71 [ 690.551140][T22328] x_tables: duplicate underflow at hook 1 [ 690.588127][ T389] usb 2-1: device descriptor read/64, error -71 [ 690.591301][T22331] bridge0: port 4(veth0_macvtap) entered blocking state [ 690.601420][T22331] bridge0: port 4(veth0_macvtap) entered disabled state [ 690.608483][T22331] veth0_macvtap: entered allmulticast mode [ 690.615019][T22331] veth0_macvtap: entered promiscuous mode [ 690.620916][T22331] bridge0: port 4(veth0_macvtap) entered blocking state [ 690.622707][T14573] usb 10-1: device descriptor read/8, error -71 [ 690.627867][T22331] bridge0: port 4(veth0_macvtap) entered forwarding state [ 690.845641][ T389] usb 2-1: device descriptor read/64, error -71 [ 690.887640][T14573] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 690.889798][T22348] rust_binder: Error while translating object. [ 690.903044][T22348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 690.909349][T22348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:443 [ 691.028383][T22350] 8021q: VLANs not supported on ip_vti0 [ 691.112189][ T389] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 691.187514][ T36] kauditd_printk_skb: 1042 callbacks suppressed [ 691.187532][ T36] audit: type=1400 audit(2016777701.240:101471): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.251287][ T389] usb 2-1: device descriptor read/64, error -71 [ 691.347465][T14573] usb 10-1: device not accepting address 68, error -71 [ 691.354571][T14573] usb usb10-port1: unable to enumerate USB device [ 691.369435][ T36] audit: type=1400 audit(2016777701.418:101472): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.395042][ T36] audit: type=1400 audit(2016777701.437:101473): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.420324][ T36] audit: type=1400 audit(2016777701.437:101474): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.445517][ T36] audit: type=1400 audit(2016777701.465:101475): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.470919][ T36] audit: type=1400 audit(2016777701.483:101476): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.496987][ T36] audit: type=1400 audit(2016777701.511:101477): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.522169][ T36] audit: type=1400 audit(2016777701.511:101478): avc: denied { ioctl } for pid=22320 comm="syz.1.6837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 691.547431][ T36] audit: type=1400 audit(2016777701.511:101479): avc: denied { read write } for pid=21317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.572684][ T36] audit: type=1400 audit(2016777701.511:101480): avc: denied { read write open } for pid=21317 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.604196][ T389] usb 2-1: device descriptor read/64, error -71 [ 691.704478][T22358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 691.704516][T22358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:451 [ 691.728641][ T389] usb usb2-port1: attempt power cycle [ 691.930926][T22371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 692.149885][ T389] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 692.181148][T22383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.207689][ T389] usb 2-1: device descriptor read/8, error -71 [ 692.311074][T22387] rust_binder: 476: no such ref 2 [ 692.366287][ T389] usb 2-1: device descriptor read/8, error -71 [ 692.621838][ T389] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 692.643832][ T389] usb 2-1: device descriptor read/8, error -71 [ 692.783229][ T389] usb 2-1: device descriptor read/8, error -71 [ 692.898426][ T389] usb usb2-port1: unable to enumerate USB device [ 693.330351][T22420] tipc: MTU too low for tipc bearer [ 693.501421][T22428] netlink: 'syz.0.6877': attribute type 27 has an invalid length. [ 693.529658][T22430] overlayfs: missing 'lowerdir' [ 693.598679][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6881'. [ 693.628272][T22438] netlink: 'syz.0.6882': attribute type 6 has an invalid length. [ 693.796687][ T389] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 693.807772][ T45] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 693.957142][ T389] usb 4-1: Using ep0 maxpacket: 16 [ 693.971227][T22449] rust_binder: Error while translating object. [ 693.971261][T22449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 693.981382][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.982336][T22449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:488 [ 693.992844][ T389] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 694.019686][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.029460][ T45] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 694.038560][ T389] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 694.049258][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.059772][ T45] usb 2-1: config 0 descriptor?? [ 694.065273][ T389] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 694.075697][ T389] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.106815][ T389] usb 4-1: config 0 interface 0 has no altsetting 0 [ 694.122874][ T389] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 694.142056][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.151005][ T389] usb 4-1: Product: syz [ 694.155194][ T389] usb 4-1: Manufacturer: syz [ 694.159807][ T389] usb 4-1: SerialNumber: syz [ 694.167171][ T389] usb 4-1: config 0 descriptor?? [ 694.394321][ T389] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 694.449105][ T4155] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 694.576098][T22458] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6888'. [ 694.612073][ T4155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.623152][ T4155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.633089][ T4155] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 694.643139][ T4155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.653170][ T4155] usb 10-1: config 0 descriptor?? [ 694.703208][T22461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=22461 comm=syz.0.6888 [ 694.723173][T22430] usblp0:failed reading printer status (-32) [ 694.753672][T22430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 694.835200][ T657] usb 4-1: USB disconnect, device number 50 [ 694.843205][ T657] usblp0: removed [ 694.993382][ T45] hid-led 0003:27B8:01ED.005B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 695.007945][ T45] hid-led 0003:27B8:01ED.005B: ThingM blink(1) initialized [ 695.100690][ T4155] usbhid 10-1:0.0: can't add hid device: -32 [ 695.122899][ T4155] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 695.165104][ T4155] usb 10-1: USB disconnect, device number 69 [ 695.254243][ T45] usb 2-1: USB disconnect, device number 73 [ 695.874493][T22494] __vm_enough_memory: pid: 22494, comm: syz.9.6899, bytes: 18014402804453376 not enough memory for the allocation [ 695.939429][T22502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 695.939466][T22502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63 [ 695.969955][T22504] binder: Unknown parameter '‡Y粧A+%{¶uX™íÍ”TðÐ' [ 696.343259][T22522] rust_binder: Error in use_page_slow: ESRCH [ 696.343284][T22522] rust_binder: use_range failure ESRCH [ 696.349347][T22522] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 696.355711][T22522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 696.365412][T22522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:226 [ 696.377074][T22526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 696.432557][T22534] rust_binder: Error in use_page_slow: ESRCH [ 696.441648][T22534] rust_binder: use_range failure ESRCH [ 696.447644][T22534] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 696.453157][T22534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 696.461018][T22534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:226 [ 696.972043][ T36] kauditd_printk_skb: 862 callbacks suppressed [ 696.972062][ T36] audit: type=1400 audit(2016782058.645:102343): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 696.993276][T22540] /dev/rnullb0: Can't open blockdev [ 697.058724][ T36] audit: type=1400 audit(2016782058.645:102344): avc: denied { read write open } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.092034][T22542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6917'. [ 697.096894][ T36] audit: type=1400 audit(2016782058.645:102345): avc: denied { ioctl } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 697.129954][ T36] audit: type=1400 audit(2016782058.664:102346): avc: denied { read write } for pid=22539 comm="syz.9.6916" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 697.211597][ T36] audit: type=1400 audit(2016782058.664:102347): avc: denied { read write open } for pid=22539 comm="syz.9.6916" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 697.290449][ T36] audit: type=1400 audit(2016782058.664:102348): avc: denied { ioctl } for pid=22539 comm="syz.9.6916" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 697.307748][T22550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.318207][T22557] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.343427][T22550] audit: audit_lost=223 audit_rate_limit=0 audit_backlog_limit=64 [ 697.350345][T21317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 697.397851][T22550] rust_binder: Error while translating object. [ 697.397892][T22550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 697.414362][T22550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 697.459723][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.497249][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.504732][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.523531][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.539742][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.553985][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.569658][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.588007][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.603526][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.611758][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.619437][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.629834][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.643728][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.651287][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.669066][T22578] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 697.670004][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.700429][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.707860][ T45] hid-generic 0006:0004:0009.005C: unknown main item tag 0x0 [ 697.729978][ T45] hid-generic 0006:0004:0009.005C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 697.793428][T22582] binder: Unknown parameter '' [ 697.815633][T22581] fido_id[22581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 697.962025][T22594] rust_binder: Error while translating object. [ 697.962248][T22594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 697.970033][T22594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:240 [ 698.088463][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6937'. [ 698.157130][ T497] Bluetooth: hci0: Frame reassembly failed (-84) [ 698.168348][ T497] Bluetooth: hci0: Frame reassembly failed (-84) [ 698.720096][T22615] rust_binder: Error while translating object. [ 698.720133][T22615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 698.726341][T22615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 698.758250][T22617] 9pnet_fd: Insufficient options for proto=fd [ 698.776464][T22617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 698.776488][T22617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:246 [ 698.855559][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 698.871688][T22627] overlayfs: failed to clone lowerpath [ 698.952671][T22632] >: renamed from veth0_vlan (while UP) [ 698.979637][T22634] overlayfs: failed to clone lowerpath [ 698.987544][T22634] overlay: Unknown parameter 'hash' [ 699.026627][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 699.034428][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.045011][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 51: 132, using maximum allowed: 30 [ 699.058691][ T10] usb 2-1: config 0 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 132 [ 699.072051][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 699.079853][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 699.088993][ T10] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 699.097137][ T10] usb 2-1: Manufacturer: syz [ 699.104137][ T10] usb 2-1: config 0 descriptor?? [ 699.330913][T22613] overlayfs: failed to resolve './bus': -2 [ 699.588815][ T10] usb 2-1: USB disconnect, device number 74 [ 699.979940][T22664] netlink: 'syz.3.6956': attribute type 4 has an invalid length. [ 699.987761][T22664] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6956'. [ 700.181742][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 700.344678][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 700.355548][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.366542][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 700.372696][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.388300][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 700.406161][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 700.415528][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 700.423657][ T10] usb 2-1: Manufacturer: syz [ 700.433228][ T10] usb 2-1: config 0 descriptor?? [ 700.639574][T22680] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 700.872802][ T10] appleir 0003:05AC:8243.005D: unknown main item tag 0x0 [ 700.888168][ T10] appleir 0003:05AC:8243.005D: No inputs registered, leaving [ 700.897949][ T10] appleir 0003:05AC:8243.005D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 701.240537][ T657] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 701.400951][ T657] usb 4-1: Using ep0 maxpacket: 16 [ 701.408193][ T657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.419119][ T657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.428895][ T657] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 701.437949][ T657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.447284][ T657] usb 4-1: config 0 descriptor?? [ 701.686273][T22695] fuse: Unknown parameter 'f`' [ 701.734494][T22697] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 701.738203][T22697] rust_binder: Error while translating object. [ 701.745550][T22697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 701.751801][T22697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:552 [ 701.898034][ T657] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.005E/input/input134 [ 701.921348][ T657] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.005E/input/input135 [ 701.936121][ T657] kye 0003:0458:5012.005E: input,hiddev97,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 702.053361][ T4155] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 702.117461][T22683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 702.118032][T14573] usb 4-1: USB disconnect, device number 51 [ 702.241961][ T4155] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 702.266611][ T4155] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 33271, setting to 1024 [ 702.279220][ T4155] usb 10-1: config 0 interface 0 has no altsetting 0 [ 702.285938][ T4155] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 702.304121][ T4155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.323828][ T4155] usb 10-1: config 0 descriptor?? [ 702.329495][ T36] kauditd_printk_skb: 758 callbacks suppressed [ 702.329529][ T36] audit: type=1400 audit(2016782063.657:103087): avc: denied { ioctl } for pid=22699 comm="syz.9.6969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.364916][ T36] audit: type=1400 audit(2016782063.694:103088): avc: denied { ioctl } for pid=22699 comm="syz.9.6969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.385718][T22707] overlayfs: failed to resolve './file1': -2 [ 702.391246][ T36] audit: type=1400 audit(2016782063.694:103089): avc: denied { ioctl } for pid=22699 comm="syz.9.6969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.421264][ T36] audit: type=1400 audit(2016782063.694:103090): avc: denied { ioctl } for pid=22699 comm="syz.9.6969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 702.448331][ T36] audit: type=1400 audit(2016782063.694:103091): avc: denied { mounton } for pid=22706 comm="syz.0.6971" path="/534/file0" dev="tmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 702.472961][ T36] audit: type=1400 audit(2016782063.787:103092): avc: denied { create } for pid=22708 comm="syz.0.6972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 702.492929][ T36] audit: type=1400 audit(2016782063.787:103093): avc: denied { ioctl } for pid=22708 comm="syz.0.6972" path="socket:[117190]" dev="sockfs" ino=117190 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 702.518435][ T36] audit: type=1400 audit(2016782063.787:103094): avc: denied { setopt } for pid=22708 comm="syz.0.6972" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 702.539151][ T36] audit: type=1400 audit(2016782063.787:103095): avc: denied { create } for pid=22708 comm="syz.0.6972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 702.559050][ T36] audit: type=1400 audit(2016782063.787:103096): avc: denied { write } for pid=22708 comm="syz.0.6972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 702.588552][ T4155] usbhid 10-1:0.0: can't add hid device: -71 [ 702.594667][ T4155] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 702.608704][ T4155] usb 10-1: USB disconnect, device number 70 [ 702.635430][T22726] overlayfs: failed to clone upperpath [ 702.806083][T22735] overlay: Unknown parameter 'appraise' [ 702.821423][T22735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 702.834428][T22735] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 702.876356][T22737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:563 [ 703.055261][T22755] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 703.096164][T22755] netlink: 'syz.3.6986': attribute type 11 has an invalid length. [ 703.114536][T22755] fuse: Unknown parameter 'vd' [ 703.177353][T22759] rust_binder: Error while translating object. [ 703.177388][T22759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 703.183670][T22759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:279 [ 703.193568][T22757] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 703.210875][T22757] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 703.599307][T22773] /dev/rnullb0: Can't open blockdev [ 703.652274][T22780] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6995'. [ 703.852278][ T31] usb 2-1: USB disconnect, device number 75 [ 703.979440][T22794] rust_binder: Write failure EINVAL in pid:111 [ 704.038109][T22802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.200930][T22818] kvm: kvm [22817]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 704.216106][T22818] kvm: kvm [22817]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 704.265860][T22825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 704.267018][T22825] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 704.299334][T22827] pim6reg1: entered promiscuous mode [ 704.312717][T22827] pim6reg1: entered allmulticast mode [ 704.670692][T22858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7020'. [ 704.679756][T14573] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 704.847658][T14573] usb 2-1: config 1 has an invalid interface number: 146 but max is 0 [ 704.855965][T14573] usb 2-1: config 1 has no interface number 0 [ 704.862058][T14573] usb 2-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 704.876447][T14573] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 704.885535][T14573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.893561][T14573] usb 2-1: Product: syz [ 704.897717][T14573] usb 2-1: Manufacturer: syz [ 704.902355][T14573] usb 2-1: SerialNumber: syz [ 704.911971][T14573] usbserial_generic 2-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 704.923628][T14573] usbserial_generic 2-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 704.934566][T14573] usbserial_generic 2-1:1.146: generic converter detected [ 704.943635][T14573] usb 2-1: generic converter now attached to ttyUSB0 [ 705.128336][T14573] usb 2-1: USB disconnect, device number 76 [ 705.138922][T14573] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 705.157337][T14573] usbserial_generic 2-1:1.146: device disconnected [ 705.311625][T22878] rust_binder: 22876 RLIMIT_NICE not set [ 705.315524][ T657] rust_binder: 22875: removing orphan mapping 0:24 [ 706.117546][ T45] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 706.288653][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 706.316890][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.345946][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.364695][ T45] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 706.379218][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.379873][T22932] rust_binder: Fixups oob 165 172 361 173 [ 706.387839][T22932] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 706.393704][T22932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 706.396151][ T45] usb 2-1: config 0 descriptor?? [ 706.409941][T22932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 706.594426][T22940] rust_binder: Error while translating object. [ 706.613074][T22940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 706.628447][T22940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 706.647341][ T45] koneplus 0003:1E7D:2D51.005F: item fetching failed at offset 1/5 [ 706.647449][T22940] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 706.674273][T22940] rust_binder: Read failure Err(EFAULT) in pid:323 [ 706.676116][ T45] koneplus 0003:1E7D:2D51.005F: parse failed [ 706.695557][ T45] koneplus 0003:1E7D:2D51.005F: probe with driver koneplus failed with error -22 [ 706.823935][T22949] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 706.929339][T22941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 706.937403][T22941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:130 [ 707.288444][T22972] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=22972 comm=syz.9.7055 [ 707.315826][T22972] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 707.355905][T22974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 707.355935][T22974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:578 [ 707.394562][T22976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.403809][T22977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.410268][T22976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.417063][T22976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.423833][T22977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.430402][T22976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.436873][T22977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.443479][T22976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.449525][T22978] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7057'. [ 707.451390][T22976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.465255][T22978] gretap0: entered promiscuous mode [ 707.466180][T22977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.512546][T22981] netlink: 'syz.9.7058': attribute type 3 has an invalid length. [ 707.617354][T22984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.627030][T22983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:587 [ 707.679545][ T36] kauditd_printk_skb: 801 callbacks suppressed [ 707.679565][ T36] audit: type=1400 audit(2016782068.659:103898): avc: denied { write } for pid=22985 comm="syz.9.7062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 707.736601][ T36] audit: type=1400 audit(2016782068.659:103899): avc: denied { create } for pid=22985 comm="syz.9.7062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 707.758395][ T36] audit: type=1400 audit(2016782068.659:103900): avc: denied { write } for pid=22985 comm="syz.9.7062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 707.780141][ T36] audit: type=1400 audit(2016782068.678:103901): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.834902][ T36] audit: type=1400 audit(2016782068.678:103902): avc: denied { read write open } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.860301][ T36] audit: type=1400 audit(2016782068.678:103903): avc: denied { ioctl } for pid=19054 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 707.886793][ T36] audit: type=1400 audit(2016782068.696:103904): avc: denied { create } for pid=22987 comm="syz.3.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 707.906027][T22999] rust_binder: Error while translating object. [ 707.907308][T22999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 707.914130][ T36] audit: type=1400 audit(2016782068.706:103905): avc: denied { read write } for pid=22989 comm="syz.9.7064" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 707.925726][T22999] rust_binder: Failure BR_FAILED_REPLY { source: EBADF } during reply - delivering BR_FAILED_REPLY to sender. [ 707.948689][ T36] audit: type=1400 audit(2016782068.706:103906): avc: denied { read write open } for pid=22989 comm="syz.9.7064" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 707.979419][T22999] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:599 [ 707.987013][T23002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.995969][ T36] audit: type=1400 audit(2016782068.715:103907): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.034198][T14573] rust_binder: 22998: removing orphan mapping 0:24 [ 708.297811][T22997] binder: Unknown parameter 'cgntext' [ 708.716463][T14573] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 708.876901][ T45] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 708.879574][T14573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.895541][T14573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.905321][T14573] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 708.914459][T14573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.924160][T14573] usb 4-1: config 0 descriptor?? [ 709.037321][ T45] usb 10-1: Using ep0 maxpacket: 32 [ 709.045048][ T45] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 709.053545][ T45] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 709.062280][ T45] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 709.066216][ T10] usb 2-1: USB disconnect, device number 77 [ 709.072192][ T45] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 709.109613][ T45] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 709.135998][ T45] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 709.151606][ T45] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 709.161298][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.171207][ T45] usb 10-1: config 0 descriptor?? [ 709.398050][ T45] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 709.410672][ T45] usb 10-1: USB disconnect, device number 71 [ 709.419238][ T45] usblp0: removed [ 709.454467][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 709.590073][T14573] usbhid 4-1:0.0: can't add hid device: -71 [ 709.596428][T14573] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 709.608362][T14573] usb 4-1: USB disconnect, device number 52 [ 709.625544][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 709.638326][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 709.650824][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 709.667309][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 709.677732][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 709.687490][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 709.697536][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 709.710776][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 709.719861][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.734651][ T10] usb 2-1: config 0 descriptor?? [ 709.925044][ T4155] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 709.962048][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 709.998506][ T10] usb 2-1: USB disconnect, device number 78 [ 710.015094][ T10] usblp0: removed [ 710.096170][ T4155] usb 10-1: Using ep0 maxpacket: 32 [ 710.103556][ T4155] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 710.113020][ T4155] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 710.121746][ T4155] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 710.130836][ T4155] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 710.140934][ T4155] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 710.150875][ T4155] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 710.163973][ T4155] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 710.173133][ T4155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.182889][ T4155] usb 10-1: config 0 descriptor?? [ 710.331455][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 710.410390][ T4155] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 710.491861][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 710.499952][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 710.505694][T23030] tipc: Enabling of bearer rejected, media not registered [ 710.509688][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 710.517617][T23030] netlink: 'syz.0.7077': attribute type 4 has an invalid length. [ 710.526315][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 710.533403][T23030] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7077'. [ 710.543054][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 710.561978][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 710.573013][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 710.589851][T23035] fuse: Bad value for 'fd' [ 710.593880][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 710.598203][T23035] : renamed from bond_slave_0 [ 710.603454][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.618125][ T10] usb 2-1: config 0 descriptor?? [ 710.694258][T23038] overlayfs: failed to clone upperpath [ 710.699871][T14573] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 710.714100][T23038] overlayfs: failed to clone upperpath [ 710.720369][ T4155] usb 10-1: USB disconnect, device number 72 [ 710.728378][ T4155] usblp0: removed [ 710.829724][T23044] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7082'. [ 710.856357][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 710.867298][T14573] usb 4-1: Using ep0 maxpacket: 16 [ 710.876610][T14573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 35, changing to 9 [ 710.904572][ T10] usb 2-1: USB disconnect, device number 79 [ 710.915205][T14573] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 710.926063][ T10] usblp0: removed [ 710.930626][T14573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.942128][T14573] usb 4-1: config 0 descriptor?? [ 710.963321][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7083'. [ 710.990413][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7083'. [ 711.005774][T23050] net_ratelimit: 86 callbacks suppressed [ 711.005796][T23050] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 711.392794][T14573] saitek 0003:06A3:0621.0060: unknown main item tag 0x0 [ 711.422462][T14573] saitek 0003:06A3:0621.0060: unknown main item tag 0x0 [ 711.433057][T14573] saitek 0003:06A3:0621.0060: unknown main item tag 0x0 [ 711.448387][T14573] saitek 0003:06A3:0621.0060: unknown main item tag 0x0 [ 711.470457][T14573] saitek 0003:06A3:0621.0060: unknown main item tag 0x0 [ 711.495021][T14573] saitek 0003:06A3:0621.0060: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 711.621343][T23024] rust_binder: Write failure EINVAL in pid:337 [ 711.622104][T14573] usb 4-1: USB disconnect, device number 53 [ 712.312953][T23100] __vm_enough_memory: pid: 23100, comm: syz.1.7100, bytes: 18014402804453376 not enough memory for the allocation [ 712.406366][T23106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 712.406398][T23106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:638 [ 712.512598][T23115] rust_binder: 640: no such ref 5 [ 712.556084][T23115] rust_binder: Write failure EINVAL in pid:640 [ 712.588124][T14573] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 712.675679][T23128] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7110'. [ 712.756596][T23133] netlink: 'syz.0.7112': attribute type 27 has an invalid length. [ 712.765335][T14573] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 712.765574][T23133] 0ªö»ôM: left allmulticast mode [ 712.774625][T14573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.788146][T14573] usb 4-1: Product: syz [ 712.791333][ T31] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 712.792342][T14573] usb 4-1: Manufacturer: syz [ 712.806159][T14573] usb 4-1: SerialNumber: syz [ 712.818846][T14573] usb 4-1: config 0 descriptor?? [ 712.819083][T23133] 9pnet_fd: Insufficient options for proto=fd [ 712.962506][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 712.972142][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 712.984819][ T31] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 712.996088][ T31] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 713.007767][ T31] usb 2-1: config 12 interface 0 has no altsetting 0 [ 713.017973][ T31] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 713.027317][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.035523][ T31] usb 2-1: Product: syz [ 713.041277][ T31] usb 2-1: Manufacturer: syz [ 713.054810][ T36] kauditd_printk_skb: 1400 callbacks suppressed [ 713.054829][ T36] audit: type=1400 audit(2016782073.680:105308): avc: denied { ioctl } for pid=23094 comm="syz.3.7099" path="/dev/binderfs/binder1" dev="binder" ino=22 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 713.084175][T14573] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 713.090829][ T31] usb 2-1: SerialNumber: syz [ 713.101627][ T36] audit: type=1400 audit(2016782073.680:105309): avc: denied { call } for pid=23094 comm="syz.3.7099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 713.123971][T14573] usb 4-1: USB disconnect, device number 54 [ 713.163008][ T36] audit: type=1400 audit(2016782073.783:105310): avc: denied { ioctl } for pid=23111 comm="syz.1.7105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 713.190309][T21576] udevd[21576]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 713.198521][ T36] audit: type=1400 audit(2016782073.783:105311): avc: denied { ioctl } for pid=23111 comm="syz.1.7105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 713.244417][ T36] audit: type=1400 audit(2016782073.783:105312): avc: denied { ioctl } for pid=23111 comm="syz.1.7105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 713.271414][ T36] audit: type=1400 audit(2016782073.783:105313): avc: denied { ioctl } for pid=23111 comm="syz.1.7105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 713.298379][ T36] audit: type=1400 audit(2016782073.783:105314): avc: denied { ioctl } for pid=23111 comm="syz.1.7105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 713.389827][ T36] audit: type=1400 audit(2016782073.998:105315): avc: denied { read write } for pid=19054 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 713.423627][ T36] audit: type=1400 audit(2016782073.998:105316): avc: denied { read write } for pid=23111 comm="syz.1.7105" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 713.461313][ T36] audit: type=1400 audit(2016782073.998:105317): avc: denied { read write open } for pid=23111 comm="syz.1.7105" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 713.543506][ T497] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 713.551522][ T497] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 713.564068][ T31] usb 2-1: selecting invalid altsetting 0 [ 713.573434][T14573] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 713.594985][ T31] snd-usb-audio 2-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 713.610347][ T45] rust_binder: 23094: removing orphan mapping 0:4208 [ 713.627577][ T31] usb 2-1: USB disconnect, device number 80 [ 713.679176][ T4155] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 713.731988][T21580] udevd[21580]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 713.764619][T23151] rust_binder: 23147 RLIMIT_NICE not set [ 713.771506][T23147] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 713.851818][T23156] netlink: 'syz.0.7118': attribute type 4 has an invalid length. [ 713.895805][T23161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 713.911258][T23161] rust_binder: pid 23161 performed invalid decrement on ref [ 713.949177][ T10] rust_binder: 0: removing orphan mapping 0:24 [ 714.011063][T23164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 714.043045][T23164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 714.052907][T23166] netlink: 'syz.3.7122': attribute type 4 has an invalid length. [ 714.101376][T23166] netlink: 'syz.3.7122': attribute type 4 has an invalid length. [ 714.231499][T23173] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 714.252220][T23171] /dev/rnullb0: Can't open blockdev [ 714.316935][T23169] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.324054][T23169] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.331198][T23169] bridge_slave_0: entered allmulticast mode [ 714.337679][T23169] bridge_slave_0: entered promiscuous mode [ 714.345230][T23169] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.352292][T23169] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.360354][T23169] bridge_slave_1: entered allmulticast mode [ 714.367636][T23169] bridge_slave_1: entered promiscuous mode [ 714.381515][T23187] rust_binder: Write failure EINVAL in pid:173 [ 714.456351][T23191] x_tables: unsorted underflow at hook 2 [ 714.506268][T23169] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.513365][T23169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.520614][T23169] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.527668][T23169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.593007][T23202] rust_binder: Error while translating object. [ 714.593053][T23202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 714.600455][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.602522][T23202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 714.617103][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.640134][T16751] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.647214][T16751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.652446][T14573] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 714.660755][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.669100][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.748985][T23169] veth0_vlan: entered promiscuous mode [ 714.796326][T23169] veth1_macvtap: entered promiscuous mode [ 715.004864][T23209] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 715.615661][ T497] bridge_slave_1: left allmulticast mode [ 715.621342][ T497] bridge_slave_1: left promiscuous mode [ 715.627789][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.635412][ T497] bridge_slave_0: left allmulticast mode [ 715.641236][ T497] bridge_slave_0: left promiscuous mode [ 715.647007][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.850843][T23236] netlink: 'syz.0.7141': attribute type 4 has an invalid length. [ 715.860199][T23236] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7141'. [ 715.873615][ T497] veth1_macvtap: left promiscuous mode [ 715.882510][ T497] veth0_vlan: left promiscuous mode [ 718.160430][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 718.423844][ T36] kauditd_printk_skb: 424 callbacks suppressed [ 718.423861][ T36] audit: type=1400 audit(2016782078.701:105742): avc: denied { read write } for pid=23169 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 718.704081][ T36] audit: type=1400 audit(2016782078.963:105743): avc: denied { execmem } for pid=23260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 718.728735][ T36] audit: type=1400 audit(2016782078.963:105744): avc: denied { read } for pid=23262 comm="syz.1.7152" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 718.752169][ T36] audit: type=1400 audit(2016782078.972:105745): avc: denied { read } for pid=23262 comm="syz.1.7152" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 718.775147][ T36] audit: type=1400 audit(2016782078.972:105746): avc: denied { read write } for pid=23261 comm="syz.0.7151" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 718.798753][ T36] audit: type=1400 audit(2016782078.981:105747): avc: denied { read write } for pid=23169 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 718.823127][ T36] audit: type=1400 audit(2016782078.991:105748): avc: denied { read write } for pid=23263 comm="syz.3.7153" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 718.846914][ T36] audit: type=1400 audit(2016782078.991:105749): avc: denied { read } for pid=23263 comm="syz.3.7153" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 718.869858][ T36] audit: type=1400 audit(2016782079.000:105750): avc: denied { read write } for pid=21317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 719.602852][ T36] audit: type=1400 audit(2016782079.804:105751): avc: denied { read write } for pid=22075 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 724.101944][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 724.101961][ T36] audit: type=1400 audit(2016782084.012:105816): avc: denied { read write } for pid=21317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 724.676547][ T36] audit: type=1400 audit(2016782084.554:105817): avc: denied { execmem } for pid=23305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 724.708259][ T36] audit: type=1400 audit(2016782084.554:105818): avc: denied { read write } for pid=23306 comm="syz.0.7166" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 724.735430][ T36] audit: type=1400 audit(2016782084.554:105819): avc: denied { read write } for pid=23306 comm="syz.0.7166" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 724.752540][T23315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 724.759745][ T36] audit: type=1400 audit(2016782084.554:105820): avc: denied { create } for pid=23306 comm="syz.0.7166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 724.766037][T23315] audit: audit_lost=231 audit_rate_limit=0 audit_backlog_limit=64 [ 724.785440][ T36] audit: type=1400 audit(2016782084.554:105821): avc: denied { read write } for pid=23306 comm="syz.0.7166" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 724.794762][T23315] audit: backlog limit exceeded [ 724.816661][ T36] audit: type=1400 audit(2016782084.573:105822): avc: denied { read write } for pid=23307 comm="syz.3.7168" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 728.256921][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 729.563561][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 729.563578][ T36] audit: type=1400 audit(2016782089.126:105914): avc: denied { execmem } for pid=23335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 729.597962][ T36] audit: type=1400 audit(2016782089.135:105915): avc: denied { read } for pid=23336 comm="syz.0.7175" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 729.637857][T16621] Bluetooth: hci0: Frame reassembly failed (-84) [ 729.645888][ T36] audit: type=1400 audit(2016782089.135:105916): avc: denied { read } for pid=23336 comm="syz.0.7175" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 729.668918][ T36] audit: type=1400 audit(2016782089.135:105917): avc: denied { create } for pid=23336 comm="syz.0.7175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 729.689636][ T36] audit: type=1400 audit(2016782089.135:105918): avc: denied { create } for pid=23336 comm="syz.0.7175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 729.710467][ T36] audit: type=1400 audit(2016782089.154:105919): avc: denied { read write } for pid=23169 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 729.734947][ T36] audit: type=1400 audit(2016782089.154:105920): avc: denied { read write } for pid=23337 comm="syz.1.7176" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 729.758421][ T36] audit: type=1400 audit(2016782089.154:105921): avc: denied { read } for pid=23338 comm="syz.3.7177" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 729.781452][ T36] audit: type=1400 audit(2016782089.163:105922): avc: denied { read write } for pid=23337 comm="syz.1.7176" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 729.804969][ T36] audit: type=1400 audit(2016782089.173:105923): avc: denied { read write } for pid=23338 comm="syz.3.7177" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 731.850167][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 731.850167][T13681] Bluetooth: hci0: command 0x1003 tx timeout [ 735.407054][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 735.407072][ T36] audit: type=1400 audit(2016782094.586:105956): avc: denied { execmem } for pid=23362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 735.445697][ T36] audit: type=1400 audit(2016782094.605:105957): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.471082][ T36] audit: type=1400 audit(2016782094.605:105958): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.495300][ T36] audit: type=1400 audit(2016782094.605:105959): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.519543][ T36] audit: type=1400 audit(2016782094.605:105960): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.543336][ T36] audit: type=1400 audit(2016782094.605:105961): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.566932][ T36] audit: type=1400 audit(2016782094.605:105962): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.590461][ T36] audit: type=1400 audit(2016782094.605:105963): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.614069][ T36] audit: type=1400 audit(2016782094.614:105964): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 735.638483][ T36] audit: type=1400 audit(2016782094.614:105965): avc: denied { read write } for pid=23364 comm="syz.1.7185" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 738.036058][T16751] bridge_slave_1: left allmulticast mode [ 738.041923][T16751] bridge_slave_1: left promiscuous mode [ 738.047593][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.055165][T16751] bridge_slave_0: left allmulticast mode [ 738.060796][T16751] bridge_slave_0: left promiscuous mode [ 738.066419][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.332468][T16751] veth1_macvtap: left promiscuous mode [ 738.338069][T16751] veth0_vlan: left promiscuous mode [ 739.358864][T16751] bridge_slave_1: left allmulticast mode [ 739.364520][T16751] bridge_slave_1: left promiscuous mode [ 739.370182][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.377547][T16751] bridge_slave_0: left allmulticast mode [ 739.384236][T16751] bridge_slave_0: left promiscuous mode [ 739.389831][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.397780][T16751] bridge_slave_1: left allmulticast mode [ 739.403490][T16751] bridge_slave_1: left promiscuous mode [ 739.409069][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.416843][T16751] bridge_slave_0: left allmulticast mode [ 739.422514][T16751] bridge_slave_0: left promiscuous mode [ 739.428119][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.808501][T16751] veth1_macvtap: left promiscuous mode [ 739.814038][T16751] veth0_vlan: left promiscuous mode [ 739.819673][T16751] veth1_macvtap: left promiscuous mode [ 739.825166][T16751] veth0_vlan: left promiscuous mode [ 747.422640][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!