last executing test programs: 39.373208063s ago: executing program 3 (id=299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}, {@cache_loose}, {@posixacl}, {@directio}, {@noxattr}, {@noxattr}, {@cache_fscache}, {@access_uid={'access', 0x3d, r5}}, {@version_9p2000}], [], 0x6b}}) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 39.324713337s ago: executing program 3 (id=301): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) 39.101632465s ago: executing program 3 (id=308): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202a01a, 0x0, 0x4cd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a400)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045729bb70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 64) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 64) pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)='A', 0x1}], 0x1, 0x1, 0xc40) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x73, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1b"}) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f000035d000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000116000/0x1000)=nil, &(0x7f000060a000/0x2000)=nil, &(0x7f000065f000/0x2000)=nil, &(0x7f000011d000/0x3000)=nil, &(0x7f00006a1000/0x1000)=nil, &(0x7f000052e000/0x2000)=nil, &(0x7f00005ca000/0x1000)=nil, &(0x7f0000070000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)="f7", 0x1}, 0x68) (async, rerun: 32) prlimit64(0x0, 0x1, &(0x7f0000000140), 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) sendfile(r2, r2, 0x0, 0x7ffff000) 39.051111629s ago: executing program 3 (id=309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=r2, @ANYRESDEC=0x0], 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast2, 0x4e23, 0x1, 'none\x00', 0x2, 0x2, 0x43}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast2, 0x4e23, 0x1, 'none\x00', 0x2, 0x2, 0x43}, 0x2c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3303, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0xb) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000018c0)=ANY=[@ANYRES64=r3, @ANYRES16, @ANYRES32=r6, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = signalfd4(r3, &(0x7f00000003c0)={[0x7fffffff]}, 0x8, 0x80800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r9 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) recvmsg$inet_nvme(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f00000006c0)=""/205, 0xcd}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/95, 0x5f}], 0x6, &(0x7f00000017c0)=""/231, 0xe7}, 0x0) 38.928763s ago: executing program 3 (id=313): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) lsm_set_self_attr(0x69, &(0x7f0000001940)={0x65, 0xa, 0x25, 0x5, "0a5cb59ce8"}, 0x25, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r0, 0xb085c000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r0, 0xb085c000) 38.828336118s ago: executing program 3 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030e0000002cbd70000000000005000600332000000a00000000000000fe800000000000000000000000000018000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}, 0x1, 0x7}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 38.825804818s ago: executing program 32 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020100030e0000002cbd70000000000005000600332000000a00000000000000fe800000000000000000000000000018000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}, 0x1, 0x7}, 0x4000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 19.331543891s ago: executing program 0 (id=697): pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4083fc, 0x2, 0x20, 0x10000, 0x1b, "44112e88b82c520f13fb2359029c2556c6b600"}) (async, rerun: 64) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) (async) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) (async) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 19.329265091s ago: executing program 0 (id=698): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) pipe2$watch_queue(&(0x7f0000000140), 0x80) mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000af4000004000000140001"], 0x44}}, 0x40800) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@huge_within_size}, {@huge_never}, {@huge_never}, {@grpquota}], [{@fsname}, {@fowner_gt={'fowner>', r3}}, {@measure}]}) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000300)='./bus\x00', &(0x7f0000000380), 0x4, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}], [{@fowner_gt={'fowner>', r3}}, {@uid_gt={'uid>', r3}}, {@smackfshat={'smackfshat', 0x3d, 'upperdir'}}]}}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) 18.829414992s ago: executing program 0 (id=710): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid\x00') write$cgroup_pid(r1, &(0x7f0000000000), 0x12) sendfile(r0, r1, 0x0, 0xa) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid\x00') (async) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) (async) sendfile(r0, r1, 0x0, 0xa) (async) 18.776512046s ago: executing program 0 (id=711): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) 18.776050306s ago: executing program 0 (id=712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000840)=@md0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000800)='cgroup2\x00', 0x4c02, &(0x7f00000001c0)='\x03\x00nQ\xf4\xe6d') (async) mount(&(0x7f0000000840)=@md0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000800)='cgroup2\x00', 0x4c02, &(0x7f00000001c0)='\x03\x00nQ\xf4\xe6d') syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000a07001b02070400f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80080, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80080, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='pids.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000880)) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) (async) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x4}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) getpid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000000380)={0x40, 0x2, 0x101, {0x101, 0x11, "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"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="007d04"]}, &(0x7f00000007c0)={0x34, &(0x7f0000000580)={0x0, 0xe, 0x92, "3a7bf3be9245c1abd98feb0cb2f480b9a91e8f59c080a2ae434b1d4c70fe9734aaa044c05ae45474f77081b35c0ed2dfc5b2cd9ed21002b3154d7a153db7de93b6ce3fe9d770b141183258a68236c1cd8370dfea8af64784cfe49bed2591755f6f7a2ac24c86e43bbaf4a25c1424a8c75a796276d95c4ccdb86ef320ae67164b345aac08494dd7d32324bd93b60259fb06ed"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000640)={0x20, 0x0, 0xc7, {0xc5, "dd731dd3da1cfe142a4680f220f6d68882bab454714b994c075cb9d50241dac2f653cdac5a70a72c788ec511d5798e389aa8090bab9cc49e7b2f269e06e7291319095b6d44614111665c7ef29dbfd68ec9bdd0e403829aa7c6be91d5623547609a8d291dafabdc290800d4aeddf8d2712b4b1ee5c19f940cd4f0235f1ed7a7324cd518a8e49ed19c03757ee07c341775a983c11d9d9db795bfde426d8d8a31fe8ccb79a46efcfa043ed2e30be364d9d1e9469b6247a597c31e3f17e8001f99a85b1e29faf3"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x7f}}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) (async) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.291495486s ago: executing program 0 (id=727): io_setup(0x8, &(0x7f0000000000)=0x0) eventfd2(0x0, 0x80001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) io_submit(r0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) readv(r2, 0x0, 0xffffffffffffffec) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x1000, 0xd, 0x2fae, 0x2}, 0x28, [0x7fff, 0x5, 0x3, 0xd, 0x0, 0x2, 0x23, 0x7, 0x44e, 0x8, 0xf4f2, 0x65, 0xa, 0xa32, 0xcfd, 0xffffff54, 0x5, 0x9, 0x4, 0x9, 0x3, 0x6a, 0x7, 0x6, 0x9000, 0xffffffe1, 0x2, 0xc, 0x8, 0xfffffff9, 0x4, 0x7, 0xfffffffc, 0x885, 0x9, 0x1, 0x9, 0x5, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x80000001, 0x8, 0xd0b, 0x5, 0x7ff, 0x9, 0x9, 0x0, 0xab, 0x13707275, 0x8bba, 0x1, 0x9, 0x9, 0x3, 0x4, 0x8, 0x4a, 0x3, 0x6, 0x4], [0x5, 0x9, 0x3, 0x7, 0x101, 0xff5, 0x3, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x7, 0xd, 0x0, 0x0, 0x7, 0xe, 0x6, 0x9, 0x1ff, 0x38e, 0x7, 0xccc3, 0x7, 0xb, 0x40000000, 0x72ab, 0x92, 0xfffffff3, 0x4, 0x1, 0x7fffffff, 0x8, 0xa92f5e2d, 0x7fffffff, 0x4, 0x2, 0xb3, 0x4, 0x300, 0x6, 0xd4b2, 0xffffffff, 0x783e, 0x6, 0x3ff, 0xf4, 0x86, 0x6, 0x2, 0x400, 0x9, 0x5, 0x6, 0xe1, 0x9373, 0x6, 0x1c00, 0x9, 0x7, 0x26d, 0x7ff, 0x3ff], [0x4, 0x7, 0x1, 0x1, 0x4, 0x6, 0x1, 0x4, 0x9, 0x3, 0x0, 0x6, 0xb8f, 0x8, 0x0, 0x1, 0x4, 0x0, 0x9, 0xe6f6, 0x1, 0x80000000, 0x6, 0xfffffbff, 0x6, 0x8, 0x1, 0x1, 0xad27, 0x382, 0xd7d, 0x2, 0x4, 0x1, 0x81, 0x7fffffff, 0xaaa, 0x4, 0x8, 0x2, 0x5, 0x2, 0xc, 0x3, 0x5, 0xf, 0x2, 0x0, 0x1, 0x7, 0x1, 0xfefffffa, 0xfffffc01, 0x2, 0x6, 0x7a, 0x8, 0x401, 0x6, 0xd, 0x2, 0x7ff0, 0x80000000, 0xf], [0x4, 0x5, 0x101, 0x4, 0x6, 0x4, 0xd, 0xa, 0x5701, 0x3, 0x4, 0x0, 0xc, 0x0, 0x8, 0x7, 0x401, 0x101, 0x3, 0x7, 0x8, 0xce6, 0x80, 0x7f, 0x781, 0x80000000, 0x6a, 0x5, 0xea5, 0x8000, 0x2, 0x5, 0x6, 0x0, 0xff, 0xd, 0x3, 0x4, 0x1, 0x1, 0x0, 0x6, 0x5, 0x0, 0x80000001, 0xfa65, 0x10001, 0xffffffff, 0x4, 0x6, 0x2, 0x3, 0x81, 0x1, 0x7, 0xfffffffc, 0x3, 0xd8, 0x5, 0x3097be3d, 0x7f, 0x8, 0x1]}, 0x45c) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@cpuid={0x14, 0x18, {0xb, 0xde}}], 0x18}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000003c0)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 16.566847418s ago: executing program 4 (id=771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0xc9, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x54, 0x47, 0x4, 0x8}, 0x75, &(0x7f0000000380)={0x5, 0xf, 0x75, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xe6, 0xf, 0x1, 0x5}, @generic={0x62, 0x10, 0xa, "0ce36dea803dd82260e421817c14adb525422798f34d1569b2036fe4b832e7f7baed65d46a04742c771f6d79f917d737f9922c677a6b70a5548c0248ed9797a38cd9cdea3026ed3ae6f09861e750b4a15eb7074fd0ab941014a12e63fec6e9"}]}, 0x2, [{0xb2, &(0x7f0000000540)=@string={0xb2, 0x3, "f81ff7b54d0a0aa3dfcf7b3aeefc95716346e0ee79a07ce3372e30b9305c30deb1febdc9a1d1e6efde5a89868b0bfc6ae9d053964932d939009de6e8ee0369c886a8a23fa842791c9363bb8b3f472d71b379ee8708a687536e22a5a7ec81e650028294e54f6ddae7b1797824fbdef91b21f732605ccb52eab966910eeeb7a1c6db6e1189360d48d9d5c4e3286b6e9263638608d57f6990cb90f57dc0c8781dc28f05064b65798839a068d6e81834aaa7"}}, {0xd1, &(0x7f00000006c0)=@string={0xd1, 0x3, "34762267248372e5f7764a2caf5b06310bd5bd651a16cf13c5c03778af28091039a50fbb1aa904c9ddbf8b187fc6c51152a7dedea9befd9037eb494747549bb8a5f2414eb1cd71ef9c46ab7c2dccd8d97662a46ab0e3caebda4cabafba4f62e5536124aa3a398c9400131aa9ad12a1673c11508e63902b0f811ad0079e24a3bd9236f2403b500d0d96d2ec2e1ec0f592e4830e3ba6b164c13bc32fc2e2143bad5d2de19f80a48a466d4d45f4f055e416d6e6b399194f4bfeaae36d6cc6560afcb19d6abb84931acce03a5d1495eaa0"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000800)={0x14, &(0x7f0000000640)={0x20, 0x21, 0x32, {0x32, 0x7, "2701ab05b169e6b49aec08fcda523deb35804b6048dde0f0484ee26ae0bc422722971b803c2f35794b31549abb890fe4"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x40, 0x31, 0x74, "2c87e498ff91d6e2ee53470d65147c8a8a5b48c2c5a15c40cab02766f410d6aeb805830973a4d5c9851f76fc9dc674bd635f829732c3de9eca42358bdce5475d9d98db84d9402116b42e7bda04c1da1dc2127086262d7b94151eb7f5f33f593d26fa34b8e84e04002d8c5e8aae2b97da91eff16c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000940)={0x20, 0x0, 0xcf, {0xcd, "a23728e2dac988b767d1c06ffcde784303bea93ad0435db653caebc849097b5adbc11e6b8320acce988c49160d1aa6d7dda547e5e881ea0cb14cc1cfd5de2cbcb9e66249698722e26a43950fc03ca82de10ba081eb625be47289ee6d05f0ca62d6995065ffc50caf010a4895f9602a137366524ccc1be6da379cc1dbfb6fe18edb97ff7df5222e9adfb4cd710faf500791f53a69f728c776f5df0c7f081b113be364ec45d0fc8ce07c4a77178eee9c3d1e4cb42c89eaaa73bf2e9941d6447a0d7df08efad0744160994b61736d"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x9}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x3c, @local, 0x4e23, 0x1, 'sed\x00', 0x1, 0x8, 0x43}, 0x2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRES16=r0, @ANYRES16=r5], 0x38}}, 0x20000810) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="56b17fa4ff6fb6b0561ba3a85f66e7c1b944eecb292d6305e0d4e3b8e64344286c7b15bc9a68061c975cbbb2d233cf492cff36d037702cbffd116063c961fdb7cda98b819eefd1091dd7bbc61915474210db7efefbf4a6e9da8b10c37bfeeb19b6752b5e5ccf04072cafffd8386d84bf0995b5f69b12b7eb76a66cbb2ed53431cf64df7740dc3c7966425c5633f6f805b4af3d85174b8ffa0400bc4f2ec741f0cfcbc6f5682fab32f708ef79e039ef62e02923647c3956d3139fcbc6dc27b9ffec1e40a9172ac871b263647e614d0d782c062a1c6ad706032de7c5784775196919a1e279", 0xe4}, {&(0x7f0000000440)="b83f2a6ab6d9cda18b62820bbde1ad16db279862a7a0d29cb3122b9f0090ae9a44a142350356103d71719d56670fef041db5d02cbeec939831ff2a94e63189347e68e8244d408436c0386b28148fd07e524cec2ea959a09a86e20ab2d41cba9ca5a7974cdc92315f653bf0b879ad8029ba21fff250541a04d8a47b7198fb8b5228c739f5e2c6f211163d45a2075d38415108051768b81ca222b9f6355d9d2bce054a12dabd059c0d2eef4da1afecf2a6c6f9eb174b59a0ad5351db61d065f9935e6f7a5c2475cb6a0c50b650e5213bfbe8f475ddfb2d44654e033c4ce40302ef2efd48455642ee9e1419", 0xea}], 0x2, 0xa) close(r3) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000240)=0x7) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000300), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 16.003107364s ago: executing program 4 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="baa100ecb8e5008ed8643ef367640f09ba400066ed67ad640f350fae56e40fc76df70fc775bcb818008ee0", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000580)=""/4096, &(0x7f0000000080)=0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 15.982798696s ago: executing program 4 (id=778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3f2e8cdd6f7b6c25, &(0x7f0000000100)={@remote, @initdev}, &(0x7f00000001c0)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 15.928262881s ago: executing program 4 (id=779): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r2, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) mkdir(0x0, 0xa) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYRES16=r5, @ANYRES8=r4], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r3, 0x22e7c000) 15.451907099s ago: executing program 4 (id=785): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x2, 0x14, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e24718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee001f41", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea4fbfdd7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd7}, {&(0x7f00000006c0)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ec", 0x63}, {&(0x7f0000000740)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027b5373c7bcb029e9a16cfe438f884c62a992b45c4fea81e29d4d07c12b5eb8dec28bdaf8be6103a984d49af61b4fd6907db0d19422e12", 0xe7}, {&(0x7f0000000580)="52c41e9b212f9748e6095c684f41173938baacdbc434e55d503f599a70c62e0e975769bbd3b21ad3620168f4aafd724c3495c07479b761fc56b45862431629aa57388af7b632db4c66804869d688673883af26591ff336d948", 0x59}], 0x6}, 0x20000004) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/230, 0xe6}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) (async) close(r2) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x28, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0xfffffffffffffff6) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="14000000120905a102d4700000000000e2001e80", @ANYRES64=r8], 0x14}], 0x1}, 0x4000) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f0000000140)=0xebbf, 0x4) (async) r10 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x80000, 0x6) 15.276225804s ago: executing program 4 (id=787): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000480)=0xc) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r6, &(0x7f00000004c0)='./file0\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) (async) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r6, &(0x7f00000004c0)='./file0\x00') (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) (async) 15.259406935s ago: executing program 33 (id=787): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000480)=0xc) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r6, &(0x7f00000004c0)='./file0\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) (async) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r6, &(0x7f00000004c0)='./file0\x00') (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) (async) 6.429147942s ago: executing program 1 (id=805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x700, 0x40, 0x0, 0x5, {{0x46, 0x4, 0x3, 0x3, 0x118, 0x800, 0x0, 0x40, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x30}, {[@cipso={0x86, 0x4d, 0x28b6d8838a67a, [{0x0, 0xe, "c9bbee6567343365d531fc59"}, {0x7, 0x9, "0d520f647a2851"}, {0x7, 0xf, "e2a6e07a21ca00283e38e4f53d"}, {0x5, 0x11, "1ecc4527084ffb05403e0c446a23c7"}, {0x2, 0x10, "c489cf05e4ebf5c6ae205f6ff297"}]}, @generic={0x86, 0x9, "325a72d25a135d"}, @noop, @timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x2, [{@local, 0x10001}, {@multicast1, 0xfffffff8}]}, @cipso={0x86, 0x60, 0x1, [{0x0, 0xf, "8b4b4bcdec6b3b8f413a76c3c0"}, {0x2, 0x2}, {0x2, 0xd, "fddcf8ab658099fb150a12"}, {0x2, 0x10, "ba29040eb3385987062f5a4cfd65"}, {0x5, 0x9, "ff870f658a72b8"}, {0x1, 0x8, "9ab4c1f74a2a"}, {0x0, 0xe, "b822450e4209217649bde2b2"}, {0x0, 0xb, "077a1915d5f96aaa4f"}, {0x5, 0x2}]}, @lsrr={0x83, 0x1f, 0x9f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @loopback, @private=0xa010102, @remote, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0xf, [{@loopback, 0xf}]}, @generic={0x88, 0xb, "853d26967b514a52a3"}]}}}}}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c000100070c10000000000000000000", 0x58}], 0x1) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000500)=""/72) r10 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201110339be6340990451102d69010203010902230001724a8003090405"], &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000700)=[@decrefs], 0x0, 0x0, 0x0}) 6.428742092s ago: executing program 2 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0xa0, 0x4) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 5.076235193s ago: executing program 1 (id=807): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000300)) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='vfat\x00', 0x4f2eee0710396258, 0x0) 5.041769426s ago: executing program 2 (id=808): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x189882, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x20000000001}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000040)={0x0, 0x300, 0x280, &(0x7f0000000200)=[0xa, 0x1, 0x0, 0x3, 0x7, 0x7, 0xf, 0x1, 0x2, 0x6, 0x7fffffff, 0x100000000, 0x80, 0x7, 0xee, 0x4, 0x7, 0x3, 0x9, 0x7, 0xf8ae, 0x6, 0xff, 0xf214, 0x40, 0x9, 0x40, 0x2, 0x1, 0x4, 0x2, 0xe, 0xf, 0x59cd, 0x8, 0x7, 0x7fffffff, 0xffff, 0x401, 0x1, 0x1, 0x6a00, 0x7, 0x4, 0x6, 0x9, 0x2, 0x5, 0x400, 0x7, 0x2, 0x8, 0x101, 0x4c35, 0x16, 0x1, 0xfffffffffffffffd, 0x1f5, 0x80000001, 0x8001, 0x0, 0x9, 0x6, 0x2, 0x1, 0xaa, 0xfffffffffffffffd, 0x2, 0x7f, 0x9, 0xffffffff, 0x40, 0x3, 0x3, 0x5, 0x5, 0x1ff, 0x80, 0x0, 0x7, 0x5, 0x9c, 0x9, 0x6, 0x5, 0x7, 0x2, 0x3a3e35c2, 0x3, 0xff, 0xfffffffffffffffb, 0x2, 0xfffffffffffffffa, 0x401, 0x8, 0xe, 0x5, 0x8, 0x5, 0x80000001, 0x59b, 0x3, 0x8, 0x3, 0x534, 0x7, 0x0, 0x10000, 0x1ff, 0x421, 0x3, 0x60, 0x7, 0xc136, 0x4, 0x2, 0x7, 0x6, 0x2, 0x2, 0x2, 0x800, 0x9, 0x855e, 0x6, 0x8, 0x1, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.041389456s ago: executing program 1 (id=809): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_PIT(r4, 0xc048ae65, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.484484473s ago: executing program 1 (id=810): getpriority(0x1, 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="3eddb8fcfd660f38802f66b9800000c0650f323235010000000f3066b81f0000000f23c00f21f8663501000c000f23f8bac7a0006c006cee0f20e00f22e0670f009afbd9f50166b9800000c00f326635008000000f30660f382a8e3a44baa000ed", 0x61}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 3.481453254s ago: executing program 2 (id=811): open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x7, {0x7, 0x23, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 1.894168144s ago: executing program 34 (id=727): io_setup(0x8, &(0x7f0000000000)=0x0) eventfd2(0x0, 0x80001) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) io_submit(r0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) readv(r2, 0x0, 0xffffffffffffffec) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x1000, 0xd, 0x2fae, 0x2}, 0x28, [0x7fff, 0x5, 0x3, 0xd, 0x0, 0x2, 0x23, 0x7, 0x44e, 0x8, 0xf4f2, 0x65, 0xa, 0xa32, 0xcfd, 0xffffff54, 0x5, 0x9, 0x4, 0x9, 0x3, 0x6a, 0x7, 0x6, 0x9000, 0xffffffe1, 0x2, 0xc, 0x8, 0xfffffff9, 0x4, 0x7, 0xfffffffc, 0x885, 0x9, 0x1, 0x9, 0x5, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x80000001, 0x8, 0xd0b, 0x5, 0x7ff, 0x9, 0x9, 0x0, 0xab, 0x13707275, 0x8bba, 0x1, 0x9, 0x9, 0x3, 0x4, 0x8, 0x4a, 0x3, 0x6, 0x4], [0x5, 0x9, 0x3, 0x7, 0x101, 0xff5, 0x3, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x7, 0xd, 0x0, 0x0, 0x7, 0xe, 0x6, 0x9, 0x1ff, 0x38e, 0x7, 0xccc3, 0x7, 0xb, 0x40000000, 0x72ab, 0x92, 0xfffffff3, 0x4, 0x1, 0x7fffffff, 0x8, 0xa92f5e2d, 0x7fffffff, 0x4, 0x2, 0xb3, 0x4, 0x300, 0x6, 0xd4b2, 0xffffffff, 0x783e, 0x6, 0x3ff, 0xf4, 0x86, 0x6, 0x2, 0x400, 0x9, 0x5, 0x6, 0xe1, 0x9373, 0x6, 0x1c00, 0x9, 0x7, 0x26d, 0x7ff, 0x3ff], [0x4, 0x7, 0x1, 0x1, 0x4, 0x6, 0x1, 0x4, 0x9, 0x3, 0x0, 0x6, 0xb8f, 0x8, 0x0, 0x1, 0x4, 0x0, 0x9, 0xe6f6, 0x1, 0x80000000, 0x6, 0xfffffbff, 0x6, 0x8, 0x1, 0x1, 0xad27, 0x382, 0xd7d, 0x2, 0x4, 0x1, 0x81, 0x7fffffff, 0xaaa, 0x4, 0x8, 0x2, 0x5, 0x2, 0xc, 0x3, 0x5, 0xf, 0x2, 0x0, 0x1, 0x7, 0x1, 0xfefffffa, 0xfffffc01, 0x2, 0x6, 0x7a, 0x8, 0x401, 0x6, 0xd, 0x2, 0x7ff0, 0x80000000, 0xf], [0x4, 0x5, 0x101, 0x4, 0x6, 0x4, 0xd, 0xa, 0x5701, 0x3, 0x4, 0x0, 0xc, 0x0, 0x8, 0x7, 0x401, 0x101, 0x3, 0x7, 0x8, 0xce6, 0x80, 0x7f, 0x781, 0x80000000, 0x6a, 0x5, 0xea5, 0x8000, 0x2, 0x5, 0x6, 0x0, 0xff, 0xd, 0x3, 0x4, 0x1, 0x1, 0x0, 0x6, 0x5, 0x0, 0x80000001, 0xfa65, 0x10001, 0xffffffff, 0x4, 0x6, 0x2, 0x3, 0x81, 0x1, 0x7, 0xfffffffc, 0x3, 0xd8, 0x5, 0x3097be3d, 0x7f, 0x8, 0x1]}, 0x45c) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000005c0)) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@cpuid={0x14, 0x18, {0xb, 0xde}}], 0x18}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000003c0)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.892101965s ago: executing program 1 (id=813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="02fea158a86df1d6cddfa66c472f24080a0b02020000002abd7000fcdbdf25"], 0x10}}, 0x20008004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.891895594s ago: executing program 2 (id=814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x128}, 0x4c801) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000140)) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) close_range(r0, 0xffffffffffffffff, 0x0) getpeername$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x9, r9, 0x24, r6}, 0x10) 1.865004126s ago: executing program 2 (id=815): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x400000fd, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r0, r1, 0x0, 0x80000001) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) 389.57µs ago: executing program 1 (id=816): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="f3ff4248615586000000000008bd28550066f74ef600000000000109026160bdd6e17d88a2f8a31659589f19652400010000200f0904"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="f3ff4248615586000000000008bd28550066f74ef600000000000109026160bdd6e17d88a2f8a31659589f19652400010000200f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000a9"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000a9"], 0x0}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 0s ago: executing program 2 (id=817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0xfffffffffffffded, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1a}, [@nested={0x99, 0xb5, 0x0, 0x1, [@nested={0x4, 0x1e}, @nested={0x4, 0x70}, @generic="50ce03ffc88b7a3716f47275267b87664945202f68a2d524d8c3bc30ff01b5e92c74f92fa7d1e8b48419543ea331616c4c010f6e09e3b7bdffea3d457dbb3c0e6008a5ea4fa60fa1ec85b7359641ef6700db5b44bf95d861eed2ca03e01d99c060c438f16514ccb8703666910bc825657b21c0d6fb", @nested={0x4, 0x61}, @typed={0x11, 0xc6, 0x0, 0x0, @binary="16fa6ee0d7a108758a454a2153"}]}, @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="ac9920", @nested={0x31, 0x9b, 0x0, 0x1, [@generic="d9d0f4ef0d172c8d815920a9c0e01b481ad3fed8be9e4d998b", @typed={0x14, 0x2b}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4044084}, 0xc081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x9, 0x50, 0xa0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0xfff8, 0x1, "122c23"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0xc, '\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x18, 0x2, 0x8b, 0x1f, {0x7, 0x25, 0x1, 0x0, 0x0, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf7, 0x6, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x85, 0x1, 0x80, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x5, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x2c, {0x2c, 0xc, "47a468c1fb56fd4a2625992afe97504bcb6b685b4f6e6c78f94b6e7e15aec50cfa73cddc359cbc4e039f"}}, 0x0}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x208, 0x8, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xac, 0xf, 0x81, 0x20}, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x0, 0x11, 0xa8, {0xa8, 0xc, "ffdf732cd1c4fdbaea3092478ccfcda728f23a653f8e5b2b3c9c79876544a669dfecd4f69e9ca7ffed0da773fb4f63d5a50cafdf6437a1cb59fbcb1204179d68bb1e34f5711aa62f713600c7d40c83db18e7d996529a8446cf37066e9e04f2b0138bb6e76b51f7e80e3b2194d1a0d0e928edc5e6c574955c8ee06a6f4a209614abbfd12ef987cd18d0c55a57f328781207e51bc515539dcfe604c8f4aa6da9e3a155c02e8b4f"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x20, 0x1d}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x2}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x7}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x401, 0x5, 0xfffffff7, 0x0, 0xf685, 0xff, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x3, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x4, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x8, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f0000000800)={0x0, 0x21, 0x48, {0x48, 0x21, "06d8f8469a700a6f7943c4b8d8baa2a55b17a3eb3a8695ee82422245a7fe6f356589c05876b3f53691a8133df8d06ba6ca7b1d26dd9284c36af6fe204736714a75068cc1fe97"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f0000001200)={0x1c, &(0x7f0000000cc0)={0x40, 0x5, 0xdd, "a017117316e030f499c33d0f812d6070185bfcb13161e3484dddb3237d21c830ae19618e4dac4afc299af29ce10fe77aff6fdad52b1539147fb24578e2847e4ea9c2c464ccec2b9effc7690be47e63b66bd558ac7f7ee85c2839a3bd1b6088e2c46904ced6595d77853c975c467cdf9745501f7d38c7d538fecf3372355834d8b9c9ca44fb9a6e3f0bec42bf8dca753ac5ba663dc39dda28991ffc5c282a9ccfefe3c414c71bf7ed00e73a01d862eb442843212bd324160f2c7b2de2d6ed13141e63047d4f8a45ecca4d445df6acbda0696c9d5cb3a7bc1e9dcdcf3128"}, &(0x7f0000000dc0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000900)={0x21, 0x0, 0x2, "a1c1"}}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x48800) sendmsg$netlink(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)={0x10, 0x2fd, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000001a80)=[@cred={{0x1c}}], 0x20, 0x40045}, 0xc0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f0000000100)=ANY=[], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1756344144.560:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.560231][ T36] audit: type=1400 audit(1756344144.560:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 23.167069][ T36] audit: type=1400 audit(1756344152.180:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.168325][ T282] cgroup: Unknown subsys name 'net' [ 23.192483][ T36] audit: type=1400 audit(1756344152.180:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.224022][ T36] audit: type=1400 audit(1756344152.220:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.224194][ T282] cgroup: Unknown subsys name 'devices' [ 23.390557][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.396722][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.569508][ T36] audit: type=1400 audit(1756344152.590:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.593257][ T36] audit: type=1400 audit(1756344152.590:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.619669][ T36] audit: type=1400 audit(1756344152.590:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.653036][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.662614][ T36] audit: type=1400 audit(1756344152.690:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.689936][ T36] audit: type=1400 audit(1756344152.690:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.700968][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.716690][ T36] audit: type=1400 audit(1756344152.710:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.755545][ T36] audit: type=1400 audit(1756344152.710:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.554488][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.561976][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.569161][ T291] bridge_slave_0: entered allmulticast mode [ 24.575754][ T291] bridge_slave_0: entered promiscuous mode [ 24.588619][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.595887][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.603575][ T291] bridge_slave_1: entered allmulticast mode [ 24.610009][ T291] bridge_slave_1: entered promiscuous mode [ 24.654593][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.662012][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.669352][ T289] bridge_slave_0: entered allmulticast mode [ 24.675742][ T289] bridge_slave_0: entered promiscuous mode [ 24.689660][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.696887][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.704300][ T289] bridge_slave_1: entered allmulticast mode [ 24.710813][ T289] bridge_slave_1: entered promiscuous mode [ 24.722849][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.730488][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.738300][ T290] bridge_slave_0: entered allmulticast mode [ 24.745295][ T290] bridge_slave_0: entered promiscuous mode [ 24.753227][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.761472][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.769684][ T290] bridge_slave_1: entered allmulticast mode [ 24.776614][ T290] bridge_slave_1: entered promiscuous mode [ 24.813514][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.820893][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.828352][ T292] bridge_slave_0: entered allmulticast mode [ 24.834685][ T292] bridge_slave_0: entered promiscuous mode [ 24.850506][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.858235][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.865791][ T292] bridge_slave_1: entered allmulticast mode [ 24.872592][ T292] bridge_slave_1: entered promiscuous mode [ 25.019626][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.027158][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.034560][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.041735][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.065996][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.073181][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.080796][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.088913][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.100212][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.107359][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.114824][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.121944][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.131931][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.139261][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.148625][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.155894][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.194129][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.201932][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.209455][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.218120][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.225953][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.233656][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.241331][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.249771][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.272875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.280157][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.288325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.295791][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.309680][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.318058][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.326919][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.334120][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.349336][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.356766][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.364529][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.371776][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.399520][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.407685][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.422621][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.430064][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.454857][ T289] veth0_vlan: entered promiscuous mode [ 25.484580][ T292] veth0_vlan: entered promiscuous mode [ 25.494318][ T289] veth1_macvtap: entered promiscuous mode [ 25.517710][ T292] veth1_macvtap: entered promiscuous mode [ 25.527010][ T291] veth0_vlan: entered promiscuous mode [ 25.563043][ T291] veth1_macvtap: entered promiscuous mode [ 25.570848][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.573221][ T290] veth0_vlan: entered promiscuous mode [ 25.647878][ T290] veth1_macvtap: entered promiscuous mode [ 25.684096][ T336] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.694364][ T336] SELinux: Context system_u:object_r:iptables_conf_t:s0 is not valid (left unmapped). [ 25.800408][ T339] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.887715][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 25.897398][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 25.917772][ T352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 25.959294][ T353] fido_id[353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 26.149873][ T329] Bluetooth: hci0: Frame reassembly failed (-90) [ 26.488271][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.617987][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.783278][ T385] batadv0: tun_chr_ioctl cmd 1074025678 [ 26.789352][ T385] batadv0: group set to 801 [ 26.794172][ T385] batadv0: tun_chr_ioctl cmd 1074025678 [ 26.800428][ T385] batadv0: group set to 801 [ 26.805172][ T384] batadv0: tun_chr_ioctl cmd 1074025673 [ 26.810896][ T384] batadv0: tun_chr_ioctl cmd 1074025673 [ 26.816473][ T384] batadv0: tun_chr_ioctl cmd 1074025673 [ 26.822440][ T385] batadv0: tun_chr_ioctl cmd 1074025678 [ 26.828163][ T385] batadv0: group set to 801 [ 26.833139][ T385] batadv0: tun_chr_ioctl cmd 1074025678 [ 26.839496][ T385] batadv0: group set to 801 [ 26.844314][ T384] batadv0: tun_chr_ioctl cmd 1074025673 [ 26.868090][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.896244][ T388] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 26.908898][ T388] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12052 sclass=netlink_xfrm_socket pid=388 comm=syz.1.18 [ 26.923642][ T388] rust_binder: Error while translating object. [ 26.923687][ T388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.930034][ T388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 26.976550][ T395] binder: Bad value for 'defcontext' [ 27.118055][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.248267][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.358043][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.488071][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.508048][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 27.514900][ T65] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 27.525711][ T65] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 27.535175][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.544136][ T65] usb 2-1: Product: syz [ 27.549159][ T65] usb 2-1: Manufacturer: syz [ 27.554244][ T65] usb 2-1: SerialNumber: syz [ 27.559949][ T65] usb 2-1: config 0 descriptor?? [ 27.566476][ T65] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 27.575150][ T65] usb 2-1: Detected FT232B [ 27.598300][ T31] usb usb3-port1: attempt power cycle [ 27.938025][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.959911][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.089338][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.168083][ T362] Bluetooth: hci0: command 0x1003 tx timeout [ 28.168098][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.226723][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 28.226739][ T36] audit: type=1400 audit(1756344157.240:146): avc: denied { read } for pid=400 comm="syz.3.22" dev="nsfs" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.256946][ T36] audit: type=1400 audit(1756344157.240:147): avc: denied { open } for pid=400 comm="syz.3.22" path="net:[4026532496]" dev="nsfs" ino=4026532496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.348060][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.379454][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.448293][ T36] audit: type=1400 audit(1756344157.470:148): avc: denied { map } for pid=404 comm="syz.3.23" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.449071][ T405] netlink: 'syz.3.23': attribute type 16 has an invalid length. [ 28.471721][ T36] audit: type=1400 audit(1756344157.470:149): avc: denied { create } for pid=404 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.480151][ T405] netlink: 'syz.3.23': attribute type 2 has an invalid length. [ 28.506864][ T405] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.23'. [ 28.518988][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.528785][ T36] audit: type=1400 audit(1756344157.550:150): avc: denied { setopt } for pid=409 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.549880][ T36] audit: type=1400 audit(1756344157.570:151): avc: denied { ioctl } for pid=409 comm="syz.3.24" path="socket:[4503]" dev="sockfs" ino=4503 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.551977][ T410] 9pnet_fd: Insufficient options for proto=fd [ 28.576155][ T36] audit: type=1400 audit(1756344157.570:152): avc: denied { write } for pid=409 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.601550][ T36] audit: type=1400 audit(1756344157.570:153): avc: denied { create } for pid=409 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 28.621372][ T36] audit: type=1400 audit(1756344157.570:154): avc: denied { create } for pid=409 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.640935][ T36] audit: type=1400 audit(1756344157.570:155): avc: denied { bind } for pid=409 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.648076][ T31] usb usb3-port1: unable to enumerate USB device [ 28.726766][ T412] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 28.980702][ T416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.260494][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 29.397441][ T439] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 29.429516][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 29.446595][ T10] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 29.458363][ T10] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 43059, setting to 64 [ 29.470199][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 29.479277][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 29.488689][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.496827][ T10] usb 1-1: Product: ﴻ㖫襡륶瓃պ顪䴳濁ꓗ傛殜Ⱚ偣寧逻Ί꽼䷤垆쏺ፙ漚嬾謚痻季坲㬡⏐哠멏掙 [ 29.512199][ T10] usb 1-1: Manufacturer: ⬇ﻣꦾ䗅蹤檞꼆撩罚൞鹃畸⚖혹䞲蓁媅唱扶國눸⒗豢꽋 [ 29.523579][ T10] usb 1-1: SerialNumber: 嬟븹鯔⣏脖࠰劉夵邴뾶硗曞陒麾銙썽캐僚ᮙ✅잉ㅿ堚忁︄凉ፑ옌鬎볻갿꽡䑯妺㧏ž鞶턹ꕉ뇴죩牀❫둿껋鉸핤亿屔㡷碷蹘ᶶ᫣伞ဖ땛ꋼ㥨揠䅎ố사䃽胒㑇ᑃ嫋Ш㟸㿡삿㴘絟਌Nj袃ྫ檋䤈ഥ얇嚌 [ 29.555677][ T423] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.563101][ T423] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 29.648050][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.797999][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 29.805078][ T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 29.814610][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.825379][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 29.836386][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.850132][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.859435][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.867687][ T31] usb 3-1: Product: syz [ 29.872287][ T31] usb 3-1: Manufacturer: syz [ 29.877256][ T31] usb 3-1: SerialNumber: syz [ 29.972876][ T423] rust_binder: Fixups oob 164 166 363 196 [ 29.972915][ T423] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 29.978951][ T423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.987439][ T423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 30.001862][ T10] usb 1-1: USB disconnect, device number 2 [ 30.053246][ T65] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 30.067693][ T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 30.082619][ T447] rust_binder: Error while translating object. [ 30.082793][ T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.083231][ T65] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.089779][ T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 30.101759][ T65] usb 2-1: USB disconnect, device number 2 [ 30.108255][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 30.144198][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.155199][ T449] process 'syz.1.38' launched '~R' with NULL argv: empty string added [ 30.173018][ T31] usb 3-1: USB disconnect, device number 6 [ 30.191309][ T65] ftdi_sio 2-1:0.0: device disconnected [ 30.247391][ T452] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 30.247416][ T452] rust_binder: Error while translating object. [ 30.260083][ T452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.266559][ T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 30.448091][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 30.487154][ T454] ======================================================= [ 30.487154][ T454] WARNING: The mand mount option has been deprecated and [ 30.487154][ T454] and is ignored by this kernel. Remove the mand [ 30.487154][ T454] option from the mount to silence this warning. [ 30.487154][ T454] ======================================================= [ 30.523419][ T454] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 30.593791][ T456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 30.629016][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.644723][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.661653][ T461] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 30.670561][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 30.681981][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.691192][ T10] usb 4-1: SerialNumber: syz [ 30.702884][ T10] usb 4-1: 0:2 : does not exist [ 30.794253][ T506] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 30.794280][ T506] rust_binder: Error while translating object. [ 30.811870][ T506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.818587][ T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 30.958023][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.118059][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 31.128822][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 31.137430][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 31.146442][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 31.164034][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.175261][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.185355][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.198839][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 31.206004][ T9] usb 4-1: USB disconnect, device number 2 [ 31.210695][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.214894][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.226883][ T65] usb 1-1: config 0 descriptor?? [ 31.387964][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 31.398931][ T10] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 31.428005][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.439414][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 31.448615][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 31.448675][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 31.468757][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.477995][ T10] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 31.486835][ T10] usb 2-1: no configuration chosen from 1 choice [ 31.651886][ T65] usb 1-1: USB disconnect, device number 3 [ 31.661304][ T65] usblp0: removed [ 31.666666][ T461] rust_binder: Got transaction with invalid offset. [ 31.666741][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.674617][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 31.810212][ T533] binfmt_misc: register: failed to install interpreter file ./file0 [ 32.032048][ T10] rust_binder: 548: removing orphan mapping 0:24 [ 32.045110][ T552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 32.045187][ T553] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=553 comm=syz.2.62 [ 32.089499][ T557] rust_binder: 57: no such ref 2 [ 32.291916][ T568] overlay: filesystem on ./bus not supported as upperdir [ 32.310665][ T571] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 32.317969][ T398] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.477990][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 32.484607][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.495929][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.505884][ T398] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 32.515062][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.523618][ T398] usb 3-1: config 0 descriptor?? [ 32.937624][ T398] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0002/input/input5 [ 32.952261][ T398] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0002/input/input6 [ 32.984599][ T398] kye 0003:0458:5012.0002: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 33.093077][ T591] exFAT-fs (rnullb0): invalid boot record signature [ 33.100310][ T591] exFAT-fs (rnullb0): failed to read boot sector [ 33.107112][ T591] exFAT-fs (rnullb0): failed to recognize exfat type [ 33.134370][ T559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.147488][ T559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.211847][ T603] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.77'. [ 33.318570][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.318674][ T594] rust_binder: got new transaction with bad transaction stack [ 33.326437][ T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 33.334878][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.345173][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.355380][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.362414][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.372585][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.380300][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.381079][ T398] usb 3-1: USB disconnect, device number 7 [ 33.390968][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.402448][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.417040][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.424595][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.433409][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.440409][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.449196][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.456288][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.464674][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.467969][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.471310][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.487262][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.493924][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.502238][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.508976][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.517337][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.524138][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.532852][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.539751][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.548059][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.555661][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.563821][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.570465][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.579492][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.586371][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.594682][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.601426][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.609689][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.616275][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.624838][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.631399][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.638013][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 33.639544][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.649076][ T65] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 33.651356][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.659823][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.668484][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.675436][ T65] usb 1-1: Product: syz [ 33.683253][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.691673][ T65] usb 1-1: Manufacturer: syz [ 33.695862][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.702455][ T65] usb 1-1: SerialNumber: syz [ 33.706993][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.718478][ T65] r8152-cfgselector 1-1: Unknown version 0x0000 [ 33.719984][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.726368][ T65] r8152-cfgselector 1-1: config 0 descriptor?? [ 33.732672][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.742148][ T65] hub 1-1:0.0: bad descriptor, ignoring hub [ 33.747225][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.754113][ T65] hub 1-1:0.0: probe with driver hub failed with error -5 [ 33.759798][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.775354][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.781833][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.790152][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.796588][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.804839][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.811466][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.819719][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.826208][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.834394][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.840936][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.848997][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.855672][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.863725][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.870172][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.878324][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.884766][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.892826][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.899294][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.907318][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.917989][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.920633][ T9] usb 2-1: USB disconnect, device number 3 [ 33.926366][ T594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.941844][ T606] rust_binder: Write failure EFAULT in pid:70 [ 33.954641][ T65] r8152-cfgselector 1-1: Unknown version 0x0000 [ 33.971063][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 33.971080][ T36] audit: type=1400 audit(1756344162.990:211): avc: denied { name_bind } for pid=605 comm="syz.2.78" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.971253][ T594] rust_binder: Read failure Err(EFAULT) in pid:69 [ 33.998059][ T65] r8152-cfgselector 1-1: bad CDC descriptors [ 34.031369][ T65] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 34.050307][ T36] audit: type=1400 audit(1756344163.070:212): avc: denied { getopt } for pid=620 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.071538][ T36] audit: type=1400 audit(1756344163.090:213): avc: denied { setopt } for pid=608 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.123016][ T619] rust_binder: Error while translating object. [ 34.123055][ T619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.129734][ T36] audit: type=1400 audit(1756344163.140:214): avc: denied { setopt } for pid=608 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.132399][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 34.161267][ T632] binder: Bad value for 'stats' [ 34.193370][ T637] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 105) [ 34.193400][ T637] rust_binder: Error while translating object. [ 34.206369][ T36] audit: type=1400 audit(1756344163.220:215): avc: denied { write } for pid=636 comm="syz.3.86" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.218589][ T637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.237422][ T637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 34.242744][ T36] audit: type=1400 audit(1756344163.220:216): avc: denied { open } for pid=636 comm="syz.3.86" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.250095][ T642] Zero length message leads to an empty skb [ 34.258436][ T36] audit: type=1400 audit(1756344163.220:217): avc: denied { ioctl } for pid=636 comm="syz.3.86" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.302849][ T644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 34.326731][ T644] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 34.362684][ T36] audit: type=1400 audit(1756344163.380:218): avc: denied { setopt } for pid=639 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.391491][ T36] audit: type=1400 audit(1756344163.380:219): avc: denied { write } for pid=639 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.461718][ T36] audit: type=1400 audit(1756344163.480:220): avc: denied { connect } for pid=662 comm="syz.2.94" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.671922][ T674] veth0: entered promiscuous mode [ 34.680966][ T673] veth0: left promiscuous mode [ 34.761302][ T683] rust_binder: Write failure EFAULT in pid:95 [ 34.860003][ T687] devpts: called with bogus options [ 34.922563][ T697] rust_binder: Write failure EINVAL in pid:79 [ 34.948217][ T701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 34.984834][ T706] FAT-fs (rnullb0): bogus number of reserved sectors [ 34.992537][ T706] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 35.000542][ T706] FAT-fs (rnullb0): bogus number of reserved sectors [ 35.009097][ T706] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 35.020870][ T699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 35.048473][ T710] random: crng reseeded on system resumption [ 35.349918][ T736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.349944][ T736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:103 [ 35.367970][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.501322][ T748] mmap: syz.0.126 (748) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.529143][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.540384][ T65] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.551688][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.574132][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 35.585644][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 35.595338][ T65] usb 4-1: Product: syz [ 35.600004][ T65] usb 4-1: Manufacturer: syz [ 35.605116][ T65] usb 4-1: SerialNumber: syz [ 35.719824][ T755] SELinux: Context ϧ is not valid (left unmapped). [ 35.728389][ T755] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 35.737459][ T755] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 35.817489][ T65] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 35.821854][ T761] fuse: Bad value for 'fd' [ 35.929438][ T774] 9pnet_fd: Insufficient options for proto=fd [ 35.975779][ T772] rust_binder: Error while translating object. [ 35.975814][ T772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.987691][ T772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:127 [ 36.023169][ T794] overlayfs: missing 'lowerdir' [ 36.080274][ T804] overlayfs: conflicting options: userxattr,redirect_dir=on [ 36.095804][ T10] usb 4-1: USB disconnect, device number 3 [ 36.103136][ T10] usblp0: removed [ 36.113553][ T804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.146'. [ 36.153458][ T813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 36.174608][ T817] 9pnet_fd: Insufficient options for proto=fd [ 36.487985][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.639346][ T65] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.654256][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 36.663380][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 36.671798][ T65] usb 2-1: Product: syz [ 36.676389][ T65] usb 2-1: Manufacturer: syz [ 36.681240][ T65] usb 2-1: SerialNumber: syz [ 36.889180][ T65] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 37.009346][ T833] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 37.090314][ T823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.106886][ T823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.116890][ T823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.126454][ T823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.188247][ C0] usblp0: nonzero write bulk status received: -71 [ 37.196058][ T10] usb 2-1: USB disconnect, device number 4 [ 37.204245][ T10] usblp0: removed [ 37.621452][ T844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 37.647101][ T848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'. [ 37.657321][ T848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'. [ 37.673821][ T853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 37.683728][ T853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 37.693202][ T853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 38.040386][ T886] exFAT-fs (rnullb0): invalid boot record signature [ 38.047312][ T886] exFAT-fs (rnullb0): failed to read boot sector [ 38.053921][ T886] exFAT-fs (rnullb0): failed to recognize exfat type [ 38.106391][ T892] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 38.358008][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.507996][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 38.514895][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 38.526371][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 38.536129][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.544879][ T10] usb 2-1: Product: syz [ 38.550102][ T10] usb 2-1: Manufacturer: syz [ 38.554975][ T10] usb 2-1: SerialNumber: syz [ 38.560498][ T10] usb 2-1: config 0 descriptor?? [ 38.570188][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 38.583702][ T10] usb 2-1: Detected FT232R [ 38.786029][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 38.796343][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 38.806162][ T10] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 38.814834][ T899] rust_binder: Error while translating object. [ 38.814870][ T899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.818699][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 38.822131][ T899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:102 [ 38.841462][ T10] usb 2-1: USB disconnect, device number 5 [ 38.867114][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 38.877884][ T10] ftdi_sio 2-1:0.0: device disconnected [ 38.902669][ T905] fuse: Bad value for 'fd' [ 38.960488][ T907] 9pnet_fd: Insufficient options for proto=fd [ 39.229712][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 39.229731][ T36] audit: type=1400 audit(1756344168.250:277): avc: denied { create } for pid=914 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.258379][ T36] audit: type=1400 audit(1756344168.250:278): avc: denied { getopt } for pid=914 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.281165][ T36] audit: type=1400 audit(1756344168.250:279): avc: denied { read } for pid=914 comm="syz.0.189" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.316837][ T36] audit: type=1400 audit(1756344168.330:280): avc: denied { write } for pid=916 comm="syz.1.190" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.359473][ T36] audit: type=1400 audit(1756344168.380:281): avc: denied { getopt } for pid=918 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.393788][ T923] netlink: 'syz.0.192': attribute type 4 has an invalid length. [ 39.405979][ T923] netlink: 'syz.0.192': attribute type 17 has an invalid length. [ 39.478722][ T36] audit: type=1400 audit(1756344168.500:282): avc: denied { watch } for pid=928 comm="syz.1.194" path="pipe:[8433]" dev="pipefs" ino=8433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 39.647183][ T36] audit: type=1400 audit(1756344168.660:283): avc: denied { compute_member } for pid=934 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 39.820745][ T36] audit: type=1400 audit(1756344168.840:284): avc: denied { ioctl } for pid=944 comm="syz.3.201" path="socket:[8457]" dev="sockfs" ino=8457 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.847194][ T945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 39.877980][ T36] audit: type=1400 audit(1756344168.890:285): avc: denied { accept } for pid=946 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.000446][ T36] audit: type=1400 audit(1756344169.020:286): avc: denied { bind } for pid=950 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.126399][ T952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 40.340462][ T960] capability: warning: `syz.1.206' uses 32-bit capabilities (legacy support in use) [ 40.467107][ T965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 40.752236][ T65] rust_binder: 950: removing orphan mapping 0:24 [ 40.770195][ T65] rust_binder: 0: removing orphan mapping 24:1112 [ 41.085331][ T1002] netlink: 9 bytes leftover after parsing attributes in process `syz.2.220'. [ 41.105648][ T1002] gretap0: entered promiscuous mode [ 41.128021][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 41.301662][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 41.319094][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 41.329077][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.40 [ 41.342855][ T1014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 41.344634][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.358556][ T1014] __vm_enough_memory: pid: 1014, comm: syz.1.224, bytes: 18014402804453376 not enough memory for the allocation [ 41.367958][ T10] usb 4-1: Product: syz [ 41.377953][ T10] usb 4-1: Manufacturer: syz [ 41.382659][ T10] usb 4-1: SerialNumber: syz [ 41.595285][ T1021] tipc: Started in network mode [ 41.607998][ T1021] tipc: Node identity 4, cluster identity 4711 [ 41.615142][ T1021] tipc: Node number set to 4 [ 41.667823][ T1025] 9pnet_fd: Insufficient options for proto=fd [ 41.730540][ T1030] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 41.781060][ T1026] rust_binder: Write failure EINVAL in pid:170 [ 41.802515][ T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.830302][ T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.848836][ T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.868115][ T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.887986][ T435] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.896970][ T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.918902][ T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.940014][ T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.958892][ T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.983300][ T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.998930][ T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.078042][ T435] usb 1-1: device descriptor read/64, error -71 [ 42.318037][ T435] usb 1-1: device descriptor read/64, error -71 [ 42.524196][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 42.533986][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 42.548485][ T1071] binder: Bad value for 'stats' [ 42.555082][ T10] usb 4-1: USB disconnect, device number 4 [ 42.567947][ T435] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.600653][ T1073] tipc: Started in network mode [ 42.605763][ T1073] tipc: Node identity ac14140f, cluster identity 4711 [ 42.612983][ T1073] tipc: New replicast peer: 255.255.255.255 [ 42.619864][ T1073] tipc: Enabled bearer , priority 10 [ 42.628961][ T1073] __nla_validate_parse: 1 callbacks suppressed [ 42.628979][ T1073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 42.645114][ T1073] tipc: Disabling bearer [ 42.707996][ T897] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 42.718175][ T435] usb 1-1: device descriptor read/64, error -71 [ 42.879869][ T897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 42.908190][ T897] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 42.918982][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.932039][ T897] usb 2-1: config 0 descriptor?? [ 42.937518][ T1066] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 42.968017][ T435] usb 1-1: device descriptor read/64, error -71 [ 43.081536][ T435] usb usb1-port1: attempt power cycle [ 43.354245][ T897] hid-generic 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 43.447988][ T435] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.488938][ T435] usb 1-1: device descriptor read/8, error -71 [ 43.600018][ T1101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 43.618990][ T435] usb 1-1: device descriptor read/8, error -71 [ 43.858002][ T897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.865674][ T435] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.909108][ T435] usb 1-1: device descriptor read/8, error -71 [ 44.037957][ T897] usb 4-1: Using ep0 maxpacket: 32 [ 44.048867][ T897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.060283][ T435] usb 1-1: device descriptor read/8, error -71 [ 44.066610][ T897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.078007][ T897] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 44.087579][ T897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.096683][ T897] usb 4-1: config 0 descriptor?? [ 44.110337][ T897] hub 4-1:0.0: USB hub found [ 44.168210][ T435] usb usb1-port1: unable to enumerate USB device [ 44.307996][ T897] hub 4-1:0.0: 1 port detected [ 44.319053][ T897] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 44.325524][ T897] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 44.334620][ T897] usbhid 4-1:0.0: can't add hid device: -71 [ 44.340791][ T897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 44.369994][ T897] usb 4-1: USB disconnect, device number 5 [ 44.587974][ T435] usb 2-1: reset full-speed USB device number 6 using dummy_hcd [ 44.649413][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 44.649443][ T36] audit: type=1400 audit(1756344173.670:300): avc: denied { name_bind } for pid=1116 comm="syz.3.258" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.740470][ T1120] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 44.785095][ T36] audit: type=1326 audit(1756344173.800:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1116 comm="syz.3.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af5b8ebe9 code=0x80000000 [ 45.525853][ T36] audit: type=1400 audit(1756344174.540:302): avc: denied { ioctl } for pid=1124 comm="syz.3.261" path="socket:[9211]" dev="sockfs" ino=9211 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.577208][ T36] audit: type=1400 audit(1756344174.590:303): avc: denied { append } for pid=1128 comm="syz.0.263" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.577871][ T1131] rust_binder: Fixups oob 164 166 363 196 [ 45.607125][ T1131] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 45.613411][ T1131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.622486][ T1131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 45.639440][ T1139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.266'. [ 45.665258][ T1139] netlink: 43 bytes leftover after parsing attributes in process `syz.2.266'. [ 45.675415][ T1139] netlink: 'syz.2.266': attribute type 6 has an invalid length. [ 45.686316][ T1139] netlink: 'syz.2.266': attribute type 5 has an invalid length. [ 45.694456][ T1139] netlink: 43 bytes leftover after parsing attributes in process `syz.2.266'. [ 45.758014][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 45.808029][ T398] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 45.908024][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 45.938233][ T398] usb 1-1: device descriptor read/64, error -71 [ 45.945406][ T36] audit: type=1400 audit(1756344174.960:304): avc: denied { append } for pid=1153 comm="syz.1.271" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.949190][ T1156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.970941][ T36] audit: type=1400 audit(1756344174.960:305): avc: denied { append } for pid=1153 comm="syz.1.271" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.981718][ T1156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.037993][ T9] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 46.188022][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 46.188029][ T398] usb 1-1: device descriptor read/64, error -71 [ 46.200011][ T9] usb usb4-port1: attempt power cycle [ 46.288184][ T10] usb 2-1: USB disconnect, device number 6 [ 46.417993][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.448718][ T398] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 46.547959][ T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 46.577974][ T10] usb 2-1: device descriptor read/64, error -71 [ 46.586190][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 46.598063][ T398] usb 1-1: device descriptor read/64, error -71 [ 46.728192][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 46.748446][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 46.753845][ T9] usb usb4-port1: unable to enumerate USB device [ 46.817997][ T10] usb 2-1: device descriptor read/64, error -71 [ 46.837998][ T398] usb 1-1: device descriptor read/64, error -71 [ 46.948107][ T398] usb usb1-port1: attempt power cycle [ 47.046256][ T1177] fuseblk: Bad value for 'fd' [ 47.058049][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.198423][ T10] usb 2-1: device descriptor read/64, error -71 [ 47.205369][ T36] audit: type=1400 audit(1756344176.220:306): avc: denied { ioctl } for pid=1197 comm="syz.2.287" path="socket:[8009]" dev="sockfs" ino=8009 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.297993][ T398] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 47.319235][ T398] usb 1-1: device descriptor read/8, error -71 [ 47.437976][ T10] usb 2-1: device descriptor read/64, error -71 [ 47.449191][ T398] usb 1-1: device descriptor read/8, error -71 [ 47.548108][ T10] usb usb2-port1: attempt power cycle [ 47.688260][ T398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.709082][ T398] usb 1-1: device descriptor read/8, error -71 [ 47.839028][ T398] usb 1-1: device descriptor read/8, error -71 [ 47.888077][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.909025][ T10] usb 2-1: device descriptor read/8, error -71 [ 47.948070][ T398] usb usb1-port1: unable to enumerate USB device [ 48.039050][ T10] usb 2-1: device descriptor read/8, error -71 [ 48.278007][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.299347][ T10] usb 2-1: device descriptor read/8, error -71 [ 48.429417][ T10] usb 2-1: device descriptor read/8, error -71 [ 48.473375][ T1211] overlayfs: failed to clone upperpath [ 48.490080][ T1213] fuse: Bad value for 'fd' [ 48.502947][ T1215] netlink: 96 bytes leftover after parsing attributes in process `syz.2.293'. [ 48.538418][ T10] usb usb2-port1: unable to enumerate USB device [ 48.549545][ T36] audit: type=1400 audit(1756344177.560:307): avc: denied { execute } for pid=1218 comm="syz.3.295" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.592515][ T36] audit: type=1400 audit(1756344177.610:308): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.605549][ T1236] binder: Unknown parameter 'euid>00000000000000000000' [ 48.672338][ T1243] netlink: 96 bytes leftover after parsing attributes in process `syz.0.303'. [ 48.698734][ T36] audit: type=1400 audit(1756344177.720:309): avc: denied { bind } for pid=1248 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.774505][ T1239] rust_binder: Failed copying into alloc: EFAULT [ 48.774540][ T1239] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 48.785032][ T1239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.797150][ T1239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:187 [ 48.807755][ T1257] syz.3.301 (1257): attempted to duplicate a private mapping with mremap. This is not supported. [ 48.945222][ T1270] SELinux: failed to load policy [ 48.951482][ T1270] 9pnet_fd: Insufficient options for proto=fd [ 48.967027][ T1276] SELinux: failed to load policy [ 49.080650][ T12] bridge_slave_1: left allmulticast mode [ 49.086334][ T12] bridge_slave_1: left promiscuous mode [ 49.092673][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.108576][ T12] bridge_slave_0: left allmulticast mode [ 49.114881][ T12] bridge_slave_0: left promiscuous mode [ 49.128105][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.229833][ T12] tipc: Left network mode [ 49.238019][ T12] veth1_macvtap: left promiscuous mode [ 49.244242][ T12] veth0_vlan: left promiscuous mode [ 49.267959][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 49.278192][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 49.380128][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.387841][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.396297][ T1281] bridge_slave_0: entered allmulticast mode [ 49.403635][ T1281] bridge_slave_0: entered promiscuous mode [ 49.410527][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.417675][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.418004][ T9] usb 2-1: device descriptor read/64, error -71 [ 49.425133][ T1281] bridge_slave_1: entered allmulticast mode [ 49.438159][ T1281] bridge_slave_1: entered promiscuous mode [ 49.580365][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.587805][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.596233][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.603490][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.654417][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.662682][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.680759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.688442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.690176][ T9] usb 2-1: device descriptor read/64, error -71 [ 49.709662][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.718278][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.780935][ T1281] veth0_vlan: entered promiscuous mode [ 49.799410][ T1281] veth1_macvtap: entered promiscuous mode [ 49.822729][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 49.822746][ T36] audit: type=1400 audit(1756344178.840:318): avc: denied { unlink } for pid=291 comm="syz-executor" name="file2" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.868427][ T36] audit: type=1400 audit(1756344178.880:319): avc: denied { mounton } for pid=1281 comm="syz-executor" path="/root/syzkaller.vkDXWU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.898397][ T1299] netlink: 188 bytes leftover after parsing attributes in process `syz.2.318'. [ 49.931597][ T1304] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 49.931625][ T1304] rust_binder: Error while translating object. [ 49.941807][ T1304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.949063][ T1304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 49.977992][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 50.021973][ T1314] 9pnet_fd: Insufficient options for proto=fd [ 50.034895][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.044862][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 50.056457][ T1316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.065049][ T10] usb 1-1: can't read configurations, error -71 [ 50.076177][ T36] audit: type=1400 audit(1756344179.090:320): avc: denied { getopt } for pid=1315 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.097619][ T36] audit: type=1400 audit(1756344179.090:321): avc: denied { map } for pid=1315 comm="syz.2.322" path="socket:[10376]" dev="sockfs" ino=10376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.122174][ T36] audit: type=1400 audit(1756344179.090:322): avc: denied { accept } for pid=1315 comm="syz.2.322" path="socket:[10376]" dev="sockfs" ino=10376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.147033][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.388035][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.488082][ T398] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.498101][ T9] usb usb2-port1: attempt power cycle [ 50.586624][ T1324] exFAT-fs (rnullb0): invalid boot record signature [ 50.593661][ T1324] exFAT-fs (rnullb0): failed to read boot sector [ 50.600672][ T1324] exFAT-fs (rnullb0): failed to recognize exfat type [ 50.649581][ T398] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.660971][ T398] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.670959][ T398] usb 5-1: config 0 interface 0 has no altsetting 0 [ 50.677790][ T398] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.687199][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.696888][ T398] usb 5-1: config 0 descriptor?? [ 50.838050][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.859917][ T9] usb 2-1: device descriptor read/8, error -71 [ 50.920248][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 50.989531][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.092115][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.103338][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 51.113636][ T10] usb 1-1: can't read configurations, error -71 [ 51.121600][ T10] usb usb1-port1: attempt power cycle [ 51.228665][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 51.259368][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.305058][ T398] usb 5-1: string descriptor 0 read error: -22 [ 51.389602][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.498119][ T9] usb usb2-port1: unable to enumerate USB device [ 51.510082][ T398] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input7 [ 51.524072][ T398] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input8 [ 51.544226][ T398] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input9 [ 51.560161][ T398] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input10 [ 51.576347][ T398] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 51.711056][ T1322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.720450][ T1322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.824912][ T36] audit: type=1400 audit(1756344180.840:323): avc: denied { ioctl } for pid=1362 comm="syz.0.336" path="socket:[10543]" dev="sockfs" ino=10543 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.902240][ T1371] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.339'. [ 51.912443][ T1371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1800 sclass=netlink_route_socket pid=1371 comm=syz.0.339 [ 51.932902][ T36] audit: type=1400 audit(1756344180.950:324): avc: denied { read } for pid=1372 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.944455][ T1371] binder: Unknown parameter '00000000000000000000003' [ 51.955525][ T36] audit: type=1400 audit(1756344180.950:325): avc: denied { getattr } for pid=1370 comm="syz.0.339" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.991845][ T36] audit: type=1400 audit(1756344181.010:326): avc: denied { setattr } for pid=1372 comm="syz.1.340" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 52.029442][ T10] usb 5-1: USB disconnect, device number 2 [ 52.061462][ T1390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2576 sclass=netlink_tcpdiag_socket pid=1390 comm=syz.0.344 [ 52.231784][ T10] rust_binder: 1389: removing orphan mapping 0:8 [ 52.369604][ T1398] 8021q: VLANs not supported on ip_vti0 [ 52.487982][ T440] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 52.607463][ T36] audit: type=1400 audit(1756344181.620:327): avc: denied { create } for pid=1412 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 52.608701][ T1413] syz.4.353 (1413): /proc/1412/oom_adj is deprecated, please use /proc/1412/oom_score_adj instead. [ 52.642219][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.654156][ T440] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.664187][ T440] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.677329][ T440] usb 1-1: New USB device found, idVendor=054c, idProduct=0b9c, bcdDevice= 0.00 [ 52.687140][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.696385][ T440] usb 1-1: config 0 descriptor?? [ 52.717714][ T1419] overlayfs: missing 'lowerdir' [ 52.957958][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.990172][ T1441] binder: Bad value for 'stats' [ 53.012267][ T440] usb 1-1: string descriptor 0 read error: -71 [ 53.019759][ T440] usbhid 1-1:0.0: can't add hid device: -22 [ 53.023030][ T1444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.366'. [ 53.026027][ T440] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 53.035046][ T1444] netlink: 43 bytes leftover after parsing attributes in process `syz.1.366'. [ 53.048814][ T440] usb 1-1: USB disconnect, device number 16 [ 53.062425][ T1444] netlink: 'syz.1.366': attribute type 6 has an invalid length. [ 53.070282][ T1444] netlink: 'syz.1.366': attribute type 5 has an invalid length. [ 53.079335][ T1444] netlink: 43 bytes leftover after parsing attributes in process `syz.1.366'. [ 53.088980][ T1444] rust_binder: Failed copying remainder into alloc: EFAULT [ 53.088994][ T1444] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 53.096388][ T1444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 53.104729][ T1444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:211 [ 53.127979][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 53.144620][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.155611][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.165436][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 53.174654][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.186750][ T10] usb 5-1: config 0 descriptor?? [ 53.481309][ T1462] netlink: 96 bytes leftover after parsing attributes in process `syz.2.371'. [ 53.531050][ T1466] 9pnet_fd: Insufficient options for proto=fd [ 53.955462][ T1488] netlink: 96 bytes leftover after parsing attributes in process `syz.2.381'. [ 54.072593][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 54.080720][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 54.103904][ T10] usb 5-1: USB disconnect, device number 3 [ 54.222679][ T1515] netlink: 96 bytes leftover after parsing attributes in process `syz.4.390'. [ 54.567964][ T440] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.717961][ T440] usb 5-1: Using ep0 maxpacket: 32 [ 54.724642][ T440] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.737727][ T440] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 54.746999][ T440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.755439][ T440] usb 5-1: Product: syz [ 54.759801][ T440] usb 5-1: Manufacturer: syz [ 54.764689][ T440] usb 5-1: SerialNumber: syz [ 54.770363][ T440] usb 5-1: config 0 descriptor?? [ 54.776694][ T440] usb 5-1: bad CDC descriptors [ 54.782101][ T440] usb 5-1: unsupported MDLM descriptors [ 54.834655][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 54.834673][ T36] audit: type=1400 audit(1756344183.850:334): avc: denied { mount } for pid=1520 comm="syz.2.392" name="/" dev="ramfs" ino=11028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 54.906309][ T36] audit: type=1400 audit(1756344183.920:335): avc: denied { getopt } for pid=1525 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.907179][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.937342][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 54.946774][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.955898][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 54.965742][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.974745][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 54.984948][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 54.993308][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.002231][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.011817][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.021348][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.029586][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.043677][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.053055][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.062175][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.070861][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.080401][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.085488][ T398] usb 5-1: USB disconnect, device number 4 [ 55.089170][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.104874][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.136449][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.145500][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.154215][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.162788][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.171186][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.180543][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.188052][ T1555] netlink: 96 bytes leftover after parsing attributes in process `syz.1.400'. [ 55.188767][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.206174][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.211645][ T1557] incfs: Error accessing: ./file0. [ 55.215415][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.220899][ T1557] incfs: mount failed -20 [ 55.231284][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.243406][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.253685][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.261872][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.273217][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.281957][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.290601][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.298972][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.307631][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.310697][ T1560] rust_binder: 1559 RLIMIT_NICE not set [ 55.316052][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.330155][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.338245][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.346950][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.355184][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.363580][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.372816][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.383190][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.392138][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.400869][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.409310][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.418647][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.426801][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.435382][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.443699][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.452671][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.460661][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.469144][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.477244][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.486307][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.494348][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.502769][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.510740][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.519576][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.527469][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.536307][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.544240][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.553045][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.561085][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.569610][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.577611][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.586395][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.594485][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.603011][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.611334][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.620614][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.628893][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.637421][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.645618][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 55.689152][ T1562] SELinux: failed to load policy [ 55.694436][ T36] audit: type=1400 audit(1756344184.710:336): avc: denied { load_policy } for pid=1561 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.724783][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.734295][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 55.748119][ T1531] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 55.756158][ T1531] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 56.011495][ T1579] netlink: 96 bytes leftover after parsing attributes in process `syz.4.409'. [ 56.099391][ T1587] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 56.106844][ T1587] rust_binder: Write failure EINVAL in pid:239 [ 56.177325][ T36] audit: type=1400 audit(1756344185.190:337): avc: denied { read append } for pid=1591 comm="syz.1.414" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.232494][ T1593] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.240692][ T1593] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 56.249562][ T1593] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.257809][ T1593] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 56.288011][ T440] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.437986][ T440] usb 5-1: Using ep0 maxpacket: 32 [ 56.444355][ T440] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 56.455727][ T440] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.465724][ T440] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.478671][ T440] usb 5-1: config 1 interface 0 has no altsetting 0 [ 56.487725][ T440] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.497106][ T440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.505570][ T440] usb 5-1: Product: syz [ 56.509925][ T440] usb 5-1: Manufacturer: ᠊ [ 56.510432][ T1601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.514528][ T440] usb 5-1: SerialNumber: syz [ 56.519033][ T1585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 56.522341][ T1601] IPv6: NLM_F_CREATE should be set when creating new route [ 56.526920][ T1585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 56.534204][ T1601] IPv6: NLM_F_CREATE should be set when creating new route [ 56.561742][ T1601] netlink: 96 bytes leftover after parsing attributes in process `syz.1.417'. [ 56.590349][ T1605] can: request_module (can-proto-0) failed. [ 56.717355][ T1612] can: request_module (can-proto-5) failed. [ 56.726089][ T36] audit: type=1400 audit(1756344185.740:338): avc: denied { getattr } for pid=1611 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.755302][ T440] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 56.767799][ T440] usb 5-1: USB disconnect, device number 5 [ 56.887988][ T398] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.967826][ T1631] netlink: 96 bytes leftover after parsing attributes in process `syz.2.428'. [ 56.977028][ T897] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 57.037985][ T398] usb 2-1: Using ep0 maxpacket: 16 [ 57.045824][ T398] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 57.055216][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.064289][ T398] usb 2-1: Product: syz [ 57.069180][ T398] usb 2-1: Manufacturer: syz [ 57.074195][ T398] usb 2-1: SerialNumber: syz [ 57.082879][ T398] r8152-cfgselector 2-1: Unknown version 0x0000 [ 57.083295][ T1637] futex_wake_op: syz.2.431 tries to shift op by -1; fix this program [ 57.090032][ T398] r8152-cfgselector 2-1: config 0 descriptor?? [ 57.113365][ T36] audit: type=1400 audit(1756344186.130:339): avc: denied { remount } for pid=1638 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.118122][ T897] usb 1-1: device descriptor read/64, error -71 [ 57.310902][ T398] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 57.324416][ T1652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.324440][ T1652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 57.343603][ T36] audit: type=1400 audit(1756344186.360:340): avc: denied { create } for pid=1653 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 57.360441][ T1654] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 57.378147][ T897] usb 1-1: device descriptor read/64, error -71 [ 57.381305][ T1654] rust_binder: Write failure EINVAL in pid:267 [ 57.440493][ T36] audit: type=1404 audit(1756344186.460:341): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 57.465805][ T36] audit: type=1400 audit(1756344186.480:342): avc: denied { watch watch_reads } for pid=1663 comm="syz.4.439" path="/26/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 57.490485][ T36] audit: type=1400 audit(1756344186.480:343): avc: denied { bind } for pid=1663 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 57.663464][ T1680] netlink: 96 bytes leftover after parsing attributes in process `syz.1.445'. [ 57.795735][ T1706] netlink: 92 bytes leftover after parsing attributes in process `syz.1.455'. [ 59.841161][ T36] kauditd_printk_skb: 315 callbacks suppressed [ 59.841178][ T36] audit: type=1400 audit(1756344188.860:659): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.873179][ T36] audit: type=1400 audit(1756344188.860:660): avc: denied { create } for pid=1843 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 59.896959][ T36] audit: type=1400 audit(1756344188.860:661): avc: denied { read } for pid=1843 comm="syz.1.502" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 59.918176][ T36] audit: type=1400 audit(1756344188.860:662): avc: denied { create } for pid=1843 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 59.938517][ T36] audit: type=1400 audit(1756344188.860:663): avc: denied { create } for pid=1843 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 59.960347][ T36] audit: type=1400 audit(1756344188.860:664): avc: denied { read write } for pid=1843 comm="syz.1.502" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 59.984865][ T36] audit: type=1400 audit(1756344188.860:665): avc: denied { create } for pid=1843 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 60.006371][ T36] audit: type=1400 audit(1756344188.910:666): avc: denied { create } for pid=1845 comm="syz.2.503" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 60.028759][ T36] audit: type=1400 audit(1756344188.910:667): avc: denied { create } for pid=1845 comm="syz.2.503" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 60.051227][ T36] audit: type=1400 audit(1756344188.940:668): avc: denied { create } for pid=1850 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 61.464813][ T1904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 62.700068][ T2015] netlink: 'syz.4.563': attribute type 11 has an invalid length. [ 63.076490][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.807818][ T2081] netlink: 'syz.0.588': attribute type 6 has an invalid length. [ 64.937330][ T36] kauditd_printk_skb: 375 callbacks suppressed [ 64.937342][ T36] audit: type=1400 audit(2000000002.790:1044): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 64.963722][ T36] audit: type=1400 audit(2000000002.820:1045): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 64.984688][ T36] audit: type=1400 audit(2000000002.820:1046): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.004627][ T36] audit: type=1400 audit(2000000002.820:1047): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.024606][ T36] audit: type=1400 audit(2000000002.820:1048): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.044469][ T36] audit: type=1400 audit(2000000002.820:1049): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.064223][ T36] audit: type=1400 audit(2000000002.820:1050): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.084971][ T36] audit: type=1400 audit(2000000002.820:1051): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.104904][ T36] audit: type=1400 audit(2000000002.820:1052): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.124918][ T36] audit: type=1400 audit(2000000002.820:1053): avc: denied { create } for pid=2082 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 65.144496][ T362] Bluetooth: hci0: command 0x1003 tx timeout [ 65.150539][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.535085][ T2126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=2126 comm=syz.2.606 [ 68.602438][ T2387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 68.912483][ T2411] tc_dump_action: action bad kind [ 70.096559][ T36] kauditd_printk_skb: 676 callbacks suppressed [ 70.096579][ T36] audit: type=1400 audit(2000000007.950:1730): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.138622][ T36] audit: type=1400 audit(2000000008.000:1731): avc: denied { create } for pid=2495 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 70.173619][ T36] audit: type=1400 audit(2000000008.020:1732): avc: denied { read } for pid=2495 comm="syz.1.736" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 70.227931][ T36] audit: type=1400 audit(2000000008.040:1733): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.261317][ T36] audit: type=1400 audit(2000000008.070:1734): avc: denied { read } for pid=2498 comm="syz.1.737" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 70.326765][ T36] audit: type=1400 audit(2000000008.070:1735): avc: denied { create } for pid=2498 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 70.375596][ T36] audit: type=1400 audit(2000000008.070:1736): avc: denied { read append } for pid=2498 comm="syz.1.737" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 70.404244][ T36] audit: type=1400 audit(2000000008.090:1737): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.481313][ T36] audit: type=1400 audit(2000000008.140:1738): avc: denied { read } for pid=2501 comm="syz.1.738" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 70.533877][ T36] audit: type=1400 audit(2000000008.140:1739): avc: denied { mounton } for pid=2501 comm="syz.1.738" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 71.329371][ T2586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.769'. [ 71.341441][ T2586] netlink: 'syz.4.769': attribute type 17 has an invalid length. [ 72.610367][ T1132] bridge_slave_1: left allmulticast mode [ 72.616054][ T1132] bridge_slave_1: left promiscuous mode [ 72.622317][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.636072][ T1132] bridge_slave_0: left allmulticast mode [ 72.657942][ T1132] bridge_slave_0: left promiscuous mode [ 72.663616][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.811984][ T1132] veth1_macvtap: left promiscuous mode [ 72.818099][ T1132] veth0_vlan: left promiscuous mode [ 75.860512][ T36] kauditd_printk_skb: 270 callbacks suppressed [ 75.860530][ T36] audit: type=1400 audit(2000000013.720:2010): avc: denied { execmem } for pid=2672 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 75.891572][ T36] audit: type=1400 audit(2000000013.730:2011): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 75.916648][ T36] audit: type=1400 audit(2000000013.750:2012): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 75.940765][ T36] audit: type=1400 audit(2000000013.770:2013): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 75.964707][ T36] audit: type=1400 audit(2000000013.800:2014): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 75.988867][ T36] audit: type=1400 audit(2000000013.800:2015): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 76.139066][ T36] audit: type=1400 audit(2000000014.000:2016): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 76.164774][ T36] audit: type=1400 audit(2000000014.020:2017): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 76.189284][ T36] audit: type=1400 audit(2000000014.020:2018): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 76.216098][ T36] audit: type=1400 audit(2000000014.020:2019): avc: denied { read write } for pid=2673 comm="syz.1.799" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 81.469652][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 81.469670][ T36] audit: type=1400 audit(2000000019.330:2049): avc: denied { execmem } for pid=2695 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 81.497980][ T36] audit: type=1400 audit(2000000019.360:2050): avc: denied { read write } for pid=2696 comm="syz.1.805" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 81.521913][ T36] audit: type=1400 audit(2000000019.390:2051): avc: denied { read } for pid=2696 comm="syz.1.805" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 81.545591][ T36] audit: type=1400 audit(2000000019.410:2052): avc: denied { create } for pid=2696 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 81.567141][ T36] audit: type=1400 audit(2000000019.430:2053): avc: denied { read write } for pid=2696 comm="syz.1.805" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 81.594212][ T36] audit: type=1400 audit(2000000019.460:2054): avc: denied { create } for pid=2696 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 81.615211][ T36] audit: type=1400 audit(2000000019.460:2055): avc: denied { read } for pid=2696 comm="syz.1.805" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 81.641511][ T36] audit: type=1400 audit(2000000019.460:2056): avc: denied { read write } for pid=2696 comm="syz.1.805" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 82.101907][ T36] audit: type=1400 audit(2000000019.960:2057): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 82.886952][ T36] audit: type=1400 audit(2000000020.740:2058): avc: denied { read } for pid=2701 comm="syz.1.807" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 86.230029][ T1132] bridge_slave_1: left allmulticast mode [ 86.235743][ T1132] bridge_slave_1: left promiscuous mode [ 86.241525][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.249325][ T1132] bridge_slave_0: left allmulticast mode [ 86.255074][ T1132] bridge_slave_0: left promiscuous mode [ 86.261079][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.390304][ T1132] veth1_macvtap: left promiscuous mode [ 86.395837][ T1132] veth0_vlan: left promiscuous mode [ 87.912560][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 87.912578][ T36] audit: type=1400 audit(2000000025.770:2081): avc: denied { execmem } for pid=2724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 87.938114][ T36] audit: type=1400 audit(2000000025.770:2082): avc: denied { execmem } for pid=2725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 87.957584][ T36] audit: type=1400 audit(2000000025.790:2083): avc: denied { execmem } for pid=2727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 87.977009][ T36] audit: type=1400 audit(2000000025.790:2084): avc: denied { read write } for pid=2728 comm="syz.1.816" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 88.000588][ T36] audit: type=1400 audit(2000000025.790:2085): avc: denied { read write } for pid=2728 comm="syz.1.816" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 88.024643][ T36] audit: type=1400 audit(2000000025.790:2086): avc: denied { read append } for pid=2728 comm="syz.1.816" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 88.048173][ T36] audit: type=1400 audit(2000000025.800:2087): avc: denied { create } for pid=2726 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 88.341991][ T36] audit: type=1400 audit(2000000026.200:2088): avc: denied { execmem } for pid=2732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 88.361757][ T36] audit: type=1400 audit(2000000026.210:2089): avc: denied { execmem } for pid=2733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 88.381679][ T36] audit: type=1400 audit(2000000026.220:2090): avc: denied { execmem } for pid=2734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 88.651628][ T1132] bridge_slave_1: left allmulticast mode [ 88.657324][ T1132] bridge_slave_1: left promiscuous mode [ 88.671103][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.678833][ T1132] bridge_slave_0: left allmulticast mode [ 88.684486][ T1132] bridge_slave_0: left promiscuous mode [ 88.690356][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.779529][ T1132] tipc: Left network mode [ 88.784751][ T1132] veth1_macvtap: left promiscuous mode [ 88.790316][ T1132] veth0_vlan: left promiscuous mode [ 89.049230][ T1132] bridge_slave_1: left allmulticast mode [ 89.054980][ T1132] bridge_slave_1: left promiscuous mode [ 89.060672][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.068181][ T1132] bridge_slave_0: left allmulticast mode [ 89.073828][ T1132] bridge_slave_0: left promiscuous mode [ 89.079706][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.170200][ T1132] veth1_macvtap: left promiscuous mode [ 89.175891][ T1132] veth0_vlan: left promiscuous mode