last executing test programs: 4m8.262198138s ago: executing program 0 (id=993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000544000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x12, r3, 0xeca66000) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000002e00)="2210942270029a77c0fb001f95548ca7", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m8.10240011s ago: executing program 0 (id=995): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x50}}, 0x0) (async, rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000000)=0x306e, 0x4) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8000) (async, rerun: 32) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) (async, rerun: 32) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r5, 0x4d75d000) 4m7.898199473s ago: executing program 0 (id=1002): lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0xe1, 0xc1, ""/193}, &(0x7f0000000380)=0xe1, 0x0) keyctl$session_to_parent(0x12) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0xe42}}, 0x30) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 4m7.848195294s ago: executing program 1 (id=1003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x4, 0x3, 0x8, 0x1}]}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x98, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x0, 0xc}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x0, 0x8, 0x1, 0x7}, {0x1, 0x0, 0x4, 0x8}]}) getrusage(0xfffffffffffffffe, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 4m7.793128985s ago: executing program 0 (id=1004): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x604, 0x0) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$EVIOCGMASK(r3, 0x604, 0x0) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x100, 0x1}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 4m6.944914648s ago: executing program 1 (id=1015): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xfffffffb) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x2000) r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000240)) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x9, 0x244800) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000280)={0xc}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$getflags(r4, 0x401) userfaultfd(0x800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000240)=0x6, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f0000000180)=ANY=[@ANYBLOB="00a0"]) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f00000002c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4882, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r10, 0x1, 0x34, &(0x7f0000006f80)=0xff33, 0x4) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000000)={0x0, 0xc19, 0x0, 0x0, 0x8, "7f12ddc1517600"}) r12 = syz_open_pts(r11, 0x0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x0) ioctl$TCSETAF(r11, 0x5408, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0xf, "cb4672ac02132ca6"}) ioctl$TIOCGPTPEER(r11, 0x5441, 0x0) 4m6.340399146s ago: executing program 1 (id=1017): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r2, &(0x7f0000001a80)=""/4063, 0xfdf, 0x800004c4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) (async) recvfrom(r2, &(0x7f0000001a80)=""/4063, 0xfdf, 0x800004c4, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) io_setup(0x4, &(0x7f0000000100)) (async) 4m4.78812658s ago: executing program 0 (id=1018): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x0, 0xff, 0xfd, 0x1, 0x80}}]}}]}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x0, 0x5, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0xa, "cc371e87f6078eef"}]}}}}}) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x4b, &(0x7f0000000200)=ANY=[], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) read$FUSE(r4, &(0x7f0000002f40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r8, {0x7, 0x2b, 0x7, 0x20120008, 0xff, 0xff, 0x7, 0xb53, 0x0, 0x0, 0x20, 0x2}}, 0x50) sendmmsg(r5, &(0x7f0000001400)=[{{&(0x7f00000000c0)=@can={0x1d, r7}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)="adcd7aace6e85786cba39909fb50fda9b5bc059fd379e8c90df14b83117639dffde52f6069ee59fc0d", 0x29}], 0x1}}], 0x1, 0x4004880) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) sendto$inet(r4, &(0x7f0000000300)="066cfe1acec38e5de423260110db199122842c1e86dc9bbfd662244654f67d99abb73babf065afbbb7c61e01c2dc4725d34ad907ee98ed4532de2b1b27c2e18aa7f71271a02aedccd179", 0x4a, 0x4000, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 4m4.027838191s ago: executing program 1 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x11, 0x9, 0x1001f0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec8502"]) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000000)=0x2) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)={0xc6800, 0x1b3, 0x21}, 0x18) unlinkat(r5, &(0x7f0000000240)='./file0\x00', 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x160e) 3m52.726656129s ago: executing program 0 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x24040040) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (rerun: 32) 3m49.595715315s ago: executing program 1 (id=1023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x1c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) (async) r3 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x955c1497991eddbf, &(0x7f00000000c0)=0x3, 0x4) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800001, 0x30, 0xffffffffffffffff, 0x1000) (async, rerun: 32) write$uinput_user_dev(r4, &(0x7f0000005140)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xc], [0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x65e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533f30c6, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x80000000, 0x8, 0xfffffffe, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(r7, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) 3m48.336154814s ago: executing program 32 (id=1019): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, r2}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000100)="30829ed86d", 0x5, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect(0x4, 0x547, &(0x7f0000002140)={{0x12, 0x1, 0x201, 0xbf, 0xa2, 0xf1, 0x8, 0x2040, 0x826d, 0x9857, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x535, 0x2, 0x62, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0x90, 0x8, 0xc, 0x9a, 0x6b, 0x93, 0x9, [], [{{0x9, 0x5, 0xd, 0x3, 0x10, 0xcc, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x0, 0x2, 0x3, [@generic={0x35, 0x2, "c1508d964a685ea5ee0ba4cf71421f87b0465785b045236d7ad7e5be04dcd02bdba34f23621bdb1b10fe5926f8e3b1e7321e2c"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x7, 0xaf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x630}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x5, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x30, 0x10}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x7, 0xfd}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xf0, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0xf3, 0x7, 0x1e}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x9, 0x61, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xfc, 0xe, 0x8}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x7, 0x10, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x81, 0x9, [@generic={0xe7, 0x2, "1fd9a0fd4cbc528c25e7943af2591a801f79903f06ccdf4e595428bb307ef0a31e10dd16d29a4c0174a53fff31b404480b66be8389cfb910a2660bcb5ed5a532cd4b16034de6d26ef25116a8e822e1da18100d6b175ba7ed13628ae55332efabb15540cfb2c960c7ac49626e674a85b3ea5bb9e0c4a69fcf6e69fc79c770f89d779f7930d77b63317109abb377d5b16f07d929dd4123a66d621c5a786794e7e4ec6cf9d7dc6b2664dabcb8c02b3da5ffc3392f4240d5131eebfaace669828db1ef8db6674a8893ed857c6177b899c5699dc8001f7c828934ef1d290bd4ac7f774d3cce77d1"}, @generic={0x3d, 0x21, "bebc0d3d423813f118a8667beae5b0c72bab3311a5b54d56c921d6834f44ff99bd0d1f277d4255d94b50cf50c27d0ad01694b179fa51f6163bd409"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x587, 0x5, 0x2, 0x6}}]}}, {{0x9, 0x4, 0x7a, 0x1, 0xd, 0x79, 0xff, 0x8e, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x20, 0x87, 0xff, [@generic={0xa1, 0x11, "dc3e9bf537b7ee32afd9dd51147c3a54f7d088b8fb43709081e2f2119b8dc415dbd4447f72d82c9bad9d939b569ac3954803f94941f320320ebddeb18abeb66258fb1830dc4c76b075e41e1ac52f86773dce6160c69c26de49a1eb4598b1fd5cdf2804a1746c9d880439ba2595cd9cc6b27bf395ad94b793c341d1a6edea84ef801a4a4fd59f7e2df5db7f2d7eabd526db238c4a07297d691c8c6b4fe6f840"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x41, 0xc4, 0xa}}, {{0x9, 0x5, 0x3, 0xffd59743576c86a1, 0x10, 0x6, 0x8, 0x40}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x3, 0xf1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1, 0x27, [@generic={0x14, 0xe, "ba209895ef779f8e5066aca2846c0989fba4"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x1, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x87, 0x4}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x6, 0x1, 0xd, [@generic={0x4f, 0xe, "4e1a0e13c566978ac3d190fc7251ac04c5ba1a6c572fe12fc6de332d49fe5e669065b258001c4731383bfb2dce774a9bde8ce77132d8c053805c1c70b10e7700bcfd84e43c3dea8b2290bff682"}, @generic={0x89, 0x23, "cc4f6be8f6b3f4718b4bd264f4c0cf08b212b1f927a2199801ef3a519bffa9d16ef4799770c825ab63a0d37bcd8a31307f570375eb2a3048fe8ba9e350b2a63d1b7f61ff35ca386c9dc862a699722cc09772ad122acc965fd91fa7e6f4fd8a6bedb6b5e09e9571be0c5872b838367f15d958508026d01464f92b00278bf3c1606c22b2f9dfdef4"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x6, 0x9, 0x2, [@generic={0xd5, 0x22, "e85d304f8ce201210f40eb8a1df0635a05aed255960c847547c11017bda181a443e70f47d65c60db9b040e50d64965900dcfcee46c6c2d2a79a960437e3c3010f3e35987928c7e7f50433f128543e8a854d805cb00d510e80e5d5c5431d06e8dae570038cdd5207feec36ffdfed060b46c325f0d69d4b9faaefac76d1da4a617517bb049da1b5b1c8bbb16eff72ebf5000c7e803884b53ff37fddfd26696e4281952e994b7f8c9318b175e2bae87a46ccd7bf6f2435de5a4687d329b9c79334b1778ef953333fa411914008e6303a14558111b"}, @uac_iso={0x7, 0x25, 0x1, 0x7, 0xc, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x0, 0xff, 0x4}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x1, 0x6, 0x7c}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x5, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x3, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xaf7c36fb89f55a10, 0x7f, 0x3}, @generic={0x3f, 0x24, "b15b333d6f8ab5e423e1c0e58089e97780eb982d9d83a904f4570d468116338ad6cbce4bc04a5d8aaccb6b0a3ebf632e377f6fd089429ae7244a2957ff"}]}}]}}]}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f00000026c0)={0xa, 0x6, 0x310, 0x0, 0x1, 0x81, 0x10, 0x6}, 0x195, &(0x7f0000002700)={0x5, 0xf, 0x195, 0x3, [@generic={0xf1, 0x10, 0xb, "6b0d03d43af94978e817cf09a8652fcb15de062ad3aef932c905333059d6b2767061424e43269b840b659688c9a1ac9d6054e8c00368d0f16f636e5842f8f5080e3aa3e98a8b2ba797b188bd3478e700e1a389228d4f82dad90fb762848d7bd83704c06ce2b7c1f56f9435a89fe982c5869d551f477ae8ca7716584a401589adecfa780ef2684fa03f94dab103fbfdfc7c411a82b184153f098a3ea8588a04a2cf83547e87bad73557ca8daaec7ebdee05080def34d831ed1c4afb0a2478e5c85627202eb691ed878037b88dcae63a23822636d18455861ab4be7d250fa3162b9e915db928053369f8260a7d3bc9"}, @ssp_cap={0xc, 0x10, 0xa, 0xf8, 0x0, 0xff, 0xf00, 0x2}, @generic={0x93, 0x10, 0x6, "b737427e4c6dfa3c37e7113389d1e2b08f075d2443df1078924a6db2d0055ba1b43e32f67d7b7032dbe850b440edcb3b06aee7119ce1d1bcdfc96e0b21a11dfc93b020c945f7abffc1ceb7e4e9eb4a254b50155f8ff1e9ef4902ee0780cc6e3e271383664b6713d63efa5257a73246138e94df748711c883e7193ee724386fc255260454eb90c2daed1b9d9b1bfd0aff"}]}, 0x9, [{0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x62, &(0x7f0000002900)=@string={0x62, 0x3, "def8851552149d0151934594af7baa5c653ade7adf541ee1b0a7ea7935b1b958244832093285d7101e1b4730a9f0cc9695aab3822f2088185a1ec2c3ad2ad92bb178bf59c9576929fed8a9b63b1a923f2a6e89b7bb9bac1ec05e8dbc0e8c80bf"}}, {0x31, &(0x7f0000002980)=@string={0x31, 0x3, "cd2364ae9d3d5cc2836cae1cf846ecdf27c39e1b8853d2d1109c836c732ae58e350da41ee47691a2db6340f24681a1"}}, {0x27, &(0x7f00000029c0)=@string={0x27, 0x3, "51b5697c53d068834996306bd1c3c618c7b47fb61293733e51faf4af0a21810b943bd29a46"}}, {0x48, &(0x7f0000002a00)=@string={0x48, 0x3, "ebd1e8b16a484ff452bf3a715175d90f67342f22bd0a35f29f02e69104df6567befa8e7583feaa9f1806c1f34e9e86bdfc3e2e5e08155873799be38a32d1c49df3814d124f3a"}}, {0x7a, &(0x7f0000002a80)=@string={0x7a, 0x3, "d37b4528399a9f0000977a6086aee34fba3f36163ed978dbd160fc32586e8f74bb4496cca0bd0ed4545a649da20208de489723409631401e26912649529bf49b462327bc9d383f92ae904a2c8f3ba3c39ac9f7b7386ff2de1dd35592e3e34228403e3c1868f6fec66bb5c268c642902c7c93b89a330f67b1"}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x457}}, {0x32, &(0x7f0000002b40)=@string={0x32, 0x3, "3c8fb7e3adf426eaa5e911b3117c8f2fc2ddd2240169ea0d136ea77ea7b5d20f1fea51dacff2e685e58c0c3f51a3934d"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x430}}]}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x10, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x5, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0x10, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0xeeee0000, 0x4, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x401}, {}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x8002]}) fchdir(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x3}) 3m43.661026324s ago: executing program 33 (id=1021): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000005580)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35) read$FUSE(r3, &(0x7f0000002a40)={0x2020}, 0x2020) write$cgroup_int(r3, &(0x7f0000000000)=0xe6, 0x12) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m38.244853405s ago: executing program 1 (id=1026): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r5}}], [{@fowner_gt}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x1}, [{0x2, 0x5, r3}, {0x2, 0x0, 0xee01}, {0x2, 0xa, r5}, {0x2, 0x5, r6}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x3, r7}, {0x2, 0x0, 0xee01}, {0x2, 0x1, r8}], {0x4, 0x4}, [{0x8, 0x0, r9}, {0x8, 0x2, r10}], {}, {0x20, 0x8}}, 0x74, 0x3) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r13, 0xaea2, 0xfffffffffffff800) ioctl$KVM_SET_TSC_KHZ(r13, 0xaea2, 0x3) 3m36.214987515s ago: executing program 34 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x24040040) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (rerun: 32) 3m21.332042116s ago: executing program 35 (id=1026): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r5}}], [{@fowner_gt}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x1}, [{0x2, 0x5, r3}, {0x2, 0x0, 0xee01}, {0x2, 0xa, r5}, {0x2, 0x5, r6}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x3, r7}, {0x2, 0x0, 0xee01}, {0x2, 0x1, r8}], {0x4, 0x4}, [{0x8, 0x0, r9}, {0x8, 0x2, r10}], {}, {0x20, 0x8}}, 0x74, 0x3) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r13, 0xaea2, 0xfffffffffffff800) ioctl$KVM_SET_TSC_KHZ(r13, 0xaea2, 0x3) 2m34.043481759s ago: executing program 7 (id=1072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r2 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000000087"]) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000008c80), 0xffffffffffffffff) r10 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r10) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, 0x0, 0x0) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r11, 0x0, 0x0, 0xc0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000008d80)={0x0, 0x0, &(0x7f0000008d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdd2501"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x24000080) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0xb0, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r2}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x0, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/30, 0x1e, 0x0, 0x1c}, @fda={0x66646185, 0x8, 0x0, 0x9}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/9, 0x9, 0x0, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/40, 0x28, 0x0, 0x11}, @fda={0x66646185, 0x0, 0x2, 0xa}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}, 0x400}, @register_looper], 0x12, 0x0, &(0x7f0000000480)="89e0b2e3b5d29044f4fff2fcaf4d0312b12e"}) 2m34.037417469s ago: executing program 7 (id=1078): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r1, &(0x7f0000002c40)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, 0x0}, 0x24000000) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r2, 0x147a5000) (async, rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x4, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x5, &(0x7f0000000040)=[{0x198, 0x3, 0x2}, {0x7, 0x6, 0x4}, {0x3, 0x4, 0x2}, {0x2, 0xca, 0xc6}, {0x100000000, 0x8, 0x7}, {0x6, 0x3ff, 0x9}, {0x6, 0x80, 0x2}], 0x7, 0x1, 0x50, 0x40, 0x10}) eventfd2(0x0, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) 2m33.99342301s ago: executing program 7 (id=1082): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = accept(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) read(r1, &(0x7f0000000400)=""/83, 0x53) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x9, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000880f7e0a7d478e2716fcb2bd620000000100000000001ed0a5e5ec23be6c000000000000ff00000000000000000000000000000000dfadd8b8f889848b6e000000"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) (async) setreuid(0x0, r8) mmap(&(0x7f00007d9000/0x3000)=nil, 0x3000, 0x0, 0x3032, r6, 0x1b50c000) (async) mmap(&(0x7f00007d9000/0x3000)=nil, 0x3000, 0x0, 0x3032, r6, 0x1b50c000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r10 = epoll_create1(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xa0000004}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="f500000096158b8c926d4f9e1b88285d5b221b07e6052f74948753c210f61398f760e51851008712e54ad50fae546887062f1f9dcf56997d66aef6ceb95f21d3184c63e3a8d79dc7ab5df83dd9c8fca5ddcaea6f7c840f6de452b55c21f802af96db8540ad90b76f6ee8200fabb1c642e6cfa39d6100c2aed1e64467529f01bc54174ded355aa8bdfa4d740f12bfa5140a101d34736f974c9b6d8bf202e758ec1c1f8fd40680a8bb797b286711d7036262cab926a374d50b5fe7e8c1483319a6f07a2230e415a4a5a605e232324456468e8301b4feef09269e217c40232db0d99a666cb2e40a00"/249]) 2m33.805799523s ago: executing program 7 (id=1087): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001740)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f00002ea000/0x1000)=nil, 0x1000, 0x3000001, 0x4002011, r1, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000300)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000280)}], 0x4, &(0x7f0000000400)=[{&(0x7f00000039c0)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0) r4 = fcntl$getown(r3, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net\x00') r6 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c\xdb', 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000580)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x21) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r12, 0x5435, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0}) 2m33.664529875s ago: executing program 7 (id=1093): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x0, 0x4, 0x40000, 0x0, 0xf}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2m33.475043497s ago: executing program 7 (id=1102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 2m33.448893858s ago: executing program 36 (id=1102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 2m2.931393602s ago: executing program 4 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001580)={"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"}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x93f}, 0x16, 0x0) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udp6\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 2m2.821973903s ago: executing program 4 (id=1524): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x141341) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x442400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x11, &(0x7f0000000180)=0xe, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) r7 = userfaultfd(0x80801) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f000074e000/0x1000)=nil, 0x1000}}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x741100, 0x80) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$getown(r4, 0x9) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x15, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x5, 0x8000000000000, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6], 0x1, 0x3c4210}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 2m2.755011364s ago: executing program 4 (id=1528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (rerun: 32) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000007c0)="fe", 0x1}], 0x2) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x92f, &(0x7f0000000200)={0x0, 0x4d98, 0x1000, 0x0, 0x319}, &(0x7f0000000180), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r3, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m2.693552775s ago: executing program 4 (id=1530): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000740)) read(r0, &(0x7f0000000040)=""/123, 0x7b) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000280)=""/249, 0xf9}], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x59, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x8, 0x70, 0x40, [{{0x9, 0x4, 0x0, 0xe, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, 'V'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x4, 0x101, 0xfa}, [@ncm={0x6, 0x24, 0x1a, 0xfe03, 0x10}, @obex={0x5, 0x24, 0x15, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x4, 0x3}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x0, 0xd, 0x7, 0xff}, 0x33, &(0x7f0000000240)={0x5, 0xf, 0x33, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0xfe, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "667a4bffa6db1d97402bd47a350ceb07"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xd5, 0x3, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x8, [{0xea, &(0x7f00000003c0)=@string={0xea, 0x3, "9f328fed6356273edaf1aafb639c61d69e58bce9ac306fac671c733d930be653a508043c2ec43426db62a20814d239033f690707b92f33524a68f0466ef44e1e14785ee4ba6f305d54227fcc4b37664c199c8781ed55530c09813cf45df6ebbc76740a459ea7dea034f9b4aa69cff00220819752b55bff40ad1eced3305cf0109fcd642585aa0d9e895e1c56ea11aac0be53c3e9de732b05551aafcc0cba5112381e23193cf9ec96b5e04f4c2cd8b9eba0802f83f0e3b72b5a77e7cfda3f2d6d7eccec86aa5b9863fc0a61c393e2ebdfc29201e3e4ae2d67feca99ec43fb606fd08a6b23a46c32ff"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1418}}, {0x2c, &(0x7f0000000680)=@string={0x2c, 0x3, "a8413ba1f92b9e16b25edae460b9f868d92a00b3e06fc150f006ee827397d704c2e568777e0797d9f7c5"}}]}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m59.67912674s ago: executing program 4 (id=1548): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x81, @none, 0x0, 0x2}, 0xe) socket$tipc(0x1e, 0x5, 0x0) r2 = epoll_create(0x3ff) mlockall(0x1) r3 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={r4, r5+10000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/4\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x542, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1, 0x6, 0xfffffffb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$P9_RVERSION(r6, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0xe, 0x8, '9P2000.u'}, 0x15) mlockall(0x3) write$binfmt_elf64(r7, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x0, 0x0, 0x27fff, 0x2, 0x3e, 0xfffbffee, 0x294, 0x40, 0xcf, 0xf, 0x8f2c, 0x38, 0x1, 0x7, 0x2}, [{0x3, 0xf97, 0x5, 0xd, 0x1c8, 0xe6, 0xffffffffffffffff, 0x2}]}, 0x78) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x83) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) read$FUSE(r9, &(0x7f00000014c0)={0x2020}, 0x2020) close(r3) listen(r1, 0x25) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.589796921s ago: executing program 4 (id=1551): r0 = syz_usb_connect$uac1(0x1, 0xe9, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902d70003010360050904000000010100000a2401ab0006020102062405016d1f0924030106030603060c240201010104090f0002050724040608c5fc092405030189a7351d112406010305070008000500000009003409040100000102000009040101010102000007240103c10400072401000001000b24020103020805d7cd0904240202070003000191ed092402020a00ff7f05072401040201000905010908000b0a920725010010c000090402000001020000090402010101020000082402010901dc080905820920000f008107250100060000"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x26, 0x3, 0x10, 0x6}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x1, [@generic={0x13, 0x10, 0x4, "2f41e1c574483e2f42f1bf943d4245ce"}]}, 0x2, [{0x89, &(0x7f0000000180)=@string={0x89, 0x3, "3b306b20074d575e5901c50bdaf7d9c8ba98cdd67fbe38c3f569c094d62c6cb9cd257d54809ff25abc2b92f2d0f6290ca52d1529d3d575a7601d397ef29b4f1ccc5bbc05ca920cc43c26e8e827ac4f77a3a395921a437e34e9f090ad1f98fa9df6974a0092e494e387c353c5b665353916579a6646653d5cec06a5a92efdffa0eb7d1de6d29878"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigaction(0x40000022, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m59.577105972s ago: executing program 37 (id=1551): r0 = syz_usb_connect$uac1(0x1, 0xe9, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902d70003010360050904000000010100000a2401ab0006020102062405016d1f0924030106030603060c240201010104090f0002050724040608c5fc092405030189a7351d112406010305070008000500000009003409040100000102000009040101010102000007240103c10400072401000001000b24020103020805d7cd0904240202070003000191ed092402020a00ff7f05072401040201000905010908000b0a920725010010c000090402000001020000090402010101020000082402010901dc080905820920000f008107250100060000"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x26, 0x3, 0x10, 0x6}, 0x18, &(0x7f0000000140)={0x5, 0xf, 0x18, 0x1, [@generic={0x13, 0x10, 0x4, "2f41e1c574483e2f42f1bf943d4245ce"}]}, 0x2, [{0x89, &(0x7f0000000180)=@string={0x89, 0x3, "3b306b20074d575e5901c50bdaf7d9c8ba98cdd67fbe38c3f569c094d62c6cb9cd257d54809ff25abc2b92f2d0f6290ca52d1529d3d575a7601d397ef29b4f1ccc5bbc05ca920cc43c26e8e827ac4f77a3a395921a437e34e9f090ad1f98fa9df6974a0092e494e387c353c5b665353916579a6646653d5cec06a5a92efdffa0eb7d1de6d29878"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rt_sigaction(0x40000022, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m7.792167942s ago: executing program 5 (id=2595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (rerun: 32) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x15, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) read(r1, &(0x7f0000000180)=""/210, 0xd2) (async) socket$netlink(0x10, 0x3, 0x7) (async, rerun: 64) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) 1m7.566292185s ago: executing program 5 (id=2601): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000022c0)="fae36100dbc3e3bd9cc9b3d178ef9e46ffa1c360901c3b94a1285455c7d85539e61a2f30454d36fb18ac9e1640385132512237eb71ed816ebc1af9f4b791a44690c496fbfeacd68e1d4477f6f8eb3a7f4f7313a21ddeb2ab72306a5dd835d5a128fb7dedd9ce913fbc66c3257f39eae96a4e90521d9601fd41c4620a933988d5251ddab5cde471b4bb43d9a1473d4bda041c6d88d2a7ae3f7091be35af830c09b4f9bd8b273f9572b339b403adc5fb4765a5776234c52ca153ad635e45a49f8d14f103644e85e5ad53f05bb36fe841866268139079b5d560cbde68fe4ada60dcc13e02baeb6f7b2b0014afa2095c917bb7c449b0bef56fa65f751dc2e2b358cfd9f742387f2b6df9ff2d405c4d8ae3c6bf34992d93b095512d5d76d93d7a9a9a23a243d80044fa5a46326537bee66aebb881a58d7ac0e2a433fe267c856142220bbe556d992b57a858c6b095f74a91c617621b64e4012758da8af50f7f23aaf07f490ef2bf4ef5cc40e6c9e9e3fe1ec037e6486bfec22a8a8ba9708b54621ef7a6299c4fb77eaf76afccf9ad83138c2c39ad76a30986ec8f4d83e02d7e36500ff47511aed37d35fe0940608f990c6c568535f6a309cb09d2a7cd3f35ca78142dae2c01a3e970e2d9af30bd2e624466f74b1f9625f642d1d85b8b814a7e6c70cb4ee108bcc20aa94932ae9d4908e555e86f55df2514e97c644c9412f1f4fc47730fc5d8269953e4b33013416e9189aca319f034ef9baa7bd2bee64cd0a4b2efee42ad5976a67a6b3ce0c82e7901aebbe0e4360bd6ac6d8428b97a118d640bb9e332c4637971da87072ff327ee532a564e7eb8805dd89f1ca24bbed74f69c9258ba97862f627c7bec3228e5c6efe1d69a99143aa9f0efae396f5953c90c1393705da66168eb834bd42362ac0b0c4a6947019dd150e3d39ed6c91a9c0b03e27591cf0d0a87550df1509d3c47ad919b8b5a08308182e8c8628a72f749e38c56fae95520322d0719b0bc5386bf2be6fb5627f7b3e7f1f3aeb6e239e113b5067eb198b1425d5640a68f78d1c352dc888c94774e7bc6adb63704a1adbf0e44ccc15ee0ae12ce10664aa5b309d0197bfb7f044ac1987280cecc5f53860937186123116c1951d5582748158cec2199abbb8e6395256563dd22c7bda371b49c67853628b7c1ee7f1f6452799843c681c1ae9f68770a77c75216fe180e77c4cb509a1acfa2f46c0f0ff8945981cd08c1a24d94d90e4c043a6f6a6bd18ec2198679ae899b88c4cd51babe308542ac95bccfa772c24f0877ff4914e9ad8f1415ca6451206c89f2f6f4aaf3a94e14632413eb7fbcfee717e0b348d767738ef93c9d4f9fcc3a835ea91fad87d8152698ef95d8236e42fe57b9a6e21939b25976ea9f647208eac08a9188e369de9621df097bebe64f41753388bc9deeaf6f74410fd63abfed9d83b", 0x400}], 0x1, 0x0, 0x8102}}], 0x1, 0x1) 1m7.563879455s ago: executing program 5 (id=2603): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010102}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x5, 0x81, 0xfff9}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x9, 0xfffffffffffffff8}) syz_open_procfs$userns(r0, &(0x7f0000000000)) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) pipe2$9p(&(0x7f0000000080), 0x800) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) syz_clone(0x498144eedf66f049, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'wg1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m7.547813745s ago: executing program 5 (id=2605): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x30) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m6.934311614s ago: executing program 5 (id=2615): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x40000000, @loopback}, 0x1c, 0x0}}], 0x1, 0x4000950) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080), 0x4) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 1m6.933985054s ago: executing program 5 (id=2616): creat(&(0x7f0000000200)='./file0\x00', 0x20) (async) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000380)) (async) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="7365636c61faffffff07"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 51.903539708s ago: executing program 38 (id=2616): creat(&(0x7f0000000200)='./file0\x00', 0x20) (async) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000380)) (async) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="7365636c61faffffff07"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 47.524024073s ago: executing program 8 (id=2879): futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@exit_looper], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x1000009, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000002c0)="a9f7349bbd7e9741734d0f51132e9100d70b1a3fc24c91b9fc046ccc21be59d0a23826991b317fb5b93fbeee749e5f881af3acf7e523ef9639a472d072bbed35a4fb71a046750f4c", 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 46.678337146s ago: executing program 8 (id=2897): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0x3aca2000) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000022c0)="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", 0x400}], 0x1}}], 0x1, 0x1) 46.665384286s ago: executing program 8 (id=2898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r5, &(0x7f0000000740), 0xff67) sendfile(r4, r5, &(0x7f0000000000), 0xfffb) fcntl$addseals(r5, 0x409, 0x8) lseek(r5, 0x100000, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"}) syz_open_dev$usbfs(0x0, 0x9, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r7 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xc) fchdir(r8) utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 45.818660188s ago: executing program 8 (id=2924): r0 = socket$inet6(0xa, 0x80002, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x0) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00\x00', 0x3}], 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) socket$inet(0x2, 0x5, 0x106) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000007980)={&(0x7f00000078c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1) (async) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x9, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0001010101000000000000000003000008080003400000000075f3696b9dc3d93f124822b1c25639dd6833e355716c07a63169b682a18a745ad6c952693376892fd848dfb22961a9ce81edc4bbb75978cab09ca249208e0ebfa2e8da92125f43ba715a1c06a148d371af466967e8b4422c85b102db54d1ed81f49d"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) recvmmsg(r7, &(0x7f0000007780)=[{{&(0x7f0000000380)=@nl, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/160, 0xa0}], 0x1, &(0x7f0000000500)=""/235, 0xeb}, 0x6}, {{&(0x7f0000000600)=@ll, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000780)=""/2, 0x2}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000900)=""/18, 0x12}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/22, 0x16}, {&(0x7f0000001980)=""/113, 0x71}], 0x8, &(0x7f0000001a80)=""/25, 0x19}, 0x8001}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/212, 0xd4}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/62, 0x3e}, {&(0x7f0000001c00)=""/228, 0xe4}, {&(0x7f0000001d00)=""/202, 0xca}, {&(0x7f0000001e00)=""/223, 0xdf}, {&(0x7f0000001f00)=""/12, 0xc}, {&(0x7f0000001f40)=""/102, 0x66}], 0x9}, 0x2}, {{&(0x7f0000006200)=@un=@abs, 0x80, &(0x7f0000007700)=[{&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/192, 0xc0}, {&(0x7f0000007340)=""/245, 0xf5}, {&(0x7f0000007440)=""/235, 0xeb}, {&(0x7f0000007540)=""/215, 0xd7}, {&(0x7f0000007640)=""/15, 0xf}, {&(0x7f0000007680)=""/98, 0x62}], 0x7}, 0x8}], 0x4, 0x40000020, &(0x7f0000007880)) (async) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000240)={0x14}, 0x14) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x10020, &(0x7f0000000000)=ANY=[@ANYBLOB="6673070000003d32617090e1ad1eafd51dc7356394f63a32e5c1ebede4366299000000"]) (async) getdents64(r2, &(0x7f00000002c0)=""/149, 0x95) 45.642005991s ago: executing program 8 (id=2925): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x104) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000040)=0x3ff) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/16, 0x10}], 0x1) unshare(0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r1, 0x900, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x85, 0xbe, "f319c5390f9aaaf513f380f179deff0ab2513113682787e5d178d102a4ccf92dd12e9d5350612452e6de79b02bc5c74c56bedea4895ae9a486aac67ecb45226df445cf8a11c611a41c0b28065bea5878d3d9f314953b6cce0e3a4bd19e90824aec4cbca290da86af86aa658d19de2baac14fc5e5a12d30b73416083a6a6700d005"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xa}]}, 0xbc}}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) unshare(0x10040000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r4 = socket$inet_icmp(0x2, 0x2, 0x1) fdatasync(r3) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r4, 0x40}, {r4, 0x24}, {}], 0x3, &(0x7f0000000480)={r5, r6+60000000}, &(0x7f00000004c0)={[0x6]}, 0x8) recvmmsg(r4, &(0x7f0000001d40)=[{{&(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)}], 0x6, &(0x7f0000001800)=""/254, 0xfe}, 0x4}, {{&(0x7f0000001900)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000001a40)=""/56, 0x38}, {&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000001b00)=""/85, 0x55}, {&(0x7f0000001b80)=""/149, 0x95}], 0x5, &(0x7f0000001cc0)=""/103, 0x67}, 0x2}], 0x2, 0x40000060, &(0x7f0000001dc0)) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) fcntl$setsig(r8, 0xa, 0x2c) write$P9_RFSYNC(r0, &(0x7f0000001e40)={0x7, 0x33, 0x1}, 0x7) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000001e80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000022c0), 0x200000) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000002300)) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000002380)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x114, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002340)='wg0\x00', 0xf5e00000000000, 0x8000000000000, 0x400}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) r10 = request_key(&(0x7f0000002440)='blacklist\x00', &(0x7f0000002480)={'syz', 0x0}, &(0x7f00000024c0)='{\x00', 0xffffffffffffffff) keyctl$set_timeout(0xf, r10, 0x4) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x44003) 45.511860723s ago: executing program 8 (id=2926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001040)="96", 0x1}], 0x1}}], 0x1, 0x4048841) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 45.432960774s ago: executing program 39 (id=2926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001040)="96", 0x1}], 0x1}}], 0x1, 0x4048841) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 22.270050348s ago: executing program 9 (id=3413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 22.232510969s ago: executing program 9 (id=3415): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket(0x1e, 0x2, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x6, 0x1, 0xff, 0x2, 0x81, 0x4}, 0x20) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x8000, 0x10, 0x3, 0xec, {{0x14, 0x4, 0x2, 0x1b, 0x50, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0x2c, 0x18, 0x1, 0x3, [{@remote, 0x3187}, {@broadcast, 0x800}, {@private=0xa010100}, {@remote, 0xc}, {@empty, 0x7}]}, @generic={0x86, 0xe, "43dd7cd2fc698f007ce6c5bc"}, @noop]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@delpolicy={0x0, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {{@in=@private=0xa010101, @in6=@private2, 0x4e22, 0x8000, 0x4e22, 0x9dc, 0x2, 0xa0, 0xa0, 0x88, r5, r6}, 0x6e6bbc}, [@algo_auth={0x0, 0x1, {{'blake2b-256-generic\x00'}, 0x0, "a0f7e8e20d4a0897af4a967a60fe6ec4d723d58942b9fbc2c8c44c54340360845473ce50131fb46b9cd1ef2640140269e646b434151f9c0c4cbcf59ae91003fbf54438f4ee648d4b0aae9a67607ca4992b9c2a525dd35c6c6add6d8f6d1d6219f3cf6d81323deadb84b88523d00d69bf3375e22a3763eacbc63a9a05bf06763d5780e070d4f641ff8761648d60f7bc0b84f8a00e3a321327"}}, @policy_type={0x0, 0x10, {0x1}}, @proto={0x0, 0x19, 0x3c}, @mark={0x0, 0x15, {0x35075b, 0x8000}}, @XFRMA_IF_ID={0x0, 0x1f, 0x1}]}, 0xffffffffffffff1a}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4000801}, 0xd0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r2, 0x7ff, r8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 21.47744304s ago: executing program 9 (id=3425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r1, 0x200, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000007980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x75, 0x2, 0x100, 0xffffffff, 0x4000000}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 21.364905752s ago: executing program 9 (id=3428): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (rerun: 64) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRES64=r0]) 21.252725284s ago: executing program 9 (id=3431): setregid(0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0x2, 0x4) write(r1, &(0x7f0000000440)="08008edf773c8000", 0x8) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r3}) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4111, 0x100f}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/146, 0x92}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) read$FUSE(r4, &(0x7f0000002f40)={0x2020}, 0x2020) 21.157395115s ago: executing program 9 (id=3434): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) close(0x3) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/67) 10.7086238s ago: executing program 6 (id=3466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) (async) dup3(r3, r5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 9.185690933s ago: executing program 6 (id=3469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3cfa}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xa0, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb541"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'wg1\x00'}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x1, 0xc01001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8N'], 0x6a) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 9.176132983s ago: executing program 3 (id=3470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xeb, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @local}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x48, 0x0, &(0x7f0000000180)) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f00000000c0)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 9.171274573s ago: executing program 2 (id=3471): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) writev(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)="100e670873968ef09ad2dc91a457ec22b19fc326b944f5c4c818", 0x1a}], 0x2) close_range(r1, r1, 0x0) 7.551904427s ago: executing program 6 (id=3472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0xfffffffffffffc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0400"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="40180100000004aae21a7ade85827975181790c44348f2f890814b9bf277cb4ee6d8ba1a74c4d9644428911db47d2a1acd82fc8315ada76571efc25e2e8135bdfa7e3c3c9aaa47f4bbf586303ba240b0e92884cd7c9dd01831b2cb7566f881d2"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r4 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 7.551139867s ago: executing program 3 (id=3473): openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) inotify_init1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 7.506178768s ago: executing program 2 (id=3474): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="a160b2ec8c851bbff4439fbd3634b1ff9760ab3f85b13d55529f7af3c2492a6f08b5d280d3df56807c4f3c52c000b42b949af1830df56618c09c78ee319e"]) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r0, 0x4d75c000) 5.819249943s ago: executing program 3 (id=3475): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x4000}, 0x28, [0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x41df1fd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000002c00)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x0, 0xa, 0x3d, 0x7, 0x7ea79520, 0x7f, 0xb, 0x9, 0x0, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x3, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x4, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x4, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x3, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x100, 0x2, 0x80000000, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x6, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7fff, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x1, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0x7, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x8, 0x2, 0xff, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x9, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x401, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0xffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x30) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '!:--\x00'}, &(0x7f0000000180)=""/66, 0x42) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x100000007) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 5.818603643s ago: executing program 2 (id=3476): r0 = socket(0x1d, 0x3, 0x9) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4040ae9e, &(0x7f0000000100)={{0x0, 0x0, 0x80, {0x0, 0x2}}, "ad58f5a9b6d952a348c2c17c8662d8579db09b54445b27d4c5b199698da1e90db7e989981d9900b31fec0ced53d282980c212da0334a546f009dd48bffc6df4883f7ba7c5eaa721364df0b8778745715ded8c65f1599b7009234306d93d5b92d40729ea5a3f2b1abb86aad23357ee38076c1ed9d23ddddc97b5c922193d7271eef4e0146be214747f28cac946ed8a27ad963a29da00c45fa4150af19f7a942c3c974c7aca4fecb6a14337fd0778b883760fa124fc2ab55e79e42d7d9c76de00410aaed2116a4fe043795f5fbce145a12a50ec34ba951bc2990e47f58e731a34245e22d9cc9b206ce4ab22827bb58180327044976c1fb9438f9831ba3e149cab7eeb524ab9f8ac543a5177f202a247ac01feacb71c4140c8e6de9dd3b5f1345a615edc6e09ab1c4eb2e1e707c79535ad6fd70c635dd062b2439641e81b665fbf7221439861d1913872511e7a665de8dcf433b09cd2f06ab0998b149bbf9e82614fef4039fa8e0132eca43908721b58d428208c3684c21e60b75851f7c4cde23ac0c8f682d5019eefd3220818f8eb29d38dd621ea294e2faac69be3ba465e180dba5d03fa910c72d2786c78c391f29c283242380f4535631f93a3a17908f295275dcdbaf658a32f52801104c233d0aac1f06b954bc3c2e212972d8c08b5f68b70287f5d9a397a6a532fdf4afbf7420d51da41c26dcb95f3832093b8bb96d027e814cc8be58d7ecc89dbbac0be4f7612a916bda342e6e30830cf5888b156627d2dd0bbdfeef38618b393c50ec0ac51fed88626db06f8458734abd8dc5dac895f8513109df1804c83fe3a9236a73783493cb850d6105aa2dbebabb93774b9d6e3f3a2838e5c0a782aaf4cb5a2dcf1ed240c3c4994947fad0b5d9df64ac1e290bc2442b0ba0e1014dd406f78173724fce772fcd39309c78a589ef9b06ac81556dfb213097df7d4d07f55e8c7546b319bdf75fb46b305542c8c8c05cb634200fd85603f5c3c923e60401e964e75e4d0f72aac936ca78d24267fc71849431e0fb64299c6e07ff13de837614b51f6d2e6302e39065299379afdca1e683ad0da669b7e49f926bc8cadb85ca4d65880c0344f53adf7b5f1780032dd466df9285d251d7653b3c58fb4ad26c35bba1eb835a2ac13978ebce09a740f58a1b1dbba8d43b6961326b8f0979228b26befce6b48032e0981f567b7fa11398003866c4c74cbc43ec8180aab8008f6f7064d23ab4a270182f5e25f3a9a9d5b41117dda8968de3637856b18b7ae4f9bfbbe4f750e0267183e1c0b4f2407ee72c710d6b150329d84bc59a4406bf4eb58c2cae0082ac115fe33d3e5c3a650f83f8108e10d530409c3fd1f554b70bd83656f69203ec3d56d59c1ad90cb92b1644cd0f776f8364aa2c321eb7589ff8c9eb31652e920523bf93989d06ff8caa94f5d830e0d3f0c4d210e4dd8861a5d3a341dd0427ad10e72ccf2c3a08c212601b210c7e04877d199b2c976b17ba2ac5a1b2f955d6772cb6c3dcfdf76cf490153778f396a7936176e3c3e1c3c16dc471a04ee527880fcc7b1cf51086064f926cc3d95abd2ff988a02283b161e4e714d3578edb36bce571a8bfade7d4585cb4d92731127b65ec5d501bc943f53a1c23e2e20a60ed4d67cab25cadd0ecdbc361fbfe3c6d097971bc2ba8bb69d513c9940a444626101a31d5897c5e6b174aa7a50b6a7b7346e74278ce4a809f1d657642fa0d912eecdce93ea54e12dc03968e9dff06a8eb2fd5f6af0a676198e146e5ac9a2d6318d407f9e2f6b478a362ebf0893b706e742001353e86792d8eb9ce9dde09f89ceb37bd5519a4dd90074392f491fa156b099d61dde230f705262f30cc8c36462023f6e3ece5ca280ed760a2e133fd0709af6ad96aa80cb128059a6574f4a4f3bbef084bc60090dae5a67129eb003e217df0ccaa361d72e5d4d9b01972185d4748a3a723b8068be418be91dd44ff95d6846242154f6b44f997132211b157ffab9366cd1c5170b87adc03bbe00825cb22d7957c0a090f9feec50e03586bcddb1d8a632b0660263d5e8953892c8e49351edd475f76dff92146bf4aed97f560a69ad9ebd81822f61a3f62affd425820eccfc1a346ca8480cb88b28b33b5220881f9c564d02626d7d57ceb43599538262b8259d5263f1dfc0cce003d3da6f2b0d7f1fc9a232184e250e65c6acc160803ed8df0ad7a47928659401d62fc974aff6a306b629ca04d1b39069420ff3be9f7a27a14309a6567508ff65a2c8eb841d9fce8396fdefddf8d689f49c60c99f11f8999ccebcfdb3c8ad3a0bec32ed3cebea47ffe82177abb1e4a42110ee2722bd2337e53c7a82fa0d1a1b87b83d54c0709a148d0d938ba42052e20f78e7f17a2c68e779f290d607ec7537b5b9fc429a579c51a08fe1e8cd7842c94ff4c1552ead790b4784792258e0048c110eb38714161a0c3fa130344e887b8cf2d94a3494cce87d7ad5551c4767211e48258e919663b02f730aff0ad9437dc79599f67f7171d07be66cede41e3518090e6c156232a436a72a96aef5715a6796a391788e54cfd1a526543816599532cd08579cf435902117fbbdd89648537d46c1d21f88b354a05131c9b37935058839a9f7566e4e884240693e83793485d05089abc187f427d4a6a5d5a70133b6606952e0395a977fb17258503a924f4e16863a801562265c9d410899be3f55dec164f68413faeff611954a149aa94146bf9af90db25b6800411aaf73bb3a2634eb6572691f3f40b46ba4a66a775d4610ea13922cdc9b02ae49a430ad5a955aa4a69006eaf65876b481fd858206b4b2b1ae4607fa1c87c70d63824253c2953af2c814fe250a554a04b7a1b3d7b71a3352fedeee73e38f13f325ed98cadbaf9bd3325a1885cf7d2c4f23b912192d53e6821b009e46fede46d5f6148b908e0cf5137ec38b527af7e46f298f33e3d5ca35cb4928f7f83bc286345d2d22201a70de451c087f750d71b94b743ca77ecc15e6a26d56eddf80b9f0a13067edbb928548f542c0545d8630a2f196f4704807bf5f58b4d63fffa1a9dad658808d3ff4b3baa4e2186c5a599a022d0f93f72263c311096f2aa6f677c28a6a1dc2d843caf11e5a46254dc1e9467907ced4a1ad5389330cbee001e322be51394e086363683b25f34af5ffd50a1976ece6499c521506473f48c7b0f502290599ec773a0004f0c1dcdd260e455eed085111f08fe5ef76b58de4d79de6267481a2fc319454bdcf06a88ab498dac67de6a044c67d7ab39917ee9c825ed9dafe2aa55a7b3d9b4b7633eb0e2c0f51ce12f460d235b5cbd4dc95709061acd5870fb4ccdca46499002d3166e9815e7689d2364653c028212af3c45c0ca19265f48ee389c75aa99552ea4b0eab6bb2f341c35e37586afe8cb113dfa08bf661dcebdb0084a6cd48a86e61548225bd2dccf3d73a0bee544e55c63d1737fba3fa7be30ceeb27e315daaab98c8994319220d64b65accba86f15bbcff76febacfc11f49ed7e5dae74ba58ae973f937611c04b3dca2e02bba658adf5a7893c79857615373076042dfed35a816ad518943f4bc4eff21f272f269bd4a956477167c623c090b6ed597bc1643b1015aba0f36740bd257738ed57a2ac1ba1f3dff0cc2cd17565c91c20548563c8100e3dce8ea36d453251a2bc92effd34400e37e23116262bd9851057e3249988611fdf6d859e86a72ac1147c7e907c1bb333703035c7f542059dc55c23fc9af3c0c6d706b6152761e310ce0732e973c6f9496c560f49b2b1d18899544be3fb8c99a6274e741748dcc4c04a3a13eab12e72a43c9dbb2db5699f7a1b8729107468d6a48223306b28f7edac4862ef25b029c0923b25f030e8b2b755679b34983293d0f5f4c9bf1f2d575ffcef05421ebcc2080deff479a60171e518a0869338d65d51b05c6b44e5efcfbf495d75a82521371d927434434b25c3977a6c3cea077a56c5c7b09da6b5981d1719cebc3e1d6ec7b453226a91055a636b76a086e5bb060456c7e72ae6bbf1eb8eeca60269f0d788ce674d86863fa87f7e37fb9f23dce0023511db05083f6b7518e1e63258730a78ff169db4352384bd2bac7410ae02e539dab9ec0ae4dea2cbbfec4e1a1291774e9ce8a5738904ff02501dc628727074cf4d3d247a821e9b70c4c5e97b8a01afd0692f16c7a010ecdfec898d16de7873c14bb40b261f19a43f3bc5b07f575131af6c9af08ed4d2d11d86d1260fcd88cb03041b90e691b3342a76158cbff63324f3b7b0a680b010ec0932507185d29ac72b336c9015a1977305592f248edae18e9c9a78e8481f3f61d2dcadfbdba705dfdcdfe63bc75d65488a79e24716b3eb5327464cb66b5d77c4d20a85676d20e8761d5ef3f6987c6140883d99796c2d4e690bbbdff460a06cd1392bf4e0d3f14d4b58f3a37fe1b5d1f498719d5f2ac5bfa199687c8342db3c0ffc3bf64b51f3ccae2a9eaac7912b75d0aa245499cbb35a2e872dbaaaa827c6440884dc1ca29f8669875cdaa72416f65a215402da69087fb4c4cd751f6580a83a74f5e52ddc90139a00e0389cac6636c81790f0f60bb75a842704bbe440fe145ba9dcf121e46bf255027633a1a6a40c34c43e44d868e9314fb45c60619020446505b31f79d893f1cfcea9eeff2a9808fda0c97c8a857083b939cf6ffa4b436701028f64b65daf5f4a55411cac28b348375f7f1500eaf1572fa06f0b1c2bf836180fefe17d7bbef68f342d4b16658a8acf14dee98aa98bedba7e1b4ee8604e8de335a0de101c9503abcabc084b4946802c8082796a9909228458fb77e7b32ceb958c02ddca492230067751191a39f863491705faa2797f6284628db10568a675e93c10d4db8f86c95e755f04d5916429b1c2f53ade7693771f37feaa513d53cf65c8694f91fe35e871e9d6a88a1794fc1d4356ec17764faa9c89278dfcc1cfeaf3f3c41501a40e9c846ed0e0b6d91f90e01b962b1b3475e340e1eb1ba72abba30e94e1f46d5ad96e008ce170daf3bebbc539dbac8af3ea43d228fdb0b6af3b84d8da2a5693590de444f4fdda961964e7963cd84fe40daed10eb6f031ab70fb9465be209524ce63bc6a23bbffe1addf2c609e157c9173aee3fa36e4d3cbc6866683f165407f6d344308eddaab649a07b1833c54c56cfafe23a03633a4506a88a853093e8e55119ee8ff544f273f352875761f7e49f48e2485675cc4078467a1cd45439c7d67d361e57fe366744971d9e70e16c59a3108cdffc51a55537575fe3562ddc7e61edfc3dec002db7e8c170f5857e755c86a57ade771da6669eb5543a4e84949923e1b42fdd52b33ff2f1847908518486dd0c4fe3d23a2198b98ee9f53a964e7b2cdaacadf7a9dcc924fce2105d45297bc5d75ca8e32de01f0d66b9be920bb1ef9792b177444c2618a6d1cd603ac69db20524ab3921b49b0d22b843dc091733dfa245ff003e374ea91e84f7d3068a402f90e1e0fb370b6942d9001f2443223ad8f5535657ea29425e3fe63cf74175d6dffd5efe0fd8cd85dd4f6a7f108c412a10b130c4a4878e152dfcd13a2cff7c21e3f694668be896e5f5b53377b307565f0fbc5a384b3b98497da7d0ef260e2143d2716e3b11c639b324ed4980fbd2caef4e5b6d60c69ba8112909ccbf62ac5e557227f17f24837cb8ab321b8f294e45ab520018c97b45ec2f37093e3c89cbbfe43fc1bad7dc76052dc3957c59e20dca5fd23ed679e4cb272b6ef1cfd0841269e9fb6396111da0769381dcfa38d96ce3d9229ba935e3c7819768c187b57b93c8797367", "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"}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x184}}, 0x4040010) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x810, 0xffffffffffffffff, 0x45809000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7816, 0x4, 0x0, 0x7fffffff, 0x801ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r5, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) (async) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000080)) 3.98508861s ago: executing program 6 (id=3477): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000100)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}, {@default_permissions}, {@redirect_dir_on}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0110000000000000040001c00000000003000000000000003e8f0500000051c2e7558b2bfba366ecc669287b11180a975110d4742f042a0010000000000000f276e9df0f2e24e4422952280d343d0d2b97c17f1154c8d4"]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in6=@mcast2, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0xf84, 0x200}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'ecb-camellia-aesni\x00'}, 0xffffffffffffff84}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd29}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) lseek(r5, 0x10001, 0x0) 3.938285021s ago: executing program 3 (id=3478): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x2000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r3, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r3, r3, 0x0, 0x7ffff000) 3.937994971s ago: executing program 2 (id=3479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (async, rerun: 32) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 32) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f0000000040)) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 2.048833789s ago: executing program 6 (id=3480): rt_sigaction(0x18, &(0x7f0000000180)={&(0x7f0000000040)="8f299802c80f123dd6e300000cf96564673667e3dd0fd4fc816700000000006666f20f1ae5c4213d7d11c461fc106813c4225da7cc", 0x80000000, &(0x7f0000000100)="c4e3fd01c00bc4a105622d6bb00000c4e2a9bcf70746a80fae31316295396f0c66c10800c4817c5302c4c2c900ddc4a27913c5", {[0x2]}}, &(0x7f00000001c0)={&(0x7f00000002c0)="6766470f1be6460faeef26f2ab666f65420f1a0fc421a5dcb0f868000043d9f4f2410f1a0ac462253c6a0066470ffc31", 0x0, &(0x7f0000000200)="f0ff470ec4c27959e2650f46ea2e263e4080e299d9e9410f181bc42168c23100430f145d65c4a1485cbbfb000000f2420f38f01472"}, 0x8, &(0x7f0000000280)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$cgroup_int(r0, &(0x7f0000000180), 0x12) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x335ee4a2, 0x1}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @remote, 0x800}, 0x1c) (async) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) 2.042336729s ago: executing program 2 (id=3481): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0xeb, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @local}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x48, 0x0, &(0x7f0000000180)) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f00000000c0)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.041956149s ago: executing program 3 (id=3486): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x6) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 1.459789ms ago: executing program 6 (id=3482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mkdir(&(0x7f0000000180)='./file1\x00', 0x49) 694.96µs ago: executing program 3 (id=3483): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="080100000000000000c0411c00ac0900f28716fab5f73363", 0x18, 0x40408d4, &(0x7f0000000340)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017e2dd086307802040d9018203810902120001000000000904000000ff", @ANYRESDEC=0x0], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x103001, 0x2) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/42, 0x7fffffff}) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000100)=0xa9b, 0x4) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000100)=0xa9b, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r5, &(0x7f0000000080)="861a", 0xa9b) write$uinput_user_dev(r4, &(0x7f0000000600)={'syz0\x00', {0xe, 0x7fff, 0x3, 0x8}, 0x1f, [0xfffffff7, 0x1, 0x4, 0x2, 0x6, 0x10, 0x6, 0x8f0, 0x67b, 0x5, 0x80, 0x8, 0x4, 0x1, 0x57e, 0x4093be4c, 0x0, 0x58, 0x7, 0x7, 0x7, 0x0, 0x5, 0xffff, 0x5, 0x7, 0x40, 0x1000, 0xec9, 0x6e, 0x8, 0x9, 0x5, 0x8, 0x2, 0x7, 0xd309, 0x3, 0x1ff, 0x6, 0x9, 0x5, 0x8, 0x2, 0xfffffffb, 0x5, 0x6, 0x0, 0x2, 0x6, 0xffffffff, 0x4, 0x2, 0x2e49, 0x8, 0x5, 0x6, 0x5, 0x2, 0x2, 0x40, 0x5, 0x7, 0x8], [0x5, 0xa91, 0x8dc4, 0x2, 0x11f, 0x5, 0xff, 0x8, 0xb72, 0x7, 0x1, 0x6, 0x4, 0x5, 0x8, 0xe, 0x400, 0x6, 0x100, 0x7, 0x400, 0x2, 0xa, 0xbc, 0x1, 0x0, 0x400, 0x1, 0x1, 0xf8c, 0x8, 0x5, 0x4, 0x80000000, 0x53e, 0x2, 0xfffffad6, 0xd, 0x7, 0x3, 0x7, 0x2, 0xfffffffd, 0x2, 0x8e31, 0x7, 0x47, 0x9, 0x40, 0x536e, 0xab72, 0x1, 0x3, 0x7b435d0c, 0x0, 0x0, 0x8, 0x6833, 0x8, 0x1, 0x2, 0x7, 0xd, 0x8], [0x67ee, 0x0, 0x10, 0x800, 0x80, 0x7, 0x3, 0x5, 0x3, 0x9, 0x5, 0x42, 0x0, 0x4, 0x8000, 0x3, 0xf9, 0x4, 0x1, 0x0, 0x3, 0x3, 0x8, 0x3, 0x101, 0x6, 0x2, 0x9, 0x2, 0x62, 0x0, 0xe38f, 0x4, 0x5, 0x20, 0x5, 0xffffffff, 0x6, 0xcb28, 0x3, 0x2cb8, 0x5, 0x6, 0x67d43891, 0x4, 0x4, 0x3, 0x6, 0x1, 0x1, 0x3, 0x8, 0x2, 0x9, 0x5, 0x4, 0x80, 0x2, 0xf, 0x100, 0x8, 0x9, 0x9, 0x2000], [0x7, 0x9, 0x3, 0x401, 0x8, 0x1, 0x3, 0x0, 0x0, 0x3, 0x7bc8, 0x7fff, 0x9, 0x8, 0x6a6d8f3b, 0xfffffffb, 0x4, 0x9, 0x80000000, 0x0, 0x2, 0x5, 0x2, 0x4, 0x10001, 0xc, 0x2, 0x1, 0x4, 0x0, 0xb03a, 0x0, 0x3, 0x10000, 0x6, 0xbc04, 0xf6ba, 0xfffffffd, 0xc293, 0x8, 0x7ff, 0x5, 0x0, 0x52, 0x7f, 0x4040000, 0xffffffff, 0x1ff, 0xfff, 0x17, 0x7, 0x5, 0x2, 0xfffffffb, 0x8, 0x6, 0xb, 0xf2, 0x7, 0x7ff, 0x1, 0x7, 0x400, 0xdfa]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r8, 0xc008aec1, &(0x7f0000000180)=ANY=[]) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 0s ago: executing program 2 (id=3484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) kernel console output (not intermixed with test programs): idge0: port 2(bridge_slave_1) entered forwarding state [ 178.496145][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.503196][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.517573][ T13] tipc: Left network mode [ 178.522074][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.529121][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.536406][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.543449][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.553550][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.560614][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.567879][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.574919][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.583114][ T13] tipc: Disabling bearer [ 178.588392][ T13] tipc: Left network mode [ 178.613176][ T13] veth1_macvtap: left promiscuous mode [ 178.618670][ T13] veth0_vlan: left promiscuous mode [ 178.624316][ T13] veth1_macvtap: left promiscuous mode [ 178.629959][ T13] veth0_vlan: left promiscuous mode [ 178.635332][ T13] veth1_macvtap: left promiscuous mode [ 178.640830][ T13] veth0_vlan: left promiscuous mode [ 178.732221][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.742095][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.749910][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.762793][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.771387][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.778658][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.787114][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.794526][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.811648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.818682][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.830446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.837499][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.845747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.852794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.865577][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.872646][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.892466][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.899535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.912024][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.919063][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.941318][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.948349][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.956113][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.963148][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.980790][ T3614] veth0_vlan: entered promiscuous mode [ 179.007132][ T3616] veth0_vlan: entered promiscuous mode [ 179.013218][ T3617] veth0_vlan: entered promiscuous mode [ 179.027182][ T3611] veth0_vlan: entered promiscuous mode [ 179.034175][ T3614] veth1_macvtap: entered promiscuous mode [ 179.057608][ T3616] veth1_macvtap: entered promiscuous mode [ 179.067810][ T3617] veth1_macvtap: entered promiscuous mode [ 179.074809][ T3611] veth1_macvtap: entered promiscuous mode [ 179.097163][ T36] audit: type=1400 audit(1750805423.527:32772): avc: denied { mounton } for pid=3614 comm="syz-executor" path="/root/syzkaller.oxKBGe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 179.179011][ T3637] 9pnet_fd: Insufficient options for proto=fd [ 179.194611][ T3639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.194778][ T3639] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 179.390975][ T3648] SELinux: policydb version -806676744 does not match my version range 15-33 [ 179.408321][ T3648] SELinux: failed to load policy [ 179.414371][ T3649] SELinux: policydb version -806676744 does not match my version range 15-33 [ 179.424413][ T3649] SELinux: failed to load policy [ 179.522553][ T36] audit: type=1400 audit(1750805423.957:32773): avc: denied { create } for pid=3650 comm="syz.7.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.836198][ T3677] rust_binder: Error while translating object. [ 179.836266][ T3677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.842631][ T3677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 179.987317][ T3682] netlink: 'syz.5.1039': attribute type 6 has an invalid length. [ 180.018871][ T3684] tipc: Started in network mode [ 180.023849][ T3684] tipc: Node identity ac1414aa, cluster identity 4711 [ 180.031002][ T3684] tipc: Enabled bearer , priority 10 [ 180.289273][ T424] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.439318][ T424] usb 6-1: Using ep0 maxpacket: 8 [ 180.445981][ T424] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 180.455384][ T424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.464175][ T424] usb 6-1: config 0 descriptor?? [ 180.525323][ T3696] binder: Bad value for 'max' [ 180.564897][ T3701] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 180.573717][ T3701] rust_binder: Write failure EINVAL in pid:30 [ 180.619506][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 180.790353][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.801552][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.811341][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.824283][ T31] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.833377][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.849471][ T31] usb 8-1: config 0 descriptor?? [ 181.159315][ T1284] tipc: Node number set to 2886997162 [ 181.261018][ T31] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 181.270313][ T31] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 181.483198][ T3719] rust_binder: Error while translating object. [ 181.483256][ T3719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.489553][ T3719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 181.618669][ T3726] netlink: 57 bytes leftover after parsing attributes in process `syz.6.1054'. [ 181.684396][ T3734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.735978][ T3735] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 182.139966][ T424] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 182.157950][ T424] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 182.169327][ T424] asix 6-1:0.0: probe with driver asix failed with error -71 [ 182.179330][ T424] usb 6-1: USB disconnect, device number 2 [ 182.228958][ T3739] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 182.228991][ T3739] rust_binder: Error while translating object. [ 182.237972][ T3739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.244418][ T3739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 182.332217][ T3744] rust_binder: Error while translating object. [ 182.341355][ T3744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 182.347662][ T3744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 182.789321][ T424] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 182.839804][ T3768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 182.950344][ T424] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.969656][ T424] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.979426][ T424] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 182.988798][ T424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.996952][ T424] usb 7-1: SerialNumber: syz [ 183.004027][ T424] usb 7-1: 0:2 : does not exist [ 183.165974][ T36] audit: type=1400 audit(1750805427.597:32774): avc: denied { relabelfrom } for pid=3769 comm="syz.7.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 183.186189][ T36] audit: type=1400 audit(1750805427.597:32775): avc: denied { relabelto } for pid=3769 comm="syz.7.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 183.349661][ T877] usb 8-1: USB disconnect, device number 2 [ 183.475784][ T3785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 183.476336][ T3785] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 183.496698][ T3785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 183.516606][ T3785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:44 [ 183.579805][ T424] usb 7-1: USB disconnect, device number 2 [ 183.651545][ T3791] can0: slcan on ttyS3. [ 183.671814][ T3790] can0 (unregistered): slcan off ttyS3. [ 183.696679][ T3798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 193.992935][ T3831] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 194.012015][ T3831] rust_binder: Error while translating object. [ 194.032451][ T3831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.039952][ T3831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 194.054444][ T3855] binder: Unknown parameter '' [ 194.083422][ T36] audit: type=1400 audit(1750805438.517:32776): avc: denied { shutdown } for pid=3849 comm="syz.6.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.173265][ T3883] rust_binder: Error while translating object. [ 194.173312][ T3883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 194.181533][ T3883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:75 [ 194.365425][ T36] audit: type=1400 audit(1750805438.797:32777): avc: denied { accept } for pid=3903 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.483208][ T13] bridge_slave_1: left allmulticast mode [ 194.488898][ T13] bridge_slave_1: left promiscuous mode [ 194.497853][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.506364][ T13] bridge_slave_0: left allmulticast mode [ 194.512415][ T13] bridge_slave_0: left promiscuous mode [ 194.518168][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.641965][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.649001][ T3929] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.656159][ T3929] bridge_slave_0: entered allmulticast mode [ 194.662586][ T3929] bridge_slave_0: entered promiscuous mode [ 194.669667][ T13] veth1_macvtap: left promiscuous mode [ 194.675169][ T13] veth0_vlan: left promiscuous mode [ 194.699295][ T877] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 194.712609][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.719713][ T3929] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.726877][ T3929] bridge_slave_1: entered allmulticast mode [ 194.733390][ T3929] bridge_slave_1: entered promiscuous mode [ 194.745240][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'. [ 194.762022][ T3934] rust_binder: Write failure EINVAL in pid:101 [ 194.797207][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.810410][ T3929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.817637][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.824664][ T3929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.839261][ T877] usb 6-1: device descriptor read/64, error -71 [ 194.845629][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.852968][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.862062][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.869094][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.882038][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.889086][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.927928][ T3929] veth0_vlan: entered promiscuous mode [ 194.940499][ T3929] veth1_macvtap: entered promiscuous mode [ 194.976185][ T3946] binder: Bad value for 'stats' [ 195.079307][ T877] usb 6-1: device descriptor read/64, error -71 [ 195.199364][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 195.288857][ T36] audit: type=1400 audit(1750805439.717:32778): avc: denied { read } for pid=3960 comm="syz.8.1111" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.289909][ T3963] netlink: 'syz.8.1111': attribute type 46 has an invalid length. [ 195.319242][ T36] audit: type=1400 audit(1750805439.717:32779): avc: denied { open } for pid=3960 comm="syz.8.1111" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.329550][ T64] usb 7-1: device descriptor read/64, error -71 [ 195.344904][ T877] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.351765][ T36] audit: type=1400 audit(1750805439.717:32780): avc: denied { setattr } for pid=3960 comm="syz.8.1111" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.479293][ T877] usb 6-1: device descriptor read/64, error -71 [ 195.599378][ T64] usb 7-1: device descriptor read/64, error -71 [ 195.719439][ T877] usb 6-1: device descriptor read/64, error -71 [ 195.829366][ T877] usb usb6-port1: attempt power cycle [ 195.849288][ T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 195.989315][ T64] usb 7-1: device descriptor read/64, error -71 [ 196.030086][ T3965] SELinux: security_context_str_to_sid () failed with errno=-22 [ 196.059094][ T3967] kvm: kvm [3966]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 196.419253][ T877] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.440338][ T877] usb 6-1: device descriptor read/8, error -71 [ 196.570363][ T877] usb 6-1: device descriptor read/8, error -71 [ 196.819382][ T877] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 196.840975][ T877] usb 6-1: device descriptor read/8, error -71 [ 196.970378][ T877] usb 6-1: device descriptor read/8, error -71 [ 197.090129][ T877] usb usb6-port1: unable to enumerate USB device [ 197.120949][ T36] audit: type=1400 audit(1750805441.557:32781): avc: denied { connect } for pid=3969 comm="syz.4.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.140969][ T3970] binder: Unknown parameter '' [ 197.161504][ T36] audit: type=1400 audit(1750805441.597:32782): avc: denied { append } for pid=3971 comm="syz.4.1116" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.209294][ T64] usb 7-1: device descriptor read/64, error -71 [ 197.225562][ T3980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 197.226330][ T3980] rust_binder: Read failure Err(EFAULT) in pid:37 [ 197.249036][ T3982] overlay: Unknown parameter 'subj_user' [ 197.270950][ T36] audit: type=1400 audit(1750805441.707:32783): avc: denied { read } for pid=3983 comm="syz.4.1121" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 197.295208][ T36] audit: type=1400 audit(1750805441.707:32784): avc: denied { open } for pid=3983 comm="syz.4.1121" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 197.319877][ T64] usb usb7-port1: attempt power cycle [ 197.449299][ T877] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 197.599297][ T877] usb 9-1: Using ep0 maxpacket: 8 [ 197.605614][ T877] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 197.614962][ T877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.624264][ T877] usb 9-1: config 0 descriptor?? [ 197.669337][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 197.690356][ T64] usb 7-1: device descriptor read/8, error -71 [ 197.820261][ T64] usb 7-1: device descriptor read/8, error -71 [ 197.962580][ T4020] rust_binder: Write failure EFAULT in pid:108 [ 197.983999][ T36] audit: type=1326 audit(1750805442.417:32785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.6.1134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x0 [ 198.962934][ T4031] rust_binder: validate_parent_fixup: new_min_offset=120, sg_entry.length=0 [ 198.962961][ T4031] rust_binder: Error while translating object. [ 198.972491][ T4031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.978717][ T4031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 199.005704][ T4033] fuse: Unknown parameter '0x0000000000000003' [ 199.238102][ T4045] binder: Bad value for 'max' [ 199.270045][ T4050] can0: slcan on ttyS3. [ 199.325934][ T4059] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 199.343807][ T877] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 199.362112][ T877] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 199.373685][ T877] asix 9-1:0.0: probe with driver asix failed with error -71 [ 199.397803][ T877] usb 9-1: USB disconnect, device number 2 [ 199.860378][ T36] audit: type=1400 audit(1750805444.297:32786): avc: denied { accept } for pid=4076 comm="syz.8.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.274489][ T36] audit: type=1326 audit(1750805444.707:32787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.298155][ T36] audit: type=1326 audit(1750805444.707:32788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.322101][ T36] audit: type=1326 audit(1750805444.707:32789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.345870][ T36] audit: type=1326 audit(1750805444.707:32790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.369540][ T36] audit: type=1326 audit(1750805444.707:32791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.393170][ T36] audit: type=1326 audit(1750805444.707:32792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.417869][ T36] audit: type=1326 audit(1750805444.707:32793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.442261][ T36] audit: type=1326 audit(1750805444.707:32794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.465973][ T36] audit: type=1326 audit(1750805444.707:32795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4071 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 200.539315][ T3993] can0 (unregistered): slcan off ttyS3. [ 200.573276][ T4115] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 200.598276][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 200.632008][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 200.667406][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 200.705925][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 200.777255][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 200.812991][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 200.930225][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 200.949432][ T4159] SELinux: security_context_str_to_sid () failed with errno=-22 [ 200.990082][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 201.011234][ T4162] batadv_slave_1: entered promiscuous mode [ 201.158132][ T4160] batadv_slave_1: left promiscuous mode [ 201.218578][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 201.305196][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 201.519266][ T424] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.679267][ T424] usb 6-1: Using ep0 maxpacket: 32 [ 201.684859][ T424] usb 6-1: too many configurations: 84, using maximum allowed: 8 [ 201.694015][ T424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 201.701692][ T424] usb 6-1: can't read configurations, error -61 [ 201.820205][ T4188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 201.839253][ T424] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 201.856312][ T4192] binder: Unknown parameter 'dirsnczN!J \q' [ 201.910802][ T4194] input: syz0 as /devices/virtual/input/input9 [ 202.009249][ T424] usb 6-1: Using ep0 maxpacket: 32 [ 202.014876][ T424] usb 6-1: too many configurations: 84, using maximum allowed: 8 [ 202.024090][ T424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 202.031917][ T424] usb 6-1: can't read configurations, error -61 [ 202.042290][ T424] usb usb6-port1: attempt power cycle [ 202.324221][ T4211] rust_binder: Write failure EINVAL in pid:71 [ 202.389283][ T424] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 202.411354][ T4221] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1184'. [ 202.419622][ T424] usb 6-1: Using ep0 maxpacket: 32 [ 202.428964][ T424] usb 6-1: too many configurations: 84, using maximum allowed: 8 [ 202.437850][ T424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 202.445791][ T424] usb 6-1: can't read configurations, error -61 [ 202.579289][ T424] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 202.607228][ T424] usb 6-1: Using ep0 maxpacket: 32 [ 202.612771][ T424] usb 6-1: too many configurations: 84, using maximum allowed: 8 [ 202.629323][ T424] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 202.636896][ T424] usb 6-1: can't read configurations, error -61 [ 202.643510][ T424] usb usb6-port1: unable to enumerate USB device [ 202.709451][ T4231] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 202.718271][ T4231] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 202.718287][ T4231] rust_binder: Error while translating object. [ 202.728999][ T4231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.735430][ T4231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 202.767931][ T4236] 9pnet_fd: Insufficient options for proto=fd [ 202.776282][ T4239] 9pnet_fd: Insufficient options for proto=fd [ 202.798187][ T4246] raw_sendmsg: syz.6.1193 forgot to set AF_INET. Fix it! [ 202.857942][ T4248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4248 comm=syz.8.1194 [ 202.870700][ T4248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4248 comm=syz.8.1194 [ 202.884053][ T4248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4248 comm=syz.8.1194 [ 202.897049][ T4248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4248 comm=syz.8.1194 [ 202.956111][ T4259] tipc: Enabling of bearer rejected, failed to enable media [ 203.093829][ T4288] tipc: Started in network mode [ 203.098727][ T4288] tipc: Node identity 4, cluster identity 4711 [ 203.105114][ T4288] tipc: Node number set to 4 [ 203.113445][ T4291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.123629][ T4291] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 203.123645][ T4291] rust_binder: Error while translating object. [ 203.132292][ T4291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.138488][ T4291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 203.268709][ T4296] 9pnet_fd: p9_fd_create_tcp (4296): problem connecting socket to 127.0.0.1 [ 203.382489][ T4302] FAT-fs (rnullb0): bogus number of reserved sectors [ 203.389190][ T4302] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 204.450375][ T4362] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1228'. [ 204.564115][ T4394] fuseblk: Bad value for 'fd' [ 204.853657][ T4408] tipc: Started in network mode [ 204.858610][ T4408] tipc: Node identity 7f000001, cluster identity 4711 [ 204.865940][ T4408] tipc: Enabled bearer , priority 10 [ 204.876256][ T4408] binder: Unknown parameter '' [ 204.902083][ T4411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 204.928904][ T4413] rust_binder: Error while translating object. [ 204.928933][ T4413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.935291][ T4413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 204.947570][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 204.947588][ T36] audit: type=1400 audit(1750805449.387:32865): avc: denied { unmount } for pid=3614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 204.987112][ T4417] rust_binder: Error while translating object. [ 204.987134][ T4417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 204.993363][ T4417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159 [ 205.014219][ T36] audit: type=1400 audit(1750805449.447:32866): avc: denied { ioctl } for pid=4418 comm="syz.5.1248" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 205.066638][ T36] audit: type=1400 audit(1750805449.497:32867): avc: denied { execute } for pid=4421 comm="syz.5.1249" name="file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.089009][ T36] audit: type=1400 audit(1750805449.497:32868): avc: denied { execute_no_trans } for pid=4421 comm="syz.5.1249" path="/47/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 205.420318][ T36] audit: type=1326 audit(1750805449.857:32869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 205.443902][ T36] audit: type=1326 audit(1750805449.857:32870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 205.467570][ T36] audit: type=1326 audit(1750805449.857:32871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 205.492202][ T36] audit: type=1326 audit(1750805449.857:32872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 205.516180][ T36] audit: type=1326 audit(1750805449.857:32873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 205.544387][ T36] audit: type=1326 audit(1750805449.857:32874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 205.619264][ T3615] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 205.771885][ T3615] usb 9-1: No LPM exit latency info found, disabling LPM. [ 205.784486][ T3615] usb 9-1: config 1 interface 0 altsetting 33 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 205.785926][ T4482] rust_binder: inc_ref_done called when no active inc_refs [ 205.795285][ T4482] rust_binder: Write failure EINVAL in pid:102 [ 205.809864][ T3615] usb 9-1: config 1 interface 0 altsetting 33 endpoint 0x82 is Bulk; changing to Interrupt [ 205.826928][ T3615] usb 9-1: config 1 interface 0 altsetting 33 endpoint 0x3 is Bulk; changing to Interrupt [ 205.837474][ T3615] usb 9-1: config 1 interface 0 has no altsetting 0 [ 205.846970][ T4485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.847229][ T4484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.853761][ T4484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 205.979256][ T305] tipc: Node number set to 2130706433 [ 206.751358][ T4515] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 206.891860][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.898583][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.906292][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.913077][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.920999][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.927683][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.935235][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.941958][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.948966][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.955892][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.963094][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.982337][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.989589][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 206.996286][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.003705][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.010569][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.017628][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.024659][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.031823][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.038641][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.052871][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.059751][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.066840][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.073831][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.081051][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.087783][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.095058][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.101938][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.108986][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.115697][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.122749][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.129459][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.136455][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.143195][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.150335][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.157138][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.164304][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.171059][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.178097][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.184815][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.191936][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.198758][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.206566][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.213365][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.220368][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.227089][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.234247][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.241167][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.248235][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.254994][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.262100][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.268778][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.275798][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.282531][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.289587][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.296263][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.303295][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.309999][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.316992][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.323696][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.330714][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.337383][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.344435][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.351137][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.358421][ T4535] FAT-fs (rnullb0): bogus number of reserved sectors [ 207.365113][ T4535] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 207.492372][ T4566] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472) [ 207.503222][ T4566] SELinux: failed to load policy [ 208.385876][ T3615] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.395666][ T3615] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.411211][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 208.424571][ T3615] usb 9-1: Product: Ⰺ [ 208.428800][ T3615] usb 9-1: Manufacturer: 玑풟䧄犈옰갲ȅ꼀᧹핉廎叒跤箑䒆૒㤾曟ᬧ헉瀵삈︯桹뻣蕡냣娠癫軷簚神욢㟴㑋Փ몣궄쇐踮놟첢칙㈄䋱䲇ⶽ╩ࠆꁌ弖㯥ह责혳쎾ꚕڪ⩻䂗튰㥠묬℟ɹ튔ꏻ쿉쁤럛㚪妉ꊅ䙪朠ꐉ鞡Û蘋蒫 [ 208.480228][ T3615] usb 9-1: can't set config #1, error -71 [ 208.494297][ T3615] usb 9-1: USB disconnect, device number 3 [ 208.711885][ T4617] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1313'. [ 209.330337][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 209.334495][ T4624] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 209.342101][ T4624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 209.350365][ T4624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:153 [ 209.438392][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 209.773322][ T4631] rust_binder: Error in use_page_slow: ESRCH [ 209.773341][ T4631] rust_binder: use_range failure ESRCH [ 209.779430][ T4631] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 209.785506][ T4631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 209.795738][ T4631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:148 [ 209.827951][ T4644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.838990][ T4644] rust_binder: Error in use_page_slow: ESRCH [ 209.845728][ T4644] rust_binder: use_range failure ESRCH [ 209.851854][ T4644] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 209.857341][ T4644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 209.865593][ T4644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153 [ 209.885723][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1325'. [ 209.974476][ T4668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.016772][ T4677] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 92) [ 210.023303][ T4677] rust_binder: Error while translating object. [ 210.034276][ T4677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.040694][ T4677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 210.058258][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 210.058276][ T36] audit: type=1400 audit(1750805454.487:32895): avc: denied { setattr } for pid=4680 comm="syz.5.1336" name="UDPLITEv6" dev="sockfs" ino=24427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.291232][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 210.340944][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 210.362444][ T4690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.362481][ T4690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 210.399667][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 210.743935][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 210.754958][ T36] audit: type=1400 audit(1750805455.177:32896): avc: denied { ioctl } for pid=4705 comm="syz.8.1346" path="/52/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.039255][ T877] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 211.154821][ T36] audit: type=1400 audit(1750805455.587:32897): avc: denied { ioctl } for pid=4719 comm="syz.4.1351" path="socket:[25143]" dev="sockfs" ino=25143 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.157838][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 211.192960][ T4720] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 211.200405][ T877] usb 9-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 211.202082][ T4720] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.212454][ T877] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.229875][ T877] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.238933][ T877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.247409][ T877] usb 9-1: SerialNumber: syz [ 211.252141][ T36] audit: type=1400 audit(1750805455.687:32898): avc: denied { bind } for pid=4724 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.275143][ T4727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.275948][ T36] audit: type=1400 audit(1750805455.687:32899): avc: denied { setopt } for pid=4724 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.282562][ T4727] rust_binder: Error in use_page_slow: ESRCH [ 211.303371][ T4727] rust_binder: use_range failure ESRCH [ 211.309666][ T4727] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 211.315149][ T4727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 211.323080][ T4727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:171 [ 211.336530][ T4727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 211.390377][ T4729] rust_binder: Write failure EINVAL in pid:173 [ 211.510790][ T36] audit: type=1400 audit(1750805455.947:32900): avc: denied { mount } for pid=4705 comm="syz.8.1346" name="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 211.539984][ T36] audit: type=1400 audit(1750805455.947:32901): avc: denied { search } for pid=4705 comm="syz.8.1346" name="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.562428][ T36] audit: type=1400 audit(1750805455.947:32902): avc: denied { read } for pid=4705 comm="syz.8.1346" name="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.584797][ T36] audit: type=1400 audit(1750805455.947:32903): avc: denied { watch watch_reads } for pid=4705 comm="syz.8.1346" path="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.608035][ T36] audit: type=1400 audit(1750805455.947:32904): avc: denied { open } for pid=4705 comm="syz.8.1346" path="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.391368][ T4760] overlayfs: failed to clone upperpath [ 213.070509][ T4796] overlayfs: conflicting options: userxattr,metacopy=on [ 213.627707][ T13] tipc: Subscription rejected, illegal request [ 213.761498][ T877] usb 9-1: 0:2 : does not exist [ 213.766448][ T877] usb 9-1: unit 5: unexpected type 0x0b [ 213.773750][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 213.789444][ T877] usb 9-1: USB disconnect, device number 4 [ 214.229269][ T877] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 214.390374][ T877] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 214.398475][ T877] usb 6-1: config 0 has no interface number 0 [ 214.404813][ T877] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 214.414068][ T877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.423001][ T877] usb 6-1: config 0 descriptor?? [ 214.648529][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 214.659643][ T877] usb 6-1: string descriptor 0 read error: -71 [ 214.674574][ T877] asix 6-1:0.3 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 215.120458][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 215.379277][ T3615] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 215.511164][ T3615] usb 9-1: device descriptor read/64, error -71 [ 215.639014][ T877] asix 6-1:0.3: probe with driver asix failed with error -71 [ 215.647518][ T877] usb 6-1: USB disconnect, device number 11 [ 215.759313][ T3615] usb 9-1: device descriptor read/64, error -71 [ 215.768604][ T4876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 215.768638][ T4876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:213 [ 215.878106][ T4889] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 215.887336][ T4889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 215.895948][ T4889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:227 [ 216.009263][ T3615] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 216.149265][ T305] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 216.169298][ T3615] usb 9-1: device descriptor read/64, error -71 [ 216.299259][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 216.305589][ T305] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.315890][ T305] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.326244][ T305] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.335323][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.343356][ T305] usb 6-1: Product: syz [ 216.347672][ T305] usb 6-1: Manufacturer: syz [ 216.352317][ T305] usb 6-1: SerialNumber: syz [ 216.419302][ T3615] usb 9-1: device descriptor read/64, error -71 [ 216.529408][ T3615] usb usb9-port1: attempt power cycle [ 216.724742][ T4898] rust_binder: Error in use_page_slow: ESRCH [ 216.724764][ T4898] rust_binder: use_range failure ESRCH [ 216.736535][ T4898] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 216.736558][ T4898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 216.744758][ T4898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:229 [ 216.764865][ T305] usb 6-1: cannot find UAC_HEADER [ 216.773214][ T305] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 216.783663][ T4900] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 216.783682][ T4900] rust_binder: Error while translating object. [ 216.788331][ T3841] udevd[3841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 216.792577][ T4900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.814607][ T4900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 216.869296][ T3615] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 216.900553][ T3615] usb 9-1: device descriptor read/8, error -71 [ 216.966479][ T4893] rust_binder: Write failure EINVAL in pid:229 [ 216.966752][ T305] usb 6-1: USB disconnect, device number 12 [ 217.030359][ T3615] usb 9-1: device descriptor read/8, error -71 [ 217.269286][ T3615] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 217.290659][ T3615] usb 9-1: device descriptor read/8, error -71 [ 217.420410][ T3615] usb 9-1: device descriptor read/8, error -71 [ 217.529326][ T3615] usb usb9-port1: unable to enumerate USB device [ 217.787857][ T4929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.788215][ T4928] rust_binder: Failed copying remainder into alloc: EFAULT [ 217.794874][ T4928] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 217.802928][ T4928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 217.811748][ T4928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:257 [ 217.829650][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1421'. [ 217.874491][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 217.874509][ T36] audit: type=1400 audit(1750805462.307:32907): avc: denied { connect } for pid=4935 comm="syz.5.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.155862][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.184960][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.188068][ T4950] rust_binder: Got transaction with invalid offset. [ 218.196120][ T4950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.202826][ T4950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 218.223774][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.270079][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.271002][ T4955] cgroup: subsys name conflicts with all [ 218.297032][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.320199][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.388409][ T4971] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1433'. [ 218.521832][ T36] audit: type=1400 audit(1750805462.957:32908): avc: denied { setattr } for pid=4973 comm="syz.8.1434" name="KEY" dev="sockfs" ino=26713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.608027][ T36] audit: type=1400 audit(1750805463.037:32909): avc: denied { write } for pid=4978 comm="syz.8.1435" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 218.632391][ T36] audit: type=1400 audit(1750805463.037:32910): avc: denied { map } for pid=4978 comm="syz.8.1435" path="socket:[26564]" dev="sockfs" ino=26564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.703643][ T4987] mmap: syz.6.1438 (4987): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 218.707017][ T4985] rust_binder: Error while translating object. [ 218.716207][ T4985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.722463][ T4985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 218.783048][ T36] audit: type=1400 audit(1750805463.217:32911): avc: denied { append } for pid=4990 comm="syz.8.1440" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 218.806849][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 218.886779][ T5003] rust_binder: Write failure EINVAL in pid:285 [ 219.119278][ T877] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 219.279275][ T877] usb 6-1: Using ep0 maxpacket: 16 [ 219.285539][ T877] usb 6-1: config 247 has an invalid interface number: 79 but max is 0 [ 219.293997][ T877] usb 6-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config [ 219.304301][ T877] usb 6-1: config 247 has no interface number 0 [ 219.310605][ T877] usb 6-1: config 247 interface 79 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 219.323824][ T877] usb 6-1: config 247 interface 79 has no altsetting 0 [ 219.332094][ T877] usb 6-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 219.341174][ T877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.349168][ T877] usb 6-1: Product: syz [ 219.353365][ T877] usb 6-1: Manufacturer: syz [ 219.357940][ T877] usb 6-1: SerialNumber: syz [ 219.413727][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 219.433465][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 219.567598][ T877] usb-storage 6-1:247.79: USB Mass Storage device detected [ 219.582426][ T877] usb-storage 6-1:247.79: Quirks match for vid 03eb pid 2002: 20 [ 219.631694][ T877] usb 6-1: USB disconnect, device number 13 [ 219.669271][ T3615] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 219.820021][ T3615] usb 9-1: not running at top speed; connect to a high speed hub [ 219.828805][ T3615] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 219.838991][ T3615] usb 9-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 219.850707][ T3615] usb 9-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=5e.bc [ 219.859820][ T3615] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.867870][ T3615] usb 9-1: Product: syz [ 219.872070][ T3615] usb 9-1: Manufacturer: syz [ 219.876666][ T3615] usb 9-1: SerialNumber: syz [ 220.031983][ T5036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.139528][ T3319] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.152563][ T3319] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.829516][ T5071] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 220.829548][ T5071] rust_binder: Read failure Err(EFAULT) in pid:255 [ 220.970973][ T5086] overlayfs: missing 'workdir' [ 221.127666][ T36] audit: type=1400 audit(1750805465.557:32912): avc: denied { read } for pid=5093 comm="syz.5.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 221.178675][ T5096] rust_binder: Write failure EFAULT in pid:294 [ 221.706297][ T5115] /dev/rnullb0: Can't lookup blockdev [ 221.825954][ T5119] 9pnet_fd: Insufficient options for proto=fd [ 221.967736][ T36] audit: type=1400 audit(1750805466.397:32913): avc: denied { ioctl } for pid=5123 comm="syz.5.1483" path="socket:[26950]" dev="sockfs" ino=26950 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.090464][ T5138] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 222.199251][ T1683] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.213341][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 222.385871][ T36] audit: type=1400 audit(1750805466.817:32914): avc: denied { getopt } for pid=5146 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.515180][ T3615] usb 9-1: USB disconnect, device number 9 [ 222.522441][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 222.552910][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 222.610571][ T5164] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1494'. [ 222.632192][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 222.724929][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 222.758773][ T5189] tmpfs: Unknown parameter '/uge' [ 222.778572][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 222.860543][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 222.969259][ T36] audit: type=1400 audit(1750805467.397:32915): avc: denied { map } for pid=5215 comm="syz.5.1509" path="socket:[28365]" dev="sockfs" ino=28365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.205372][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 223.459272][ T305] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 223.629287][ T305] usb 9-1: Using ep0 maxpacket: 8 [ 223.635499][ T305] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 223.644943][ T305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.662635][ T305] usb 9-1: config 0 descriptor?? [ 223.868833][ T36] audit: type=1400 audit(1750805468.297:32916): avc: denied { ioctl } for pid=5219 comm="syz.8.1510" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.893957][ T36] audit: type=1400 audit(1750805468.307:32917): avc: denied { read } for pid=5229 comm="syz.5.1514" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.916909][ T36] audit: type=1400 audit(1750805468.307:32918): avc: denied { open } for pid=5229 comm="syz.5.1514" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.941006][ T36] audit: type=1400 audit(1750805468.307:32919): avc: denied { read write } for pid=5229 comm="syz.5.1514" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 223.966413][ T36] audit: type=1400 audit(1750805468.307:32920): avc: denied { open } for pid=5229 comm="syz.5.1514" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 223.990668][ T36] audit: type=1400 audit(1750805468.317:32921): avc: denied { ioctl } for pid=5229 comm="syz.5.1514" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 223.992446][ T5234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.016498][ T36] audit: type=1400 audit(1750805468.317:32922): avc: denied { ioctl } for pid=5229 comm="syz.5.1514" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.050043][ T36] audit: type=1400 audit(1750805468.317:32923): avc: denied { set_context_mgr } for pid=5229 comm="syz.5.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 224.070025][ T36] audit: type=1400 audit(1750805468.317:32924): avc: denied { map } for pid=5229 comm="syz.5.1514" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 224.125317][ T5239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 224.176736][ T5243] rust_binder: Write failure EINVAL in pid:332 [ 224.891477][ T5247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.898207][ T5247] rust_binder: Error in use_page_slow: ESRCH [ 224.904740][ T5247] rust_binder: use_range failure ESRCH [ 224.910802][ T5247] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 224.916339][ T5247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 224.924235][ T5247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:278 [ 224.935295][ T5247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.953546][ T5247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 225.041509][ T5251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:335 [ 225.089931][ T305] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 225.112100][ T305] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 225.123329][ T305] asix 9-1:0.0: probe with driver asix failed with error -71 [ 225.133197][ T305] usb 9-1: USB disconnect, device number 10 [ 225.293648][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 225.529324][ T389] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 225.601167][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 225.617603][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 225.681367][ T389] usb 6-1: config 1 interface 0 altsetting 149 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.695495][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 225.706670][ T389] usb 6-1: config 1 interface 0 altsetting 149 bulk endpoint 0x82 has invalid maxpacket 0 [ 225.725938][ T389] usb 6-1: config 1 interface 0 altsetting 149 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.732798][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 225.740657][ T389] usb 6-1: config 1 interface 0 has no altsetting 0 [ 225.765006][ T389] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.780692][ T389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.791658][ T389] usb 6-1: Product: 瑑 [ 225.794010][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 225.796407][ T389] usb 6-1: Manufacturer: Ж [ 225.813945][ T389] usb 6-1: SerialNumber: syz [ 225.819482][ T389] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 225.828449][ T389] usb 6-1: no configuration chosen from 1 choice [ 226.034179][ T5306] netlink: 'syz.6.1540': attribute type 11 has an invalid length. [ 226.042179][ T5306] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1540'. [ 226.659411][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 226.909290][ T424] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 227.039250][ T424] usb 9-1: device descriptor read/64, error -71 [ 227.279256][ T424] usb 9-1: device descriptor read/64, error -71 [ 227.519262][ T424] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 227.649256][ T424] usb 9-1: device descriptor read/64, error -71 [ 227.889245][ T424] usb 9-1: device descriptor read/64, error -71 [ 227.999381][ T424] usb usb9-port1: attempt power cycle [ 228.293701][ T305] usb 6-1: USB disconnect, device number 14 [ 228.301081][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 228.301110][ T36] audit: type=1400 audit(1750805472.737:32990): avc: denied { unmount } for pid=3611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.333452][ T36] audit: type=1400 audit(1750805472.767:32991): avc: denied { setopt } for pid=5323 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.368893][ T424] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 228.391684][ T424] usb 9-1: device descriptor read/8, error -71 [ 228.440712][ T36] audit: type=1400 audit(1750805472.877:32992): avc: denied { execmem } for pid=5333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 228.483472][ T5335] binder: Bad value for 'max' [ 228.488248][ T36] audit: type=1400 audit(1750805472.917:32993): avc: denied { remount } for pid=5334 comm="syz.5.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 228.508750][ T36] audit: type=1400 audit(1750805472.917:32994): avc: denied { mounton } for pid=5336 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 228.530754][ T36] audit: type=1400 audit(1750805472.917:32995): avc: denied { sys_module } for pid=5336 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 228.741899][ T13] bridge_slave_1: left allmulticast mode [ 228.747723][ T13] bridge_slave_1: left promiscuous mode [ 228.753591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.761598][ T13] bridge_slave_0: left allmulticast mode [ 228.767303][ T13] bridge_slave_0: left promiscuous mode [ 228.773062][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.786585][ T424] usb 9-1: device descriptor read/8, error -71 [ 228.789609][ T36] audit: type=1400 audit(1750805473.217:32996): avc: denied { connect } for pid=5341 comm="syz.5.1556" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.819400][ T36] audit: type=1400 audit(1750805473.237:32997): avc: denied { write } for pid=5341 comm="syz.5.1556" laddr=fe80::ec30:5cff:fed2:f9d1 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.849970][ T5346] rust_binder: Write failure EINVAL in pid:370 [ 228.850043][ T5346] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 228.863452][ T5346] rust_binder: Write failure EINVAL in pid:370 [ 228.888825][ T36] audit: type=1400 audit(1750805473.317:32998): avc: denied { ioctl } for pid=5350 comm="syz.6.1559" path="socket:[29020]" dev="sockfs" ino=29020 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.925266][ T5353] futex_wake_op: syz.6.1559 tries to shift op by 144; fix this program [ 228.930372][ T36] audit: type=1400 audit(1750805473.357:32999): avc: denied { map } for pid=5351 comm="syz.5.1560" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.977421][ T13] tipc: Disabling bearer [ 228.985873][ T13] tipc: Left network mode [ 228.991539][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.998972][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.006274][ T5336] bridge_slave_0: entered allmulticast mode [ 229.014077][ T5336] bridge_slave_0: entered promiscuous mode [ 229.020588][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.027614][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.046131][ T5336] bridge_slave_1: entered allmulticast mode [ 229.053460][ T5336] bridge_slave_1: entered promiscuous mode [ 229.066755][ T13] veth1_macvtap: left promiscuous mode [ 229.069242][ T424] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 229.079528][ T13] veth0_vlan: left promiscuous mode [ 229.110372][ T424] usb 9-1: device descriptor read/8, error -71 [ 229.220063][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.227161][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.234472][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.241540][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.250443][ T424] usb 9-1: device descriptor read/8, error -71 [ 229.276632][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.284407][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.302760][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.309847][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.318233][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.325311][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.334233][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 229.358430][ T5336] veth0_vlan: entered promiscuous mode [ 229.364675][ T424] usb usb9-port1: unable to enumerate USB device [ 229.378771][ T5336] veth1_macvtap: entered promiscuous mode [ 229.491306][ T9] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 229.501503][ T9] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.514425][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 229.522645][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.531968][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.540502][ T9] usb 6-1: Product: syz [ 229.544673][ T9] usb 6-1: Manufacturer: syz [ 229.549473][ T9] usb 6-1: SerialNumber: syz [ 229.560026][ T5367] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.568444][ T5367] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 229.671158][ T3844] udevd[3844]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 229.727734][ T5382] fuse: Unknown parameter 'wbYe{."[ȼOFiGcu]dOaCk!jP˳TC:' [ 229.880878][ T5393] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 229.889927][ T5393] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 229.898873][ T5393] overlayfs: missing 'lowerdir' [ 229.978228][ T5367] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 229.978252][ T5367] rust_binder: Error while translating object. [ 229.987064][ T5367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.993627][ T5367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 230.005939][ T9] usb 6-1: USB disconnect, device number 15 [ 230.059304][ T877] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 230.169250][ T305] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 230.209269][ T877] usb 9-1: Using ep0 maxpacket: 32 [ 230.215532][ T877] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 230.223687][ T877] usb 9-1: config 0 has no interface number 0 [ 230.231528][ T877] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 230.240689][ T877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.248678][ T877] usb 9-1: Product: syz [ 230.253027][ T877] usb 9-1: Manufacturer: syz [ 230.257628][ T877] usb 9-1: SerialNumber: syz [ 230.262734][ T877] usb 9-1: config 0 descriptor?? [ 230.268685][ T877] smsc95xx v2.0.0 [ 230.329250][ T305] usb 10-1: Using ep0 maxpacket: 8 [ 230.335504][ T305] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 230.344718][ T305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.353390][ T305] usb 10-1: config 0 descriptor?? [ 230.669558][ T877] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 230.680523][ T877] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 231.430220][ T5448] netlink: 'syz.6.1589': attribute type 4 has an invalid length. [ 231.542127][ T5461] overlayfs: missing 'workdir' [ 231.792473][ T305] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.807437][ T305] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 231.835560][ T305] asix 10-1:0.0: probe with driver asix failed with error -71 [ 231.844264][ T305] usb 10-1: USB disconnect, device number 2 [ 232.460602][ T877] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 232.471484][ T877] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 232.481442][ T877] usb 9-1: USB disconnect, device number 15 [ 232.832166][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 232.929135][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 232.997955][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 233.430519][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 233.432351][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 233.432366][ T36] audit: type=1400 audit(1750805477.867:33059): avc: denied { create } for pid=5549 comm="syz.8.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 233.469490][ T36] audit: type=1400 audit(1750805477.897:33060): avc: denied { map } for pid=5545 comm="syz.5.1624" path="socket:[29441]" dev="sockfs" ino=29441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.496762][ T36] audit: type=1400 audit(1750805477.907:33061): avc: denied { read } for pid=5545 comm="syz.5.1624" path="socket:[29441]" dev="sockfs" ino=29441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.502623][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 233.594032][ T36] audit: type=1400 audit(1750805478.027:33062): avc: denied { getopt } for pid=5557 comm="syz.5.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 233.615852][ T36] audit: type=1400 audit(1750805478.047:33063): avc: denied { map } for pid=5557 comm="syz.5.1629" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 233.769257][ T877] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 233.919274][ T877] usb 9-1: Using ep0 maxpacket: 16 [ 233.925624][ T877] usb 9-1: config 247 has an invalid interface number: 79 but max is 0 [ 233.934527][ T877] usb 9-1: config 247 has no interface number 0 [ 233.941180][ T877] usb 9-1: config 247 interface 79 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 233.953878][ T877] usb 9-1: config 247 interface 79 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 233.964894][ T877] usb 9-1: config 247 interface 79 altsetting 233 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 233.976190][ T877] usb 9-1: config 247 interface 79 altsetting 233 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 233.987598][ T877] usb 9-1: config 247 interface 79 altsetting 233 has an invalid descriptor for endpoint zero, skipping [ 233.998785][ T877] usb 9-1: config 247 interface 79 has no altsetting 0 [ 234.007324][ T877] usb 9-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 234.016504][ T877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.024771][ T877] usb 9-1: Product: syz [ 234.025409][ T36] audit: type=1400 audit(1750805478.467:33064): avc: denied { block_suspend } for pid=5567 comm="syz.6.1631" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.028933][ T877] usb 9-1: Manufacturer: syz [ 234.028951][ T877] usb 9-1: SerialNumber: syz [ 234.272064][ T877] usb-storage 9-1:247.79: USB Mass Storage device detected [ 234.280131][ T877] usb-storage 9-1:247.79: Quirks match for vid 03eb pid 2002: 20 [ 234.324125][ T877] usb 9-1: USB disconnect, device number 16 [ 234.538398][ T36] audit: type=1400 audit(1750805478.967:33065): avc: denied { setattr } for pid=5586 comm="syz.5.1636" path="socket:[29456]" dev="sockfs" ino=29456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.575567][ T5589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:432 [ 234.787797][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 234.797477][ T36] audit: type=1400 audit(1750805479.227:33066): avc: denied { read } for pid=5598 comm="syz.8.1640" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.039258][ T877] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 235.190253][ T877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.200437][ T877] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.209382][ T877] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.223759][ T877] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 235.232856][ T877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.241071][ T877] usb 9-1: Product: syz [ 235.245218][ T877] usb 9-1: Manufacturer: syz [ 235.249830][ T877] usb 9-1: SerialNumber: syz [ 235.255180][ T877] usb 9-1: config 0 descriptor?? [ 235.261034][ T877] usb 9-1: Found UVC 34.00 device syz (8086:0b5b) [ 235.267468][ T877] usb 9-1: No valid video chain found. [ 235.462342][ T36] audit: type=1400 audit(1750805479.897:33067): avc: denied { ioctl } for pid=5598 comm="syz.8.1640" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 235.560220][ T877] usb 9-1: USB disconnect, device number 17 [ 235.698693][ T5612] overlayfs: failed to clone upperpath [ 235.714196][ T36] audit: type=1400 audit(1750805480.147:33068): avc: denied { connect } for pid=5614 comm="syz.9.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.720756][ T5615] tipc: Started in network mode [ 235.738834][ T5615] tipc: Node identity 4, cluster identity 4711 [ 235.745070][ T5615] tipc: Node number set to 4 [ 235.762881][ T5617] vcan0: entered allmulticast mode [ 236.100911][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 236.824880][ T5637] net_ratelimit: 37735 callbacks suppressed [ 236.824898][ T5637] macsec0: mtu less than device minimum [ 236.964420][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 237.114804][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 237.359350][ T877] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 237.404191][ T5695] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 237.404218][ T5695] rust_binder: Error while translating object. [ 237.416735][ T5695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.423249][ T5695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 237.520324][ T877] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.541134][ T877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 32, changing to 9 [ 237.552236][ T877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 49528, setting to 1024 [ 237.563562][ T877] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.576658][ T877] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.585776][ T877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.594523][ T877] usb 9-1: config 0 descriptor?? [ 237.638412][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1682'. [ 237.647717][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1682'. [ 237.678401][ T5718] overlayfs: failed to resolve './cgroup.cpu/cgroup.procs': -2 [ 237.705769][ T5722] fuse: Bad value for 'fd' [ 238.014491][ T5729] cgroup: Invalid name [ 238.023056][ T877] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 238.053252][ T877] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 238.070546][ T877] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 238.197152][ T5735] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 238.205850][ T5735] rust_binder: Write failure EINVAL in pid:449 [ 238.215771][ T5737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.224013][ T31] usb 9-1: USB disconnect, device number 18 [ 238.337296][ T5755] rust_binder: Error while translating object. [ 238.337324][ T5755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.343749][ T5755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 238.362906][ T5757] binder: Unknown parameter 'defcontext01777777777777777777777' [ 238.511432][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 238.511449][ T36] audit: type=1400 audit(1750805482.947:33094): avc: denied { execute } for pid=5775 comm="syz.5.1703" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.692617][ T5780] syzkaller0: entered promiscuous mode [ 238.698184][ T5780] syzkaller0: entered allmulticast mode [ 238.707685][ T5780] binder: Unknown parameter 'ע5' [ 238.796033][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 238.811576][ T5790] capability: warning: `syz.8.1706' uses 32-bit capabilities (legacy support in use) [ 238.833354][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 238.857402][ T36] audit: type=1400 audit(1750805483.287:33095): avc: denied { write } for pid=5792 comm="syz.8.1707" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.958167][ T36] audit: type=1400 audit(1750805483.387:33096): avc: denied { bind } for pid=5803 comm="syz.9.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.008414][ T36] audit: type=1400 audit(1750805483.437:33097): avc: denied { read } for pid=5811 comm="syz.9.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.745615][ T36] audit: type=1400 audit(1750805484.177:33098): avc: denied { name_bind } for pid=5815 comm="syz.9.1717" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 240.427426][ T36] audit: type=1400 audit(1750805484.857:33099): avc: denied { lock } for pid=5837 comm="syz.9.1726" path="socket:[32094]" dev="sockfs" ino=32094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 240.471612][ T36] audit: type=1400 audit(1750805484.907:33100): avc: denied { setopt } for pid=5842 comm="syz.9.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.492599][ T36] audit: type=1400 audit(1750805484.917:33101): avc: denied { read } for pid=5846 comm="syz.9.1728" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.538925][ T5851] 9pnet_fd: Insufficient options for proto=fd [ 240.759258][ T5143] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.759276][ T5038] Bluetooth: hci0: command 0x1003 tx timeout [ 241.118598][ T36] audit: type=1400 audit(1750805485.547:33102): avc: denied { connect } for pid=5900 comm="syz.6.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.577506][ T36] audit: type=1400 audit(1750805486.007:33103): avc: denied { getopt } for pid=5918 comm="syz.9.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.623123][ T5927] overlayfs: failed to clone upperpath [ 241.630856][ T5927] overlayfs: failed to clone upperpath [ 241.770271][ T5958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.770743][ T5958] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 241.784367][ T5958] rust_binder: Write failure EINVAL in pid:492 [ 241.786258][ T5958] netlink: 'syz.5.1768': attribute type 15 has an invalid length. [ 241.800280][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1768'. [ 241.867745][ T5962] FAT-fs (rnullb0): invalid media value (0x44) [ 241.874049][ T5962] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 241.901481][ T5965] SELinux: policydb version 905587468 does not match my version range 15-33 [ 241.910763][ T5965] SELinux: failed to load policy [ 241.970904][ T5965] IPv4: Oversized IP packet from 127.202.26.0 [ 242.064610][ T3841] udevd[3841]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 242.166590][ T5985] /dev/rnullb0: Can't lookup blockdev [ 242.219238][ T389] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 242.233056][ T5994] tipc: Enabling of bearer rejected, failed to enable media [ 242.390252][ T389] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 242.398536][ T389] usb 6-1: config 0 has no interface number 0 [ 242.406317][ T389] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9e.0a [ 242.419218][ T389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.437392][ T389] usb 6-1: Product: syz [ 242.443729][ T6005] tipc: Enabling of bearer rejected, failed to enable media [ 242.447488][ T389] usb 6-1: Manufacturer: syz [ 242.457371][ T389] usb 6-1: SerialNumber: syz [ 242.472248][ T389] usb 6-1: config 0 descriptor?? [ 242.482520][ T389] usb_ehset_test 6-1:0.144: probe with driver usb_ehset_test failed with error -32 [ 242.681885][ T1284] usb 6-1: USB disconnect, device number 16 [ 242.924650][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 242.994149][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 243.229246][ T1284] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 243.378302][ T6031] netlink: 412 bytes leftover after parsing attributes in process `syz.9.1791'. [ 243.387475][ T1284] usb 9-1: Using ep0 maxpacket: 32 [ 243.393847][ T1284] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.402997][ T1284] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.411873][ T1284] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.421431][ T1284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.431818][ T1284] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.442447][ T1284] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.455982][ T1284] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.465225][ T1284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.473891][ T1284] usb 9-1: config 0 descriptor?? [ 243.682910][ T1284] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 243.883900][ T1284] usb 9-1: USB disconnect, device number 19 [ 243.890394][ T1284] usblp0: removed [ 243.985487][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 243.985503][ T36] audit: type=1400 audit(1750805488.417:33113): avc: denied { ioctl } for pid=6061 comm="syz.9.1804" path="socket:[31561]" dev="sockfs" ino=31561 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.058851][ T6072] overlayfs: failed to clone upperpath [ 244.102572][ T36] audit: type=1400 audit(1750805488.537:33114): avc: denied { remount } for pid=6079 comm="syz.9.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 244.384549][ T6134] 9pnet_fd: Insufficient options for proto=fd [ 244.410378][ T36] audit: type=1400 audit(1750805488.847:33115): avc: denied { write } for pid=6138 comm="syz.8.1825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 244.413998][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 244.455799][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 244.547644][ T36] audit: type=1400 audit(1750805488.977:33116): avc: denied { write } for pid=6170 comm="syz.8.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.604159][ T5379] udevd[5379]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 244.799048][ T6199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.809226][ T1284] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 244.990541][ T1284] usb 9-1: not running at top speed; connect to a high speed hub [ 245.000311][ T1284] usb 9-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.013339][ T1284] usb 9-1: config 1 interface 0 has no altsetting 0 [ 245.029618][ T1284] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.038686][ T1284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.046743][ T424] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 245.054618][ T1284] usb 9-1: Product: syz [ 245.058859][ T1284] usb 9-1: Manufacturer: ጌ䓝፟⼤葫⧠⢴햪퐭鏊᫶⟷뿺窟榾㡕츭ꨲඝ䞝뷨⥔Ⅳ㚊㒣꣸毨賟齿馲禎䙝멺ᎀ젦㹥Ѣ쪮ﾛ⿘틢쐝᠄㩒귨೸帪 [ 245.078402][ T1284] usb 9-1: SerialNumber: syz [ 245.086876][ T6171] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 245.219228][ T424] usb 6-1: Using ep0 maxpacket: 8 [ 245.225277][ T424] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.236346][ T424] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.246227][ T424] usb 6-1: config 0 interface 0 has no altsetting 0 [ 245.253468][ T424] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 245.258258][ T6201] overlayfs: failed to clone upperpath [ 245.268281][ T424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.282708][ T424] usb 6-1: config 0 descriptor?? [ 245.350172][ T36] audit: type=1400 audit(1750805489.787:33117): avc: denied { ioctl } for pid=6212 comm="syz.9.1849" path="socket:[32909]" dev="sockfs" ino=32909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.375081][ T36] audit: type=1326 audit(1750805489.787:33118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.9.1849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f251c98e929 code=0x0 [ 245.500728][ T1284] usb 9-1: USB disconnect, device number 20 [ 245.889278][ T6199] rust_binder: Error in use_page_slow: ESRCH [ 245.889305][ T6199] rust_binder: use_range failure ESRCH [ 245.895424][ T6199] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 245.900961][ T6199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 245.909068][ T6199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:515 [ 245.918616][ T6199] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 245.927902][ T6199] rust_binder: Read failure Err(EFAULT) in pid:515 [ 245.937725][ T424] usbhid 6-1:0.0: can't add hid device: -71 [ 245.951188][ T424] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 245.960355][ T424] usb 6-1: USB disconnect, device number 17 [ 246.027454][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 246.103394][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 246.198638][ T36] audit: type=1400 audit(1750805490.627:33119): avc: denied { map } for pid=6232 comm="syz.6.1856" path="socket:[32695]" dev="sockfs" ino=32695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.221891][ T36] audit: type=1400 audit(1750805490.627:33120): avc: denied { read } for pid=6232 comm="syz.6.1856" path="socket:[32695]" dev="sockfs" ino=32695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.369261][ T389] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 246.519226][ T389] usb 9-1: Using ep0 maxpacket: 32 [ 246.525393][ T389] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 246.533678][ T389] usb 9-1: config 0 has no interface number 0 [ 246.539789][ T389] usb 9-1: config 0 interface 184 has no altsetting 0 [ 246.547892][ T389] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 246.556987][ T389] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.564992][ T389] usb 9-1: Product: syz [ 246.569130][ T389] usb 9-1: Manufacturer: syz [ 246.573740][ T389] usb 9-1: SerialNumber: syz [ 246.578813][ T389] usb 9-1: config 0 descriptor?? [ 246.584504][ T389] smsc75xx v1.0.0 [ 246.966475][ T36] audit: type=1326 audit(1750805491.397:33121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.6.1864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b3a58e929 code=0x0 [ 247.186363][ T389] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 247.197257][ T389] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.403065][ T6273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.407364][ T6226] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 247.475957][ T36] audit: type=1400 audit(1750805491.907:33122): avc: denied { getopt } for pid=6281 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.512971][ T6286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.513113][ T6286] rust_binder: Write failure EINVAL in pid:543 [ 247.787903][ T389] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 247.817764][ T389] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 247.827480][ T389] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 247.837022][ T389] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 247.847529][ T389] usb 9-1: USB disconnect, device number 21 [ 247.902352][ T6316] /dev/rnullb0: Can't lookup blockdev [ 248.161477][ T5380] udevd[5380]: symlink '../../loop8' '/dev/disk/by-diskseq/53.tmp-b7:8' failed: Read-only file system [ 248.420117][ T6362] overlayfs: failed to clone lowerpath [ 248.478022][ T6373] fuse: Bad value for 'fd' [ 248.829222][ T389] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 248.989241][ T389] usb 9-1: Using ep0 maxpacket: 8 [ 249.000415][ T389] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 249.009826][ T389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.019365][ T389] usb 9-1: config 0 descriptor?? [ 249.050587][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 249.050604][ T36] audit: type=1400 audit(1750805493.487:33128): avc: denied { create } for pid=6386 comm="syz.9.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 249.134924][ T6396] 9pnet_fd: Insufficient options for proto=fd [ 249.418643][ T6415] overlayfs: failed to clone upperpath [ 250.048252][ T6440] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 250.080472][ T36] audit: type=1400 audit(1750805494.517:33129): avc: denied { read } for pid=6441 comm="syz.9.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.421576][ T6465] netlink: 'syz.5.1933': attribute type 4 has an invalid length. [ 250.429430][ T6465] netlink: 'syz.5.1933': attribute type 5 has an invalid length. [ 250.437188][ T6465] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1933'. [ 250.490700][ T389] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 250.500852][ T389] asix 9-1:0.0: probe with driver asix failed with error -71 [ 250.508972][ T389] usb 9-1: USB disconnect, device number 22 [ 250.690455][ T6475] overlayfs: failed to clone upperpath [ 250.709234][ T1284] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 250.859293][ T1284] usb 6-1: Using ep0 maxpacket: 32 [ 250.865576][ T1284] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.874071][ T1284] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.882709][ T1284] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.891696][ T1284] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.901352][ T1284] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.911016][ T1284] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.924077][ T1284] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.933118][ T1284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.941739][ T1284] usb 6-1: config 0 descriptor?? [ 251.061284][ T6483] input: syz0 as /devices/virtual/input/input15 [ 251.068297][ T36] audit: type=1400 audit(1750805495.497:33130): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=533 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.090970][ T36] audit: type=1400 audit(1750805495.497:33131): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=533 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.114448][ T36] audit: type=1400 audit(1750805495.497:33132): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=533 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.148038][ T1284] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.350156][ T36] audit: type=1400 audit(1750805495.787:33133): avc: denied { read write } for pid=6471 comm="syz.5.1935" name="lp0" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 251.373866][ T36] audit: type=1400 audit(1750805495.787:33134): avc: denied { open } for pid=6471 comm="syz.5.1935" path="/dev/usb/lp0" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 251.374149][ T1284] usb 6-1: USB disconnect, device number 18 [ 251.404653][ T1284] usblp0: removed [ 251.492283][ T6518] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1951'. [ 251.720111][ T36] audit: type=1400 audit(1750805496.157:33135): avc: denied { setattr } for pid=6526 comm="syz.8.1954" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 251.743199][ T36] audit: type=1400 audit(1750805496.157:33136): avc: denied { ioctl } for pid=6526 comm="syz.8.1954" path="socket:[34275]" dev="sockfs" ino=34275 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.953045][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1959'. [ 252.003658][ T36] audit: type=1400 audit(1750805496.437:33137): avc: denied { write } for pid=6540 comm="syz.5.1959" name="psched" dev="proc" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 252.028889][ T6541] fuse: Bad value for 'user_id' [ 252.034295][ T6541] fuse: Bad value for 'user_id' [ 252.053881][ T6546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.466279][ T6577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.472917][ T6578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.599907][ T6588] fuse: Bad value for 'fd' [ 252.669927][ T6594] vcan0: entered allmulticast mode [ 252.780845][ T6608] fuse: Bad value for 'fd' [ 252.899929][ T6618] SELinux: failed to load policy [ 252.905505][ T6616] tipc: Started in network mode [ 252.910457][ T6616] tipc: Node identity 4, cluster identity 4711 [ 252.916649][ T6616] tipc: Node number set to 4 [ 252.949289][ T31] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 253.101404][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 253.112438][ T31] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 253.121653][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.130594][ T31] usb 6-1: config 0 descriptor?? [ 253.135812][ T6597] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.169227][ T424] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 253.208493][ T6640] fuse: Bad value for 'fd' [ 253.323192][ T424] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.336114][ T424] usb 9-1: config 0 interface 0 has no altsetting 0 [ 253.342987][ T424] usb 9-1: New USB device found, idVendor=0463, idProduct=c227, bcdDevice= 0.00 [ 253.363595][ T424] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.373469][ T424] usb 9-1: config 0 descriptor?? [ 253.468157][ T6672] overlayfs: missing 'lowerdir' [ 253.560746][ T31] hid-generic 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 253.754719][ T31] usb 6-1: USB disconnect, device number 19 [ 253.801178][ T424] hid-generic 0003:0463:C227.0006: unknown main item tag 0x1 [ 253.819281][ T424] hid-generic 0003:0463:C227.0006: hidraw0: USB HID v1.01 Device [HID 0463:c227] on usb-dummy_hcd.8-1/input0 [ 254.284507][ T6726] SELinux: security_context_str_to_sid () failed with errno=-22 [ 254.483110][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2026'. [ 254.522668][ T31] usb 9-1: USB disconnect, device number 23 [ 254.543269][ T6754] netlink: 'syz.9.2028': attribute type 4 has an invalid length. [ 255.400339][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 255.400357][ T36] audit: type=1400 audit(1750805499.837:33147): avc: denied { create } for pid=6786 comm="syz.9.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 255.426186][ T36] audit: type=1400 audit(1750805499.837:33148): avc: denied { create } for pid=6786 comm="syz.9.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 255.586177][ T36] audit: type=1400 audit(1750805500.017:33149): avc: denied { mount } for pid=6805 comm="syz.9.2046" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 255.626705][ T6812] rust_binder: got new transaction with bad transaction stack [ 255.626732][ T6812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:643 [ 255.724299][ T36] audit: type=1326 audit(1750805500.157:33150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.6.2055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x0 [ 255.879233][ T424] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 256.029230][ T424] usb 6-1: Using ep0 maxpacket: 8 [ 256.035553][ T424] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 256.044804][ T424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.053507][ T424] usb 6-1: config 0 descriptor?? [ 256.391836][ T6843] 9pnet_fd: Insufficient options for proto=fd [ 256.825107][ T36] audit: type=1400 audit(1750805501.257:33151): avc: denied { ioctl } for pid=6868 comm="syz.8.2067" path="net:[4026532310]" dev="nsfs" ino=4026532310 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.912412][ T6912] binder: Unknown parameter 'seclabEl' [ 257.932807][ T36] audit: type=1400 audit(1750805502.367:33152): avc: denied { bind } for pid=6913 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 258.647409][ T424] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 258.664758][ T424] asix 6-1:0.0: probe with driver asix failed with error -71 [ 258.673431][ T424] usb 6-1: USB disconnect, device number 20 [ 258.702924][ T6940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.703243][ T6940] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 258.710326][ T6940] rust_binder: Error while translating object. [ 258.719757][ T6940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.726117][ T6940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653 [ 258.841865][ T6945] rust_binder: Write failure EINVAL in pid:658 [ 258.847421][ T36] audit: type=1400 audit(1750805503.277:33153): avc: denied { remount } for pid=6944 comm="syz.5.2090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 258.877333][ T36] audit: type=1400 audit(1750805503.287:33154): avc: denied { unmount } for pid=3614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 258.967198][ T6963] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2098'. [ 258.976355][ T6963] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2098'. [ 258.985673][ T6963] netlink: 'syz.8.2098': attribute type 6 has an invalid length. [ 258.993553][ T6963] netlink: 'syz.8.2098': attribute type 5 has an invalid length. [ 259.001362][ T6963] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2098'. [ 259.299273][ T424] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 259.449223][ T424] usb 9-1: Using ep0 maxpacket: 16 [ 259.456633][ T424] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 259.465763][ T424] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.473773][ T424] usb 9-1: Product: syz [ 259.477947][ T424] usb 9-1: Manufacturer: syz [ 259.482878][ T424] usb 9-1: SerialNumber: syz [ 259.487961][ T424] usb 9-1: config 0 descriptor?? [ 259.493894][ T424] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 259.501692][ T424] usb 9-1: Detected FT4233HP [ 259.693567][ T424] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 259.701245][ T424] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.902124][ T424] usb 9-1: USB disconnect, device number 24 [ 259.908764][ T424] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.918401][ T424] ftdi_sio 9-1:0.0: device disconnected [ 260.489202][ T36] audit: type=1326 audit(1750805504.917:33155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.8.2106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8998e929 code=0x0 [ 260.541726][ T36] audit: type=1400 audit(1750805504.977:33156): avc: denied { map } for pid=6986 comm="syz.8.2106" path="socket:[36247]" dev="sockfs" ino=36247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 260.975879][ T6995] tipc: Enabled bearer , priority 10 [ 261.209264][ T36] audit: type=1400 audit(1750805505.557:33157): avc: denied { shutdown } for pid=7022 comm="syz.6.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.560582][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2128'. [ 261.738065][ T7067] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 261.781996][ T7067] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 261.859227][ T7081] batadv_slave_1: entered promiscuous mode [ 261.872257][ T7080] batadv_slave_1: left promiscuous mode [ 262.503352][ T36] audit: type=1400 audit(1750805506.937:33158): avc: denied { getopt } for pid=7144 comm="syz.9.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.523317][ T36] audit: type=1400 audit(1750805506.937:33159): avc: denied { read } for pid=7146 comm="syz.9.2159" path="socket:[35482]" dev="sockfs" ino=35482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.680881][ T7167] fuse: Bad value for 'fd' [ 263.107083][ T7189] fuse: Bad value for 'fd' [ 263.226893][ T36] audit: type=1400 audit(1750805507.657:33160): avc: denied { map } for pid=7194 comm="syz.8.2175" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 263.275306][ T7218] fuse: Unknown parameter '`P' [ 263.711489][ T7223] fuse: Bad value for 'fd' [ 263.740983][ T7232] tipc: Enabling of bearer rejected, already enabled [ 263.750624][ T36] audit: type=1400 audit(1750805508.187:33161): avc: denied { sqpoll } for pid=7231 comm="syz.6.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 264.121511][ T36] audit: type=1326 audit(1750805508.557:33162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efaf8e929 code=0x7fc00000 [ 264.224931][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2195'. [ 264.576906][ T7268] overlayfs: failed to resolve './file1/file0': -2 [ 264.888811][ T36] audit: type=1400 audit(1750805509.317:33163): avc: denied { execute } for pid=7325 comm="syz.6.2218" name="file0" dev="ramfs" ino=35819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 264.910857][ T36] audit: type=1400 audit(1750805509.317:33164): avc: denied { execute_no_trans } for pid=7325 comm="syz.6.2218" path="/file0" dev="ramfs" ino=35819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 265.239259][ T5038] Bluetooth: hci0: command 0x1003 tx timeout [ 265.239259][ T5143] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.631707][ T7361] overlayfs: failed to resolve './file1': -2 [ 265.640777][ T7367] overlayfs: disabling nfs_export due to verity=on [ 265.656607][ T7367] overlayfs: missing 'lowerdir' [ 266.345114][ T36] audit: type=1400 audit(1750805510.777:33165): avc: denied { create } for pid=7396 comm="syz.9.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 266.366584][ T36] audit: type=1400 audit(1750805510.797:33166): avc: denied { getopt } for pid=7406 comm="syz.8.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.373365][ T7412] batadv_slave_1: entered promiscuous mode [ 266.394110][ T7410] batadv_slave_1: left promiscuous mode [ 266.947955][ T36] audit: type=1400 audit(1750805517.383:33167): avc: denied { create } for pid=7458 comm="syz.5.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.971499][ T7463] fuse: Bad value for 'rootmode' [ 267.156973][ T13] tipc: Subscription rejected, illegal request [ 267.269242][ T1284] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 267.420547][ T1284] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.430912][ T1284] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.440723][ T1284] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.450514][ T1284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.458528][ T1284] usb 9-1: SerialNumber: syz [ 267.669753][ T1284] usb 9-1: 0:2 : does not exist [ 267.674660][ T1284] usb 9-1: unit 5 not found! [ 267.680780][ T1284] usb 9-1: USB disconnect, device number 25 [ 267.688342][ T7477] udevd[7477]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.424423][ T7539] fuse: Bad value for 'rootmode' [ 268.585759][ T7557] overlayfs: missing 'lowerdir' [ 268.591740][ T7557] /dev/rnullb0: Can't lookup blockdev [ 268.777907][ T36] audit: type=1400 audit(1750805519.213:33168): avc: denied { create } for pid=7580 comm="syz.9.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.852525][ T36] audit: type=1326 audit(1750805519.293:33169): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.6.2314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b3a58e929 code=0x0 [ 269.161859][ T7609] overlayfs: missing 'lowerdir' [ 269.271345][ T7623] __vm_enough_memory: pid: 7623, comm: syz.8.2323, bytes: 70373039144960 not enough memory for the allocation [ 269.309948][ T36] audit: type=1400 audit(1750805519.753:33170): avc: denied { write } for pid=7624 comm="syz.8.2324" name="/" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 269.425921][ T7647] tipc: Can't bind to reserved service type 0 [ 269.763788][ T36] audit: type=1326 audit(1750805520.203:33171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.6.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 269.780631][ T31] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 269.787397][ T36] audit: type=1326 audit(1750805520.203:33172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.6.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 269.818496][ T36] audit: type=1326 audit(1750805520.203:33173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.6.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 269.842081][ T36] audit: type=1326 audit(1750805520.203:33174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.6.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 269.949203][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 269.955375][ T31] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 269.964854][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.975238][ T31] usb 9-1: config 0 descriptor?? [ 270.073729][ T7682] overlayfs: failed to clone upperpath [ 270.181374][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2336'. [ 270.190758][ T31] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 270.339605][ T7690] binder: Bad value for 'stats' [ 270.339772][ T7691] binder: Bad value for 'stats' [ 270.557559][ T7695] netlink: 'syz.6.2349': attribute type 4 has an invalid length. [ 270.565634][ T7695] netlink: 'syz.6.2349': attribute type 4 has an invalid length. [ 270.599925][ T31] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 270.609932][ T31] asix 9-1:0.0: probe with driver asix failed with error -61 [ 270.903352][ T7718] netlink: 'syz.9.2358': attribute type 5 has an invalid length. [ 270.993167][ T7741] bridge0: port 3(veth0_to_bridge) entered blocking state [ 271.000398][ T7741] bridge0: port 3(veth0_to_bridge) entered disabled state [ 271.007607][ T7741] veth0_to_bridge: entered allmulticast mode [ 271.014123][ T7741] veth0_to_bridge: entered promiscuous mode [ 271.020239][ T7741] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.032911][ T7741] bridge0: port 3(veth0_to_bridge) entered blocking state [ 271.040079][ T7741] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 271.497748][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 271.497764][ T36] audit: type=1400 audit(1750805521.933:33196): avc: denied { setopt } for pid=7760 comm="syz.9.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.598134][ T7774] overlayfs: failed to clone upperpath [ 271.664149][ T7779] devpts: called with bogus options [ 272.187756][ T36] audit: type=1400 audit(1750805522.623:33197): avc: denied { create } for pid=7812 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 272.208249][ T36] audit: type=1400 audit(1750805522.623:33198): avc: denied { setopt } for pid=7812 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 272.228784][ T36] audit: type=1400 audit(1750805522.623:33199): avc: denied { write } for pid=7812 comm="syz.5.2390" path="socket:[38597]" dev="sockfs" ino=38597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 272.890587][ T3615] usb 9-1: USB disconnect, device number 26 [ 272.910431][ T36] audit: type=1400 audit(1750805523.353:33200): avc: denied { accept } for pid=7837 comm="syz.5.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.184822][ T7873] netlink: 296 bytes leftover after parsing attributes in process `syz.5.2412'. [ 273.194003][ T36] audit: type=1400 audit(1750805523.623:33201): avc: denied { nlmsg_read } for pid=7870 comm="syz.5.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.269248][ T36] audit: type=1326 audit(1750805523.703:33202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.2413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b3a58e929 code=0x0 [ 273.408404][ T7890] overlayfs: failed to clone upperpath [ 273.470158][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2417'. [ 273.492580][ T7897] fuse: Bad value for 'fd' [ 273.497315][ T36] audit: type=1400 audit(1750805523.933:33203): avc: denied { getopt } for pid=7881 comm="syz.8.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.567832][ T36] audit: type=1326 audit(1750805523.933:33204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 273.609941][ T36] audit: type=1326 audit(1750805523.933:33205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7896 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b3a58e929 code=0x7ffc0000 [ 274.035418][ T7942] fuse: Bad value for 'user_id' [ 274.049256][ T7942] fuse: Bad value for 'user_id' [ 274.073875][ T7942] SELinux: security_context_str_to_sid () failed with errno=-22 [ 274.317615][ T7958] overlayfs: failed to clone upperpath [ 274.379211][ T3615] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 274.530262][ T3615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 274.541764][ T3615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 274.553581][ T3615] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 274.563210][ T3615] usb 9-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 274.571535][ T3615] usb 9-1: Product: syz [ 274.575821][ T3615] usb 9-1: Manufacturer: syz [ 274.580717][ T3615] usb 9-1: SerialNumber: syz [ 274.587733][ T3615] usb 9-1: config 0 descriptor?? [ 274.596289][ T7947] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.819320][ T3615] usb 9-1: USB disconnect, device number 27 [ 274.900711][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2470'. [ 274.909811][ T8058] veth0_to_bridge: left allmulticast mode [ 274.915646][ T8058] veth0_to_bridge: left promiscuous mode [ 274.921518][ T8058] bridge0: port 3(veth0_to_bridge) entered disabled state [ 274.929383][ T8058] bridge_slave_1: left allmulticast mode [ 274.935114][ T8058] bridge_slave_1: left promiscuous mode [ 274.940906][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.948319][ T8058] bridge_slave_0: left allmulticast mode [ 274.954084][ T8058] bridge_slave_0: left promiscuous mode [ 274.959853][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.617172][ T8095] binder: Binderfs stats mode cannot be changed during a remount [ 275.639639][ T8097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.759752][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 275.766217][ T8102] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 275.854737][ T8118] binder: Unknown parameter 'st"r;Sl )' [ 276.583527][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 276.583544][ T36] audit: type=1400 audit(1750805527.023:33235): avc: denied { listen } for pid=8135 comm="syz.6.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.634696][ T36] audit: type=1400 audit(1750805527.073:33236): avc: denied { accept } for pid=8135 comm="syz.6.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.667643][ T36] audit: type=1400 audit(1750805527.083:33237): avc: denied { create } for pid=8140 comm="syz.6.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 276.688972][ T8145] /dev/rnullb0: Can't lookup blockdev [ 276.782254][ T8160] 9p: Unknown access argument : -22 [ 276.831454][ T36] audit: type=1400 audit(1750805527.273:33238): avc: denied { map } for pid=8168 comm="syz.9.2512" path="socket:[39292]" dev="sockfs" ino=39292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 277.311231][ T8184] overlayfs: failed to clone upperpath [ 277.318211][ T8185] overlayfs: failed to clone upperpath [ 277.799226][ T5143] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 277.805458][ T5038] Bluetooth: hci0: command 0x1003 tx timeout [ 277.923480][ T8225] tmpfs: Unknown parameter 'h^QV2uge' [ 278.040629][ T36] audit: type=1400 audit(1750805528.483:33239): avc: denied { accept } for pid=8230 comm="syz.9.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 278.060208][ T877] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 278.110655][ T36] audit: type=1400 audit(1750805528.553:33240): avc: denied { accept } for pid=8242 comm="syz.9.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.229221][ T877] usb 9-1: Using ep0 maxpacket: 32 [ 278.235536][ T877] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 278.244180][ T877] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 278.253033][ T877] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 278.262207][ T877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.272066][ T877] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 278.282175][ T877] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 278.295360][ T877] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 278.304593][ T877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.313438][ T877] usb 9-1: config 0 descriptor?? [ 278.521331][ T877] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 278.734716][ T424] usb 9-1: USB disconnect, device number 28 [ 278.741211][ T424] usblp0: removed [ 278.942281][ T8305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8305 comm=syz.6.2563 [ 279.246534][ T36] audit: type=1400 audit(1750805529.683:33241): avc: denied { ioctl } for pid=8310 comm="syz.8.2566" path="socket:[40488]" dev="sockfs" ino=40488 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.293792][ T8321] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2570'. [ 279.302981][ T8321] gretap0: entered promiscuous mode [ 279.309688][ T8321] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2570'. [ 279.319497][ T8321] 0{X: renamed from gretap0 [ 279.325779][ T8321] 0{X: left promiscuous mode [ 279.330839][ T8321] 0{X: entered allmulticast mode [ 279.336951][ T8321] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 279.370567][ T8325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=8325 comm=syz.9.2572 [ 279.383678][ T36] audit: type=1400 audit(1750805529.823:33242): avc: denied { accept } for pid=8324 comm="syz.9.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 279.426458][ T8330] overlayfs: missing 'lowerdir' [ 279.489256][ T877] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 279.629292][ T877] usb 9-1: device descriptor read/64, error -71 [ 279.647104][ T8358] 9pnet_fd: Insufficient options for proto=fd [ 279.854130][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2584'. [ 279.889277][ T877] usb 9-1: device descriptor read/64, error -71 [ 280.088339][ T8371] fuse: Unknown parameter 'd' [ 280.129230][ T877] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 280.196541][ T8380] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2593'. [ 280.289214][ T877] usb 9-1: device descriptor read/64, error -71 [ 280.529250][ T877] usb 9-1: device descriptor read/64, error -71 [ 280.593108][ T36] audit: type=1326 audit(1750805531.033:33243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8437 comm="syz.9.2611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251c98e929 code=0x0 [ 280.639601][ T877] usb usb9-port1: attempt power cycle [ 280.921434][ T8446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 280.939227][ T8446] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 280.989238][ T877] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 281.020560][ T877] usb 9-1: device descriptor read/8, error -71 [ 281.150198][ T877] usb 9-1: device descriptor read/8, error -71 [ 281.389237][ T877] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 281.410281][ T877] usb 9-1: device descriptor read/8, error -71 [ 281.540283][ T877] usb 9-1: device descriptor read/8, error -71 [ 281.621985][ T36] audit: type=1326 audit(1750805532.063:33244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.6.2620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b3a58e929 code=0x0 [ 281.649428][ T877] usb usb9-port1: unable to enumerate USB device [ 282.045345][ T36] audit: type=1400 audit(1750805532.483:33245): avc: denied { map } for pid=8490 comm="syz.9.2628" path="socket:[40734]" dev="sockfs" ino=40734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.165150][ T36] audit: type=1400 audit(1750805532.603:33246): avc: denied { lock } for pid=8513 comm="syz.9.2637" path="socket:[40763]" dev="sockfs" ino=40763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 282.194406][ T8518] binder: Unknown parameter 'Ox}' [ 282.194406][ T8517] binder: Unknown parameter 'Ox}' [ 282.223744][ T8524] tmpfs: Unknown parameter 'NTpۈcg-' [ 282.318942][ T8533] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2644'. [ 282.378953][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2644'. [ 282.462536][ T8556] batadv_slave_0: entered promiscuous mode [ 282.469021][ T8556] batadv_slave_0: left promiscuous mode [ 282.573503][ T8557] /dev/rnullb0: Can't lookup blockdev [ 283.249265][ T36] audit: type=1400 audit(1750805533.693:33247): avc: denied { create } for pid=8572 comm="syz.8.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.269442][ T36] audit: type=1400 audit(1750805533.703:33248): avc: denied { ioctl } for pid=8572 comm="syz.8.2657" path="socket:[40828]" dev="sockfs" ino=40828 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 283.293249][ T8583] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 283.443806][ T8614] fuse: Unknown parameter 'g' [ 283.849294][ T3615] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 284.000293][ T3615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.011226][ T3615] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.020997][ T3615] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.033820][ T3615] usb 9-1: New USB device found, idVendor=056a, idProduct=c5f0, bcdDevice= 0.00 [ 284.042965][ T3615] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.051868][ T3615] usb 9-1: config 0 descriptor?? [ 284.612944][ T3615] usbhid 9-1:0.0: can't add hid device: -71 [ 284.619459][ T3615] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 284.630712][ T3615] usb 9-1: USB disconnect, device number 33 [ 285.106781][ T8646] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -40 [ 285.146315][ T8649] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2686'. [ 285.290941][ T36] audit: type=1400 audit(1750805535.733:33249): avc: denied { setopt } for pid=8664 comm="syz.8.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.315650][ T8665] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472) [ 285.326311][ T8665] SELinux: failed to load policy [ 285.840097][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.847159][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.854256][ T8692] bridge_slave_0: entered allmulticast mode [ 285.860724][ T8692] bridge_slave_0: entered promiscuous mode [ 285.867098][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.874157][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.881259][ T8692] bridge_slave_1: entered allmulticast mode [ 285.887567][ T8692] bridge_slave_1: entered promiscuous mode [ 285.928010][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.935094][ T8692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.942368][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.949405][ T8692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.968768][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.976115][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.985424][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.992518][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.002585][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.009666][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.033403][ T8692] veth0_vlan: entered promiscuous mode [ 286.045610][ T8692] veth1_macvtap: entered promiscuous mode [ 286.204516][ T36] audit: type=1400 audit(1750805536.643:33250): avc: denied { mounton } for pid=8696 comm="syz.6.2698" path="/file0" dev="ramfs" ino=41415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=sock_file permissive=1 [ 286.399984][ T36] audit: type=1400 audit(1750805536.843:33251): avc: denied { write } for pid=8700 comm="syz.8.2699" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 286.438430][ T877] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 286.445899][ T877] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 286.453916][ T877] hid-generic 0000:0003:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 286.513004][ T13] bridge_slave_1: left allmulticast mode [ 286.520994][ T13] bridge_slave_1: left promiscuous mode [ 286.526758][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.533089][ T8717] overlayfs: failed to clone upperpath [ 286.539758][ T13] bridge_slave_0: left allmulticast mode [ 286.545455][ T13] bridge_slave_0: left promiscuous mode [ 286.551150][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.624476][ T8720] tap0: tun_chr_ioctl cmd 1074025677 [ 286.629997][ T8720] tap0: linktype set to 776 [ 286.691876][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2709'. [ 286.709836][ T13] tipc: Disabling bearer [ 286.715078][ T13] tipc: Left network mode [ 286.741330][ T36] audit: type=1400 audit(1750805537.183:33252): avc: denied { read } for pid=8741 comm="syz.8.2714" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 286.764409][ T36] audit: type=1400 audit(1750805537.183:33253): avc: denied { open } for pid=8741 comm="syz.8.2714" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 286.855459][ T13] veth1_macvtap: left promiscuous mode [ 286.862697][ T13] veth0_vlan: left promiscuous mode [ 286.896827][ T8755] binder: Unknown parameter '[irsync' [ 286.952725][ T36] audit: type=1400 audit(1750805537.393:33254): avc: denied { read } for pid=8756 comm="syz.8.2718" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.300409][ T36] audit: type=1400 audit(1750805537.393:33255): avc: denied { open } for pid=8756 comm="syz.8.2718" path="/240/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.326923][ T36] audit: type=1400 audit(1750805537.393:33256): avc: denied { ioctl } for pid=8756 comm="syz.8.2718" path="/240/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.474481][ T8765] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.475148][ T8765] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 287.518991][ T8767] overlayfs: missing 'workdir' [ 287.829228][ T1284] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 287.959579][ T1284] usb 7-1: device descriptor read/64, error -71 [ 288.149220][ T877] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 288.199326][ T1284] usb 7-1: device descriptor read/64, error -71 [ 288.299236][ T877] usb 9-1: Using ep0 maxpacket: 16 [ 288.306333][ T877] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 288.316623][ T877] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.325557][ T877] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 288.339897][ T877] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.348930][ T877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.356930][ T877] usb 9-1: Product: Ј [ 288.361028][ T877] usb 9-1: Manufacturer: 楖ᾛ☐∎鳌辎▓蟃퉟渝ᤶ㜢ᢾ摅飯下஖✁幅ⷻ卦ꌅ휍ႆ뺺ﴴ阬螇룆즠헝צּ数肞驶툞䁃ɩ湪䅀⃐ಎ旅쵛⣨쁇㘣呭ल睭䤋⢧贚礞覾ꉅ䦺닥戎䬞膗✣∗汨ィ儷 [ 288.383570][ T877] usb 9-1: SerialNumber: ъ [ 288.449243][ T1284] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 288.579253][ T1284] usb 7-1: device descriptor read/64, error -71 [ 288.594496][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.603121][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.613902][ T877] usb 9-1: 0:2 : does not exist [ 288.620347][ T877] usb 9-1: USB disconnect, device number 34 [ 288.819250][ T1284] usb 7-1: device descriptor read/64, error -71 [ 288.929297][ T1284] usb usb7-port1: attempt power cycle [ 289.196564][ T8780] /dev/sr0: Can't lookup blockdev [ 289.279226][ T1284] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 289.300416][ T1284] usb 7-1: device descriptor read/8, error -71 [ 289.313897][ T8782] FAULT_INJECTION: forcing a failure. [ 289.313897][ T8782] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 289.327230][ T8782] CPU: 1 UID: 0 PID: 8782 Comm: syz.8.2727 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 289.327257][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.327272][ T8782] Call Trace: [ 289.327280][ T8782] [ 289.327291][ T8782] __dump_stack+0x21/0x30 [ 289.327316][ T8782] dump_stack_lvl+0x10c/0x190 [ 289.327327][ T8782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.327339][ T8782] ? unwind_get_return_address+0x51/0x90 [ 289.327350][ T8782] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 289.327362][ T8782] dump_stack+0x19/0x20 [ 289.327376][ T8782] should_fail_ex+0x3d9/0x530 [ 289.327388][ T8782] should_fail_alloc_page+0xeb/0x110 [ 289.327403][ T8782] __alloc_pages_noprof+0x19d/0x6c0 [ 289.327413][ T8782] ? stack_depot_save_flags+0x38/0x800 [ 289.327425][ T8782] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 289.327436][ T8782] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 289.327447][ T8782] ? security_inode_alloc+0x51/0x200 [ 289.327459][ T8782] ? inode_init_always_gfp+0x756/0x9e0 [ 289.327473][ T8782] ? alloc_inode+0xc5/0x270 [ 289.327481][ T8782] ? new_inode+0x25/0x1e0 [ 289.327489][ T8782] ? proc_pid_make_inode+0x25/0x140 [ 289.327502][ T8782] ? proc_pident_instantiate+0x6d/0x2c0 [ 289.327516][ T8782] fuse_readdir+0x3067/0x4b80 [ 289.327528][ T8782] ? avc_has_perm_noaudit+0x268/0x360 [ 289.327541][ T8782] ? __cfi_avc_has_perm+0x10/0x10 [ 289.327551][ T8782] ? __cfi_fuse_readdir+0x10/0x10 [ 289.327562][ T8782] ? selinux_file_open+0x457/0x610 [ 289.327576][ T8782] ? __cfi_selinux_file_open+0x10/0x10 [ 289.327592][ T8782] ? is_bpf_text_address+0x17b/0x1a0 [ 289.327608][ T8782] ? _parse_integer+0x2e/0x40 [ 289.327628][ T8782] ? kstrtoull+0x70/0x1e0 [ 289.327638][ T8782] ? kstrtouint+0x78/0xf0 [ 289.327649][ T8782] ? __kasan_check_write+0x18/0x20 [ 289.327660][ T8782] ? rwsem_read_trylock+0x2b1/0x660 [ 289.327672][ T8782] ? downgrade_write+0x440/0x440 [ 289.327682][ T8782] ? __cfi_selinux_file_permission+0x10/0x10 [ 289.327696][ T8782] ? vfs_write+0x8ba/0xe80 [ 289.327708][ T8782] ? down_read_killable+0x79/0xf0 [ 289.327721][ T8782] ? __cfi_down_read_killable+0x10/0x10 [ 289.327733][ T8782] ? mutex_lock+0x92/0x1c0 [ 289.327743][ T8782] ? __cfi_mutex_lock+0x10/0x10 [ 289.327753][ T8782] ? bpf_lsm_file_permission+0xd/0x20 [ 289.327765][ T8782] iterate_dir+0x203/0x5e0 [ 289.327779][ T8782] __se_sys_getdents64+0xe9/0x240 [ 289.327793][ T8782] ? fput+0x1a5/0x240 [ 289.327802][ T8782] ? __x64_sys_getdents64+0xa0/0xa0 [ 289.327815][ T8782] ? ksys_write+0x1ef/0x250 [ 289.327827][ T8782] ? __cfi_filldir64+0x10/0x10 [ 289.327835][ T8782] ? __cfi_ksys_write+0x10/0x10 [ 289.327847][ T8782] ? __kasan_check_read+0x15/0x20 [ 289.327858][ T8782] __x64_sys_getdents64+0x7f/0xa0 [ 289.327872][ T8782] x64_sys_call+0x27d0/0x2ee0 [ 289.327884][ T8782] do_syscall_64+0x58/0xf0 [ 289.327893][ T8782] ? clear_bhb_loop+0x50/0xa0 [ 289.327904][ T8782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.327915][ T8782] RIP: 0033:0x7fde8998e929 [ 289.327928][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.327937][ T8782] RSP: 002b:00007fde8a7a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 289.327954][ T8782] RAX: ffffffffffffffda RBX: 00007fde89bb5fa0 RCX: 00007fde8998e929 [ 289.327962][ T8782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 289.327968][ T8782] RBP: 00007fde8a7a3090 R08: 0000000000000000 R09: 0000000000000000 [ 289.327975][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.327981][ T8782] R13: 0000000000000000 R14: 00007fde89bb5fa0 R15: 00007ffda0144ce8 [ 289.327989][ T8782] [ 289.530477][ T1284] usb 7-1: device descriptor read/8, error -71 [ 289.929280][ T1284] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 289.950249][ T1284] usb 7-1: device descriptor read/8, error -71 [ 290.080309][ T1284] usb 7-1: device descriptor read/8, error -71 [ 290.189318][ T1284] usb usb7-port1: unable to enumerate USB device [ 290.216604][ T8790] 9pnet_fd: Insufficient options for proto=fd [ 290.689506][ T8802] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2732'. [ 290.736976][ T36] audit: type=1400 audit(1750805541.173:33257): avc: denied { map } for pid=8806 comm="syz.8.2735" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.762264][ T3615] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 290.789416][ T3615] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.799256][ T36] audit: type=1400 audit(1750805541.203:33258): avc: denied { execute } for pid=8806 comm="syz.8.2735" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.069263][ T1284] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 291.219237][ T1284] usb 7-1: Using ep0 maxpacket: 32 [ 291.225489][ T1284] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 291.233665][ T1284] usb 7-1: config 0 has no interface number 0 [ 291.241217][ T1284] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 291.250497][ T1284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.258632][ T1284] usb 7-1: Product: syz [ 291.262872][ T1284] usb 7-1: Manufacturer: syz [ 291.267469][ T1284] usb 7-1: SerialNumber: syz [ 291.272940][ T1284] usb 7-1: config 0 descriptor?? [ 291.278929][ T1284] smsc95xx v2.0.0 [ 291.587352][ T36] audit: type=1400 audit(1750805542.023:33259): avc: denied { lock } for pid=8838 comm="syz.8.2745" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 291.590267][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2745'. [ 291.743491][ T36] audit: type=1400 audit(1750805542.183:33260): avc: denied { watch watch_reads } for pid=8841 comm="syz.9.2746" path="/410/file0" dev="tmpfs" ino=2289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 291.854656][ T1284] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 291.865675][ T1284] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 291.875855][ T8847] input: syz1 as /devices/virtual/input/input17 [ 291.992453][ T36] audit: type=1326 audit(1750805542.433:33261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.9.2750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f251c98e929 code=0x0 [ 292.022055][ T8861] exFAT-fs (rnullb0): invalid boot record signature [ 292.028708][ T8861] exFAT-fs (rnullb0): failed to read boot sector [ 292.035332][ T8861] exFAT-fs (rnullb0): failed to recognize exfat type [ 292.046759][ T36] audit: type=1400 audit(1750805542.483:33262): avc: denied { unmount } for pid=3929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 292.091436][ T36] audit: type=1400 audit(1750805542.533:33263): avc: denied { create } for pid=8872 comm="syz.8.2756" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 292.112674][ T36] audit: type=1400 audit(1750805542.533:33264): avc: denied { append } for pid=8872 comm="syz.8.2756" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 292.229082][ T8890] rust_binder: Write failure EINVAL in pid:820 [ 292.450737][ T8916] can0: slcan on ttyS3. [ 292.461182][ T36] audit: type=1400 audit(1750805542.893:33265): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 292.482553][ T36] audit: type=1400 audit(1750805542.893:33266): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.504467][ T36] audit: type=1400 audit(1750805542.893:33267): avc: denied { read } for pid=148 comm="dhcpcd" name="n19" dev="tmpfs" ino=4241 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.527268][ T36] audit: type=1400 audit(1750805542.893:33268): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=4241 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.550409][ T36] audit: type=1400 audit(1750805542.893:33269): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=4241 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.577379][ T8916] can0 (unregistered): slcan off ttyS3. [ 292.577398][ T36] audit: type=1400 audit(1750805542.923:33270): avc: denied { read } for pid=8920 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.909221][ T389] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 293.059221][ T389] usb 9-1: Using ep0 maxpacket: 8 [ 293.065385][ T389] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 293.074469][ T389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.083125][ T389] usb 9-1: config 0 descriptor?? [ 293.679856][ T1284] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 293.690939][ T1284] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 293.700627][ T389] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 293.706431][ T1284] usb 7-1: USB disconnect, device number 11 [ 293.713165][ T389] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 293.749337][ T389] asix 9-1:0.0: probe with driver asix failed with error -71 [ 293.758993][ T389] usb 9-1: USB disconnect, device number 35 [ 294.032330][ T8970] fuse: Bad value for 'rootmode' [ 294.037881][ T8970] incfs: Error accessing: ./file1. [ 294.043180][ T8970] incfs: mount failed -2 [ 294.049226][ T1284] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 294.049394][ T389] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 294.219204][ T1284] usb 7-1: Using ep0 maxpacket: 32 [ 294.225571][ T1284] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.233901][ T1284] usb 7-1: config 0 has no interface number 0 [ 294.240259][ T1284] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.251446][ T1284] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.261420][ T1284] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 294.270773][ T1284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.280062][ T1284] usb 7-1: config 0 descriptor?? [ 294.489239][ T389] usb 9-1: device descriptor read/64, error -71 [ 294.729320][ T389] usb 9-1: device descriptor read/64, error -71 [ 294.889223][ T1284] uclogic 0003:28BD:0094.0009: failed retrieving string descriptor #100: -71 [ 294.898099][ T1284] uclogic 0003:28BD:0094.0009: failed retrieving pen parameters: -71 [ 294.906217][ T1284] uclogic 0003:28BD:0094.0009: pen probing failed: -71 [ 294.913121][ T1284] uclogic 0003:28BD:0094.0009: failed probing parameters: -71 [ 294.920629][ T1284] uclogic 0003:28BD:0094.0009: probe with driver uclogic failed with error -71 [ 294.931110][ T1284] usb 7-1: USB disconnect, device number 12 [ 294.969298][ T389] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 295.099254][ T389] usb 9-1: device descriptor read/64, error -71 [ 295.339279][ T389] usb 9-1: device descriptor read/64, error -71 [ 295.451535][ T389] usb usb9-port1: attempt power cycle [ 295.592578][ T9022] overlayfs: failed to resolve './file1': -2 [ 295.614764][ T8087] udevd[8087]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 295.616745][ T7477] udevd[7477]: symlink '../../loop5' '/dev/disk/by-diskseq/55.tmp-b7:5' failed: Read-only file system [ 295.789364][ T8087] udevd[8087]: symlink '../../loop5' '/dev/disk/by-diskseq/55.tmp-b7:5' failed: Read-only file system [ 295.789391][ T389] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 295.813856][ T7477] udevd[7477]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 295.822093][ T8087] udevd[8087]: symlink '../../loop5' '/dev/disk/by-diskseq/55.tmp-b7:5' failed: Read-only file system [ 295.843986][ T7477] udevd[7477]: symlink '../../loop9' '/dev/disk/by-diskseq/54.tmp-b7:9' failed: Read-only file system [ 295.850167][ T389] usb 9-1: device descriptor read/8, error -71 [ 295.863579][ T8087] udevd[8087]: symlink '../../loop9' '/dev/disk/by-diskseq/57.tmp-b7:9' failed: Read-only file system [ 295.927834][ T9041] rust_binder: Write failure EFAULT in pid:37 [ 296.000398][ T389] usb 9-1: device descriptor read/8, error -71 [ 296.144930][ T9049] batadv_slave_1: entered promiscuous mode [ 296.165258][ T9049] batadv_slave_1: left promiscuous mode [ 296.201226][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2801'. [ 296.256508][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.263682][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.263700][ T389] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 296.271187][ T9051] bridge_slave_0: entered allmulticast mode [ 296.285011][ T9051] bridge_slave_0: entered promiscuous mode [ 296.291295][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.298335][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.305464][ T9051] bridge_slave_1: entered allmulticast mode [ 296.310367][ T389] usb 9-1: device descriptor read/8, error -71 [ 296.311862][ T9051] bridge_slave_1: entered promiscuous mode [ 296.360526][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.367562][ T9051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.374866][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.381920][ T9051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.402851][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.410392][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.420160][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.427197][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.436595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.443643][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.452298][ T389] usb 9-1: device descriptor read/8, error -71 [ 296.470211][ T9051] veth0_vlan: entered promiscuous mode [ 296.481640][ T9051] veth1_macvtap: entered promiscuous mode [ 296.559464][ T389] usb usb9-port1: unable to enumerate USB device [ 296.769776][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 296.949241][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 296.955576][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.967322][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 296.976511][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.985466][ T9] usb 7-1: config 0 descriptor?? [ 297.129228][ T31] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 297.280322][ T31] usb 9-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 297.290769][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 297.302120][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25344, setting to 1024 [ 297.307535][ T9111] /dev/rnullb0: Can't lookup blockdev [ 297.313515][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.342099][ T31] usb 9-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 297.351520][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.369446][ T31] usb 9-1: config 0 descriptor?? [ 297.375637][ T9117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.393167][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 297.405688][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 297.415018][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 297.415034][ T36] audit: type=1400 audit(1750805547.853:33283): avc: denied { ioctl } for pid=9116 comm="syz.2.2827" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 297.430261][ T9117] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 297.446685][ T9] usb 7-1: USB disconnect, device number 13 [ 297.776536][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.783520][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.790431][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.797313][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.804846][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.811770][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.818649][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.825995][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x7 [ 297.832896][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.839838][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.846704][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.853582][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x6 [ 297.860473][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.867317][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.874195][ T31] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 297.881144][ T31] apple 0003:05AC:0245.000A: item fetching failed at offset 37/41 [ 297.889091][ T31] apple 0003:05AC:0245.000A: parse failed [ 297.894907][ T31] apple 0003:05AC:0245.000A: probe with driver apple failed with error -22 [ 297.990639][ T9] usb 9-1: USB disconnect, device number 40 [ 298.062607][ T9153] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.062825][ T9153] rust_binder: Write failure EINVAL in pid:31 [ 298.749221][ T389] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 298.793152][ T36] audit: type=1400 audit(1750805549.233:33284): avc: denied { ioctl } for pid=9170 comm="syz.6.2843" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 298.793590][ T9171] netlink: 492 bytes leftover after parsing attributes in process `syz.6.2843'. [ 298.910263][ T389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.932054][ T389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.944856][ T389] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 298.954289][ T389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.969415][ T389] usb 9-1: config 0 descriptor?? [ 298.979412][ T389] hub 9-1:0.0: USB hub found [ 299.086737][ T9211] binder: Bad value for 'stats' [ 299.179271][ T389] hub 9-1:0.0: 1 port detected [ 299.192657][ T9220] fuse: Unknown parameter 'fdohc#+vMRGP' [ 299.585929][ T9163] /dev/rnullb0: Can't open blockdev [ 299.595472][ T389] usb 9-1: USB disconnect, device number 41 [ 299.928094][ T9250] fuse: Bad value for 'user_id' [ 299.933005][ T9250] fuse: Bad value for 'user_id' [ 299.990204][ T9252] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2870'. [ 300.069214][ T389] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 300.117045][ T36] audit: type=1326 audit(1750805550.553:33285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.9.2874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251c98e929 code=0x0 [ 300.143673][ T9262] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2871'. [ 300.172550][ T36] audit: type=1400 audit(1750805550.613:33286): avc: denied { create } for pid=9263 comm="syz.8.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 300.220044][ T9262] SELinux: failed to load policy [ 300.229256][ T389] usb 3-1: Using ep0 maxpacket: 16 [ 300.235569][ T389] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 300.243821][ T389] usb 3-1: config 0 has no interface number 0 [ 300.250274][ T389] usb 3-1: config 0 interface 113 has no altsetting 0 [ 300.258426][ T389] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 300.267539][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.275571][ T389] usb 3-1: Product: syz [ 300.279930][ T389] usb 3-1: Manufacturer: syz [ 300.284523][ T389] usb 3-1: SerialNumber: syz [ 300.290226][ T389] usb 3-1: config 0 descriptor?? [ 300.497709][ T9] usb 3-1: USB disconnect, device number 3 [ 301.096238][ T9279] tipc: Enabling of bearer rejected, failed to enable media [ 301.105989][ T9279] fuse: Unknown parameter 'r' [ 301.137924][ T9304] binder: Unknown parameter 'fscontext?}' [ 301.189231][ T3615] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 301.408210][ T9343] /dev/rnullb0: Can't lookup blockdev [ 301.821481][ T9408] netlink: 'syz.9.2919': attribute type 5 has an invalid length. [ 301.851117][ T9408] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2919'. [ 302.419107][ T9421] cgroup: fork rejected by pids controller in /syz2 [ 302.631671][ T36] audit: type=1326 audit(1750805553.073:33287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9448 comm="syz.9.2928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f251c98e929 code=0x0 [ 302.666561][ T3319] bridge_slave_1: left allmulticast mode [ 302.679637][ T3319] bridge_slave_1: left promiscuous mode [ 302.695449][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.705850][ T3319] bridge_slave_0: left allmulticast mode [ 302.719223][ T3319] bridge_slave_0: left promiscuous mode [ 302.724888][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.890450][ T9464] binder: Unknown parameter 'smackfsfloor' [ 302.905415][ T3319] tipc: Left network mode [ 302.922804][ T3319] veth1_macvtap: left promiscuous mode [ 302.928563][ T3319] veth0_vlan: left promiscuous mode [ 303.022815][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.039351][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.046514][ T9460] bridge_slave_0: entered allmulticast mode [ 303.055662][ T9460] bridge_slave_0: entered promiscuous mode [ 303.062331][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.069665][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.076805][ T9460] bridge_slave_1: entered allmulticast mode [ 303.084108][ T9460] bridge_slave_1: entered promiscuous mode [ 303.195068][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.202157][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.241245][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.248343][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.292862][ T9460] veth0_vlan: entered promiscuous mode [ 303.307224][ T9460] veth1_macvtap: entered promiscuous mode [ 306.285005][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 306.291034][ T9510] fuse: Unknown parameter '&d' [ 306.420736][ T9521] SELinux: failed to load policy [ 306.430185][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.462127][ T9523] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 306.462150][ T9523] rust_binder: Read failure Err(EFAULT) in pid:145 [ 306.638006][ T9528] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 306.719254][ T9] usb 7-1: device descriptor read/64, error -71 [ 306.981600][ T9] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 306.990742][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.998737][ T9] usb 7-1: Product: syz [ 307.003230][ T9] usb 7-1: Manufacturer: syz [ 307.007827][ T9] usb 7-1: SerialNumber: syz [ 307.012922][ T9] usb 7-1: config 0 descriptor?? [ 307.149193][ T1284] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.299191][ T1284] usb 3-1: Using ep0 maxpacket: 16 [ 307.305369][ T1284] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 307.313791][ T1284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.323998][ T1284] usb 3-1: config 0 has no interface number 0 [ 307.332219][ T1284] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 307.341352][ T1284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.349388][ T1284] usb 3-1: Product: syz [ 307.353535][ T1284] usb 3-1: Manufacturer: syz [ 307.358114][ T1284] usb 3-1: SerialNumber: syz [ 307.363456][ T1284] usb 3-1: config 0 descriptor?? [ 307.369591][ T1284] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 307.375947][ T1284] usb 3-1: No valid video chain found. [ 307.570778][ T36] audit: type=1404 audit(1750805558.008:33288): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 307.620102][ T36] audit: type=1400 audit(1750805558.058:33289): avc: denied { ioctl } for pid=9518 comm="syz.6.2947" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 307.648066][ T36] audit: type=1400 audit(1750805558.078:33290): avc: denied { remount } for pid=9546 comm="syz.2.2955" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0 [ 307.648463][ T1284] usb 3-1: USB disconnect, device number 4 [ 307.679806][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 307.692854][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 307.693884][ T36] audit: type=1400 audit(1750805558.128:33291): avc: denied { create } for pid=9552 comm="syz.9.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 307.703977][ T9] usb 7-1: USB disconnect, device number 15 [ 307.732710][ T36] audit: type=1400 audit(1750805558.158:33292): avc: denied { create } for pid=9552 comm="syz.9.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 307.756316][ T36] audit: type=1400 audit(1750805558.158:33293): avc: denied { mounton } for pid=9552 comm="syz.9.2957" path="/512/file0" dev="tmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 307.779915][ T36] audit: type=1400 audit(1750805558.158:33294): avc: denied { create } for pid=9552 comm="syz.9.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 307.800932][ T36] audit: type=1400 audit(1750805558.188:33295): avc: denied { watch } for pid=9559 comm="syz.9.2959" path="/514/file0" dev="tmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 307.824223][ T36] audit: type=1400 audit(1750805558.188:33296): avc: denied { map } for pid=9559 comm="syz.9.2959" path="socket:[46128]" dev="sockfs" ino=46128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=0 [ 307.847498][ T36] audit: type=1400 audit(1750805558.188:33297): avc: denied { mounton } for pid=9559 comm="syz.9.2959" path="/514/file0" dev="tmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 307.871743][ T36] audit: type=1400 audit(1750805558.198:33298): avc: denied { create } for pid=9564 comm="syz.9.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 307.899189][ T36] audit: type=1400 audit(1750805558.208:33299): avc: denied { create } for pid=9564 comm="syz.9.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 308.439425][ T5143] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 308.445579][ T5038] Bluetooth: hci0: command 0x1003 tx timeout [ 311.516040][ T9898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9898 comm=syz.9.3083 [ 311.698985][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3097'. [ 312.653940][ T36] kauditd_printk_skb: 909 callbacks suppressed [ 312.653959][ T36] audit: type=1400 audit(1750805563.088:34209): avc: denied { read } for pid=10033 comm="syz.3.3137" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 312.695611][ T36] audit: type=1400 audit(1750805563.118:34210): avc: denied { read } for pid=10033 comm="syz.3.3137" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 312.719011][ T36] audit: type=1400 audit(1750805563.128:34211): avc: denied { read write } for pid=9460 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 312.743523][ T36] audit: type=1400 audit(1750805563.158:34212): avc: denied { read } for pid=10035 comm="syz.3.3138" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 312.766680][ T36] audit: type=1400 audit(1750805563.158:34213): avc: denied { create } for pid=10035 comm="syz.3.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 312.787672][ T36] audit: type=1400 audit(1750805563.158:34214): avc: denied { name_bind } for pid=10035 comm="syz.3.3138" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 312.819752][ T36] audit: type=1400 audit(1750805563.258:34215): avc: denied { load_policy } for pid=10035 comm="syz.3.3138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 312.877307][ T36] audit: type=1400 audit(1750805563.308:34216): avc: denied { read write } for pid=9051 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 312.916839][ T36] audit: type=1400 audit(1750805563.308:34217): avc: denied { mounton } for pid=10048 comm="syz.9.3142" path="/554/file0" dev="tmpfs" ino=3071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 312.962469][ T36] audit: type=1400 audit(1750805563.308:34218): avc: denied { execute } for pid=10048 comm="syz.9.3142" name="file0" dev="tmpfs" ino=3071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 313.574154][T10103] netlink: 'syz.3.3161': attribute type 4 has an invalid length. [ 313.600501][T10107] netlink: 'syz.3.3163': attribute type 15 has an invalid length. [ 313.608396][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3163'. [ 316.891896][T10264] sit0: entered promiscuous mode [ 316.897805][T10264] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 316.905630][T10264] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3222'. [ 317.668114][ T36] kauditd_printk_skb: 729 callbacks suppressed [ 317.668132][ T36] audit: type=1400 audit(1750805568.098:34948): avc: denied { mounton } for pid=10384 comm="syz.3.3266" path="/100/file0" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 317.721691][ T36] audit: type=1400 audit(1750805568.118:34949): avc: denied { read write } for pid=10384 comm="syz.3.3266" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 317.747496][ T36] audit: type=1400 audit(1750805568.128:34950): avc: denied { read write } for pid=10385 comm="syz.2.3267" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 317.775908][ T36] audit: type=1400 audit(1750805568.128:34951): avc: denied { create } for pid=10385 comm="syz.2.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 317.796844][ T36] audit: type=1400 audit(1750805568.148:34952): avc: denied { read write } for pid=9051 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 317.823100][ T36] audit: type=1400 audit(1750805568.178:34953): avc: denied { read } for pid=10389 comm="syz.2.3268" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 317.847747][ T36] audit: type=1400 audit(1750805568.218:34954): avc: denied { read write } for pid=8692 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 317.872419][ T36] audit: type=1400 audit(1750805568.258:34955): avc: denied { read } for pid=10391 comm="syz.6.3269" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 317.895380][ T36] audit: type=1400 audit(1750805568.258:34956): avc: denied { read write } for pid=10389 comm="syz.2.3268" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 317.940771][ T36] audit: type=1400 audit(1750805568.278:34957): avc: denied { read } for pid=10389 comm="syz.2.3268" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 318.259460][T10414] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3278'. [ 319.847518][T10466] can0: slcan on ttyS3. [ 319.887184][T10465] can0 (unregistered): slcan off ttyS3. [ 320.411514][T10498] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.915236][T10520] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.954283][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.961395][T10520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.267242][T10546] can0: slcan on ttyS3. [ 321.302439][T10545] can0 (unregistered): slcan off ttyS3. [ 322.147163][T10597] can0: slcan on ttyS3. [ 322.221490][T10596] can0 (unregistered): slcan off ttyS3. [ 322.304194][T10604] can0: slcan on ttyS3. [ 322.669495][ T36] kauditd_printk_skb: 4851 callbacks suppressed [ 322.669512][ T36] audit: type=1400 audit(1750805573.108:39809): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.681720][T10612] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.697216][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.705407][T10611] netlink: 'syz.2.3350': attribute type 4 has an invalid length. [ 322.709943][ T148] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 322.717783][ T36] audit: type=1400 audit(1750805573.108:39810): avc: denied { create } for pid=10610 comm="syz.2.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 322.725401][ T148] audit: backlog limit exceeded [ 322.753610][T10612] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 322.762281][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.767662][ T36] audit: type=1400 audit(1750805573.108:39811): avc: denied { read write } for pid=10610 comm="syz.2.3350" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 322.768854][T10612] audit: backlog limit exceeded [ 323.171860][T10600] can0 (unregistered): slcan off ttyS3. [ 323.203518][T10629] can0: slcan on ttyS3. [ 323.321614][T10626] can0 (unregistered): slcan off ttyS3. [ 323.843454][T10670] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10670 comm=syz.3.3367 [ 324.145364][T10686] netlink: 57 bytes leftover after parsing attributes in process `syz.3.3371'. [ 324.339644][T10695] netlink: 'syz.9.3375': attribute type 4 has an invalid length. [ 324.384051][T10695] netlink: 'syz.9.3375': attribute type 4 has an invalid length. [ 327.659480][ T60] tipc: Left network mode [ 327.679439][ T36] kauditd_printk_skb: 8051 callbacks suppressed [ 327.679454][ T36] audit: type=1400 audit(1750805578.118:47753): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.706541][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.706797][ T36] audit: type=1400 audit(1750805578.118:47754): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.714941][ T148] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 327.734255][ T36] audit: type=1400 audit(1750805578.118:47755): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.734280][ T36] audit: type=1400 audit(1750805578.118:47756): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.743063][ T148] audit: backlog limit exceeded [ 327.763046][ T36] audit: type=1400 audit(1750805578.118:47757): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.787991][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.788902][ T36] audit: type=1400 audit(1750805578.118:47758): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.838812][ T60] veth1_macvtap: left promiscuous mode [ 327.844913][ T60] veth0_vlan: left promiscuous mode [ 332.689427][ T36] kauditd_printk_skb: 14782 callbacks suppressed [ 332.689444][ T36] audit: type=1400 audit(1750805583.128:62338): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.716991][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.718173][ T36] audit: type=1400 audit(1750805583.128:62339): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.723668][ T148] audit: audit_lost=109 audit_rate_limit=0 audit_backlog_limit=64 [ 332.745781][ T36] audit: type=1400 audit(1750805583.128:62340): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.752623][ T148] audit: backlog limit exceeded [ 332.753651][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 332.773772][ T36] audit: type=1400 audit(1750805583.128:62341): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.785530][ T148] audit: audit_lost=110 audit_rate_limit=0 audit_backlog_limit=64 [ 332.814731][ T148] audit: backlog limit exceeded [ 337.699185][ T36] kauditd_printk_skb: 14695 callbacks suppressed [ 337.699205][ T36] audit: type=1400 audit(1750805588.128:76989): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.747314][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.753902][ T36] audit: type=1400 audit(1750805588.128:76990): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.774947][ T148] audit: audit_lost=127 audit_rate_limit=0 audit_backlog_limit=64 [ 337.782766][ T148] audit: backlog limit exceeded [ 337.788357][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.794919][ T36] audit: type=1400 audit(1750805588.128:76991): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.815968][ T148] audit: audit_lost=128 audit_rate_limit=0 audit_backlog_limit=64 [ 337.823826][ T148] audit: backlog limit exceeded [ 337.829426][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.709431][ T36] kauditd_printk_skb: 15154 callbacks suppressed [ 342.709447][ T36] audit: type=1400 audit(1750805593.148:92111): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.735078][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.737973][ T36] audit: type=1400 audit(1750805593.148:92112): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.744326][ T148] audit: audit_lost=141 audit_rate_limit=0 audit_backlog_limit=64 [ 342.766003][ T36] audit: type=1400 audit(1750805593.148:92113): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.773327][ T148] audit: backlog limit exceeded [ 342.794837][ T36] audit: type=1400 audit(1750805593.148:92114): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.800943][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.820709][ T36] audit: type=1400 audit(1750805593.148:92115): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.826627][ T148] audit: audit_lost=142 audit_rate_limit=0 audit_backlog_limit=64 [ 347.720008][ T36] kauditd_printk_skb: 14812 callbacks suppressed [ 347.720025][ T36] audit: type=1400 audit(1750805598.158:106927): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.746647][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.750441][ T36] audit: type=1400 audit(1750805598.158:106928): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.754181][ T148] audit: audit_lost=143 audit_rate_limit=0 audit_backlog_limit=64 [ 347.783316][ T148] audit: backlog limit exceeded [ 347.789689][ T36] audit: type=1400 audit(1750805598.158:106929): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.790489][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.812491][ T36] audit: type=1400 audit(1750805598.158:106930): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.818658][ T148] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 347.838554][ T36] audit: type=1400 audit(1750805598.158:106931): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 348.113538][T11023] udevd[11023]: Unable to fix SELinux security context of /dev/char/10:232: Read-only file system [ 348.479779][ T60] bridge_slave_1: left allmulticast mode [ 348.485550][ T60] bridge_slave_1: left promiscuous mode [ 348.499474][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.515682][ T60] bridge_slave_0: left allmulticast mode [ 348.521755][ T60] bridge_slave_0: left promiscuous mode [ 348.527608][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.841825][ T60] veth1_macvtap: left promiscuous mode [ 348.847515][ T60] veth0_vlan: left promiscuous mode [ 349.900080][ T60] bridge_slave_1: left allmulticast mode [ 349.905967][ T60] bridge_slave_1: left promiscuous mode [ 349.912977][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.921397][ T60] bridge_slave_0: left allmulticast mode [ 349.927132][ T60] bridge_slave_0: left promiscuous mode [ 349.934259][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.942803][ T60] bridge_slave_1: left allmulticast mode [ 349.948544][ T60] bridge_slave_1: left promiscuous mode [ 349.955044][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.963999][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.360687][ T60] veth1_macvtap: left promiscuous mode [ 350.366393][ T60] veth0_vlan: left promiscuous mode [ 350.372714][ T60] veth1_macvtap: left promiscuous mode [ 350.378311][ T60] veth0_vlan: left promiscuous mode [ 352.729155][ T36] kauditd_printk_skb: 14544 callbacks suppressed [ 352.729176][ T36] audit: type=1400 audit(1750805603.158:121328): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 352.757145][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.757879][ T36] audit: type=1400 audit(1750805603.168:121329): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 352.763884][ T148] audit: audit_lost=194 audit_rate_limit=0 audit_backlog_limit=64 [ 352.785519][ T36] audit: type=1400 audit(1750805603.168:121330): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 352.792749][ T148] audit: backlog limit exceeded [ 352.814527][ T36] audit: type=1400 audit(1750805603.168:121331): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 352.820588][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 352.840721][ T36] audit: type=1400 audit(1750805603.168:121332): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 352.846564][ T148] audit: audit_lost=195 audit_rate_limit=0 audit_backlog_limit=64 [ 357.739299][ T36] kauditd_printk_skb: 15676 callbacks suppressed [ 357.739317][ T36] audit: type=1400 audit(1750805608.178:137008): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 357.767411][ T36] audit: type=1400 audit(1750805608.178:137009): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 357.767797][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.789786][ T36] audit: type=1400 audit(1750805608.178:137010): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 357.795052][ T148] audit: audit_lost=196 audit_rate_limit=0 audit_backlog_limit=64 [ 357.817108][ T36] audit: type=1400 audit(1750805608.178:137011): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 357.824176][ T148] audit: backlog limit exceeded [ 357.846080][ T36] audit: type=1400 audit(1750805608.178:137012): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 357.851821][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 357.871816][ T36] audit: type=1400 audit(1750805608.178:137013): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0