last executing test programs: 28.246997913s ago: executing program 0 (id=535): ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r2, @ANYBLOB="010226bd7000fcdbdf250c000000c00103800800020008000000b401038030010180170002002e2f62696e64657266732f62696e6465723100000f00020076657468315f766c616e00000f00020076657468315f766c616e000004000300f0000200657468746f6f0ee4d50f04ec2f33d7f577d9b36eacc3a2fe6f82f71d630681f015c026ce8a78a2b7a37459819794b0de842836c7a7406eab332978a17084dde732860fd8e49e468ef15659b38d1f8cef8e8ab97f9f833f36c7d8f8c7c55bfec483eddf4ca8325bc2d8a2e5da11475ee01d05f874ad46be43540781c6670a7751aeb04561a024d9aafc18cfb6b227fdced6b59e2023ce6a63dda53018edf5cfdbc49e35d4924db094cb7d10e6cea31435ee41dfb9f504fc3cab060a40209b563103dbb2d66c1e9c4dc6c59274db8a3ad32b9abf29da5df820681f75c2fa4f47b9716d1f0c181f00000000000020000180080001000600000004000300080001006af5000006000200290000001c00018004000300060002002e000000050002000000000004000e0014000180080001000400000008000100030000003000018008000100070000000400030007000200657468746f6f6c00080001000080000004000300180001801400020076657468315f766c616e00"/486], 0x1ec}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c804) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xdebc6ac1b361a3f1, 0x800002000000001}) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) clock_settime(0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000002540), &(0x7f0000002580)=0x30) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r5, 0x45809000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x4) ptrace$setsig(0x4203, r6, 0x6, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r8 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x127a, 0x3) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1dc87679ecb09855153cb7011817e37808830057a709e8ddcc221bb8f945d87083dd5eb88db85f966ca9898b73f6af7490ef9228483fb7deef9560dd73e26bb89e7b9504f8f412cce85334", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000004000040020300007b442856bfec870b"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r7, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESDEC=r10, @ANYRES64=0x0, @ANYRES8=r6], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000040), 0xfffffffffffffed3, 0x0, 0x0}) 27.828837595s ago: executing program 0 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60c02, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r2, r3/1000+60000}, {0x0, 0x2710}}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x14, 0x1e, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffff"], 0x21c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000027e000000330003"], 0x1c}}, 0x4000054) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) listxattr(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)=""/112, 0x70) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080000}, 0x8005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60c02, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) clock_gettime(0x0, &(0x7f0000000340)) (async) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r2, r3/1000+60000}, {0x0, 0x2710}}) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x14, 0x1e, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffff"], 0x21c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000027e000000330003"], 0x1c}}, 0x4000054) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) (async) listxattr(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)=""/112, 0x70) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080000}, 0x8005) (async) 27.828625445s ago: executing program 0 (id=541): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) setreuid(0x0, 0xee00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x1267, 0x3) pipe(0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1000001) r2 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='%%-{}%,%$(!/\\\'}&\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000001c0)='/dev/ashmem\x00x\xa6MJsT\xa6\x93\x86(\"\x1b\x8d\xdf^\xfeU\xc8{\xd5\x00\xcb\xea\x14P\x12@vlJ=K', r2) keyctl$get_security(0x11, r2, 0x0, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 27.819020007s ago: executing program 0 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$packet(0x11, 0x3, 0x300) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_open_dev$mouse(&(0x7f0000000100), 0xcc, 0x20000) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 27.807057997s ago: executing program 0 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1f4) 27.614889257s ago: executing program 0 (id=544): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xa4, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/24, 0x18, 0x2, 0xb}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/107, 0x6b, 0x0, 0x2b}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/170, 0xaa, 0x2, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/130, 0x82, 0x2, 0x21}, @fda={0x66646185, 0xa, 0x0, 0x2f}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}, @dead_binder_done], 0x2c, 0x0, &(0x7f00000004c0)="eb679dac4e92d6e541d3bf819607b9251b667f9f95f9a7111a79afc8bc33600d641c5ed9431fcf233568be39"}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000002640)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}, 0x40000000) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000f80)=0xc5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7a) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000300)="120000001270395e217b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003900)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000a00)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000bc0)=""/189, 0xbd}], 0x6, &(0x7f0000002600)=""/35, 0x23}, 0x200}, {{&(0x7f0000000cc0)=@nfc_llcp, 0x80, &(0x7f0000002240)=[{&(0x7f0000000d40)=""/129, 0x81}, {&(0x7f0000000e00)=""/209, 0xd1}, {&(0x7f0000000f00)=""/84, 0x54}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/137, 0x89}, {&(0x7f0000002180)=""/180, 0xb4}], 0x6}, 0x6b9}, {{&(0x7f00000022c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003800)=[{&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/155, 0x9b}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000f80)}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/173, 0xad}, {&(0x7f0000002600)}, {&(0x7f0000003740)=""/78, 0x4e}], 0x8, &(0x7f0000003880)=""/74, 0x4a}, 0x51f}], 0x4, 0x2000, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) bind$packet(r8, &(0x7f00000001c0)={0x11, 0xfd, 0x0, 0x1, 0x2, 0x6, @random="93c707591909"}, 0x14) 27.614172347s ago: executing program 32 (id=544): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xa4, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/24, 0x18, 0x2, 0xb}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/107, 0x6b, 0x0, 0x2b}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/170, 0xaa, 0x2, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/130, 0x82, 0x2, 0x21}, @fda={0x66646185, 0xa, 0x0, 0x2f}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}, @dead_binder_done], 0x2c, 0x0, &(0x7f00000004c0)="eb679dac4e92d6e541d3bf819607b9251b667f9f95f9a7111a79afc8bc33600d641c5ed9431fcf233568be39"}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4040010, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000002640)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}, 0x40000000) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000f80)=0xc5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7a) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000300)="120000001270395e217b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003900)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000a00)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/217, 0xd9}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000bc0)=""/189, 0xbd}], 0x6, &(0x7f0000002600)=""/35, 0x23}, 0x200}, {{&(0x7f0000000cc0)=@nfc_llcp, 0x80, &(0x7f0000002240)=[{&(0x7f0000000d40)=""/129, 0x81}, {&(0x7f0000000e00)=""/209, 0xd1}, {&(0x7f0000000f00)=""/84, 0x54}, {&(0x7f0000001fc0)=""/206, 0xce}, {&(0x7f00000020c0)=""/137, 0x89}, {&(0x7f0000002180)=""/180, 0xb4}], 0x6}, 0x6b9}, {{&(0x7f00000022c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003800)=[{&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/155, 0x9b}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000f80)}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/173, 0xad}, {&(0x7f0000002600)}, {&(0x7f0000003740)=""/78, 0x4e}], 0x8, &(0x7f0000003880)=""/74, 0x4a}, 0x51f}], 0x4, 0x2000, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) bind$packet(r8, &(0x7f00000001c0)={0x11, 0xfd, 0x0, 0x1, 0x2, 0x6, @random="93c707591909"}, 0x14) 20.924157528s ago: executing program 1 (id=659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) (async) ioctl$EVIOCRMFF(r2, 0x5509, 0x0) (async, rerun: 64) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (rerun: 64) listen(r1, 0xfffffbeb) (async, rerun: 64) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async, rerun: 64) getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) setregid(r3, r3) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=[@increfs], 0x30, 0x0, 0x0}) (async, rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) ptrace(0x10, r4) (async, rerun: 32) ptrace$pokeuser(0x6, r4, 0x378, 0x7) (async, rerun: 64) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x3}) (rerun: 64) 20.884848502s ago: executing program 1 (id=660): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d01020301090217000100000000090401"], 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r5, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0xffffffff, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffffffc7) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000000c0)={{0x0, 0xeeee0000, 0xa, 0x4, 0x8, 0x6, 0x5, 0xd0, 0x20, 0x2, 0x5, 0x5}, {0xeeee0000, 0xdddd1001, 0xb, 0x10, 0xf, 0x7, 0xed, 0x0, 0x3, 0xfe, 0x7, 0xf}, {0xeeee0000, 0x10000, 0x9, 0xd4, 0x1b, 0x1, 0xb, 0x4, 0xf6, 0x2, 0x7, 0x5}, {0xeeef0000, 0x8000000, 0xa, 0xdf, 0x4, 0x9, 0x0, 0x4, 0x7f, 0x1, 0x5, 0x3}, {0x0, 0xeeef0002, 0x3, 0x0, 0x3, 0x7, 0x10, 0x81, 0x7f, 0xe1, 0xd}, {0xeeee0000, 0xeeee0000, 0xd, 0x24, 0x5, 0x8, 0xfd, 0x9, 0xd1, 0x38, 0x2, 0x3}, {0x2000, 0x6000, 0x4, 0x5, 0x2, 0x9, 0x8, 0xfa, 0x9, 0x2, 0x0, 0x3}, {0x5000, 0xeeee3004, 0x8, 0xcc, 0x4, 0x5, 0x0, 0x5, 0x1, 0x4, 0x20, 0x76}, {0xeeee0000, 0x5}, {0x100000, 0x28}, 0x1d4b5fe6a7ba2114, 0x0, 0x4, 0x6102, 0xd, 0x101, 0x80a0000, 0x1, [0x40, 0x10000, 0x7, 0x6]}) 19.70939049s ago: executing program 1 (id=677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x5, 0x70, @loopback, @dev={0xfe, 0x80, '\x00', 0x31}, 0x40, 0x80, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x80, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x9, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c815}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) 19.673004434s ago: executing program 1 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) mount$cgroup2(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x104000, &(0x7f0000000300)={[{}, {@pids_localevents}], [{@obj_type={'obj_type', 0x3d, '$N\xa1\xe1d\xae\x91\xb9\x7f\xe7\x0eu}'}}, {@audit}, {@euid_eq={'euid', 0x3d, r1}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mountinfo\x00'}}, {@fsname={'fsname', 0x3d, 'mountinfo\x00'}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) open$dir(&(0x7f0000000180)='./file1\x00', 0x400001, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) (async) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r0, &(0x7f0000000440)) (async) setreuid(0x0, r1) (async) mount$cgroup2(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x104000, &(0x7f0000000300)={[{}, {@pids_localevents}], [{@obj_type={'obj_type', 0x3d, '$N\xa1\xe1d\xae\x91\xb9\x7f\xe7\x0eu}'}}, {@audit}, {@euid_eq={'euid', 0x3d, r1}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mountinfo\x00'}}, {@fsname={'fsname', 0x3d, 'mountinfo\x00'}}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) (async) open$dir(&(0x7f0000000180)='./file1\x00', 0x400001, 0xa) (async) 19.61911394s ago: executing program 1 (id=679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioperm(0x3, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000003bc0)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0xc0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000300)='\x00', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x10, r6, 0x1, 0xfd, 0x6, @remote}, 0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x10000, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = eventfd2(0x96, 0x80800) write$eventfd(r9, &(0x7f0000000140)=0xffffffffffffffff, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0xb4}], 0x1}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r10, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d"], 0xd0060) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x4}, @fda={0x66646185, 0x6, 0x2, 0x19}}, 0x0}}], 0x0, 0x0, 0x0}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x48041, 0x0) ioctl$BLKPG(r11, 0x1269, &(0x7f00000005c0)={0x2, 0x0, 0x98, &(0x7f0000000340)={0x3, 0xfffffffffffffffc, 0xf}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0xc4, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x83}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x0, 0x0, &(0x7f00000008c0)}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r5, @ANYBLOB="08002abd7000fbdbdf25190000007c00018014000200636169663000000000000000000000001400020076657468315f766972745f776966690008000300020000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067726530000000000000000000000000140002006873723000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="58000180140002007866726d30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="14000200766c616e3100000000000000000000000800030000000000080001283fcac0194e59c16103932d6dee23498a2233abb102cec9619466ff477458ce130efd466a17a8797b5acfff41f2525775f2", @ANYRES32=r6, @ANYBLOB="140002007465616d3000"/20], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x80040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x110b, 0x3}) 19.595726951s ago: executing program 1 (id=680): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x5, 0x80}}, 0x28) 19.559123816s ago: executing program 33 (id=680): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x5, 0x80}}, 0x28) 1.114144987s ago: executing program 3 (id=1080): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x10}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) 1.063290563s ago: executing program 3 (id=1081): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x540902, 0x0) write(r0, &(0x7f0000000000)="a7249276a8", 0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x540902, 0x0) (async) write(r0, &(0x7f0000000000)="a7249276a8", 0x5) (async) 1.055222054s ago: executing program 3 (id=1082): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x7}) dup(0xffffffffffffffff) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r0}, {@void, @actul_num={@void, 0xd, 0xa9}}}) syz_usb_connect(0x5, 0xee, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0xe7, 0x8a, 0x96, 0x8, 0x19d2, 0x1278, 0x9498, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0xff, 0x8, 0x20, 0x4, [{{0x9, 0x4, 0x3b, 0x8, 0x5, 0xff, 0xff, 0xff, 0x4a, [], [{{0x9, 0x5, 0xb, 0x2, 0x8, 0xf6, 0x4, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x21, 0x6c, 0xd}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x1, 0x0, 0x5}}, {{0x9, 0x5, 0x9, 0xc, 0x7ff, 0x5, 0xe0, 0x81}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x8, 0x7, 0x7f, [@generic={0x28, 0x3, "9e0326eb64c13eb8793d8e7caa24352962c4618d93e4b0d26fa29b05ccdea190bdc06a67bbb0"}]}}]}}, {{0x9, 0x4, 0x2b, 0xb, 0x0, 0x6d, 0x84, 0x7b, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x466b}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x221, 0x80, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0xc}}]}}, {{0x9, 0x4, 0x64, 0xf, 0x6, 0x3, 0x0, 0x2, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0xbf4}}], [{{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0x7f, 0x81}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x8, 0x59, 0xf}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x13, 0x200, 0x81, 0x6, 0xc}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x8, 0x2, 0xff}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xd, 0x7, 0x76, 0x20, 0x2}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x2, &(0x7f0000000200)=@string={0x2}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) close_range(r3, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f00000003c0)=""/141, 0x8d, 0x10063, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 828.374406ms ago: executing program 2 (id=1086): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_GETXATTR(r0, &(0x7f0000002080)={0x18, 0x0, r1, {0x2}}, 0x18) (async) lstat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) io_setup(0x8, &(0x7f0000002180)) (async, rerun: 32) rt_sigaction(0x2c, &(0x7f0000002280)={&(0x7f00000021c0)="f3abc482352e0fc4c249a77305c4e3154b94e60b0000002bc4413d72d51bc402b1452d00000000f044181deca900006566440f3a40ff412e400faceaf3c462792a4e17", 0x80000000, &(0x7f0000002240)="8fa840b63701c40179d975e0c462b1ab1f65f3410fa7d8660f38dd8a80410000c48249a6ed4780e000c421577ca603000000f39065f30faecc", {[0x5]}}, &(0x7f0000002340)={&(0x7f00000022c0)="8fa978d1badfb18baac421a162a3edd4000066470f38dfce420fbde0c44190c69dd40000008367676567f30f01dcc4a17d15d30f4b73b6c482190711440f18d9", 0x0, &(0x7f0000002300)="f00fc70c434030c88fe99802088f6878c177060ec4c10573faa5f2480f2d3636470f37c441cddcc926650f10ee2e363e400f639cd8f87f0000"}, 0x8, &(0x7f0000002380)) (async, rerun: 32) truncate(&(0x7f00000023c0)='./file0\x00', 0xffff) (async, rerun: 32) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002400)={0xa4, 0x0, 0x1}) pwritev2(r0, &(0x7f00000024c0)=[{&(0x7f0000002480)="7ce0562820ef40d933f73c79ad1b36d3a5f884375c1a4b34cd6fbecf86c8ee692d58a7e39472b9781b41b7a6fbbed847dade41cd71e53ba84f066c191f", 0x3d}], 0x1, 0x7, 0xfffffff0, 0x3) (async, rerun: 32) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002540)=0x0) (rerun: 32) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000002500)=@sr0, r5, &(0x7f0000002580)={0x4, 0x6, 0xffffffffffffff81, 0x9, 0x3, 0x0, 0x4, 0x100, 0x5}) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r6, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async, rerun: 32) write$FUSE_INTERRUPT(r0, &(0x7f0000002600)={0x10, 0x0, r1}, 0x10) (rerun: 32) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002640), 0x2, 0x0) write$FUSE_BMAP(r7, &(0x7f0000002680)={0x18, 0x0, r1, {0xf30}}, 0x18) (async, rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000026c0)='./file0\x00', &(0x7f0000002700), 0x800004, &(0x7f0000002780)={{'fd', 0x3d, r8}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000}}, {@allow_other}, {@blksize}], [{@obj_type={'obj_type', 0x3d, '/dev/sr0\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/sr0\x00'}}, {@uid_gt={'uid>', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/fuse\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) pipe2$9p(&(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLERROR(r9, &(0x7f0000002900)={0x11, 0x7, 0x1, {0x8, 'max_read'}}, 0x11) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000002940)=0xfffffffa, 0x4) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002980), 0x20100, 0x0) tee(r8, r10, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000029c0)={0xa, 0xffffffffffffffff, 0x1}) (async, rerun: 64) lsetxattr$trusted_overlay_nlink(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40), &(0x7f0000002a80)={'U+', 0x738}, 0x16, 0x1) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000002ac0)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002bc0)=0xe8) quotactl_fd$Q_QUOTAON(r10, 0xffffffff80000200, r11, &(0x7f0000002c00)='./file0/file0\x00') (async) ppoll(&(0x7f0000002c40), 0x0, &(0x7f0000002c80)={0x0, 0x3938700}, &(0x7f0000002cc0)={[0x9fa7]}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) 827.709757ms ago: executing program 2 (id=1087): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x10000000000007}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r0, 0x3000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 808.229288ms ago: executing program 2 (id=1088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x0, 0x20380, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xfffffff7, 0x4, 0x5, 0x2, 0x6, "b5a9c15d12e3ca84c2703700fad7b6e2c64af2"}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000000000000000000000000000000000000000000000000000000400000000000000a9cc210da016f99b698046aa586ba1a03eaf0c7ff2566078a9a9b2c3f4787dd3c2caa180493c9012400f76e7ddf6c0c6805502f4d5cb26d889779c4e40df44b66a46862c4ea5e5da27fa4d6e7be12d0e9af17298f02a09a1bf2757b373c14b02ce037b1efbf4054fcc3e9e9c08864b0fc14d19210d204610a1de6aa5e4a088d86efde340445c02e42a0a8d4c9a570c26"], 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 792.60724ms ago: executing program 2 (id=1089): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x916e, 0x1) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r2, 0xfffffffc}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x1006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xa) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000100)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x8100}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000400)="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", 0x1f000) syz_open_procfs$namespace(0x0, 0x0) socket(0x1e, 0x5, 0x0) 631.619686ms ago: executing program 2 (id=1090): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000ccb0ce51090d8833c13c5b150300000009215212fea1ee5af4d936464f6f68557b0a1305d32948229082d504d69b1c54323b06ac9adc4d470303fd70097072c8d8e0683a13"], 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0xc0aa) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfefffffe) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x6, "d5263d79"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x2, 0x1, 0x7, "8481"}, @global=@item_4={0x3, 0x1, 0x3, "001000"}]}}, 0x0}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 550.347014ms ago: executing program 3 (id=1093): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(r6, 0x8, 0x0) lseek(r4, 0x8, 0x2) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, 0x4d3, 0xa, 0x33}, @in=@broadcast, 0x4, 0x3505}}, 0x40}}, 0x90) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) setitimer(0x3, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000001180)={{0x5, 0xf}, 0x100, './file0\x00'}) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 549.409414ms ago: executing program 3 (id=1094): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0x5b0) (async) write$binfmt_misc(r1, &(0x7f0000000300), 0x5b0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100025bd7000fedbdf2501000000000000ca0241000000140056f67a4079d35fde9a5d136574683a6970"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x44000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x40187013, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 506.236269ms ago: executing program 3 (id=1096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xfdb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0xc1, 0x0, &(0x7f0000000080)="de72ad19ce14ec4a5c392e389b3edecf3668a619bf5fdefc159a8ffaf19a8ff943ca5ce15d90a453913a9c158428b4c7064589be65b2ed251a34095089ceaf1597f4229e612581c984ca40cb887c5dc31660218d5a24f25774337aa1ad398c6210a610ae11e59286299096c5d236af2b1115f13e1310f7e02984e8e2900a5f62d792b5b54d250f4b84887eaffd88ef68300174f5b779508c2bacdf8e6dfc1bb7004025358124f2191ed154ec5ddb3e30fc430ed67a2532d3ff46b828d643b8bf1a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9d5d, 0x2}}}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0xff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x4, 0x3}}, @channel_switch={0x25, 0x3, {0x0, 0xf0, 0x2}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x80, 0x48}}, @gcr_ga={0xbd, 0x6, @device_b}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x7, 0x34, @random="d620c5"}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0xec6, "f586a17f2029", @long="074db937ef6901d3348408c7d63a1a49"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_SSID={0x8, 0x34, @random="5f10ea6e"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x40090) r5 = syz_usb_connect(0x1, 0xbff, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x85, 0xd, 0x61, 0x40, 0x19d2, 0xff8e, 0x509f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbed, 0x4, 0x2e, 0x3, 0x48, 0x8, [{{0x9, 0x4, 0x5f, 0x38, 0xd, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x3, 0x1b, 0x40, 0x4, 0x19, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xd7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x8, 0x22, 0x5b, [@generic={0x25, 0x31, "6016ec4dd81186b1896b7c84e5b72d0a1f095f645f82e9b12530d72483923730dd50fc"}, @generic={0x4d, 0x24, "ea4b122945ed847d1645df8e805bc0125b4d7cd13e33debfe8f66f398619680fab2dfb5f6195ec0cced928d9a69cce889bdef5516adff1f4fffb9ee6df8832c33dda0e791e6c294caf94f6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x3, 0x81, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x6, 0x0, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xb, 0x4, 0xb9}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x3, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0x1, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x6, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x4, 0x1, 0x8, [@generic={0xc0, 0xa, "36a00ddf5483e9e609c94bd1646d71e3aa55f84b962a9836ce62474a31c85042b8e12031109c19910c9ddf8ad4ce14a001ae1fbcc750a7adb9f8c873affc39097a373c65bf99e5b4e19836bf732022846642993f8fb3be2ab59c62dfc69d72daff5b731491ca14f911c8a925ead9dca41d8ed1f15e8867bdfe6d76d7a3ce614b4386eac0d35de66fad540dc667f20bc45a2a39635a002c90e3fd7a65ab517ac9b8cad0100ae1a6d972be4c461384334222eef2c80f8bb0ce06f87fb07284"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0xd9, 0x0, 0xa}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0xa7, 0xfe}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x4, 0xf9, 0x6}}]}}, {{0x9, 0x4, 0xbe, 0x3, 0xd, 0x7, 0x6b, 0x5f, 0xd8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "109f"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x101, 0x6, 0xf5}, {0x6, 0x24, 0x1a, 0xe863, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd, 0x9b, 0xa}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0xc66, 0x9, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x63, 0x88, 0xa, 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0x9, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x40, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x0, 0xc8, [@generic={0x6c, 0x1, "64deb9b00db3da102dd3136a29a3661dc97430b819d642d2b0db11c14497e2d5a21a747215b1dc7d066ef9d40786abf192a779cc03bf619d261722cbbd50ad8a59fa1b56d718e1562aae61989fd8ffc9f4cd458e6184039d1a673a5571332452ec35b2d241eda533c980"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x2, 0xb, [@generic={0x42, 0xa, "f7dc52ec0672eeec185c07c6c5cc506875e5000a19cb75cbe86b13d77963f36d90e649318238cb306432c50f2ff2c17e8d0a19505b0478c871028ea89499a408"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x5, 0x2, 0x4, [@generic={0xb0, 0x23, "c2ae35cfe730a8dc3c8ffa3c24b3c3dca55c0f67bd6d75bab99d7e6e170b3bab2691ace358e3a1f59344f46e09bb9e0eef3e311866628f3283eb40abf84e428d3e6035bfb40f1652547fe36ebacd0f00e7e808b5258acaf2259e25d7ef523ae44b3a5764a89b5f715ff208a909e972500b0587aff2ad3e669922b96c6b6c997f3e2fab4cb5b9b9d39578aab4918feb285b952d264cc50b7a3892dd0f86aad60001028808f8c0077d4711e165824c"}, @generic={0xfb, 0x21, "49dc3852eb2e104def370888626d84d419b6043f8d41895a53a8d4cfb202967429868958561fb310ee4371535d82fab5bfdf01e6a91dd15e9122952ea378e9e3b249374f3f01c117601f1454220e29ee06e369c534e5dc99ed9ed1316b8470e22adebd3564625c65277ac38f538f0bc3ae4b54ef3087efe621e22eee1cbe47489440938e6fa591c6d1ca191293bc5121a42884435e09f53f9527094276555cafa6ccdad358501e12402aed60b3ac1b5493996b9b3580a0163b9fc304eb651782ab8c45725d314c70063bc43bbea0853580ee41abe4fe044d413c9ab2a2c0fe9137bf428e4cb13b3c817ecfd56131e6ad6331925a5d9b603335"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x0, 0x2, 0x10, 0x0, [@generic={0x5, 0x30, '[*\a'}, @generic={0xa8, 0xe, "67ad195003fd7153086c59405dd77a71641cca057fbc43f2b56b2d1c8814aeb07d28081d909145eb790e03a0a776a6186b39e0c9edf69501dd5ccdb8a276c2e21f2009fd9ce8a2a73a0daff7e3ef667e77d6c8081c010d5256e0ed933867148399d4f33b91917f942b4ddfdda71d1b75f3ba7e6022a9e5db1351b9004b39ecd757d63f115e85058be35cd4107d03e2efe586fdc8711a900e4c37ea0a4d8bdcc262306fe74449"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x5, 0x8, 0x0, [@generic={0x54, 0x5, "e38c3f25fd067f4b3c6866d78a87bcb0a088d0b8324cee9a18806b538100fa804b76253551b36aafd220b3ce555b69da063d87fddf13c8fcb4de0b18070f5c14fd9d5be0799b7955796afcda409cc908ec8c"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xb, 0x1, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xeb, 0x4}, @generic={0xfb, 0x33, "aaf4deaaefcb344a02d2c1ec533d890a6597f93619c7786c257444c8cc7b8ce19ebf7d3b8947dc8c8910b0c845d8859fdce5278aa88942c38240b0e34819c0376ce22b5cb375da8dd335c8dc623c6771fa33adbef0504c2e2f8cddf90ccd3fdf722dbfb598080db2a646a73cec46398b4d1ce26ee4c21324ce0576e2bd5f97751c19bf752ac91a84a6db4f4a0b230538d2632939db8457b99983a50c90e983679e2471eb965c726fdb90e9c848e96bfce4600a394e90add806a093d4402ca792b5d8fad3493f5e0c264a2c3a7ee7f8e6c9fa3cdf7791bf04f4d756f7eee271ced020e97d6eb7c13fbc5b3a3f6696725595e594424adb4d3ea8"}]}}, {{0x9, 0x5, 0x9, 0xe, 0x3af, 0x5, 0x6, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x59}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x81, 0x6f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x5, 0x5}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}, @generic={0xe2, 0xc, "6278c66476851e9299724d62e25d9bbd76674d6345c24dcc0d752df311db9f12f0f1b5e0f499c955a1d9a96b8dcdf2cc08ff3ea413f8e6ee3b58cfe242a09fd88e8388cf03cc28be22f7db10b75f8c936a17ac1020d223de0a7f357ebe1aefbd4e197d56c8ba98057d506e67c580ca50cddb5c465a3537d244d00e0b50b1520577ee84d4cd48a67ac92bfa4ca3f2400d5567931344236aebc49bc486e756b159b8da72ffc9dcf7a55bbb1ad7b665c067144cd8e9672786716d16dbb77a9c28df4d08b11caa3c17143e3b70733f57dd1b2de434dc558e642c99204de942d2091e"}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0xe, 0x4d, 0x7c, 0x50, 0xf2, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x3}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x4, 0xb, '2`Z'}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x1, 0x5, [0x3, 0x7, 0x5, 0x8, 0x2], 0x4}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x0, "f519fb"}]}], [{{0x9, 0x5, 0x840c95b1828835e1, 0x10, 0x10, 0x6, 0x80, 0x4, [@generic={0x53, 0x8, "3e1acdc78fc7265cb65879497f49a3f2f4134d1db2c24dbea008268c7d623e950c162611519b7a7a233b59c332316f4d4b65927b9a43aad282a3f1b058488e3797cf45464886d09ba88940353db800fa67"}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x4, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0x44, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xea4}, @generic={0xa9, 0x1, "abda787e71c90e118056a5f2f29a21a6c380e37e286ef5c815e01917d5ab630bda9ce81eadcc955e52df599081442b4b2f4ecfb586ea1d4dbed34f2896326473a43d166250f4d910458ec498e9e2c582d8f0b0980c0d99cf8f05ca6fae3e6785d819863594b226ac354b1dc16c31e5ae753e4f4c6ba3b97b69478b9af65f38cdb266ed0b665550c9b3c1009b3d3cf62da9b6f5fc1899951423e217f6dec1137a0dc70b4b19e73f"}]}}, {{0x9, 0x5, 0x80, 0xe, 0x20, 0x4, 0x4, 0xc, [@generic={0xa3, 0x24, "e9a508e564bfb24a66664c473a7a28bca2f39a2882445670183c078ab4dfc931ded61f42028a48d8080202c4cf52f7026cd970f0d82e1eee32e23008586714df9b98bf930522672b6b12767ccb81a4e91f55ce94413f95075a5ff508b411baea686ef63432490a9e841aaf0352c84522317a04ca59c8169a76c0267f1d3b8a567de9fa9a44592019b1565dc572b53d53c70ed330e8a9a9348f8c3fa14f47435a1d"}, @generic={0x34, 0x31, "fa3f684c1b70325d8e48f103da42d385a929ad5711190a1e3b3e72b4f410cadf295d3a7f986f6f28405c1e00bb1f98379a02"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x4, 0x8, [@generic={0x8, 0x5, "142f41e2f936"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xc}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x0, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8510}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x2, 0x25, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x208, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x0, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x6, 0x9, 0xff}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x3, 0x7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xb, 0x1, 0x1}}, {{0x9, 0x5, 0x9, 0x7, 0x40, 0x1, 0x81, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @generic={0x39, 0x21, "df5ffe851f9670129791b4fbe429c1737bb015c2eaa8afaee1f8a820b5782b2162c8376cb25b23edc957c41d70ed348b21da56b88bae13"}]}}, {{0x9, 0x5, 0x6607043d6676f9d7, 0x10, 0x3ff, 0x1, 0x4, 0x3, [@generic={0x8a, 0x11, "0c1e806ce02d6e919a01e65fd35ac608de8a138f0842da249743de665a74dfeddb4b8c3153da6d9476a3592f6ccdf2900a322aae47ccf420aa04ada0c41a2981a1798c524907b690f26ae564f8bb645818756f2a951cc55d4958ac84f6ae826934defe8466fcd318973c5af082cb06b9b6a62511852964f1b2b4b873eabb1a3abc1813d789c5e23f"}]}}]}}, {{0x9, 0x4, 0x9a, 0x6, 0x1, 0x76, 0x4c, 0xb3, 0x2, [], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0x0, 0x9, [@generic={0x33, 0x11, "3e1d81ff60f89801aee8e6e1164b3d0b6a287a5f5a5245b22b2e281ba263cef8b7efdea25620bc6a6bf33fbdef52f0d094"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfb2}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x110, 0x9, 0xff, 0xa, 0x10, 0xc}, 0x19, &(0x7f0000001000)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "8392281106cce2ef03e6fa2f6e0acf60"}]}, 0x5, [{0xd9, &(0x7f0000001040)=@string={0xd9, 0x3, "559aa150cbd5af1c7d0bce816270ec8564840465c328908912a8138b797e9aeb91091351ba57da3e4891ba732656ca893d355a9a15d2e5444676ca2e237042964287402bf4bf82b8d233740aebdef55344e19f09f572fc2218c0d8284d6a7e48d1caa5172798f4c3d14d37ca92ee159efe66db7d88efb79e760378f73d6fe04db77c461b435ca10dc2e2dae8ce0586a5c47b8224a1c6b245bfd2ffbc047f7bca319af0d50f678388c61505a9ddf26b46d25ed6f701be76228a17318c6e001480733395da2016b3bca7a7143048cd10d00a716cdd6acf2b"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x68, &(0x7f0000001200)=@string={0x68, 0x3, "579f08fcc7a9769872ef8b89de8fc3352f8638c21c71789431546aa2bb618c663752735ddc7c7462188e83d87fad6f3dbb79b6b85f71fa39cbe9b87f75061b83b0c59ad8d50771645c88df0dabe3f4c8cf57dc873c112a083ccba83e312f863be6b2c1d7a305"}}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x6) lseek(r6, 0x2, 0x3) syz_usb_ep_read(r5, 0x4, 0x5, &(0x7f0000001300)=""/5) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000001340)={0x0, 0x116000, 0x1}) syz_usb_disconnect(r5) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000001380)) r7 = socket$inet(0x2, 0x2, 0x101) futex(&(0x7f0000001400)=0x2, 0xb, 0x2, &(0x7f0000001440)={0x0, 0x989680}, &(0x7f0000001480), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000001880)={@rand_addr, @initdev, 0x0}, &(0x7f00000018c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001a00)={'erspan0\x00', &(0x7f0000001900)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0xdaf, 0x10, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x67, 0x0, 0xff, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x12, "632ff88c954ce03587158d093a1810a0"}, @generic={0x0, 0xf, "0cdc7faaaab3b1f765cde5a417"}, @ssrr={0x89, 0xb, 0xc, [@broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x4c, 0x16, 0x3, 0x7, [{@rand_addr=0x64010101, 0x81}, {@local, 0x1}, {@remote, 0x6}, {@loopback, 0x6}, {@multicast1, 0x84}, {@private=0xa010101, 0x4}, {@empty, 0x6}, {@rand_addr=0x64010102, 0x40}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x4}]}, @cipso={0x86, 0x37, 0x2, [{0x2, 0x12, "8ae6068a387725d2872109c549a7e2b3"}, {0x2, 0x2}, {0x7, 0x8, "c24632ca949d"}, {0x7, 0x6, "378fb180"}, {0x5, 0xf, "6f0d97bdfb4c4b530785259c7f"}]}]}}}}}) sendmmsg$inet(r2, &(0x7f0000001c00)=[{{&(0x7f00000014c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001500)="47cb353b4e2c1a13f2760be6972d8ee7266be9c9cf6034b8486d971f8edcc962a0d3f4fb94b146df6d374199130c2c43c2b9dcc51f3b4c62276fda385a953a0b4a446761a52279db11a19bb216c1fe2626055d7cf0a2ad6da7ad61e318963df12f2fa8cfd8455dd0224290a14543fc1bc170", 0x72}], 0x1, &(0x7f0000001640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x78}}], 0xc8}}, {{&(0x7f0000001740)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001780)="914429e35a5eed7b4fb438a507eb8a84839381f8c1f9a2f684e70fa3671f85cda07fa18531245ade69ffbd110b2df6a211a07b723478a65af42ec202947ef0354a63d63ad459f0fe3ab24169d85cfc62be050a0e1a65a8f263082482cd746251e6cc73ee7daee7a44f201318939829de9cd1f2c7dd6eb9b9b98223da5cdad84d0bdb679ccf4174", 0x87}], 0x1, &(0x7f0000001a40)=[@ip_retopts={{0x10c, 0x0, 0x7, {[@cipso={0x86, 0x65, 0xffffffffffffffff, [{0x1, 0xf, "f87826b5cc9ae24d4acd6ded82"}, {0x6, 0xf, "cd8572d0371c75613106b35e10"}, {0x0, 0x6, "0874ec03"}, {0x7, 0xb, "884d53715b129aabd7"}, {0x1, 0xf, "f228e7c6ed000e73fc32efd78c"}, {0x6, 0x10, "6d86ea3b6d6e8972d836d23fb6de"}, {0x5, 0xc, "972d421be8fcca25ffb2"}, {0x0, 0x5, "d3eabd"}]}, @rr={0x7, 0x17, 0x18, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2]}, @generic={0x89, 0x8, "207b228ecb1c"}, @timestamp_addr={0x44, 0x34, 0xe2, 0x1, 0x9, [{@empty, 0x8}, {@remote, 0x3}, {@rand_addr=0x64010102, 0xeeba}, {@remote, 0x5f35}, {@remote, 0x4}, {@empty, 0x2}]}, @lsrr={0x83, 0x1b, 0xce, [@local, @multicast2, @multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0x1, [{@private=0xa010102, 0x9}, {@empty, 0xfffffff1}]}, @lsrr={0x83, 0xf, 0x74, [@remote, @remote, @multicast1]}, @ra={0x94, 0x4}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @private=0xa010100, @loopback}}}], 0x198}}], 0x2, 0x8000) r11 = syz_clone(0x8005100, &(0x7f0000001c80)="0e21a8504945a6894d76582476024f99255502381cd55650d1c2fe8a4e6a9d9e0b", 0x21, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)="38747b63abcdb380bda94f4eedbace803a7a259294a94413173101c7417d6e392dc1fe1519939c25d1f4880807599a2824290ac8b72d11ca459fa2a9c0d6ee162a9e8e8f82633118987a0783a5df406dcfe52cb48887f87646b62ce17d188e67a8acdef87a4049c87ed2fe96651a878a49d7780965606ac6228807d97a00b2f87540a210fcd3a3328fa657f5efcbac92af72c5ad96347fd2ec282625aef9d8feab610372606858f86ba6208a4f83118a931b5e78b63e94a6c142105c76") sendmmsg(r2, &(0x7f0000002200)=[{{&(0x7f0000001e00)=@can, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e80)="082def0d5e89a6212ed0f4f3b3d9eb997b144b2c7ed0cb346b64c1b9805fb1f83548c32e75efeab026e615cb871177bd1b875b6ac423512ecb540329fae628795ec68647face5d0fd536857869df3a7e0aa902a42fe6eabd7ee43557242d0da629e806067c9e961193b239c5540662b17eab756bab7f286b81a1c722045c74267ae448c4c1f69e5a81d3c44415f7272e09ee8c8d722dc0cabf53554b067cc76162e75f53ae87173baf8fc56f35652001f23106f3f82842a2368137105338f3bc79aaa5e795ce55468f3951ecb688b600439364984bfaf7", 0xd7}, {&(0x7f0000001f80)="b2364609ea0500cc1d68daf529b2be1caeb0c2c9ed30578bfbeb5095c35458573c01a485e206ae4b6a6ce99d715aa5ef38d71905b9a08506232bf3f43a6868609a8990d1088c75dbe265630e814c4c3a254a6876352005cc06bf7bc042f2354b8394f69c5613027dee7e538169368d2c27143f7f05fbd85dc356be6c2056ef1ef4178915fb8f22fbca11c6d8373302246e82cd7d5283a879812b5b7fd6b3e7ea030a875291b01c1b4a801b96d1a628ba164286af2928a7388d9713aeb06ddbbb4eead6aaa06b42211f8e54b4aa2e03ec1553612010638633dce85bb5e0b164d3b8cf38ec9231cc38d0a99cb9fe30b8611fc59fd59c25d411", 0xf8}, {&(0x7f0000002080)="3bae96b45f1f7ea03e0faf778949917ac81286b32aa4902ec04a33ce7f9e1bfe3f0fb03c08f326ba282958f67a1302c4ca95764cce97de11a15886383df2c261d9681eed5462fd85af3a3873722e4950a1ed136613c19dfbf03a6185e08102f0b29192d6e05584c31eb5ca", 0x6b}], 0x3, &(0x7f0000002140)=[{0x70, 0x117, 0xfffff6eb, "65a14249cc739ff23da5ed4fe2570e28c86a22e0648e4e26e412a8f174ae76a46d2849e1920da397c3deeee17f7587cc6ca7f71a452ffd99fcb58b1cff10ac3877850ea46dc49cfb2ce31029ae2888ee2d7f886670be85a36034b8ca"}, {0x28, 0x119, 0x10, "384339806fc63a4b8d395886f1c773649d980d"}], 0x98}}], 0x1, 0x80) ptrace(0x10, r11) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000023c0)={0x14, &(0x7f0000002240)={0x20, 0x10, 0x102, {0x102, 0xf, "4ca3157abe400277298cda291b89fc6d0c2a066cccf783deeb17055dd130de258891b720f7573f4118863bb07dccd70a794448ee6f0b194907a7e5f63b2ea2485bf7196550af8590184db04e0c55c2b15eacde46bc6683320a55e3dd2866c7d18adfbb26188f2a14bef30882dc144bf35e171bccf6aec16da379f901235286d38b5763de5addbd0e4665179f7a53d32b23b85d3865481c91ac287312132a26f6d9900da451c9234023902eaa01e6b2843df486c7ada49778becdc6a04ba7df568c28ac72744d81bb11b6d2f26fb3cdb994d75ca4ae5d68a82060674abb2c27c1bf12f96b4d3ae9c309d44b3ca34e97b4e995537770ebb8637adf1633af3bbd92"}}, &(0x7f0000002380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002600)={0x44, &(0x7f0000002400)={0x40, 0x17, 0x29, "f7162e0283c7df92f9d2b0161f0cf5535aa50ac62937252d17497ec0b32b32e3558b90c33f4dd45677"}, &(0x7f0000002440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000024c0)={0x20, 0x80, 0x1c, {0x2, 0x2, 0x8, 0x0, 0xc, 0x5, 0x6, 0x5, 0x7, 0x4f2b, 0x1d6, 0x5}}, &(0x7f0000002500)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000002540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002580)={0x20, 0x87, 0x2, 0xfff}, &(0x7f00000025c0)={0x20, 0x89, 0x2, 0x1}}) ptrace(0x8, r11) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002680)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(r12, 0xc0404806, &(0x7f00000026c0)="382c709d902b59bfdb5b") exit(0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000002880)={0x24, &(0x7f0000002700)={0x20, 0x8, 0x9e, {0x9e, 0x24, "ce201a5a53d91ad120702e8b08c147f4010c07aae3917ccf0228dc459258a536184f9c1fc9f72c7d2b06a84ab530e936f7d6ced0eba90aa5b13b6a92bdca354fba3c2f9a586eb74dfaac33aac4af882b1dd327bfd529a9aa0e5bb76eea9e34f28d1a615c15c50aa4d0cd382569929242f475ef7c960e4c1669e97a49097f99f48be11aeb84403153ae0aaed61eac0ece5abcd98cee74394c5378064e"}}, &(0x7f00000027c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "2f7fdda338a63acb4a8e82b3273729f2c196255bd8d303c8b841"}}, &(0x7f0000002800)={0x0, 0x22, 0x10, {[@main=@item_012={0x2, 0x0, 0xa, "3cc0"}, @main=@item_4={0x3, 0x0, 0x0, "1fbdafec"}, @global=@item_4={0x3, 0x1, 0x3, "339f8fcb"}, @global=@item_012={0x1, 0x1, 0x7, 'r'}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000002840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0xe, 0x1, {0x22, 0x2ae}}}}, &(0x7f0000002b00)={0x2c, &(0x7f00000028c0)={0x20, 0x18, 0x81, "b41c58dffd8a13dfaf38010c73efad27f9c4775494254b671095715c11f8b7e8c73b39e4f368bb0fb6cf6119cc03a3d18312c95a6fb1758b49dd73eb45bd894590286be79906e527d5c8927d2c08bb1ce524f558037680e458325ee6ede7ff3c18b3bc3c6460e7aa2e743b62ef801ca55a385896a910916245c146b32436dffe30"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002a00)={0x20, 0x1, 0xad, "ca86a6459149e6168a058bf8aea0ee68ebd97aee63d1660d64efdd762f4ec07db991d5e08a2ee93e9b32da7e1493b401aff1aea282f40e67ee6ebebaa4635350996891b2ca600818d7f09696e60f7d4c94989e91025047cd42bdc6a2fc0a136a30cb2067b7ce9a4b45725836c70bb2baae9777109334f2b210b931710c374f83ad6a0426910b6e28a30a08f8dc6837c3872e5202226788ea6bd82518a40e485ee4bf5ea2b302ed55730c8afa32"}, &(0x7f0000002ac0)={0x20, 0x3, 0x1, 0x7}}) 451.274014ms ago: executing program 4 (id=1097): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 379.761571ms ago: executing program 4 (id=1098): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x9, 0x30, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) r1 = syz_io_uring_complete(0x0) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x1, {0x0, 0x0, 0x1}}, 0x14) (async) ioctl$RTC_AIE_ON(r1, 0x7001) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) 367.850633ms ago: executing program 4 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f8030003010040"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f8030003010040"]) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) 233.077536ms ago: executing program 5 (id=1104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x83, 0x4) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xa334, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x4e20, @multicast2}}, 0x1}, 0x90) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e24, @private=0xa010100}}}, 0x108) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @multicast2}, 0xfffffffffffffd77) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="100000003b00d553f05eb6e7bde6abb4a57196010026bdff7f0000df25"], 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x4000800) socket$inet6(0xa, 0x3, 0xff) mlockall(0x2) brk(0x689d80000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "3d80850c491b39314a25af1b69c4c66f1bada000e1ad5b16a5b00a2b28393ac1da6ad61255f3ce86ebcf6b0c7b168ae5325cfe6eb4ec0982c3e451ffbd03bb62", 0x1c}, 0x48, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002b00)=@deltfilter={0x1e3c, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x6, 0xe}, {0x10, 0x10}}, [@f_rsvp={{0x9}, {0x1e0c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @multicast2}, @TCA_RSVP_ACT={0x74, 0x6, [@m_mpls={0x70, 0x3, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4df24}, @TCA_MPLS_LABEL={0x8, 0x5, 0x36bd6}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2907c}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x4, 0x7f}, {0x80000001, 0xf, 0x7}, 0x21, 0xa4, 0x1}}, @TCA_RSVP_SRC={0x8, 0x3, @local}, @TCA_RSVP_POLICE={0x4c4, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7ca}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x6, 0x5, 0x4a, 0x3c, {0x6, 0x1, 0x9, 0x8, 0x1, 0x7}, {0x5, 0x2, 0x8, 0x1, 0x71d, 0x8}, 0x9b7, 0x1d, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x7, 0xc, 0x0, {0x2b, 0x2, 0x6, 0x5, 0x1, 0xfb9}, {0x6, 0x1, 0x5, 0x626, 0x1ff, 0x2}, 0x2, 0x8, 0x8ba2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x7f9, 0x4, 0xc4, 0x59, 0x1, 0x9, 0x7, 0xe, 0xff, 0x5, 0x0, 0x3, 0x2, 0xfffffff2, 0xfffffffc, 0x5, 0x7fff, 0xb, 0x1, 0x3, 0x4, 0x3, 0x9, 0x6, 0x40, 0x8001, 0x0, 0x1d7, 0x0, 0xfffffff9, 0x3, 0x3, 0xb7, 0x5, 0x7, 0x5, 0x8, 0xfff, 0x1caca6eb, 0x1, 0x4, 0x1, 0xd, 0x6, 0x6, 0xb, 0xf32, 0x7, 0x6, 0x9, 0x1, 0x40, 0x1, 0x8000, 0x7, 0x97, 0x7, 0x7ff, 0x7, 0x4, 0x5, 0xd, 0x0, 0x57e0, 0x1, 0x9, 0x1000, 0x3, 0x401, 0x40, 0x280, 0xc8c, 0x3, 0x9, 0x8, 0xd, 0xfffffbff, 0x6, 0x320b, 0x3ff, 0xfff, 0x7f, 0x0, 0x6, 0x7, 0x8916, 0x6, 0x10001, 0x10001, 0x10001, 0xffff, 0x1009, 0xfff, 0x1, 0xfff, 0xc, 0x3, 0x2, 0x7fff, 0x1d, 0x2, 0x106, 0x7, 0x100, 0x80000001, 0x4, 0xf9, 0x3, 0x6, 0x1, 0x1, 0x1d, 0xf, 0x4, 0x8000, 0x1, 0x2, 0xefa5b6, 0x6, 0x4, 0x81, 0x0, 0xfff, 0x5, 0x4, 0x200, 0xdca2, 0x8, 0xd4, 0xaa5, 0x40, 0x1, 0x10001, 0xf, 0x2, 0x6, 0x7fff, 0xc, 0x8000, 0x9, 0x7, 0x8, 0x0, 0x1, 0x4, 0x5f, 0x0, 0x4, 0x2, 0x7fffffff, 0x2, 0xd, 0x8, 0x80000000, 0x4fe, 0x4, 0x3, 0xcc14, 0x4, 0x8, 0x4, 0x7, 0x811, 0x1, 0xe, 0x10001, 0x1, 0x4, 0x1, 0x28b, 0x5, 0x1, 0x7, 0x4, 0x1, 0x8, 0x199, 0x5, 0x827c, 0x1, 0x101, 0xbb, 0x8, 0x0, 0xe213, 0x81, 0x7fffffff, 0x7, 0x4, 0x3ff, 0x3, 0x401, 0x2, 0x3, 0xfffffffe, 0x5, 0x700, 0x0, 0x8000, 0xfffffffb, 0xc5, 0x6, 0x5, 0x800, 0xc958, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x94, 0x1, 0xfffffffb, 0xb, 0x2, 0x5, 0x12, 0x1caf, 0xe88, 0xdafa, 0x6, 0x8000, 0x100, 0x2, 0x2, 0x2, 0x2, 0x9c0, 0x7, 0x6, 0x7ff, 0x1, 0x7, 0x3, 0x9, 0x8000, 0x6, 0x186d, 0xffff, 0x800, 0x4, 0x7fffffff, 0x7, 0x7fffffff, 0xff, 0x401, 0x3, 0x9, 0x100, 0x7ff, 0x80000000, 0x6, 0x6, 0xfffffffc]}]}, @TCA_RSVP_POLICE={0x1474, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xa7b2, 0xb2, 0x8, 0x8, 0x5, 0xfffffff8, 0xb7, 0x667f2fd1, 0x7, 0x7, 0x7, 0x8222, 0x3, 0x2, 0x5344, 0x41, 0xfffffff8, 0x3, 0xffffffff, 0x80000000, 0xd006, 0x8, 0xc, 0x3, 0x5, 0x8000, 0x7, 0x40, 0xa, 0x0, 0x7, 0x6388, 0x8, 0xf, 0x7, 0xa, 0x7fff, 0x7, 0xfffffffd, 0x0, 0x4, 0x9, 0x3, 0x6, 0x6, 0xc, 0x1, 0x7ff, 0x1, 0x0, 0x6, 0x200, 0x6, 0x1, 0x1, 0xffff, 0x4, 0x2, 0x0, 0x3, 0x8000, 0x1, 0x80000000, 0x9, 0x2, 0xc, 0xdd18, 0x7, 0xe61, 0x9fad, 0x7, 0x3, 0xd0cd, 0xfff, 0x4, 0x1, 0xfffffffe, 0x1ff, 0x2993, 0x0, 0xbc3, 0x100, 0x7ff, 0x1ff, 0x4a43, 0x5, 0x0, 0x9787, 0x1, 0x8, 0x0, 0x404, 0xfff, 0x1, 0x6, 0x3, 0xb1, 0xb6b2, 0x3, 0x7, 0x0, 0x3, 0xffffff83, 0x3ff, 0x3, 0x1, 0x4, 0x3, 0xfffffffa, 0x16, 0x4, 0x0, 0xceaa, 0x9, 0x5, 0x6, 0x71d, 0x4, 0x3, 0xa2e, 0x9, 0x9, 0x7, 0x3, 0x4, 0x8, 0x101, 0x4, 0x80, 0x8, 0xd, 0x9, 0x6, 0x0, 0x1, 0x3, 0x6, 0x1, 0xfffffffd, 0xe292, 0x5, 0xd, 0x10, 0x7, 0x7, 0x3, 0x5, 0xff, 0x8, 0x3, 0xffff, 0x29, 0x2, 0x8, 0xb, 0x8fe, 0x0, 0x9, 0x2, 0x5, 0x5, 0x9, 0x3, 0xa9, 0x8, 0x401, 0x51, 0x6, 0x5, 0xffffff00, 0x8, 0x100, 0x6000, 0x100, 0xee, 0xffffff81, 0x5, 0x7, 0x9, 0x0, 0x0, 0xf, 0x7ff6, 0x80000001, 0x400, 0x1, 0xc, 0x14fd, 0x2, 0xff, 0x9c2, 0x6, 0x5, 0x3, 0x4, 0x6f0, 0x9, 0xff, 0x5, 0x81, 0x8, 0x7fffffff, 0x8cb, 0x3, 0x3, 0x3, 0xbdd, 0x400, 0x6, 0x2, 0x6, 0xe24, 0x1, 0x0, 0xfffffff8, 0xa5, 0x0, 0x9, 0xfffffff0, 0x23, 0x2, 0x8, 0xffffffff, 0xabbe, 0x6, 0xba, 0x10, 0x8, 0x5, 0x9, 0x0, 0xffff, 0xffffffff, 0x7, 0x61, 0x6, 0xfff, 0x9, 0xd2, 0x9, 0x5, 0x6, 0x1, 0x6, 0x8212, 0x1000, 0x5c, 0x4, 0x4, 0x4, 0xe3, 0x0, 0x5, 0x1, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x1, 0x0, 0xecf2, 0x5, 0x2, 0x5, 0x6, 0xffffffff, 0x2, 0x4, 0x3, 0x7, 0x8, 0x2, 0x9, 0x5, 0x9, 0x7fffffff, 0x10000, 0x2000000, 0xd4, 0xe, 0x5, 0x8, 0x3, 0x8000, 0x2, 0x8001, 0x8c, 0x80000000, 0xdd2, 0xed, 0x7, 0x4, 0x1, 0x2876, 0x80000000, 0x3, 0xd256, 0x289, 0x3ff, 0x3, 0x5, 0xc13, 0x5, 0x6, 0x1000, 0x3f50d780, 0x7fff, 0x1, 0x7f3f, 0x3, 0xac2, 0xb, 0x4, 0x3, 0x7ff, 0x0, 0x7, 0x3, 0x5, 0xfffffffe, 0x3, 0xffffffff, 0x6, 0x8, 0x0, 0x2, 0xc53e, 0xfffffff7, 0xec84, 0x4011, 0x1, 0x9, 0x9, 0x40, 0x4, 0x6, 0x62ab60f, 0x0, 0xffff2bb1, 0x200, 0x6, 0x1, 0xfff, 0x3, 0x7, 0x6, 0x4, 0x6f05, 0x6, 0x3, 0x401, 0x97, 0x4, 0x45, 0x7ff, 0x8000, 0x0, 0x81, 0x6, 0x80000001, 0x7, 0x80, 0x9, 0x2, 0x4, 0x0, 0x80000001, 0x401, 0x1, 0x8, 0x5, 0x7f, 0x10000, 0x8e39, 0x7, 0x81, 0x1, 0x2, 0x920d, 0x8, 0x1, 0x6, 0xb, 0x3f9bc741, 0x5, 0x5, 0xa, 0x6, 0x3, 0x1, 0x24000000, 0xff, 0x5bd7, 0x8, 0xfff, 0xc8b1, 0x1, 0x1000, 0x3ff, 0x8, 0x9d83, 0x0, 0xa, 0x9, 0x7fffffff, 0x2, 0x9, 0xa06d, 0xfffffff7, 0x81, 0xff000000, 0x200, 0x101, 0x2493, 0xde, 0x5, 0x4, 0x9, 0x713b, 0x7, 0xd83, 0x8, 0x3, 0x80000000, 0x3, 0x400, 0x1, 0x3, 0x6, 0x7, 0x8883, 0x10001, 0x10000, 0xed, 0x2, 0x400, 0x3, 0x2, 0x8000, 0x7b1, 0x0, 0x7, 0x5, 0x80000000, 0x7, 0x8000, 0x7fff, 0x7, 0x4, 0x9, 0xc8d, 0x6, 0x2, 0x3, 0x9, 0x7fffffff, 0x80000000, 0x81, 0x68341c1a, 0xe4a, 0xe, 0x6, 0x7, 0x6, 0x4, 0x9, 0x0, 0x26, 0x7, 0x7, 0x9, 0x5, 0x2, 0x3, 0x7fff, 0x7fff, 0x40, 0x9, 0x40, 0x10001, 0x0, 0x0, 0x2, 0x2, 0x4, 0x9, 0x8c, 0x4, 0x0, 0x1, 0x9, 0xfff, 0x72d9, 0x7, 0xd0, 0x0, 0x8baa, 0x0, 0x400, 0xccb8, 0x10, 0x4, 0x3, 0x1c0, 0x7, 0x0, 0x8, 0x8, 0x8, 0x9, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xdd, 0xe, 0x8, 0x6, 0x7ff, 0x7ff, 0x0, 0xb, 0x405, 0xfffffeff, 0x4, 0x40, 0x80000000, 0xfffffff8, 0x9, 0xc, 0x80000001, 0x40, 0x1, 0x800, 0x6, 0x4, 0xf, 0xfffffff8, 0xf, 0xfffffffe, 0x6, 0x0, 0x7fffffff, 0x4, 0xdc2d, 0x2, 0x5, 0x200, 0x4, 0x6, 0xc, 0x7, 0x2, 0x9, 0x5, 0x3, 0x9, 0x4, 0x296, 0x1, 0xff, 0x4, 0xfffff148, 0x7, 0x6, 0x6, 0x10000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x7ff, 0x4, 0x8, 0x3, 0x0, 0x4, 0xbb7, 0x8, 0x5, 0x9, 0x2, 0xfffffff9, 0x3, 0xf, 0xd46e, 0x62, 0x80000000, 0x7f, 0x6, 0x4, 0xfffffff7, 0x40, 0x10001, 0x2, 0xfff, 0x7ff, 0x3ff, 0x6, 0x0, 0x6, 0x9, 0x6, 0x8, 0x7, 0xae, 0x8, 0x75a61e18, 0xf, 0x7, 0x8, 0xffffffff, 0xffff8408, 0x8, 0x18000000, 0x5bc, 0x6, 0x4, 0x5, 0x8, 0x32b3b26d, 0x5, 0x9, 0xeb57, 0x7, 0x2, 0xf3, 0x0, 0x350, 0x7, 0x73c, 0x2f02044, 0x0, 0x5, 0x993, 0x9, 0x5, 0x6, 0x81, 0xa, 0xf8a6, 0x1, 0x4, 0x401, 0x2, 0x7, 0x6, 0x1, 0x5, 0x65, 0x2, 0x7, 0x32, 0xc, 0x98, 0xfffffff7, 0x1, 0x3, 0x5, 0x3, 0x3, 0x6, 0x80000000, 0x1c00, 0x7, 0xffffffff, 0x4, 0xff000000, 0x7, 0x9, 0x239, 0x7, 0x0, 0x4, 0x3, 0x7, 0x8001, 0xfffffffc, 0x1ff, 0x8, 0xa0000000, 0x7fff, 0x9, 0x5, 0x81, 0x7, 0xcc, 0x4a1, 0x3, 0x78000, 0x52, 0xfffffff7, 0x9, 0xc6, 0x7, 0x80000001, 0x1, 0x4, 0x49, 0xfffffffe, 0x4, 0xfffffff0, 0x9, 0x3ff, 0x40, 0xfff, 0x7ff, 0x9, 0xfff, 0x8923, 0x2, 0x43fccdf7, 0x6, 0xfff, 0xb, 0x1, 0xe, 0x0, 0x2, 0x4cca, 0x0, 0x9170, 0x895, 0x1, 0x7ed2, 0x1, 0x1, 0x0, 0x831, 0x1ff, 0xad51, 0xf, 0x3, 0x5, 0x2, 0x915, 0xc52, 0x2, 0x2, 0x4, 0x1ff, 0x27, 0x4, 0x8, 0x9, 0xa, 0x9, 0x9, 0x8, 0x9, 0x2, 0x0, 0xf316, 0xfffffff9, 0xc9ec, 0x9, 0x3, 0x3, 0x2, 0x0, 0x9, 0x1, 0x80000000, 0x5, 0x3, 0xf, 0xa, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x27}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xfffffff3, 0x6, 0x7ff, 0x8, 0x6, 0x7, 0x1, 0x2, 0x2, 0x8, 0x8, 0x401, 0x3, 0xa06c, 0x1665, 0x5, 0x8, 0xffffffff, 0x1ff, 0x2b1, 0xfffffffb, 0x3, 0x1, 0xb, 0x9, 0x7, 0x6, 0x9bb5, 0x4, 0x10000, 0x5, 0xd, 0x4, 0x5, 0x2, 0x7fffffff, 0x100, 0x401, 0x4, 0x1, 0x9, 0x3, 0x2, 0x9, 0xe71, 0x0, 0x4, 0x1, 0x1000, 0x1953, 0x6, 0x5, 0xdee, 0x9, 0x90, 0x9, 0x100, 0xffff8000, 0x6, 0x5, 0x1ff, 0x7ff, 0x6, 0x10000, 0x800, 0x0, 0x6, 0x2c4, 0x0, 0xd496, 0x4, 0x8001, 0x3, 0x3, 0xe68, 0x3, 0x80000000, 0x6, 0xe529, 0x80000001, 0x10, 0xe, 0xffffff8f, 0x8, 0x401, 0x2, 0x2, 0x959, 0x2, 0x7, 0xfffffff2, 0x40000000, 0xfffffffe, 0x4, 0xb, 0x8, 0xfffffff9, 0x74, 0x7fffffff, 0x1, 0x58, 0x4, 0x2, 0xff, 0x8, 0x7, 0x7, 0x8a6, 0xfffffffe, 0xdd, 0x9, 0x5, 0x10, 0x984, 0x3, 0xfffffffc, 0xd, 0x401, 0x7f, 0x7e, 0xee, 0xc06, 0xda53, 0xa, 0x2, 0xbcc, 0x8, 0x8, 0xffffffff, 0x8, 0x7, 0x1, 0x7, 0x6e5, 0x2, 0x4, 0xdf, 0x5, 0x4, 0x4, 0x3, 0x9, 0x7f, 0x200, 0xfffffffa, 0x6b34, 0x90, 0x6, 0x7f, 0x9, 0x9, 0x4000000, 0x0, 0xfffffffc, 0x1, 0x6, 0x80, 0x0, 0x6, 0x0, 0x1, 0x2a6, 0x2, 0x1e, 0x7, 0xd350, 0x1, 0x198, 0x200, 0xbf86, 0xe9, 0x3, 0x4, 0x5, 0xf188, 0x6, 0x5, 0x9, 0x5, 0xfffffeff, 0x7, 0x4, 0xfffffffc, 0x80000000, 0x6ef, 0x3, 0x5, 0x5, 0x240000, 0xfffffffd, 0x5, 0x8, 0x604, 0x3, 0x80000000, 0x4, 0x81, 0x5, 0xf9a8, 0x4d, 0xc, 0x4000000, 0x10000, 0x9, 0x0, 0x800, 0x6, 0x8, 0x4, 0xc, 0x3, 0xcb8, 0x100, 0x0, 0x4, 0x800, 0x3, 0x3, 0x357, 0x1ff, 0x5, 0x1, 0xfffffffe, 0x7, 0x3, 0x5, 0x7, 0x7, 0x9, 0x1ff, 0x7, 0x6, 0x2, 0x2, 0x593, 0x2, 0x3, 0x7, 0x5ca1, 0x2, 0x1, 0x400, 0xfffffff8, 0x400, 0x8000, 0x7, 0x44, 0x9, 0x0, 0x3, 0x84, 0x3, 0x4, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x2, 0x6, 0x8, {0x0, 0x0, 0xfd, 0x9, 0x3ff, 0x2}, {0x16, 0x1, 0x101, 0x0, 0x400, 0x1}, 0x9, 0x2, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfff, 0x3, 0x5, 0x5, 0x3, 0x2, 0x4, 0x7fff, 0x8, 0x3, 0x4, 0x3a, 0x0, 0x8, 0x4, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x8001, 0x10000, 0xfffffffd, 0x7, 0x9, 0x5, 0x0, 0x7, 0x6, 0x3, 0x6, 0x9, 0x0, 0xfffffefd, 0x5, 0x1, 0x7ff, 0x4, 0x5, 0x3ff, 0xc, 0x3, 0x80, 0x4, 0x3, 0xa, 0x2, 0x4, 0x3, 0x8, 0x800, 0xd955eae, 0x1000, 0x0, 0x0, 0x6e6, 0x6f, 0x6, 0x10001, 0x80000000, 0x7fffffff, 0x9, 0x5, 0x4e, 0x9, 0x80000001, 0x2, 0x56, 0x0, 0x5, 0xb, 0x4fe7, 0x7, 0x1, 0x101, 0x5ac0fb7a, 0xf, 0x2, 0x6, 0x7, 0x1, 0x8001, 0x6, 0x2, 0x180, 0x6, 0x9, 0x8, 0x1, 0x5, 0x2, 0x7, 0x2, 0x1, 0x5, 0x10000, 0xfffffff8, 0x3, 0x7fffffff, 0x5, 0x2400, 0x4, 0x7f, 0x8000000, 0xa0000000, 0x7, 0x2, 0x6, 0x7f, 0x50, 0x7f, 0x2, 0x8, 0x10000, 0x5, 0xb05, 0x4, 0xfffffe01, 0x70ee7dbb, 0x80000000, 0x0, 0x1, 0x5, 0x27, 0xa55e, 0x8, 0x6, 0x401, 0x80200000, 0x200, 0x7, 0xf7, 0x1, 0x7, 0xfffff4f9, 0x750, 0x9, 0x1, 0x8, 0x4, 0xc, 0xffff, 0x32e7, 0x0, 0x5, 0x6, 0xa, 0x67c6, 0x8837, 0xfffe0, 0xa, 0x12f9, 0xf3e, 0x4, 0x6, 0x7, 0x0, 0x1ff, 0x5, 0xb88, 0x8, 0x4, 0x4, 0x1, 0xd, 0x3ff, 0x2, 0x8, 0x9, 0xf8, 0x4, 0x1, 0x100, 0x659b, 0x1000, 0x30, 0x401, 0x0, 0x80, 0x4, 0x10001, 0x4, 0x5, 0xcd1, 0x32ab, 0xffffa643, 0x81, 0x5, 0x8, 0x7477ba6d, 0xf, 0xfffffffa, 0x4, 0x9, 0x8001, 0x1, 0x3, 0xe1a3, 0x6, 0x6, 0x9, 0x7, 0x5, 0x4, 0x9b, 0x3, 0xbf76, 0x10000, 0x3, 0x4, 0x9, 0x5, 0x80000000, 0xfffffffe, 0x8, 0x20, 0x4, 0x4021, 0x3, 0x8, 0x2, 0x80000000, 0x8001, 0x0, 0x7, 0x100, 0x5, 0x3, 0x4, 0x2, 0xb796, 0xf1, 0x8001, 0x7, 0x3, 0x6, 0x64, 0x3ff, 0x9626, 0x2bb0, 0x6, 0xffffff7f, 0xfff, 0x2, 0x2, 0x7, 0x1000, 0x13, 0xfffffe01, 0x5, 0x10000, 0xffff59f0, 0x5, 0x6, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9184}]}, @TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x9, 0xffff, 0x3, 0x454, 0x3, 0x4, 0x3ff, 0x4, 0x9, 0x8, 0xfffffffe, 0x6, 0x7, 0x2, 0x5, 0x2, 0x9, 0x0, 0xad, 0x9, 0x80, 0x0, 0xfc6c, 0x8, 0x80, 0x8, 0x80000001, 0x7, 0x5, 0x4, 0x4, 0x2, 0x7, 0x356, 0xffffffff, 0x6, 0x7fff, 0x4, 0x37ed, 0x3, 0x2, 0x67, 0x0, 0x4, 0x1ff, 0x0, 0x8, 0x0, 0x5, 0x81, 0x5, 0x7, 0x0, 0x7, 0x9, 0x2, 0x7, 0x39c9017d, 0x2, 0x3, 0x4, 0x62df, 0x4, 0x2e, 0x3, 0x7a1, 0x4, 0x26d, 0x4, 0x6, 0x5, 0x97f, 0x20, 0x3, 0x2c6a, 0xfffffffc, 0x8ff0, 0x100, 0xff, 0x33, 0x2, 0xf, 0x6997b43b, 0x7ff, 0x80000000, 0xb5, 0x54, 0x8, 0x8, 0x5c, 0x3, 0x800, 0x4, 0xc503, 0x10000, 0xfffffffa, 0x7, 0x5, 0x2, 0x741b, 0x7, 0x2, 0x7, 0x8, 0xa, 0xfffffff6, 0x8, 0xc3a, 0x9, 0x7fff, 0x800000, 0x5, 0x1, 0xfffffffb, 0x40, 0x800, 0x7, 0x1, 0x3, 0x3965, 0x95, 0xfffffff7, 0x401, 0x3, 0x7, 0xd1, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xb, 0x4, 0xf, 0xffff, 0x9, 0x7f, 0x7fff, 0x3, 0x8, 0x0, 0x8, 0x10001, 0x1, 0x9, 0x7, 0x7e4, 0x5, 0x7, 0x10000, 0x3, 0xfffffff8, 0x3, 0x0, 0x7ff, 0x1, 0x4, 0x4, 0x4, 0xffff, 0x0, 0x5, 0xffff, 0x8, 0x5, 0xf6, 0x81, 0x1, 0x443, 0x3, 0x5, 0x0, 0x0, 0x1, 0x7, 0x9, 0x5d9, 0x1, 0x8, 0x6, 0x3, 0x80000000, 0x8, 0x2, 0x731, 0x18f73f18, 0x10, 0x0, 0xb2a, 0x0, 0x3, 0x8bd, 0x7, 0x7fffffff, 0x80008000, 0x6, 0x3, 0x10, 0x80000000, 0xe, 0x4a793612, 0x3c, 0x8000, 0xffff, 0x4, 0x0, 0x1, 0xffffffff, 0x7f, 0x1, 0x5, 0x7fffffff, 0xa, 0x5, 0xa8, 0x2, 0x80000000, 0x400, 0x1, 0x6, 0x0, 0x8, 0x5, 0x7d, 0x3, 0xc627, 0x7, 0x8, 0x7, 0x7, 0x6, 0x9, 0x3, 0x6, 0x0, 0x6, 0x2, 0x9, 0x5, 0x7fff, 0x4, 0x8, 0x200, 0x8, 0x8000, 0xffffffff, 0x8, 0x3, 0x3, 0x8d33, 0xff, 0x3, 0x2]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0xc}}]}}]}, 0x1e3c}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 159.240143ms ago: executing program 5 (id=1105): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000004c0)='oom_adj\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4200008, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffff9}}, {@max_read={'max_read', 0x3d, 0x1c00000000}}], [{@uid_eq={'uid', 0x3d, r2}}, {@fsname={'fsname', 0x3d, 'binder\x00'}}, {@audit}, {@obj_role}, {@smackfsroot={'smackfsroot', 0x3d, 'binder\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'binder\x00'}}, {@subj_type={'subj_type', 0x3d, 'binder\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) 156.111464ms ago: executing program 5 (id=1106): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000)=0x3, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x20, r5, 0x11, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000001180)={0x74, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2a5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x74}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8ec}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x44881) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="54040000ec03"], 0x454}, 0x1, 0x0, 0x0, 0x4000018}, 0x8080) lseek(r1, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000000000)=0x8, 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa5ce) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 155.297044ms ago: executing program 4 (id=1107): r0 = socket$netlink(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd333}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb31a}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfafb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0xb5938a40deb08cfb}, 0x20000004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xff, 0xc, 0x2d, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, 0x80, 0x700, 0x7, 0x972f362}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) 154.420114ms ago: executing program 4 (id=1108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2043, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x10, 0x9, "0062ba7d820700000000000000000000096304"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x10, 0x9, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$cont(0x7, r2, 0x172a, 0x3) (async) ptrace$cont(0x7, r2, 0x172a, 0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0xf, 0x2, 0x300, 0x438, 0x5, "f844a640b80557413ba83a5710ded0021046c3", 0x10001, 0xa}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0xf, 0x2, 0x300, 0x438, 0x5, "f844a640b80557413ba83a5710ded0021046c3", 0x10001, 0xa}) 134.801416ms ago: executing program 4 (id=1109): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x0) dup2(r2, r3) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x88) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) utime(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x400, 0x3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x40040, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0x21, 0x74, {0x74, 0x24, "a6845cb067deb587d949f9ea323e1eb3c36ad77a491d485e7d5c6342b46634dc5ef7ddba7f38d5a51d6d60608a8bd7b735ae8f3b1e9d386f867b24d6e8e1f8c0cbf7dcc44092b52e049ea06aa4123b02dfc1a3863d51f8cd7dad65940fb3f180aec48b6b7606637adb5c23dd4a15a71a7de1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGSID(r4, 0x5429, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='.\x00', 0x2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0) 93.36029ms ago: executing program 2 (id=1110): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000240)={0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, r1, 0x3000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 39.302856ms ago: executing program 5 (id=1111): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) writev(r0, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0xa, 0x13, r1, 0x5f454000) 25.579477ms ago: executing program 5 (id=1112): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000080)=ANY=[]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) 0s ago: executing program 5 (id=1113): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1d0a2abd70fbfbdbd44427"], 0x40}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000040) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x2ec, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@mic={0x8c, 0x10, {0xe5d, "0ee6521257f8", @short="361deecaab96cced"}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @dsss={0x3, 0x1, 0x6c}, @chsw_timing={0x68, 0x4, {0x8, 0x7}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x140, 0x2a, [@measure_req={0x26, 0x7b, {0x5, 0x94, 0x5, "0ca7b7a283cde0a85bb618182b476e3850a2001e87d48c412d57ff6cd91de11f06f3773a5becbc7360aa938f09ff0a63dc29c28ac85a3342f7a623e4dc3dcac8199e35fcaacb75cc8e2629c6f659077164dd24fc0fe81bd793719088ebead15548bfc79999f8c3f3cf864eff136e9b3c8549305310a3a3c6"}}, @mesh_chsw={0x76, 0x6, {0x9, 0xfc, 0xe, 0x8}}, @perr={0x84, 0xb5, {0x40, 0xb, [{{}, @device_b, 0x4, @void, 0x3e}, {{}, @device_b, 0x5, @void, 0x10}, {{0x0, 0x1}, @device_a, 0xe9, @value=@device_b, 0x16}, {{0x0, 0x1}, @broadcast, 0x100, @value=@device_b, 0x20}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x6}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x36}, {{}, @broadcast, 0x2363, @void, 0x23}, {{}, @device_a, 0x78}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x3a}, {{}, @broadcast, 0x6, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0xff, @value, 0x3d}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="28a2f99b234a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_IE={0x112, 0x2a, [@perr={0x84, 0xe8, {0x40, 0xe, [{{0x0, 0x1}, @device_a, 0x69da, @value, 0x2c}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0x6}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x1c}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x12}, {{}, @device_a, 0xffff, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0xd}, {{}, @broadcast, 0xdca, @void, 0x38}, {{}, @broadcast, 0xffffffff}, {{}, @broadcast, 0x0, @void, 0x35}, {{0x0, 0x1}, @device_a, 0xfffff21e, @value=@broadcast, 0xd}, {{}, @broadcast, 0x4, @void, 0x6}, {{}, @device_a, 0xc, @void, 0x9}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0xd}]}}, @ibss={0x6, 0x2, 0x2}, @supported_rates={0x1, 0x4, [{0x1b}, {0x60, 0x1}, {0x1}, {0x2, 0x1}]}, @mic={0x8c, 0x18, {0xac6, "0383fd6f3284", @long="4022695a930f5775783cd79969abe204"}}]}, @NL80211_ATTR_IE={0x19, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xf, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd}, &(0x7f0000000000)={0x9, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000140)=""/223, 0xdf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 26.965781][ T36] audit: type=1400 audit(1762958442.460:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.967069][ T283] cgroup: Unknown subsys name 'net' [ 26.988537][ T36] audit: type=1400 audit(1762958442.460:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.015726][ T36] audit: type=1400 audit(1762958442.480:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.016020][ T283] cgroup: Unknown subsys name 'devices' [ 27.197733][ T283] cgroup: Unknown subsys name 'hugetlb' [ 27.203370][ T283] cgroup: Unknown subsys name 'rlimit' [ 27.379264][ T36] audit: type=1400 audit(1762958442.870:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.402486][ T36] audit: type=1400 audit(1762958442.870:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.427197][ T36] audit: type=1400 audit(1762958442.870:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.456262][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.465007][ T36] audit: type=1400 audit(1762958442.950:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.490534][ T36] audit: type=1400 audit(1762958442.950:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.529174][ T36] audit: type=1400 audit(1762958443.020:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.554742][ T36] audit: type=1400 audit(1762958443.020:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.555063][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.330891][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.338049][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.345173][ T290] bridge_slave_0: entered allmulticast mode [ 28.351484][ T290] bridge_slave_0: entered promiscuous mode [ 28.357945][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.364994][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.372201][ T290] bridge_slave_1: entered allmulticast mode [ 28.378505][ T290] bridge_slave_1: entered promiscuous mode [ 28.508315][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.515368][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.522548][ T292] bridge_slave_0: entered allmulticast mode [ 28.528836][ T292] bridge_slave_0: entered promiscuous mode [ 28.540001][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.547196][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.554249][ T291] bridge_slave_0: entered allmulticast mode [ 28.560539][ T291] bridge_slave_0: entered promiscuous mode [ 28.566660][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.573699][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.580803][ T292] bridge_slave_1: entered allmulticast mode [ 28.587102][ T292] bridge_slave_1: entered promiscuous mode [ 28.597777][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.604829][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.611893][ T291] bridge_slave_1: entered allmulticast mode [ 28.618184][ T291] bridge_slave_1: entered promiscuous mode [ 28.663831][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.670982][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.678260][ T293] bridge_slave_0: entered allmulticast mode [ 28.684441][ T293] bridge_slave_0: entered promiscuous mode [ 28.690887][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.698078][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.705347][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.712383][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.726693][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.733821][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.740953][ T293] bridge_slave_1: entered allmulticast mode [ 28.747340][ T293] bridge_slave_1: entered promiscuous mode [ 28.858348][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.865409][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.872711][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.879745][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.892246][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.899514][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.907697][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.914893][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.938682][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.945745][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.953576][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.960632][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.008190][ T290] veth0_vlan: entered promiscuous mode [ 29.034879][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.041935][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.049594][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.056740][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.066882][ T290] veth1_macvtap: entered promiscuous mode [ 29.078589][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.085727][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.093328][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.100385][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.107935][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.114965][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.128593][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.135648][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.176424][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.193209][ T291] veth0_vlan: entered promiscuous mode [ 29.207870][ T291] veth1_macvtap: entered promiscuous mode [ 29.241872][ T293] veth0_vlan: entered promiscuous mode [ 29.267640][ T293] veth1_macvtap: entered promiscuous mode [ 29.274634][ T336] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 29.278066][ T292] veth0_vlan: entered promiscuous mode [ 29.302158][ T292] veth1_macvtap: entered promiscuous mode [ 29.391064][ T346] 9pnet_fd: Insufficient options for proto=fd [ 29.404885][ T350] futex_wake_op: syz.0.7 tries to shift op by -1; fix this program [ 29.419248][ T350] Zero length message leads to an empty skb [ 29.445879][ T356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 29.494418][ T362] rust_binder: Read failure Err(EAGAIN) in pid:10 [ 29.514892][ T364] mmap: syz.2.14 (364) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.595730][ T49] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.613503][ T368] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2147483649 [ 29.621425][ T368] rust_binder: 14: no such ref 1 [ 29.626853][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 29.725641][ T49] usb 2-1: device descriptor read/64, error -71 [ 29.901209][ T370] rust_binder: Write failure EINVAL in pid:4 [ 29.987348][ T49] usb 2-1: device descriptor read/64, error -71 [ 30.021870][ T383] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.159672][ T396] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 30.226615][ T401] fuse: Bad value for 'user_id' [ 30.231577][ T401] fuse: Bad value for 'user_id' [ 30.247735][ T49] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.395661][ T49] usb 2-1: device descriptor read/64, error -71 [ 30.414570][ T414] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 30.421954][ T414] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 30.442433][ T416] ======================================================= [ 30.442433][ T416] WARNING: The mand mount option has been deprecated and [ 30.442433][ T416] and is ignored by this kernel. Remove the mand [ 30.442433][ T416] option from the mount to silence this warning. [ 30.442433][ T416] ======================================================= [ 30.479437][ T416] binder: Unknown parameter 'context[7' [ 30.515833][ T210] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.646600][ T49] usb 2-1: device descriptor read/64, error -71 [ 30.666860][ T210] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.677236][ T210] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.686893][ T210] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.697177][ T210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.705332][ T210] usb 3-1: SerialNumber: syz [ 30.755914][ T49] usb usb2-port1: attempt power cycle [ 30.915480][ T210] usb 3-1: 0:2 : does not exist [ 30.922728][ T210] usb 3-1: USB disconnect, device number 2 [ 30.969927][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.985684][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.095681][ T49] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.116755][ T49] usb 2-1: device descriptor read/8, error -71 [ 31.136651][ T64] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.146437][ T64] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 31.159257][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.165916][ T64] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 31.174935][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.184119][ T64] usb 1-1: config 0 descriptor?? [ 31.246514][ T49] usb 2-1: device descriptor read/8, error -71 [ 31.495659][ T49] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 31.516901][ T49] usb 2-1: device descriptor read/8, error -71 [ 31.517721][ T447] rust_binder: Error while translating object. [ 31.523131][ T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.529432][ T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:34 [ 31.585228][ T457] 9pnet: Could not find request transport: zD=0x0000000000000003 [ 31.605062][ T64] saitek 0003:06A3:0621.0001: hidraw0: USB HID v80.01 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 31.646734][ T49] usb 2-1: device descriptor read/8, error -71 [ 31.743373][ T464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 31.765705][ T49] usb usb2-port1: unable to enumerate USB device [ 31.795744][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.804367][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.826539][ T467] bpf: Bad value for 'gid' [ 31.913784][ T482] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 32.013458][ T36] kauditd_printk_skb: 115 callbacks suppressed [ 32.013476][ T36] audit: type=1400 audit(1762958447.500:189): avc: denied { write } for pid=433 comm="syz.0.39" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.017668][ T49] usb 1-1: USB disconnect, device number 2 [ 32.097189][ T36] audit: type=1400 audit(1762958447.590:190): avc: denied { ioctl } for pid=494 comm="syz.3.58" path="socket:[3822]" dev="sockfs" ino=3822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.121365][ T36] audit: type=1400 audit(1762958447.590:191): avc: denied { write } for pid=494 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.553412][ T506] rust_binder: Write failure EFAULT in pid:42 [ 32.619365][ T36] audit: type=1400 audit(1762958448.110:192): avc: denied { setattr } for pid=508 comm="syz.2.63" name="file0" dev="incremental-fs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.659501][ T513] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 32.671370][ T36] audit: type=1400 audit(1762958448.160:193): avc: denied { ioctl } for pid=512 comm="syz.2.64" path="socket:[3844]" dev="sockfs" ino=3844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.697086][ T36] audit: type=1400 audit(1762958448.160:194): avc: denied { sqpoll } for pid=512 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.716673][ T36] audit: type=1400 audit(1762958448.160:195): avc: denied { map } for pid=512 comm="syz.2.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.725638][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.740634][ T36] audit: type=1400 audit(1762958448.160:196): avc: denied { read write } for pid=512 comm="syz.2.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.773033][ T36] audit: type=1400 audit(1762958448.160:197): avc: denied { execute } for pid=512 comm="syz.2.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.797718][ T36] audit: type=1400 audit(1762958448.210:198): avc: denied { name_bind } for pid=514 comm="syz.2.65" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.854920][ T527] rust_binder: Write failure EFAULT in pid:65 [ 32.905611][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 32.918308][ T10] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.936221][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.952983][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 32.962163][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.976442][ T10] usb 2-1: config 0 descriptor?? [ 33.324984][ T534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.337253][ T534] binder: Unknown parameter 'context[7' [ 33.409531][ T10] wacom 0003:056A:00EF.0002: hidraw0: USB HID v0.06 Device [HID 056a:00ef] on usb-dummy_hcd.1-1/input0 [ 33.509896][ T547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.525215][ T549] Invalid ELF header magic: != ELF [ 33.611326][ T10] usb 2-1: USB disconnect, device number 6 [ 33.697720][ T49] hid (null): unknown global tag 0xa0 [ 33.703179][ T49] hid (null): unknown global tag 0xe [ 33.714556][ T577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=577 comm=syz.2.82 [ 33.727613][ T49] hid-generic 0005:0003:1000.0003: unexpected long global item [ 33.735987][ T49] hid-generic 0005:0003:1000.0003: probe with driver hid-generic failed with error -22 [ 33.833067][ T586] binder: Bad value for 'stats' [ 34.072376][ T624] futex_wake_op: syz.2.99 tries to shift op by 32; fix this program [ 34.104131][ T628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.111387][ T628] IPv6: NLM_F_CREATE should be set when creating new route [ 34.118633][ T628] IPv6: NLM_F_CREATE should be set when creating new route [ 34.225622][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.376085][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 34.383489][ T49] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 34.392665][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.400738][ T49] usb 4-1: Product: syz [ 34.404913][ T49] usb 4-1: Manufacturer: syz [ 34.409727][ T49] usb 4-1: SerialNumber: syz [ 34.416773][ T49] r8152-cfgselector 4-1: Unknown version 0x0000 [ 34.423018][ T49] r8152-cfgselector 4-1: config 0 descriptor?? [ 34.465635][ T399] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.595618][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.627567][ T399] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 34.635859][ T399] usb 2-1: config 14 has no interface number 0 [ 34.642042][ T399] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 34.652167][ T399] usb 2-1: config 14 interface 21 has no altsetting 0 [ 34.660966][ T399] usb 2-1: string descriptor 0 read error: -22 [ 34.667207][ T399] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 34.676303][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.685225][ T635] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 34.693607][ T399] usb 2-1: MIDIStreaming interface descriptor not found [ 34.747000][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.755037][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 34.763543][ T10] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 34.771715][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.782983][ T10] usb 1-1: config 0 has no interface number 0 [ 34.789371][ T10] usb 1-1: config 0 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.802447][ T10] usb 1-1: config 0 interface 88 has no altsetting 0 [ 34.811238][ T10] usb 1-1: language id specifier not provided by device, defaulting to English [ 34.821344][ T10] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 34.830504][ T10] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 34.838615][ T10] usb 1-1: Product: syz [ 34.842819][ T10] usb 1-1: Manufacturer: syz [ 34.847477][ T10] usb 1-1: SerialNumber: syz [ 34.852896][ T10] usb 1-1: config 0 descriptor?? [ 34.896644][ T49] r8152-cfgselector 4-1: Unknown version 0x0000 [ 34.903054][ T49] r8152-cfgselector 4-1: bad CDC descriptors [ 34.909310][ T9] usb 2-1: USB disconnect, device number 7 [ 34.910760][ T49] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 35.059944][ T637] rust_binder: Error while translating object. [ 35.059970][ T637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.066186][ T637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 35.078689][ T10] usb 1-1: USB disconnect, device number 3 [ 35.479515][ T648] input: syz1 as /devices/virtual/input/input7 [ 35.673748][ T661] rust_binder: Error in use_page_slow: ESRCH [ 35.673766][ T661] rust_binder: use_range failure ESRCH [ 35.679824][ T661] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 35.685363][ T661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.693048][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:59 [ 36.606394][ T684] /dev/sr0: Can't lookup blockdev [ 36.643157][ T689] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 36.643868][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.661309][ T692] rust_binder: Error while translating object. [ 36.661327][ T692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.667621][ T692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:112 [ 36.923227][ T701] input: syz1 as /devices/virtual/input/input8 [ 36.925660][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.095611][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 37.103056][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 37.117039][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.125041][ T9] usb 4-1: Product: syz [ 37.129451][ T9] usb 4-1: Manufacturer: syz [ 37.134063][ T9] usb 4-1: SerialNumber: syz [ 37.139844][ T9] usb 4-1: config 0 descriptor?? [ 37.142569][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 37.142584][ T36] audit: type=1400 audit(1779735897.623:258): avc: denied { create } for pid=706 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.146781][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 37.170576][ T36] audit: type=1326 audit(1779735897.663:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.2.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ea38f6c9 code=0xffff0000 [ 37.178675][ T9] usb 4-1: Detected FT2232H [ 37.205396][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.346210][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 37.353816][ T694] /dev/rnullb0: Can't open blockdev [ 37.359671][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 37.367831][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 37.376002][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 37.384736][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 37.392965][ T10] usb 2-1: config 0 has no interface number 0 [ 37.401571][ T9] usb 4-1: USB disconnect, device number 3 [ 37.408842][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 37.418243][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 37.427597][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.435876][ T10] usb 2-1: Product: syz [ 37.440299][ T9] ftdi_sio 4-1:0.0: device disconnected [ 37.446170][ T10] usb 2-1: Manufacturer: syz [ 37.452094][ T10] usb 2-1: SerialNumber: syz [ 37.459394][ T10] usb 2-1: config 0 descriptor?? [ 37.665606][ T36] audit: type=1400 audit(1779735898.143:260): avc: denied { ioctl } for pid=702 comm="syz.1.130" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.693071][ T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 37.699489][ T10] usb 2-1: No valid video chain found. [ 37.711580][ T10] usb 2-1: USB disconnect, device number 8 [ 37.970646][ T36] audit: type=1400 audit(1779735898.453:261): avc: denied { append } for pid=721 comm="syz.3.138" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 37.976676][ T722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 38.304653][ T36] audit: type=1400 audit(1779735898.783:262): avc: denied { ioctl } for pid=729 comm="syz.1.141" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.339371][ T36] audit: type=1400 audit(1779735898.803:263): avc: denied { append } for pid=729 comm="syz.1.141" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.495654][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.603342][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 38.603440][ T732] rust_binder: Write failure EINVAL in pid:37 [ 38.658343][ T64] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 38.683224][ T64] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 38.700568][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 38.700708][ T675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.710373][ T739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=739 comm=syz.1.144 [ 38.715635][ T690] Bluetooth: hci0: command 0x1003 tx timeout [ 38.717035][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.742189][ T64] usb 4-1: Product: syz [ 38.746389][ T64] usb 4-1: Manufacturer: syz [ 38.750996][ T64] usb 4-1: SerialNumber: syz [ 38.761336][ T64] usb 4-1: config 0 descriptor?? [ 38.767862][ T743] rust_binder: Error while translating object. [ 38.767904][ T743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.768333][ T742] netlink: 124 bytes leftover after parsing attributes in process `syz.2.145'. [ 38.774182][ T743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 38.793218][ T64] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 38.809207][ T64] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 38.817443][ T64] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 38.995294][ T728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.003829][ T728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.013504][ T728] rust_binder: Error while translating object. [ 39.013531][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.019803][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 39.030392][ T64] usb 4-1: USB disconnect, device number 4 [ 39.359423][ T753] input: syz1 as /devices/virtual/input/input9 [ 39.625608][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.677956][ T36] audit: type=1400 audit(1779735900.163:264): avc: denied { bind } for pid=772 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.697172][ T36] audit: type=1400 audit(1779735900.163:265): avc: denied { name_bind } for pid=772 comm="syz.1.156" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 39.717826][ T776] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 39.727232][ T36] audit: type=1400 audit(1779735900.163:266): avc: denied { node_bind } for pid=772 comm="syz.1.156" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 39.764319][ T780] input: syz1 as /devices/virtual/input/input10 [ 39.776679][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.787620][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.797392][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 39.806499][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.815065][ T10] usb 1-1: config 0 descriptor?? [ 39.848867][ T783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4169 sclass=netlink_route_socket pid=783 comm=syz.3.160 [ 39.945831][ T36] audit: type=1400 audit(1779735900.433:267): avc: denied { watch } for pid=797 comm="syz.2.164" path="/59/file0" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.006910][ T803] batadv_slave_1: entered promiscuous mode [ 40.020466][ T802] batadv_slave_1: left promiscuous mode [ 40.130613][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.228033][ T759] netlink: 92 bytes leftover after parsing attributes in process `syz.0.151'. [ 40.239976][ T10] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x2 [ 40.253517][ T10] konepure 0003:1E7D:2DBE.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 40.335605][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 40.342050][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.350406][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.360500][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.370637][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.379700][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.387696][ T31] usb 2-1: Product: syz [ 40.391856][ T31] usb 2-1: Manufacturer: syz [ 40.396489][ T31] usb 2-1: SerialNumber: syz [ 40.438844][ T64] usb 1-1: USB disconnect, device number 4 [ 40.550384][ T808] sit0: entered promiscuous mode [ 40.556936][ T808] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 40.564695][ T808] netlink: 1 bytes leftover after parsing attributes in process `syz.2.167'. [ 40.606923][ T778] GUP no longer grows the stack in syz.1.158 (778): 200000001000-200000c01000 (200000000000) [ 40.617217][ T778] CPU: 0 UID: 0 PID: 778 Comm: syz.1.158 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 40.617246][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.617265][ T778] Call Trace: [ 40.617273][ T778] [ 40.617281][ T778] __dump_stack+0x21/0x30 [ 40.617320][ T778] dump_stack_lvl+0x10c/0x190 [ 40.617346][ T778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.617371][ T778] ? find_vma+0xcd/0x110 [ 40.617391][ T778] dump_stack+0x19/0x20 [ 40.617415][ T778] __get_user_pages+0x1e34/0x22d0 [ 40.617457][ T778] ? __kasan_check_write+0x18/0x20 [ 40.617490][ T778] ? down_read_killable+0x79/0xf0 [ 40.617514][ T778] ? populate_vma_page_range+0x230/0x230 [ 40.617540][ T778] ? kernel_text_address+0xa9/0xe0 [ 40.617568][ T778] ? unwind_get_return_address+0x51/0x90 [ 40.617594][ T778] __gup_longterm_locked+0xcb1/0x1580 [ 40.617624][ T778] ? stack_depot_save_flags+0x38/0x800 [ 40.617650][ T778] gup_fast_fallback+0x12ae/0x14a0 [ 40.617678][ T778] ? kasan_save_track+0x3e/0x80 [ 40.617700][ T778] ? __kmalloc_cache_noprof+0x24c/0x490 [ 40.617720][ T778] ? futex_lock_pi+0x77a/0xa10 [ 40.617747][ T778] ? get_user_pages_fast_only+0xc0/0xc0 [ 40.617784][ T778] get_user_pages_fast+0x73/0xb0 [ 40.617831][ T778] get_futex_key+0x24d/0x930 [ 40.617853][ T778] ? __cfi_get_futex_key+0x10/0x10 [ 40.617875][ T778] ? futex_lock_pi+0x77a/0xa10 [ 40.617902][ T778] ? futex_setup_timer+0xb4/0xd0 [ 40.617925][ T778] futex_lock_pi+0x1c0/0xa10 [ 40.617951][ T778] ? futex_unqueue+0x136/0x160 [ 40.617973][ T778] ? should_fail+0xf/0x20 [ 40.617993][ T778] ? __cfi_futex_lock_pi+0x10/0x10 [ 40.618018][ T778] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.618039][ T778] ? futex_setup_timer+0xb4/0xd0 [ 40.618056][ T778] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.618089][ T778] do_futex+0x25c/0x500 [ 40.618110][ T778] ? percpu_counter_add_batch+0xfc/0x1b0 [ 40.618131][ T778] ? __cfi_do_futex+0x10/0x10 [ 40.618160][ T778] __se_sys_futex+0x28f/0x300 [ 40.618178][ T778] ? __x64_sys_futex+0x110/0x110 [ 40.618196][ T778] ? __kasan_check_write+0x18/0x20 [ 40.618232][ T778] __x64_sys_futex+0xe9/0x110 [ 40.618256][ T778] x64_sys_call+0x227f/0x2ee0 [ 40.618288][ T778] do_syscall_64+0x58/0xf0 [ 40.618309][ T778] ? clear_bhb_loop+0x50/0xa0 [ 40.618327][ T778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.618344][ T778] RIP: 0033:0x7f342498f6c9 [ 40.618371][ T778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.618390][ T778] RSP: 002b:00007f342579e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.618417][ T778] RAX: ffffffffffffffda RBX: 00007f3424be5fa0 RCX: 00007f342498f6c9 [ 40.618433][ T778] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 40.618443][ T778] RBP: 00007f3424a11f91 R08: 0000000000000000 R09: 0000000000000002 [ 40.618453][ T778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.618462][ T778] R13: 00007f3424be6038 R14: 00007f3424be5fa0 R15: 00007ffecd296d68 [ 40.618476][ T778] [ 40.623256][ T31] usb 2-1: cannot find UAC_HEADER [ 40.937116][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.947301][ T31] usb 2-1: USB disconnect, device number 9 [ 40.956837][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.059988][ T833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 41.060019][ T833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:89 [ 41.073016][ T833] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 41.245084][ T847] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 41.245159][ T847] rust_binder: Write failure EINVAL in pid:56 [ 41.668397][ T857] netlink: 72 bytes leftover after parsing attributes in process `syz.2.186'. [ 41.915601][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 42.066919][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 42.075509][ T9] usb 1-1: config 5 has an invalid interface number: 249 but max is 1 [ 42.083719][ T9] usb 1-1: config 5 has an invalid interface number: 97 but max is 1 [ 42.091820][ T9] usb 1-1: config 5 has no interface number 0 [ 42.097939][ T9] usb 1-1: config 5 has no interface number 1 [ 42.104025][ T9] usb 1-1: config 5 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 42.114903][ T9] usb 1-1: config 5 interface 249 altsetting 4 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 42.125876][ T9] usb 1-1: config 5 interface 249 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 42.136661][ T9] usb 1-1: config 5 interface 249 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 42.147397][ T9] usb 1-1: config 5 interface 249 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 42.158272][ T9] usb 1-1: config 5 interface 249 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 42.169140][ T9] usb 1-1: config 5 interface 97 altsetting 2 endpoint 0x4 has invalid maxpacket 983, setting to 64 [ 42.179931][ T9] usb 1-1: config 5 interface 97 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 42.190723][ T9] usb 1-1: config 5 interface 97 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 42.201336][ T9] usb 1-1: config 5 interface 249 has no altsetting 0 [ 42.208148][ T9] usb 1-1: config 5 interface 97 has no altsetting 0 [ 42.216275][ T9] usb 1-1: New USB device found, idVendor=0685, idProduct=7000, bcdDevice=97.77 [ 42.225334][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.233329][ T9] usb 1-1: Product: Ѓ [ 42.237455][ T9] usb 1-1: Manufacturer: 堏讒ꋴ쥸ᣕཱུ䚪ᗽ䁒꭪뼻尿㸍⠲㒪➇⥙愜쩱᝻捭豐ᩉ륎捸붞⒢⛚凫逮车⿉鹙俤걨饶䭠ꯤ栶ｯ瞌䘷㿣詠藃罨맬腔ᾖ歌꒹㜣蛙쀴ᵽ鱬ᑜ┝㚜뿬ꬃᬄ逘 [ 42.261357][ T9] usb 1-1: SerialNumber: syz [ 42.266981][ T858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.274179][ T858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.673774][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 42.673791][ T36] audit: type=1400 audit(1779735903.153:295): avc: denied { create } for pid=884 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.700918][ T36] audit: type=1400 audit(1779735903.163:296): avc: denied { sys_admin } for pid=884 comm="syz.2.197" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 42.721788][ T36] audit: type=1400 audit(1779735903.163:297): avc: denied { associate } for pid=886 comm="syz.2.197" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 42.736292][ T885] capability: warning: `syz.2.197' uses 32-bit capabilities (legacy support in use) [ 42.753655][ T885] cgroup: Setting release_agent not allowed [ 42.902613][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 42.921136][ T890] rust_binder: Write failure EFAULT in pid:144 [ 42.921396][ T891] rust_binder: Write failure EFAULT in pid:144 [ 43.537870][ T36] audit: type=1400 audit(1779735904.023:298): avc: denied { watch watch_reads } for pid=900 comm="syz.2.202" path="/88" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.596049][ T910] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 43.605541][ T36] audit: type=1400 audit(1779735904.083:299): avc: denied { setopt } for pid=909 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.625989][ T36] audit: type=1400 audit(1779735904.093:300): avc: denied { create } for pid=909 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 43.866104][ T913] netlink: 72 bytes leftover after parsing attributes in process `syz.3.206'. [ 43.925994][ T914] rust_binder: 913 RLIMIT_NICE not set [ 43.926188][ T913] rust_binder: Error while translating object. [ 43.931715][ T913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 43.937964][ T913] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 43.947285][ T913] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:151 [ 43.972554][ T916] rust_binder: Error while translating object. [ 43.980811][ T916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.987029][ T916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 44.070233][ T36] audit: type=1400 audit(1779735904.553:301): avc: denied { bind } for pid=917 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.098905][ T918] FAT-fs (rnullb0): bogus number of reserved sectors [ 44.105763][ T918] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 44.158239][ T925] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=925 comm=syz.2.210 [ 44.175823][ T36] audit: type=1400 audit(1779735904.653:302): avc: denied { read } for pid=926 comm="syz.3.212" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.198250][ T36] audit: type=1400 audit(1779735904.653:303): avc: denied { open } for pid=926 comm="syz.3.212" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.222628][ T36] audit: type=1400 audit(1779735904.653:304): avc: denied { ioctl } for pid=926 comm="syz.3.212" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.259515][ T942] capability: warning: `syz.2.216' uses deprecated v2 capabilities in a way that may be insecure [ 44.351596][ T957] input: syz1 as /devices/virtual/input/input11 [ 44.536248][ T983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=983 comm=syz.2.228 [ 44.664821][ T9] usb 1-1: USB disconnect, device number 5 [ 44.700187][ T996] netlink: 188 bytes leftover after parsing attributes in process `syz.0.233'. [ 44.720523][ T1009] netlink: 188 bytes leftover after parsing attributes in process `syz.0.233'. [ 44.867872][ T1030] netlink: 'syz.2.245': attribute type 4 has an invalid length. [ 44.875682][ T1030] netlink: 'syz.2.245': attribute type 5 has an invalid length. [ 44.886839][ T1030] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 44.906295][ T1032] rust_binder: Write failure EFAULT in pid:102 [ 45.139265][ T1059] rust_binder: Error while translating object. [ 45.147020][ T1059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 45.153915][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:114 [ 45.224342][ T1085] tipc: Enabling of bearer rejected, failed to enable media [ 45.310540][ T1087] input: syz1 as /devices/virtual/input/input13 [ 45.325962][ T1098] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 45.333812][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 45.347520][ T1100] /dev/rnullb0: Can't open blockdev [ 45.365975][ T1101] rust_binder: Error while translating object. [ 45.366005][ T1101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.372257][ T1101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:123 [ 45.416536][ T1114] usb usb8: usbfs: process 1114 (syz.1.271) did not claim interface 0 before use [ 46.101592][ T1130] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 46.110928][ T1131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=1131 comm=syz.0.276 [ 46.185681][ T1138] bridge0: port 3(erspan0) entered blocking state [ 46.192196][ T1138] bridge0: port 3(erspan0) entered disabled state [ 46.198738][ T1138] erspan0: entered allmulticast mode [ 46.204607][ T1138] erspan0: entered promiscuous mode [ 46.209959][ T1138] bridge0: port 3(erspan0) entered blocking state [ 46.216411][ T1138] bridge0: port 3(erspan0) entered forwarding state [ 46.317505][ T1151] rust_binder: 138: no such ref 1 [ 46.475623][ T499] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.508709][ T1158] rust_binder: Write failure EINVAL in pid:182 [ 46.626733][ T499] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 46.643977][ T499] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 46.653740][ T499] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 46.663549][ T499] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 46.672618][ T499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.694421][ T499] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 46.891466][ T49] usb 1-1: USB disconnect, device number 6 [ 46.901271][ T1143] rust_binder: Write failure EFAULT in pid:139 [ 47.186012][ T1165] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 47.200400][ T1165] rust_binder: Write failure EINVAL in pid:145 [ 47.210615][ T1164] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 47.430237][ T1185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.430532][ T1186] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.458699][ T1188] fuse: Unknown parameter '0x0000000000000004' [ 47.620848][ T1200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.620880][ T1200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 47.634111][ T1202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.755738][ T499] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 47.915590][ T499] usb 4-1: Using ep0 maxpacket: 16 [ 47.921754][ T499] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.931994][ T499] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.942279][ T499] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.951431][ T499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.959449][ T499] usb 4-1: Product: syz [ 47.963610][ T499] usb 4-1: Manufacturer: syz [ 47.968217][ T499] usb 4-1: SerialNumber: syz [ 48.181158][ T499] usb 4-1: 0:2 : does not exist [ 48.186195][ T499] usb 4-1: unit 9 not found! [ 48.192555][ T499] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 48.202114][ T499] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 48.211278][ T499] usb 4-1: USB disconnect, device number 5 [ 48.218366][ T332] udevd[332]: setting mode of /dev/snd/controlC0 to 020660 failed: No such file or directory [ 48.228866][ T332] udevd[332]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 48.307017][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 48.307036][ T36] audit: type=1400 audit(1779735908.793:330): avc: denied { create } for pid=1219 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 48.334137][ T36] audit: type=1400 audit(1779735908.813:331): avc: denied { accept } for pid=1219 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.353994][ T36] audit: type=1400 audit(1779735908.813:332): avc: denied { write } for pid=1219 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 48.547558][ T36] audit: type=1400 audit(1779735909.033:333): avc: denied { connect } for pid=1230 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.577051][ T36] audit: type=1400 audit(1779735909.033:334): avc: denied { write } for pid=1230 comm="syz.0.307" laddr=fe80::48fe:e4ff:fe47:cd71 lport=1 faddr=ff02::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.646715][ T36] audit: type=1400 audit(1779735909.133:335): avc: denied { ioctl } for pid=1240 comm="syz.1.311" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.685640][ T36] audit: type=1400 audit(1779735909.133:336): avc: denied { getopt } for pid=1240 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.715243][ T36] audit: type=1400 audit(1779735909.173:337): avc: denied { bind } for pid=1242 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.752843][ T36] audit: type=1400 audit(1779735909.173:338): avc: denied { execute } for pid=1242 comm="syz.0.312" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.800597][ T1249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 48.800682][ T1249] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.820363][ T1249] rust_binder: Read failure Err(EFAULT) in pid:190 [ 48.851790][ T36] audit: type=1400 audit(1779735909.333:339): avc: denied { lock } for pid=1253 comm="syz.1.316" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 49.065623][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.125613][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.236673][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.246870][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.264370][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 49.273626][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.285584][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 49.285720][ T31] usb 1-1: SerialNumber: syz [ 49.296516][ T10] usb 4-1: config 245 has an invalid interface number: 159 but max is 3 [ 49.315017][ T10] usb 4-1: config 245 has an invalid interface number: 180 but max is 3 [ 49.323432][ T10] usb 4-1: config 245 has an invalid interface number: 176 but max is 3 [ 49.342033][ T10] usb 4-1: config 245 has an invalid interface number: 159 but max is 3 [ 49.352118][ T10] usb 4-1: config 245 has 3 interfaces, different from the descriptor's value: 4 [ 49.370760][ T10] usb 4-1: config 245 has no interface number 0 [ 49.385942][ T10] usb 4-1: config 245 has no interface number 1 [ 49.397938][ T10] usb 4-1: config 245 has no interface number 2 [ 49.404306][ T10] usb 4-1: config 245 interface 176 altsetting 9 bulk endpoint 0xD has invalid maxpacket 16 [ 49.414467][ T10] usb 4-1: config 245 interface 176 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 49.425618][ T10] usb 4-1: config 245 interface 176 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 49.438311][ T10] usb 4-1: config 245 interface 176 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 49.453046][ T10] usb 4-1: config 245 interface 176 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 49.468051][ T10] usb 4-1: config 245 interface 176 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 49.479168][ T10] usb 4-1: config 245 interface 176 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 49.491224][ T10] usb 4-1: config 245 interface 159 has no altsetting 0 [ 49.498214][ T10] usb 4-1: config 245 interface 159 has no altsetting 1 [ 49.505614][ T10] usb 4-1: config 245 interface 180 has no altsetting 0 [ 49.512569][ T10] usb 4-1: config 245 interface 176 has no altsetting 0 [ 49.523731][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= 0.00 [ 49.534693][ T31] usb 1-1: invalid UAC_HEADER (v1) [ 49.540700][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.552755][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 49.555629][ T10] usb 4-1: Product: syz [ 49.573581][ T10] usb 4-1: Manufacturer: syz [ 49.574957][ T31] usb 1-1: USB disconnect, device number 7 [ 49.581569][ T10] usb 4-1: SerialNumber: syz [ 49.588502][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.696701][ T1270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.706440][ T1270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.714846][ T1270] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 49.723034][ T1270] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 49.731762][ T1270] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 49.740047][ T1270] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 49.808230][ T10] usb-storage 4-1:245.159: USB Mass Storage device detected [ 49.843299][ T10] usb-storage 4-1:245.180: USB Mass Storage device detected [ 49.867226][ T10] usb-storage 4-1:245.176: USB Mass Storage device detected [ 49.889513][ T10] usb 4-1: USB disconnect, device number 6 [ 49.925600][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 50.055687][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.223546][ T1284] netlink: 'syz.2.324': attribute type 16 has an invalid length. [ 50.231408][ T1284] netlink: 'syz.2.324': attribute type 3 has an invalid length. [ 50.239148][ T1284] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.324'. [ 50.260574][ T1290] netlink: 152 bytes leftover after parsing attributes in process `syz.2.325'. [ 50.325615][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.585604][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 50.725608][ T9] usb 2-1: device descriptor read/64, error -71 [ 50.985648][ T9] usb 2-1: device descriptor read/64, error -71 [ 51.105842][ T9] usb usb2-port1: attempt power cycle [ 51.190449][ T1313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 51.192202][ T1314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41578 sclass=netlink_route_socket pid=1314 comm=syz.2.333 [ 51.214570][ T1316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 51.455624][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.476593][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.495604][ T499] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.606623][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.645590][ T499] usb 4-1: Using ep0 maxpacket: 32 [ 51.651760][ T499] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 51.660082][ T499] usb 4-1: config 0 has no interface number 0 [ 51.666285][ T499] usb 4-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 51.678755][ T499] usb 4-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed [ 51.687957][ T499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.695995][ T499] usb 4-1: Product: syz [ 51.700159][ T499] usb 4-1: Manufacturer: syz [ 51.704756][ T499] usb 4-1: SerialNumber: syz [ 51.710112][ T499] usb 4-1: config 0 descriptor?? [ 51.815618][ T690] Bluetooth: hci0: command 0x1003 tx timeout [ 51.815618][ T675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.845608][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 51.866563][ T9] usb 2-1: device descriptor read/8, error -71 [ 51.918346][ T499] usb 4-1: USB disconnect, device number 7 [ 51.996550][ T9] usb 2-1: device descriptor read/8, error -71 [ 52.105697][ T9] usb usb2-port1: unable to enumerate USB device [ 52.495814][ T1337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:176 [ 52.631880][ T1340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=1340 comm=syz.3.343 [ 52.654438][ T1340] SELinux: security_context_str_to_sid () failed with errno=-22 [ 52.725347][ T1346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.725385][ T1346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 52.991840][ T1363] exFAT-fs (rnullb0): invalid boot record signature [ 53.025583][ T1363] exFAT-fs (rnullb0): failed to read boot sector [ 53.031937][ T1363] exFAT-fs (rnullb0): failed to recognize exfat type [ 53.381773][ T1372] netlink: 104 bytes leftover after parsing attributes in process `syz.0.354'. [ 53.506601][ T1377] rust_binder: Error while translating object. [ 53.506655][ T1377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.514921][ T1377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 53.535669][ T1380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.550314][ T1382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'. [ 53.589487][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 53.589501][ T36] audit: type=1400 audit(1779735914.073:351): avc: denied { relabelfrom } for pid=1385 comm="syz.2.359" name="NETLINK" dev="sockfs" ino=9397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.622731][ T36] audit: type=1400 audit(1779735914.073:352): avc: denied { relabelto } for pid=1385 comm="syz.2.359" name="NETLINK" dev="sockfs" ino=9397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 53.655872][ T36] audit: type=1400 audit(1779735914.143:353): avc: denied { read } for pid=1387 comm="syz.2.360" name="file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.710103][ T1396] binder: Unknown parameter 'defcontext01777777777777777777777' [ 53.735147][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.735586][ T36] audit: type=1400 audit(1779735914.213:354): avc: denied { bind } for pid=1397 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.742418][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.762322][ T1398] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 53.795208][ T36] audit: type=1326 audit(1779735914.273:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3878f6c9 code=0x7fc00000 [ 53.796540][ T1403] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 53.832994][ T1405] overlayfs: disabling nfs_export due to verity=on [ 53.842038][ T1405] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 53.851634][ T1405] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 53.862830][ T1405] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 53.871960][ T1405] rust_binder: Write failure EFAULT in pid:219 [ 53.889616][ T36] audit: type=1400 audit(1779735914.373:356): avc: denied { setopt } for pid=1416 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.924823][ T36] audit: type=1400 audit(1779735914.403:357): avc: denied { setopt } for pid=1416 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.958157][ T1425] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 53.966594][ T1425] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 54.021568][ T36] audit: type=1400 audit(1779735914.493:358): avc: denied { mount } for pid=1429 comm="syz.3.374" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.044323][ T36] audit: type=1400 audit(1779735914.493:359): avc: denied { write } for pid=1430 comm="syz.1.375" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.047438][ T1434] rust_binder: Error while translating object. [ 54.066040][ T1434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 54.066222][ T36] audit: type=1400 audit(1779735914.493:360): avc: denied { remove_name } for pid=1430 comm="syz.1.375" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.072230][ T1434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:211 [ 54.144153][ T1442] overlayfs: workdir and upperdir must be separate subtrees [ 54.216950][ T1443] fuseblk: Unknown parameter 'fI!d' [ 54.245588][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 54.396605][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 54.407602][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 54.416681][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.425217][ T9] usb 4-1: config 0 descriptor?? [ 54.430459][ T1431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.841287][ T9] kone 0003:1E7D:2CED.0005: unknown main item tag 0x1 [ 54.848832][ T9] kone 0003:1E7D:2CED.0005: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 55.042448][ T64] usb 4-1: USB disconnect, device number 8 [ 55.116265][ T1472] No source specified [ 55.271043][ T1478] syz.2.389 uses obsolete (PF_INET,SOCK_PACKET) [ 55.292446][ T1482] fuse: Unknown parameter 'rootmod00ˤ@00000L8000000040000' [ 55.687071][ T1515] IPv6: A: Disabled Multicast RS [ 55.712512][ T1521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1070 sclass=netlink_route_socket pid=1521 comm=syz.2.403 [ 55.735595][ T675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.735632][ T690] Bluetooth: hci0: command 0x1003 tx timeout [ 55.764587][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.974192][ T1540] incfs: Error accessing: ./file0. [ 55.979411][ T1540] incfs: mount failed -20 [ 56.966556][ T1580] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 56.976508][ T1580] overlayfs: missing 'lowerdir' [ 57.689649][ T1601] rust_binder: Write failure EFAULT in pid:224 [ 57.718623][ T1606] __vm_enough_memory: pid: 1606, comm: syz.0.430, bytes: 18014402804453376 not enough memory for the allocation [ 57.815952][ T690] Bluetooth: hci0: command 0x1003 tx timeout [ 57.822061][ T675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.995620][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 58.007320][ T1626] netlink: 'syz.2.437': attribute type 64 has an invalid length. [ 58.156635][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.175589][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 58.184655][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.195825][ T9] usb 1-1: config 0 descriptor?? [ 58.607132][ T9] wacom 0003:056A:00F0.0006: hidraw0: USB HID v8.07 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0 [ 58.640109][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 58.640123][ T36] audit: type=1400 audit(1779735919.122:377): avc: denied { accept } for pid=1659 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.666723][ T36] audit: type=1400 audit(1779735919.122:378): avc: denied { accept } for pid=1659 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.807153][ T36] audit: type=1400 audit(1779735919.292:379): avc: denied { create } for pid=1612 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.807663][ T1613] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 58.827743][ T36] audit: type=1400 audit(1779735919.292:380): avc: denied { write } for pid=1612 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 58.836003][ T1613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.863980][ T1613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.876983][ T31] usb 1-1: USB disconnect, device number 8 [ 58.891337][ T1679] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 58.891421][ T1680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.928848][ T1690] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.943361][ T1690] rust_binder: 251: no such ref 4294967293 [ 58.949509][ T1691] rust_binder: 251: no such ref 4294967293 [ 59.019628][ T1694] cgroup: fork rejected by pids controller in /syz0 [ 59.480988][ T1844] rust_binder: 1843 RLIMIT_NICE not set [ 59.481151][ T1843] rust_binder: 237: no such ref 3 [ 59.491751][ T1843] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 59.499068][ T1843] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 59.506135][ T1843] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 59.945666][ T1861] binder: Unknown parameter '' [ 59.962502][ T1863] rust_binder: 406: no such ref 0 [ 59.967654][ T1863] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 59.974730][ T1863] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 59.981793][ T1863] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 59.988851][ T1863] rust_binder: 406: no such ref 0 [ 60.004400][ T36] audit: type=1400 audit(1779735920.482:381): avc: granted { setsecparam } for pid=1864 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 60.028939][ T36] audit: type=1400 audit(1779735920.512:382): avc: denied { create } for pid=1866 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.396124][ T1881] netlink: 68 bytes leftover after parsing attributes in process `syz.3.478'. [ 60.821499][ T1896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1896 comm=syz.2.483 [ 60.833916][ T1896] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1896 comm=syz.2.483 [ 60.952973][ T1910] incfs: Error accessing: ./file0. [ 60.958185][ T1910] incfs: mount failed -20 [ 61.025125][ T1924] fuse: Bad value for 'rootmode' [ 61.780945][ T1942] overlayfs: failed to clone lowerpath [ 61.796870][ T36] audit: type=1400 audit(1779735922.282:383): avc: denied { setopt } for pid=1943 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.838477][ T36] audit: type=1400 audit(1779735923.322:384): avc: denied { bind } for pid=2010 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.293476][ T2015] rust_binder: Write failure EFAULT in pid:420 [ 63.594501][ T2020] rust_binder: 231: no such ref 1 [ 63.605780][ T2020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:231 [ 63.722895][ T2030] /dev/loop0: Can't lookup blockdev [ 63.795612][ T36] audit: type=1400 audit(1779735924.272:385): avc: denied { ioctl } for pid=2021 comm="syz.1.524" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 64.024417][ T36] audit: type=1326 audit(1779735924.502:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2013 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5498f6c9 code=0x7fc00000 [ 64.158751][ T2034] rust_binder: inc_ref_done called when no active inc_refs [ 64.158772][ T2034] rust_binder: inc_ref_done called when no active inc_refs [ 64.166083][ T2034] rust_binder: 423: no such ref 2 [ 64.178382][ T2034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:423 [ 64.507438][ T2043] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 64.924824][ T36] audit: type=1400 audit(1779735925.402:387): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.989326][ T2056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 65.006358][ T36] audit: type=1400 audit(1779735925.492:388): avc: denied { read } for pid=2055 comm="syz.0.535" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.043255][ T36] audit: type=1400 audit(1779735925.492:389): avc: denied { open } for pid=2055 comm="syz.0.535" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.075613][ T36] audit: type=1400 audit(1779735925.492:390): avc: denied { ioctl } for pid=2055 comm="syz.0.535" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.261626][ T36] audit: type=1326 audit(1779735925.742:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2059 comm="syz.3.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3878f6c9 code=0x0 [ 65.376064][ T2064] binder: Bad value for 'stats' [ 65.417275][ T2071] overlayfs: regular lower layers cannot follow data lower layers [ 65.427167][ T2071] overlayfs: regular lower layers cannot follow data lower layers [ 65.665602][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 65.730150][ T330] erspan0: left allmulticast mode [ 65.735228][ T330] erspan0: left promiscuous mode [ 65.740256][ T330] bridge0: port 3(erspan0) entered disabled state [ 65.747571][ T330] bridge_slave_1: left allmulticast mode [ 65.753222][ T330] bridge_slave_1: left promiscuous mode [ 65.758873][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.766420][ T330] bridge_slave_0: left allmulticast mode [ 65.772041][ T330] bridge_slave_0: left promiscuous mode [ 65.777946][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.815704][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 65.821928][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.831625][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.842612][ T2080] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.849764][ T2080] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.856908][ T2080] bridge_slave_0: entered allmulticast mode [ 65.863114][ T2080] bridge_slave_0: entered promiscuous mode [ 65.869856][ T2080] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.877002][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.877952][ T2080] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.886045][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.886068][ T31] usb 2-1: Product: syz [ 65.893160][ T2080] bridge_slave_1: entered allmulticast mode [ 65.902637][ T31] usb 2-1: Manufacturer: syz [ 65.908499][ T2080] bridge_slave_1: entered promiscuous mode [ 65.911323][ T31] usb 2-1: SerialNumber: syz [ 65.928409][ T330] veth1_macvtap: left promiscuous mode [ 65.933929][ T330] veth0_vlan: left promiscuous mode [ 66.025744][ T2080] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.032836][ T2080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.040180][ T2080] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.047230][ T2080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.074454][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.082867][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.097917][ T668] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.104981][ T668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.112679][ T668] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.119746][ T668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.128899][ T2069] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.137155][ T2069] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 66.155111][ T2069] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.165151][ T2080] veth0_vlan: entered promiscuous mode [ 66.174745][ T2069] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 66.189417][ T2080] veth1_macvtap: entered promiscuous mode [ 66.249433][ T36] audit: type=1400 audit(1779735926.732:392): avc: denied { mounton } for pid=2080 comm="syz-executor" path="/root/syzkaller.kag315/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.344654][ T2108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 66.355480][ T31] usb 2-1: failed to enable PITCH for EP 0x82 [ 66.362834][ T31] usb 2-1: 2:1: cannot set freq 3624486 to ep 0x82 [ 66.389105][ T31] usb 2-1: USB disconnect, device number 14 [ 66.595775][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.745737][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 66.751953][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 66.760386][ T9] usb 5-1: config 179 has no interface number 0 [ 66.766727][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 66.778112][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 66.789651][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.800910][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.811049][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 66.824414][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 66.831447][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 66.840785][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.849174][ T2128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2128 comm=syz.2.559 [ 66.857598][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input17 [ 66.862545][ T2128] batadv_slave_0: mtu less than device minimum [ 66.888714][ T36] audit: type=1400 audit(1779735927.372:393): avc: denied { mount } for pid=2129 comm="syz.1.560" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.889401][ T2128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2128 comm=syz.2.559 [ 66.992107][ T36] audit: type=1400 audit(1779735927.472:394): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 67.113814][ T2163] rust_binder: Write failure EFAULT in pid:4 [ 67.239707][ T2194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 67.315641][ T64] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 67.326582][ T2198] incfs: Error accessing: ./file0. [ 67.338446][ T2198] incfs: mount failed -20 [ 67.348746][ T2198] fuse: Bad value for 'group_id' [ 67.360244][ T2198] fuse: Bad value for 'group_id' [ 67.455604][ T64] usb 2-1: device descriptor read/64, error -71 [ 67.715637][ T64] usb 2-1: device descriptor read/64, error -71 [ 67.965594][ T64] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 68.115607][ T64] usb 2-1: device descriptor read/64, error -71 [ 68.279819][ T2226] fuse: Unknown parameter 'md' [ 68.296709][ T2229] netlink: 'syz.2.593': attribute type 28 has an invalid length. [ 68.355603][ T64] usb 2-1: device descriptor read/64, error -71 [ 68.391365][ T2249] cgroup: Need name or subsystem set [ 68.465733][ T64] usb usb2-port1: attempt power cycle [ 68.805602][ T64] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 68.826591][ T64] usb 2-1: device descriptor read/8, error -71 [ 68.956614][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.137625][ T2261] incfs: Backing dir is not set, filesystem can't be mounted. [ 69.145207][ T2261] incfs: mount failed -2 [ 69.174766][ T2263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.605'. [ 69.186450][ T2263] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.195666][ T64] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 69.210111][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 69.210124][ T36] audit: type=1400 audit(1779735929.692:403): avc: denied { map } for pid=2265 comm="syz.2.606" path="pipe:[2864]" dev="pipefs" ino=2864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 69.213607][ T2266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 69.226692][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.345000][ T1324] usb 5-1: USB disconnect, device number 2 [ 69.350896][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 69.360158][ T1324] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 69.375896][ T2278] cgroup: Need name or subsystem set [ 69.382161][ T64] usb 2-1: device descriptor read/8, error -71 [ 69.495723][ T64] usb usb2-port1: unable to enumerate USB device [ 70.281565][ T2310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.361472][ T2328] cgroup: Need name or subsystem set [ 70.410824][ T36] audit: type=1400 audit(1779735930.892:404): avc: denied { read } for pid=2333 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.430231][ T399] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.439192][ T2332] binder: Bad value for 'max' [ 70.574059][ T36] audit: type=1400 audit(1779735931.052:405): avc: denied { bind } for pid=2342 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.597811][ T399] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.607080][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.616235][ T399] usb 5-1: Product: syz [ 70.620512][ T399] usb 5-1: Manufacturer: syz [ 70.625163][ T399] usb 5-1: SerialNumber: syz [ 71.217852][ T2348] cgroup: noprefix used incorrectly [ 71.266804][ T2358] overlay: ./file0 is not a directory [ 71.267500][ T1324] usb 5-1: USB disconnect, device number 3 [ 71.389404][ T2373] cgroup: Need name or subsystem set [ 71.537293][ T2382] netlink: 'syz.2.643': attribute type 11 has an invalid length. [ 71.567706][ T2386] 9pnet_fd: Insufficient options for proto=fd [ 72.113917][ T2400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.114239][ T2400] netlink: 64 bytes leftover after parsing attributes in process `syz.1.650'. [ 72.131467][ T2400] rust_binder: inc_ref_done called when no active inc_refs [ 72.202266][ T2410] rust_binder: Write failure EFAULT in pid:24 [ 72.303221][ T2415] tipc: Enabling of bearer rejected, failed to enable media [ 72.318604][ T2415] vcan0: entered allmulticast mode [ 72.323855][ T2415] vcan0: left allmulticast mode [ 72.350568][ T36] audit: type=1400 audit(1779735932.832:406): avc: denied { listen } for pid=2420 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.353870][ T2426] cgroup: Need name or subsystem set [ 72.625589][ T1324] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 72.775580][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 72.781803][ T1324] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.789844][ T1324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.799980][ T1324] usb 2-1: config 0 has no interface number 0 [ 72.807421][ T1324] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 72.816652][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.824631][ T1324] usb 2-1: Product: syz [ 72.828807][ T1324] usb 2-1: Manufacturer: syz [ 72.833411][ T1324] usb 2-1: SerialNumber: syz [ 72.838723][ T1324] usb 2-1: config 0 descriptor?? [ 72.846061][ T1324] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 72.859595][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.046943][ T1324] usb 2-1: USB disconnect, device number 19 [ 73.047055][ T36] audit: type=1400 audit(1779735933.532:407): avc: denied { read write } for pid=2427 comm="syz.1.660" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.077667][ T36] audit: type=1400 audit(1779735933.532:408): avc: denied { open } for pid=2427 comm="syz.1.660" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.113025][ T2449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.668'. [ 73.566924][ T2471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 73.575869][ T2471] tipc: Invalid UDP bearer configuration [ 73.575886][ T2471] tipc: Enabling of bearer rejected, failed to enable media [ 73.590241][ T2471] rust_binder: Write failure EFAULT in pid:310 [ 73.660572][ T668] bridge_slave_1: left allmulticast mode [ 73.672633][ T668] bridge_slave_1: left promiscuous mode [ 73.678633][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.686290][ T668] bridge_slave_0: left allmulticast mode [ 73.691994][ T668] bridge_slave_0: left promiscuous mode [ 73.697859][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.800906][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.808316][ T2478] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.815447][ T2478] bridge_slave_0: entered allmulticast mode [ 73.821808][ T2478] bridge_slave_0: entered promiscuous mode [ 73.828839][ T668] veth1_macvtap: left promiscuous mode [ 73.834338][ T668] veth0_vlan: left promiscuous mode [ 73.875151][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.882265][ T2478] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.889397][ T2478] bridge_slave_1: entered allmulticast mode [ 73.895653][ T2478] bridge_slave_1: entered promiscuous mode [ 73.979961][ T2478] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.987057][ T2478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.994331][ T2478] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.001387][ T2478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.058209][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.065941][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.083168][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.090260][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.108285][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.115354][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.153448][ T36] audit: type=1400 audit(1779735934.632:409): avc: denied { getopt } for pid=2501 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.180667][ T2478] veth0_vlan: entered promiscuous mode [ 74.207126][ T2478] veth1_macvtap: entered promiscuous mode [ 74.584846][ T36] audit: type=1400 audit(1779735935.062:410): avc: denied { mount } for pid=2535 comm="syz.2.698" name="/" dev="configfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.656635][ T36] audit: type=1400 audit(1779735935.142:411): avc: denied { setattr } for pid=2539 comm="syz.4.699" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.925592][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.057033][ T9] usb 5-1: device descriptor read/64, error -71 [ 75.202838][ T2567] tipc: Started in network mode [ 75.215653][ T2567] tipc: Node identity c2a63d2110b9, cluster identity 4711 [ 75.231395][ T2567] tipc: Enabled bearer , priority 10 [ 75.255871][ T2567] netlink: 'syz.2.708': attribute type 21 has an invalid length. [ 75.292835][ T2570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.292861][ T2570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 75.315634][ T9] usb 5-1: device descriptor read/64, error -71 [ 75.317515][ T2573] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.339024][ T2573] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 75.347548][ T2573] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.355467][ T2573] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 75.368478][ T2577] netlink: 'syz.3.711': attribute type 12 has an invalid length. [ 75.399061][ T36] audit: type=1400 audit(1779735935.882:412): avc: denied { search } for pid=2584 comm="syz.3.713" name="/" dev="configfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.421237][ T36] audit: type=1400 audit(1779735935.892:413): avc: denied { setattr } for pid=2584 comm="syz.3.713" name="/" dev="configfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.565629][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.695606][ T9] usb 5-1: device descriptor read/64, error -71 [ 75.935619][ T9] usb 5-1: device descriptor read/64, error -71 [ 76.045646][ T9] usb usb5-port1: attempt power cycle [ 76.282223][ T36] audit: type=1326 audit(1779735936.762:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2587 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3878f6c9 code=0x7fc00000 [ 76.310342][ T2593] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 76.318064][ T2593] netlink: 'syz.3.716': attribute type 2 has an invalid length. [ 76.345612][ T10] tipc: Node number set to 3525262625 [ 76.345625][ T36] audit: type=1400 audit(1779735936.822:415): avc: denied { name_bind } for pid=2596 comm="syz.5.717" src=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 76.363614][ T2599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 76.385610][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.403940][ T2602] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 76.406661][ T9] usb 5-1: device descriptor read/8, error -71 [ 76.413888][ T36] audit: type=1400 audit(1779735936.892:416): avc: denied { relabelto } for pid=2601 comm="syz.3.721" name="null" dev="tmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 76.445452][ T2608] rust_binder: Write failure EFAULT in pid:24 [ 76.466893][ T36] audit: type=1400 audit(1779735936.892:417): avc: denied { associate } for pid=2601 comm="syz.3.721" name="null" dev="tmpfs" ino=982 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initctl_t:s0" [ 76.502321][ T36] audit: type=1400 audit(1779735936.932:418): avc: denied { read } for pid=2601 comm="syz.3.721" name="null" dev="tmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 76.527980][ T36] audit: type=1400 audit(1779735936.932:419): avc: denied { open } for pid=2601 comm="syz.3.721" path="/dev/null" dev="tmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 76.556596][ T9] usb 5-1: device descriptor read/8, error -71 [ 76.605192][ T2627] netlink: 'syz.5.726': attribute type 13 has an invalid length. [ 76.767177][ T2669] netlink: 'syz.3.741': attribute type 15 has an invalid length. [ 76.805638][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.822771][ T2675] VFS: Mount too revealing [ 76.828016][ T9] usb 5-1: device descriptor read/8, error -71 [ 76.976653][ T9] usb 5-1: device descriptor read/8, error -71 [ 77.085707][ T9] usb usb5-port1: unable to enumerate USB device [ 77.564424][ T2687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.565777][ T2687] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 77.572275][ T2687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 77.580362][ T2687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:41 [ 77.915571][ T10] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 78.055713][ T10] usb 6-1: device descriptor read/64, error -71 [ 78.210776][ T2701] 9pnet: Could not find request transport: fdrfdno=ɡ(.Ԃ׃lߡ>Ağ_EzW2|S(O}O9i B 9)rF$sfˆA0x0000000000000003 [ 78.296020][ T10] usb 6-1: device descriptor read/64, error -71 [ 78.408000][ T2723] netlink: 'syz.2.760': attribute type 12 has an invalid length. [ 78.535651][ T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 78.567391][ T2727] netlink: 8540 bytes leftover after parsing attributes in process `syz.4.761'. [ 78.576520][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 78.585306][ T2727] netlink: 5 bytes leftover after parsing attributes in process `syz.4.761'. [ 78.607861][ T2731] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 78.665584][ T10] usb 6-1: device descriptor read/64, error -71 [ 78.749873][ T2748] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.750006][ T2748] rust_binder: inc_ref_done called when no active inc_refs [ 78.905593][ T10] usb 6-1: device descriptor read/64, error -71 [ 79.025591][ T499] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.033572][ T10] usb usb6-port1: attempt power cycle [ 79.185568][ T499] usb 5-1: Using ep0 maxpacket: 16 [ 79.191769][ T499] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.202847][ T499] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 79.211947][ T499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.220607][ T499] usb 5-1: config 0 descriptor?? [ 79.375579][ T10] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 79.396525][ T10] usb 6-1: device descriptor read/8, error -71 [ 79.426468][ T2754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.435011][ T2754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.526551][ T10] usb 6-1: device descriptor read/8, error -71 [ 79.765616][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 79.786504][ T10] usb 6-1: device descriptor read/8, error -71 [ 79.844401][ T2754] SELinux: security_context_str_to_sid () failed with errno=-22 [ 79.852969][ T2755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.861400][ T2754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.861587][ T2755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.872842][ T2754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.899741][ T499] usbhid 5-1:0.0: can't add hid device: -71 [ 79.909697][ T499] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.916182][ T2762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.925962][ T10] usb 6-1: device descriptor read/8, error -71 [ 79.942196][ T499] usb 5-1: USB disconnect, device number 8 [ 80.019152][ T2767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.041335][ T2777] overlay: ./file0 is not a directory [ 80.055661][ T10] usb usb6-port1: unable to enumerate USB device [ 80.416160][ T2792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.715232][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 80.715252][ T36] audit: type=1400 audit(1779735941.192:424): avc: denied { append } for pid=2793 comm="syz.5.781" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.745377][ T2796] incfs: Error accessing: ./file0/file0. [ 80.756934][ T2796] incfs: mount failed -20 [ 80.931942][ T2805] netlink: 'syz.3.785': attribute type 4 has an invalid length. [ 80.941406][ T2805] netlink: 'syz.3.785': attribute type 4 has an invalid length. [ 81.040227][ T2822] netlink: 'syz.3.791': attribute type 2 has an invalid length. [ 81.213379][ T36] audit: type=1400 audit(1779735941.692:425): avc: denied { ioctl } for pid=2832 comm="syz.4.795" path="socket:[14568]" dev="sockfs" ino=14568 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.379586][ T36] audit: type=1400 audit(1779735941.862:426): avc: denied { accept } for pid=2845 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.419289][ T36] audit: type=1400 audit(1779735941.882:427): avc: denied { read } for pid=2845 comm="syz.5.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.516816][ T2866] 9pnet_fd: Insufficient options for proto=fd [ 81.523013][ T36] audit: type=1400 audit(1779735942.002:428): avc: denied { mounton } for pid=2865 comm="syz.5.803" path="/26/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 81.931118][ T36] audit: type=1400 audit(1779735942.412:429): avc: denied { remount } for pid=2897 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 82.135616][ T36] audit: type=1400 audit(1779735942.612:430): avc: denied { remount } for pid=2920 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.162496][ T2923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.264837][ T2923] binder: Unknown parameter '' [ 82.307261][ T2926] fuse: Bad value for 'fd' [ 82.360440][ T2929] rust_binder: 146: no such ref 1 [ 82.406957][ T2933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.458321][ T2933] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 82.464989][ T2933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 82.473040][ T2933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:148 [ 82.485617][ T36] audit: type=1400 audit(1779735942.962:431): avc: denied { getopt } for pid=2939 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.627368][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.091945][ T2985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.839'. [ 83.130028][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.841'. [ 83.157951][ T2998] netlink: 'syz.3.844': attribute type 16 has an invalid length. [ 83.165800][ T2998] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.844'. [ 83.201972][ T36] audit: type=1400 audit(1779735943.682:432): avc: denied { write } for pid=3001 comm="syz.3.846" name="null" dev="tmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 83.230217][ T3004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.843'. [ 83.358599][ T3026] cgroup: Invalid name [ 83.363618][ T3026] fuse: Bad value for 'fd' [ 83.390319][ T3030] netlink: 'syz.5.855': attribute type 12 has an invalid length. [ 83.486035][ T3042] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 83.495689][ T36] audit: type=1400 audit(1779735943.982:433): avc: denied { relabelto } for pid=3041 comm="syz.5.859" name="56" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 83.590687][ T3056] process 'syz.5.864' launched './file1' with NULL argv: empty string added [ 84.308144][ T3106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3106 comm=syz.3.882 [ 84.695592][ T690] Bluetooth: hci0: command 0x1003 tx timeout [ 84.695608][ T675] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.020977][ T3136] overlayfs: disabling nfs_export due to verity=on [ 85.027743][ T3136] overlayfs: failed to clone upperpath [ 85.327706][ T3195] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=3195 comm=syz.5.909 [ 85.340257][ T3195] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=3195 comm=syz.5.909 [ 85.355556][ T3195] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=3195 comm=syz.5.909 [ 85.404300][ T3204] incfs: Error accessing: ./file0. [ 85.409491][ T3204] incfs: mount failed -20 [ 85.599444][ T3211] netlink: 'syz.2.916': attribute type 6 has an invalid length. [ 85.742803][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 85.827826][ T3231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.830941][ T3231] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 85.848278][ T3231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 85.856337][ T3231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:168 [ 85.936241][ T3236] incfs: Error accessing: ./file0. [ 85.950997][ T3236] incfs: mount failed -20 [ 86.173447][ T3249] /dev/loop4: Can't open blockdev [ 86.218579][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 86.218598][ T36] audit: type=1400 audit(1779735946.702:452): avc: denied { getopt } for pid=3255 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.281600][ T3260] exFAT-fs (rnullb0): invalid boot record signature [ 86.288320][ T3260] exFAT-fs (rnullb0): failed to read boot sector [ 86.294728][ T3260] exFAT-fs (rnullb0): failed to recognize exfat type [ 86.303216][ T3260] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.394209][ T3265] __vm_enough_memory: pid: 3265, comm: syz.4.935, bytes: 18014402804453376 not enough memory for the allocation [ 86.502155][ T3284] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 86.542527][ T3294] netlink: 'syz.2.945': attribute type 4 has an invalid length. [ 86.671161][ T3317] rust_binder: Write failure EINVAL in pid:226 [ 86.781795][ T3336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 86.913928][ T3321] rust_binder: Write failure EFAULT in pid:229 [ 87.581426][ T3375] SELinux: security_context_str_to_sid (inder1=5] S9q#) failed with errno=-22 [ 87.599582][ T3375] IPv6: syztnl0: Disabled Multicast RS [ 87.730656][ T3397] rust_binder: Write failure EFAULT in pid:254 [ 87.766528][ T3401] netfs: Couldn't get user pages (rc=-14) [ 87.766532][ T36] audit: type=1400 audit(1779735948.252:453): avc: denied { read write } for pid=3400 comm="syz.4.984" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.766562][ T36] audit: type=1400 audit(1779735948.252:454): avc: denied { open } for pid=3400 comm="syz.4.984" path="/83/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.806286][ T3401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 87.847769][ T3408] netlink: 200 bytes leftover after parsing attributes in process `syz.5.987'. [ 87.867121][ T3408] tc_dump_action: action bad kind [ 87.886314][ T3411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 87.888242][ T3411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.988'. [ 87.896284][ T36] audit: type=1326 audit(1779735948.372:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3407 comm="syz.5.987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ea858f6c9 code=0x0 [ 88.060863][ T3441] /dev/loop0: Can't lookup blockdev [ 88.920859][ T36] audit: type=1400 audit(1779735949.402:456): avc: denied { ioctl } for pid=3493 comm="syz.5.1018" path="socket:[16495]" dev="sockfs" ino=16495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.985070][ T36] audit: type=1326 audit(1779735949.432:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3450 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ea38f6c9 code=0x7fc00000 [ 89.023880][ T36] audit: type=1400 audit(1779735949.462:458): avc: denied { accept } for pid=3500 comm="syz.2.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.055268][ T36] audit: type=1400 audit(1779735949.502:459): avc: denied { setattr } for pid=3498 comm="syz.5.1019" name="file0" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.527375][ T3536] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 89.536004][ T3536] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1032'. [ 89.689952][ T3553] netlink: 'syz.2.1037': attribute type 13 has an invalid length. [ 89.700579][ T36] audit: type=1400 audit(1779735950.192:460): avc: denied { read } for pid=3552 comm="syz.2.1037" path="socket:[16215]" dev="sockfs" ino=16215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.543639][ T36] audit: type=1400 audit(1779735951.022:461): avc: denied { mounton } for pid=3580 comm="syz.2.1046" path="/" dev="configfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.644792][ T3587] rust_binder: Error in use_page_slow: ESRCH [ 90.644815][ T3587] rust_binder: use_range failure ESRCH [ 90.651237][ T3587] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 90.656880][ T3587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 90.666878][ T3587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:275 [ 90.718881][ T3591] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 90.767603][ T3591] kvm: pic: single mode not supported [ 90.767622][ T3591] kvm: pic: level sensitive irq not supported [ 90.773139][ T3591] kvm: pic: non byte read [ 90.855977][ T3594] rust_binder: Write failure EFAULT in pid:282 [ 91.144106][ T3607] netlink: 'syz.2.1055': attribute type 4 has an invalid length. [ 91.158294][ T3607] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1055'. [ 91.645079][ T3633] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 91.652978][ T3633] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1064'. [ 91.663866][ T3633] futex_wake_op: syz.2.1064 tries to shift op by -1; fix this program [ 91.837400][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 91.837417][ T36] audit: type=1400 audit(1779735952.322:465): avc: denied { ioctl } for pid=3652 comm="syz.2.1073" path="socket:[16751]" dev="sockfs" ino=16751 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 92.211101][ T3683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1077'. [ 92.549200][ T3704] overlayfs: failed to clone lowerpath [ 92.658307][ T3709] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 92.667025][ T3709] rust_binder: Write failure EINVAL in pid:296 [ 92.681765][ T36] audit: type=1400 audit(1779735953.162:466): avc: denied { create } for pid=3711 comm="syz.4.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.708228][ T3717] syz.3.1093 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.729944][ T3721] SELinux: syz.4.1095 (3721) set checkreqprot to 1. This is no longer supported. [ 92.729952][ T36] audit: type=1400 audit(1779735953.212:467): avc: denied { setcheckreqprot } for pid=3718 comm="syz.4.1095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.907658][ T3734] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.915690][ T3734] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 92.924086][ T3734] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.932042][ T3734] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 92.941389][ T3734] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.950609][ T3734] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 92.959185][ T3734] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.967282][ T3734] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 93.004924][ T36] audit: type=1400 audit(1779735953.482:468): avc: denied { mounton } for pid=3744 comm="syz.5.1103" path="/127/file0" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.193294][ T36] audit: type=1400 audit(1779735953.672:469): avc: denied { unlink } for pid=3761 comm="syz.4.1109" name="#1" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.235797][ T3762] ------------[ cut here ]------------ [ 93.241450][ T3762] WARNING: CPU: 0 PID: 3762 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 93.250988][ T3762] Modules linked in: [ 93.254912][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.4.1109 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 93.266772][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.276882][ T3762] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 93.279061][ T3771] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1113'. [ 93.282809][ T3762] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 93.311300][ T3762] RSP: 0018:ffffc9000247fb68 EFLAGS: 00010283 [ 93.315598][ T36] audit: type=1400 audit(1779735953.712:470): avc: denied { setattr } for pid=3761 comm="syz.4.1109" name="file0" dev="incremental-fs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.317413][ T3762] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: 0000000000080000 [ 93.348547][ T3762] RDX: ffffc9000c2c9000 RSI: 00000000000005cd RDI: 00000000000005ce [ 93.356567][ T3762] RBP: ffffc9000247fb90 R08: ffff88813324a4ff R09: 1ffff1102664949f [ 93.364571][ T3762] R10: dffffc0000000000 R11: ffffed10266494a0 R12: 0000000000000000 [ 93.372681][ T3762] R13: dffffc0000000000 R14: ffff88813324a460 R15: ffff88813310bee0 [ 93.380730][ T3762] FS: 00007f05b01bb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.389707][ T3762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.396355][ T3762] CR2: 00007f05b01b9ff0 CR3: 000000011382a000 CR4: 00000000003526b0 [ 93.404343][ T3762] Call Trace: [ 93.407666][ T3762] [ 93.410614][ T3762] ovl_do_remove+0x7b8/0xcf0 [ 93.415265][ T3762] ? ovl_set_redirect+0x780/0x780 [ 93.420350][ T3762] ? down_write+0xe9/0x2a0 [ 93.424797][ T3762] ? __cfi_down_write+0x10/0x10 [ 93.429707][ T3762] ovl_rmdir+0x1e/0x30 [ 93.433817][ T3762] vfs_rmdir+0x3dd/0x560 [ 93.438125][ T3762] incfs_kill_sb+0x109/0x230 [ 93.442752][ T3762] deactivate_locked_super+0xd5/0x2a0 [ 93.448180][ T3762] deactivate_super+0xb8/0xe0 [ 93.452890][ T3762] cleanup_mnt+0x3f1/0x480 [ 93.457350][ T3762] __cleanup_mnt+0x1d/0x40 [ 93.461781][ T3762] task_work_run+0x1e0/0x250 [ 93.466419][ T3762] ? __cfi_task_work_run+0x10/0x10 [ 93.471554][ T3762] ? __x64_sys_umount+0x126/0x170 [ 93.476642][ T3762] ? __cfi___x64_sys_umount+0x10/0x10 [ 93.482041][ T3762] resume_user_mode_work+0x36/0x50 [ 93.487221][ T3762] syscall_exit_to_user_mode+0x64/0xb0 [ 93.492701][ T3762] do_syscall_64+0x64/0xf0 [ 93.497168][ T3762] ? clear_bhb_loop+0x50/0xa0 [ 93.501862][ T3762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.507995][ T3762] RIP: 0033:0x7f05af38f6c9 [ 93.512464][ T3762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.532116][ T3762] RSP: 002b:00007f05b01bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.540573][ T3762] RAX: 0000000000000000 RBX: 00007f05af5e5fa0 RCX: 00007f05af38f6c9 [ 93.548619][ T3762] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 93.556636][ T3762] RBP: 00007f05af411f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.564635][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.572651][ T3762] R13: 00007f05af5e6038 R14: 00007f05af5e5fa0 R15: 00007ffd25776c88 [ 93.580670][ T3762] [ 93.583703][ T3762] ---[ end trace 0000000000000000 ]--- [ 93.589574][ T3762] ------------[ cut here ]------------ [ 93.595115][ T3762] WARNING: CPU: 0 PID: 3762 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 93.604568][ T3762] Modules linked in: [ 93.608518][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.4.1109 Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 93.621605][ T3762] Tainted: [W]=WARN [ 93.625422][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.635536][ T3762] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 93.641208][ T3762] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 93.660985][ T3762] RSP: 0018:ffffc9000247fb68 EFLAGS: 00010246 [ 93.667103][ T3762] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: 0000000000080000 [ 93.675121][ T3762] RDX: ffffc9000c2c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 93.683128][ T3762] RBP: ffffc9000247fb90 R08: ffff88813324a4ff R09: 1ffff1102664949f [ 93.691145][ T3762] R10: dffffc0000000000 R11: ffffed10266494a0 R12: 0000000000000000 [ 93.699175][ T3762] R13: dffffc0000000000 R14: ffff88813324a460 R15: ffff88813310bee0 [ 93.707185][ T3762] FS: 00007f05b01bb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.716159][ T3762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.722766][ T3762] CR2: 00007f05b01b9ff0 CR3: 000000011382a000 CR4: 00000000003526b0 [ 93.730803][ T3762] Call Trace: [ 93.734109][ T3762] [ 93.737472][ T3762] ovl_do_remove+0x7b8/0xcf0 [ 93.742103][ T3762] ? ovl_set_redirect+0x780/0x780 [ 93.747249][ T3762] ? down_write+0xe9/0x2a0 [ 93.751687][ T3762] ? __cfi_down_write+0x10/0x10 [ 93.756600][ T3762] ovl_rmdir+0x1e/0x30 [ 93.760694][ T3762] vfs_rmdir+0x3dd/0x560 [ 93.764965][ T3762] incfs_kill_sb+0x1a0/0x230 [ 93.769620][ T3762] deactivate_locked_super+0xd5/0x2a0 [ 93.775018][ T3762] deactivate_super+0xb8/0xe0 [ 93.779753][ T3762] cleanup_mnt+0x3f1/0x480 [ 93.784187][ T3762] __cleanup_mnt+0x1d/0x40 [ 93.788669][ T3762] task_work_run+0x1e0/0x250 [ 93.793292][ T3762] ? __cfi_task_work_run+0x10/0x10 [ 93.798457][ T3762] ? __x64_sys_umount+0x126/0x170 [ 93.803524][ T3762] ? __cfi___x64_sys_umount+0x10/0x10 [ 93.808927][ T3762] resume_user_mode_work+0x36/0x50 [ 93.814062][ T3762] syscall_exit_to_user_mode+0x64/0xb0 [ 93.819549][ T3762] do_syscall_64+0x64/0xf0 [ 93.824044][ T3762] ? clear_bhb_loop+0x50/0xa0 [ 93.828752][ T3762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.834670][ T3762] RIP: 0033:0x7f05af38f6c9 [ 93.839117][ T3762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.858776][ T3762] RSP: 002b:00007f05b01bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.867229][ T3762] RAX: 0000000000000000 RBX: 00007f05af5e5fa0 RCX: 00007f05af38f6c9 [ 93.875235][ T3762] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 93.883221][ T3762] RBP: 00007f05af411f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.891227][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.899322][ T3762] R13: 00007f05af5e6038 R14: 00007f05af5e5fa0 R15: 00007ffd25776c88 [ 93.907352][ T3762] [ 93.910389][ T3762] ---[ end trace 0000000000000000 ]---