last executing test programs: 34.008943278s ago: executing program 3 (id=418): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="2e50d661097ef826", 0x8}, {&(0x7f0000000340)="d69b3763822098e893802b0faa2be8100897ab79b193d359d7f50c2a427f8d25a8a86f7bc262e64547a7f28fa5f120436d08c00211df5ee4d9322e4a2b1ecf3155399b1c9a803868361707b6712212395e3eb8374ae66169f9eab26ab4f98f34bf54e3f3fd40bd2bbf6774a85768ade8b768c4ed3f41dbb9e184526c66f16e9c2917004eedcaa9e143d838d432cc3c41aad0a7eef596f4f24ab9f83a6aef77c391e6e8644d5a8f121981117d2c40a983bf3ab92e2ec12724865e2165baed1bd4", 0xc0}], 0x2}}], 0x1, 0x44000) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000002c0)="3d5db8f299372b", 0x7}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02ffffffa000000000000000000001"], 0xfdef) 33.907101246s ago: executing program 3 (id=425): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0xffffffffffffff5f) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) connect$unix(r1, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r0, &(0x7f00000006c0)='{', 0x1, 0x24008894, &(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @empty}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) dup(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x6b325000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000180)) 33.767675227s ago: executing program 2 (id=429): write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x20000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 33.737487969s ago: executing program 2 (id=430): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x80580, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r0, 0x22fb5000) pipe2$9p(0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000002100)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x19341204, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x20, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x642, 0x10, 0x7ff, 0x4, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, r6, 0xfd95, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002140)={0xb8, 0x0, r2, [{{0x6, 0x3, 0x1, 0x9, 0x1, 0x7, {0x6, 0x5, 0x40, 0x9, 0x1, 0x8, 0x3, 0x9, 0x0, 0xa000, 0x0, r3, r6, 0x1, 0x14b5}}, {0x1, 0x480000000000000, 0xc, 0x400, '/dev/ashmem\x00'}}]}, 0xb8) 33.691089183s ago: executing program 2 (id=431): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x881, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 33.530774996s ago: executing program 2 (id=437): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x1832b, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x200, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x44000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') fallocate(r2, 0x2, 0xf931, 0x5) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) sendmmsg$inet6(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='T', 0x1}, {0x0}, {0x0}], 0x3}}], 0x1, 0x800) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x630780, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x8, 0x0, &(0x7f0000000040)) r8 = syz_usb_connect$hid(0x5, 0x7d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x44, 0x9, 0x2, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x3e, {0x4, 0xc, "2cf4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404"], 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r9, 0x1000007, 0x13, r6, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f0000000100)) 33.130117888s ago: executing program 0 (id=440): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000015470f0000bd7000fcdbdf2502180000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) mount(0x0, 0x0, 0x0, 0x2800408, 0x0) syz_open_procfs(0x0, 0x0) chmod(&(0x7f0000000340)='./file0\x00', 0x129) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getresuid(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x200, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000001c0)='./file0\x00', r4, r5, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000001040)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf2517000000040005805800068004000500080001000200000008f1050029d0ffff3d00040067636d286165732900000000000000000000000000000000000000000000000015000000095a9c514d91f545d701f2c50900e72a24c59d606f00000004000280fe919a2e053b31096afc67fda9b0926b48ea652e5a505e7acc0aa9"], 0x74}, 0x1, 0x0, 0x0, 0x24048000}, 0x40000) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"\xb1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\x7f\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\x7fi\x03\x97\xc6\x9b\x8f\n2C\x1d/k5\xa2C\xb7\xec_z\b\x86\xe8\xfe\xf1Jk\x15\x93{\xf3\xb2\xd6n\x9c>\xf7\xd6\xa5\x80\xc2\x13\xe1\n\xc3\xdc\xab\xe74\rUf\xe6&\x14(r\xfe=\x94p\x00\xc9\x19\x9clZ\x99\x84\x11\xcfmP:\x7fi\xb4\x83\xdd\xe1\x8f\xd74\x99\x06\xd7\xfb#\xd8\xcc\xf8}=|j\x15\x96F\x9f;\xa8_X0ra.\n') 33.044698365s ago: executing program 0 (id=441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) (async) 33.044296595s ago: executing program 0 (id=442): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x61, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xffffff9e}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800, 0x6, 0x2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040001) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 33.043935655s ago: executing program 3 (id=443): r0 = syz_open_dev$evdev(&(0x7f0000002000), 0x7, 0x103001) mount$9p_fd(0x0, 0x0, 0x0, 0x80080, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000480)={0x17, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000b0000/0x2000)=nil}) prctl$PR_SET_THP_DISABLE(0x41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000002040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782efec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc4e174574bc2c74424020b000000ff1c24", 0x46}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002100)={[0x0, 0x0, 0x7, 0x208, 0x101, 0x85479, 0x103d, 0x200000000006, 0x0, 0x4000000000000006, 0x1, 0xf, 0x1, 0x40000000009, 0x1, 0x800000068], 0xd000, 0x40e96}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x68, {0x2, 0x4e25, @empty}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x40000100000200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x400) ioctl$HIDIOCGUCODE(r7, 0xc018480d, 0x0) syz_open_procfs(0x0, &(0x7f00000020c0)='net/mcfilter\x00') write(r6, &(0x7f0000002400)="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", 0x1000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r4, 0x22e7c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 32.652832506s ago: executing program 1 (id=449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000004c0)={'veth1_vlan\x00', 0x400f5f9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xb, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x20000000, 0x9, 0x3, 0x2, 0x3, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0xfffff154, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x9, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x42], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffa, 0x0, 0x0, 0x81, 0x5, 0x2f, 0xe, 0x311, 0x1, 0x0, 0xfffffffc, 0x8, 0x4, 0x8000, 0x9, 0x3fb, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x6, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x4, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400002], [0x6, 0x8, 0x80000001, 0x2, 0xff, 0x40000100, 0x28d2, 0xc, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x0, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb2, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x400, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x7f, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1, 0xb, 0x2, 0x1, 0x6, 0x9, 0x0, 0x40003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x8, 0x6, 0x104, 0x10000, 0x4, 0x7fff, 0xffff, 0x4, 0x1000002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000002, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1a, 0x0, 0x2004, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x5c, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 32.595193201s ago: executing program 1 (id=450): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0xb, 0x0, 0x0, 0x5}, 0x79) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000002600)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/188, 0xbc}, {0x0}], 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 32.390542717s ago: executing program 3 (id=451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x88083, 0x0) write$vga_arbiter(r1, &(0x7f00000015c0)=ANY=[@ANYBLOB='decodes io'], 0xf) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async, rerun: 64) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/67, 0x43}, {&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000000)=""/18, 0x12}], 0x4, 0xfffffff8, 0x3) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r0, 0x0) fcntl$dupfd(r0, 0x0, r3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_clone3(&(0x7f00000007c0)={0x100000800, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x25}, &(0x7f0000000600)=""/174, 0xae, &(0x7f00000006c0)=""/251, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6, {r3}}, 0x58) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000540)=r6) (async, rerun: 32) shutdown(r4, 0x1000000) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000002c0)=[@release, @register_looper], 0x50, 0x0, &(0x7f0000000580)="05de66730879c09a3dad5fda5a11568bd6fdffdb8a6c55bad3ce0e7d04883d574b211f9860bc1a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34a"}) 32.296697165s ago: executing program 3 (id=452): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in=@empty}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) mount$incfs(&(0x7f0000000000)='./file7\x00', &(0x7f00000000c0)='./file7\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000440)={[{@rlog_pages={'rlog_pages', 0x3d, 0x81b}}, {@no_bf_readahead}, {@no_bf_cache}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x10000000000}}, {@readahead={'readahead', 0x3d, 0x8}}], [{@uid_gt={'uid>', r0}}, {@audit}, {@subj_user={'subj_user', 0x3d, '[*.![^\x89\xf6\'&'}}, {@subj_role={'subj_role', 0x3d, '($%]'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@smackfstransmute}, {@smackfstransmute={'smackfstransmute', 0x3d, 'binder\x00'}}]}) (async) mount$incfs(&(0x7f0000000000)='./file7\x00', &(0x7f00000000c0)='./file7\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000440)={[{@rlog_pages={'rlog_pages', 0x3d, 0x81b}}, {@no_bf_readahead}, {@no_bf_cache}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x10000000000}}, {@readahead={'readahead', 0x3d, 0x8}}], [{@uid_gt={'uid>', r0}}, {@audit}, {@subj_user={'subj_user', 0x3d, '[*.![^\x89\xf6\'&'}}, {@subj_role={'subj_role', 0x3d, '($%]'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@smackfstransmute}, {@smackfstransmute={'smackfstransmute', 0x3d, 'binder\x00'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8"}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b08000340"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r1) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f00000000c0)=0x8000, 0x4) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) lchown(&(0x7f0000000980)='./file7\x00', r0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x8, 0xd, 0x80, 0x8, 0x156aa033}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x8, 0xd, 0x80, 0x8, 0x156aa033, 0x0}) wait4(r5, &(0x7f0000000940), 0x8, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af25, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000009c0), 0x2, 0xc241) read$usbmon(r7, &(0x7f0000000a00)=""/255, 0xff) socket$can_raw(0x1d, 0x3, 0x1) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000700)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/238, 0xee}], 0x1, &(0x7f00000006c0)=""/64, 0x40}, 0x40000000) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000b00)={0x2, {{0xa, 0x4e20, 0xfa, @mcast1, 0xf}}}, 0x88) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x836c00, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 32.127189098s ago: executing program 0 (id=453): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="2e50d661097ef826", 0x8}, {&(0x7f0000000340)="d69b3763822098e893802b0faa2be8100897ab79b193d359d7f50c2a427f8d25a8a86f7bc262e64547a7f28fa5f120436d08c00211df5ee4d9322e4a2b1ecf3155399b1c9a803868361707b6712212395e3eb8374ae66169f9eab26ab4f98f34bf54e3f3fd40bd2bbf6774a85768ade8b768c4ed3f41dbb9e184526c66f16e9c2917004eedcaa9e143d838d432cc3c41aad0a7eef596f4f24ab9f83a6aef77c391e6e8644d5a8f121981117d2c40a983bf3ab92e2ec12724865e2165baed1bd4", 0xc0}], 0x2}}], 0x1, 0x44000) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000002c0)="3d5db8f299372b", 0x7}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0281ffffff00000000000000000001"], 0xfdef) 32.122160599s ago: executing program 1 (id=454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1d3341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8932, &(0x7f0000000040)={'sit0\x00', @local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.091562242s ago: executing program 1 (id=455): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) (async) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x7, {0x7, 0x0, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 32.038999086s ago: executing program 0 (id=456): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x381a43, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000280), &(0x7f0000000340)=0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004044}, 0x50) syz_open_dev$evdev(&(0x7f0000002740), 0xe1a2, 0x40040) (async) r6 = syz_open_dev$evdev(&(0x7f0000002740), 0xe1a2, 0x40040) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000002780)=[0xfffffffa, 0x7fff]) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) (async) accept4(r2, 0x0, 0x0, 0x400000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 31.574861093s ago: executing program 2 (id=457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) gettid() r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x14, 0x5, 0x70bd24, 0x25dfdb7b, {0xa, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "edb7e5a88ce15e9a5f810094ef288b474691b52fe388f0b2ad365b601a2a2a132693ca3719d51ff36517ecf607"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000540)={0xa0, 0xfffffffffffffff5, r5, {{0x3, 0x0, 0x6, 0x6, 0x10001, 0x5, {0x6, 0x1, 0x1, 0x8, 0x80, 0xa, 0x5a, 0x4, 0x4, 0xa000, 0x80, r6, r7, 0x3, 0x8000}}, {0x0, 0x8}}}, 0xa0) capset(&(0x7f0000000500)={0x19980330, r2}, &(0x7f0000000200)={0x200000, 0x200003, 0x801, 0x1, 0x7fff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffe58, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="180000001100010000ffffffff000000070000000400e380"], 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x7f, @mcast1, 0x8}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) fcntl$lock(r9, 0x7, &(0x7f00000000c0)={0x0, 0x3, 0x400, 0x13af3fffffe}) ioctl$KVM_GET_DEVICE_ATTR(r9, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x800, 0x1d83, &(0x7f0000000040)=0x6}) 30.314960144s ago: executing program 1 (id=458): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) 30.161970846s ago: executing program 0 (id=459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/241, 0xf1, 0x1, &(0x7f0000000100)=""/19, 0x13}, &(0x7f0000000180)=0x40) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000002c0)=@get={0x1, &(0x7f00000001c0)=""/198}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000340)={0x10001, 0x6, 0x1}) (async) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000340)={0x10001, 0x6, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x105480, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x105480, 0x0) ioctl$BLKGETZONESZ(r2, 0x80041284, &(0x7f00000003c0)=0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) r3 = dup3(r2, r2, 0x80000) ioctl$BLKCRYPTOPREPAREKEY(r3, 0xc040128b, &(0x7f0000000640)={&(0x7f0000000540)="6d015d45399daee44592fd68a4a4bda3e3f2ef8ba56b622d521fe8f0d414008ce35ea0d6790fdd3a9af9fca236a6cebafbb0c06ce58c0a8ac135b543d722e828abe192161b4ddf1e4e321e256d6cd181efaf3cbe9e1b8ae54beda93ffde13ea2051aa411c891a78c08b516e1be8a9963", 0x70, &(0x7f00000005c0)=""/125, 0x7d}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000700)='wlan1\x00') (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000700)='wlan1\x00') ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000740)) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000780)={0x7, 'team_slave_1\x00', {0x5}, 0x8}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000007c0)={0x6, 0x5}) (async) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000007c0)={0x6, 0x5}) r5 = openat$cgroup_subtree(r3, &(0x7f0000000800), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000840)={[{0x2d, 'hugetlb'}, {0x0, 'cpuset'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x2d, 'freezer'}]}, 0x27) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom0\x00', 0xc02, 0x0) openat$cgroup_subtree(r1, &(0x7f00000008c0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/if_inet6\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/if_inet6\x00') write$cgroup_subtree(r6, &(0x7f0000000940)={[{0x2b, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}]}, 0x40) (async) write$cgroup_subtree(r6, &(0x7f0000000940)={[{0x2b, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}]}, 0x40) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2b, 'devices'}, {0x2b, 'pids'}, {0x2b, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2d, 'blkio'}, {0x2b, 'hugetlb'}, {0x2d, 'hugetlb'}]}, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x105080, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x105080, 0x0) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000a00)={0xc021, 0x1}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, r8, 0x38727000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, r8, 0x38727000) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000a80)={{0x7b, 0x100}, {0xfffffffffffffe0e, 0x1000}, 0xc92a}) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000a80)={{0x7b, 0x100}, {0xfffffffffffffe0e, 0x1000}, 0xc92a}) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000ac0)) 29.635507999s ago: executing program 3 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001840)) wait4(r1, 0x0, 0x8, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x45, &(0x7f00000001c0)={0x20, 0x3, 0x14, 0x1}, 0x8, 0x9, 0x7fffffff, 0x0, 0x4bf, 0x404, 0x0}) mkdir(0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 22.812573497s ago: executing program 2 (id=461): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') mkdir(&(0x7f0000000000)='./file1\x00', 0x20) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x10000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) r3 = inotify_init1(0x800) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4042, 0x0) sendfile(r4, r3, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) syz_open_pts(r5, 0x20000) getdents64(r1, 0x0, 0x0) syz_io_uring_setup(0x594f, &(0x7f0000000100)={0x0, 0xfffffffd, 0x800, 0x2, 0x161}, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340), 0x10, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03000000000100000f00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="04000020410000000000006001010000e9e66961afdd97c1"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4040051) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xffffffffffff1d2c, 0x5, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) ftruncate(0xffffffffffffffff, 0x8) r6 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000002140)={0x0, "9a075c94554e9fbfb8c4b9f49d397a58e25f893447611eb9d551bac19c36c26138ee8a3cf6c921a6ce3ed1ee548201c1e635bd9c472c13aff9187ff8ddd52823", 0x30}, 0x48, 0xffffffffffffffff) keyctl$clear(0x7, r6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000300)) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d4c2600d, 0x1010, r2, 0xde52000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x9) 21.841635905s ago: executing program 1 (id=462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x2}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1, 0x3, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1, 0x3, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES16=r4], 0x21c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.231208907s ago: executing program 32 (id=459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/241, 0xf1, 0x1, &(0x7f0000000100)=""/19, 0x13}, &(0x7f0000000180)=0x40) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000002c0)=@get={0x1, &(0x7f00000001c0)=""/198}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000340)={0x10001, 0x6, 0x1}) (async) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000340)={0x10001, 0x6, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x105480, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x105480, 0x0) ioctl$BLKGETZONESZ(r2, 0x80041284, &(0x7f00000003c0)=0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) r3 = dup3(r2, r2, 0x80000) ioctl$BLKCRYPTOPREPAREKEY(r3, 0xc040128b, &(0x7f0000000640)={&(0x7f0000000540)="6d015d45399daee44592fd68a4a4bda3e3f2ef8ba56b622d521fe8f0d414008ce35ea0d6790fdd3a9af9fca236a6cebafbb0c06ce58c0a8ac135b543d722e828abe192161b4ddf1e4e321e256d6cd181efaf3cbe9e1b8ae54beda93ffde13ea2051aa411c891a78c08b516e1be8a9963", 0x70, &(0x7f00000005c0)=""/125, 0x7d}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000700)='wlan1\x00') (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000700)='wlan1\x00') ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000740)) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000780)={0x7, 'team_slave_1\x00', {0x5}, 0x8}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000007c0)={0x6, 0x5}) (async) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000007c0)={0x6, 0x5}) r5 = openat$cgroup_subtree(r3, &(0x7f0000000800), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000840)={[{0x2d, 'hugetlb'}, {0x0, 'cpuset'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x2d, 'freezer'}]}, 0x27) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom0\x00', 0xc02, 0x0) openat$cgroup_subtree(r1, &(0x7f00000008c0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/if_inet6\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='net/if_inet6\x00') write$cgroup_subtree(r6, &(0x7f0000000940)={[{0x2b, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}]}, 0x40) (async) write$cgroup_subtree(r6, &(0x7f0000000940)={[{0x2b, 'freezer'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}]}, 0x40) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2b, 'devices'}, {0x2b, 'pids'}, {0x2b, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2d, 'blkio'}, {0x2b, 'hugetlb'}, {0x2d, 'hugetlb'}]}, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x105080, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x105080, 0x0) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000a00)={0xc021, 0x1}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, r8, 0x38727000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, r8, 0x38727000) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000a80)={{0x7b, 0x100}, {0xfffffffffffffe0e, 0x1000}, 0xc92a}) (async) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000a80)={{0x7b, 0x100}, {0xfffffffffffffe0e, 0x1000}, 0xc92a}) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000ac0)) 0s ago: executing program 33 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001840)) wait4(r1, 0x0, 0x8, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x45, &(0x7f00000001c0)={0x20, 0x3, 0x14, 0x1}, 0x8, 0x9, 0x7fffffff, 0x0, 0x4bf, 0x404, 0x0}) mkdir(0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.602012][ T36] audit: type=1400 audit(1755409597.039:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. [ 20.911230][ T36] audit: type=1400 audit(1755409604.359:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.912289][ T281] cgroup: Unknown subsys name 'net' [ 20.933861][ T36] audit: type=1400 audit(1755409604.359:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.961157][ T36] audit: type=1400 audit(1755409604.379:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.961340][ T281] cgroup: Unknown subsys name 'devices' [ 21.100932][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.106540][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.279709][ T36] audit: type=1400 audit(1755409604.729:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.303110][ T36] audit: type=1400 audit(1755409604.729:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.311134][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.327995][ T36] audit: type=1400 audit(1755409604.729:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.359505][ T36] audit: type=1400 audit(1755409604.789:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.384934][ T36] audit: type=1400 audit(1755409604.789:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.413609][ T36] audit: type=1400 audit(1755409604.859:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.439151][ T36] audit: type=1400 audit(1755409604.859:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.439302][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.568423][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.575656][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.582895][ T288] bridge_slave_0: entered allmulticast mode [ 22.591443][ T288] bridge_slave_0: entered promiscuous mode [ 22.597995][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.608158][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.615291][ T288] bridge_slave_1: entered allmulticast mode [ 22.621468][ T288] bridge_slave_1: entered promiscuous mode [ 22.739182][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.746267][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.753562][ T292] bridge_slave_0: entered allmulticast mode [ 22.759862][ T292] bridge_slave_0: entered promiscuous mode [ 22.766137][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773324][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.780507][ T292] bridge_slave_1: entered allmulticast mode [ 22.786640][ T292] bridge_slave_1: entered promiscuous mode [ 22.820625][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.827677][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.834785][ T293] bridge_slave_0: entered allmulticast mode [ 22.840954][ T293] bridge_slave_0: entered promiscuous mode [ 22.857571][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.864628][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.871810][ T293] bridge_slave_1: entered allmulticast mode [ 22.877961][ T293] bridge_slave_1: entered promiscuous mode [ 22.887548][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.894598][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.901880][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.908894][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.916595][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.923964][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.931077][ T294] bridge_slave_0: entered allmulticast mode [ 22.937698][ T294] bridge_slave_0: entered promiscuous mode [ 22.954364][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961430][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.968647][ T294] bridge_slave_1: entered allmulticast mode [ 22.974835][ T294] bridge_slave_1: entered promiscuous mode [ 23.088271][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.095932][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.113073][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.120126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.145082][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.152231][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.173710][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.180761][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.188872][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195912][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.225333][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.232440][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.240250][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.247285][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.255447][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.262484][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.277835][ T288] veth0_vlan: entered promiscuous mode [ 23.286624][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.293660][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.318555][ T294] veth0_vlan: entered promiscuous mode [ 23.335004][ T288] veth1_macvtap: entered promiscuous mode [ 23.355679][ T293] veth0_vlan: entered promiscuous mode [ 23.362831][ T294] veth1_macvtap: entered promiscuous mode [ 23.374583][ T292] veth0_vlan: entered promiscuous mode [ 23.401135][ T293] veth1_macvtap: entered promiscuous mode [ 23.415635][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.434978][ T292] veth1_macvtap: entered promiscuous mode [ 23.464479][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.500861][ T333] KVM: debugfs: duplicate directory 333-5 [ 23.631328][ T357] veth1: entered allmulticast mode [ 23.645916][ T356] veth1: left allmulticast mode [ 23.802656][ T389] /dev/rnullb0: Can't open blockdev [ 23.852289][ T393] rust_binder: Error in use_page_slow: ESRCH [ 23.852317][ T393] rust_binder: use_range failure ESRCH [ 23.858863][ T393] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 23.921839][ T393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 23.929856][ T393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:12 [ 23.939540][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.090677][ T63] usb 1-1: device descriptor read/64, error -71 [ 24.098429][ T399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 24.098462][ T399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:22 [ 24.147420][ T403] overlayfs: statfs failed on './file0' [ 24.236442][ T416] mmap: syz.2.28 (416): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 24.250079][ T416] fuseblk: Unknown parameter 'ro0000000000' [ 24.329261][ T63] usb 1-1: device descriptor read/64, error -71 [ 24.335946][ T429] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 24.344167][ T429] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 24.352760][ T429] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 24.364260][ T429] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 24.430830][ T439] 9p: Unknown access argument 00000000004294967295~b`{#Z#%/\D@!D_W"$h\ [ 24.430830][ T439] i֍ENp.$\!8DuA ĂqY~;~: -22 [ 24.579162][ T63] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.729159][ T63] usb 1-1: device descriptor read/64, error -71 [ 24.798511][ T454] ======================================================= [ 24.798511][ T454] WARNING: The mand mount option has been deprecated and [ 24.798511][ T454] and is ignored by this kernel. Remove the mand [ 24.798511][ T454] option from the mount to silence this warning. [ 24.798511][ T454] ======================================================= [ 24.892000][ T458] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 24.901117][ T458] rust_binder: Write failure EINVAL in pid:51 [ 24.969091][ T63] usb 1-1: device descriptor read/64, error -71 [ 24.982145][ T464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.070809][ T467] can0: slcan on ptm0. [ 25.089140][ T63] usb usb1-port1: attempt power cycle [ 25.120179][ T467] can0 (unregistered): slcan off ptm0. [ 25.169046][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.267002][ T504] input: syz0 as /devices/virtual/input/input4 [ 25.330102][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.341116][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.350903][ T45] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 25.359989][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.369667][ T45] usb 3-1: config 0 descriptor?? [ 25.423944][ T511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.432634][ T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.440654][ T511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.470028][ T63] usb 1-1: device descriptor read/8, error -71 [ 25.512084][ T516] devpts: called with bogus options [ 25.531909][ T518] Zero length message leads to an empty skb [ 25.600862][ T63] usb 1-1: device descriptor read/8, error -71 [ 25.721767][ T528] cgroup2: Unknown parameter '' [ 25.780570][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.788062][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.795599][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.803203][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.810714][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.818102][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.825497][ T45] steelseries 0003:1038:12B6.0001: unknown main item tag 0x0 [ 25.833586][ T45] steelseries 0003:1038:12B6.0001: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 25.848964][ T63] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 25.886182][ T63] usb 1-1: device descriptor read/8, error -71 [ 26.019946][ T63] usb 1-1: device descriptor read/8, error -71 [ 26.043489][ T547] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 26.043513][ T547] rust_binder: Error while translating object. [ 26.055680][ T547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.057419][ T36] kauditd_printk_skb: 144 callbacks suppressed [ 26.057433][ T36] audit: type=1400 audit(1755409865.501:218): avc: denied { setopt } for pid=546 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.061937][ T547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 26.097009][ T547] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.106326][ T547] rust_binder: Read failure Err(EFAULT) in pid:35 [ 26.129000][ T63] usb usb1-port1: unable to enumerate USB device [ 26.198955][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.235684][ T36] audit: type=1400 audit(1755409865.681:219): avc: denied { create } for pid=461 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.255668][ T462] rust_binder: Error while translating object. [ 26.255686][ T462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.261874][ T462] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 26.271278][ T462] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:55 [ 26.283767][ T45] usb 3-1: USB disconnect, device number 2 [ 26.359151][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 26.365714][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.374062][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 26.382862][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.393498][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.404467][ T10] usb 2-1: string descriptor 0 read error: -22 [ 26.410711][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.419824][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.428947][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.430783][ T10] usb 2-1: 0:2 : does not exist [ 26.579838][ T329] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 26.588024][ T329] usb 4-1: config 0 has no interface number 0 [ 26.594233][ T329] usb 4-1: too many endpoints for config 0 interface 102 altsetting 39: 194, using maximum allowed: 30 [ 26.605341][ T329] usb 4-1: config 0 interface 102 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 26.618777][ T329] usb 4-1: config 0 interface 102 has no altsetting 0 [ 26.625590][ T329] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 26.634628][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.638450][ T10] usb 2-1: USB disconnect, device number 2 [ 26.651164][ T329] usb 4-1: config 0 descriptor?? [ 26.751040][ T558] overlayfs: missing 'workdir' [ 26.797795][ T441] rust_binder: 461: removing orphan mapping 0:24 [ 26.877320][ T550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.886396][ T550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.887755][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.903068][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.926193][ T550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.935512][ T550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.949320][ T36] audit: type=1400 audit(1755409866.401:220): avc: denied { write } for pid=549 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.969648][ T550] netlink: 64 bytes leftover after parsing attributes in process `syz.3.67'. [ 26.980117][ T551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.67'. [ 26.989438][ T550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.998256][ T550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.069784][ T571] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 27.120524][ T329] usb 4-1: string descriptor 0 read error: -71 [ 27.121756][ T571] rust_binder: Error while translating object. [ 27.126736][ T571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.134020][ T329] usb 4-1: USB disconnect, device number 2 [ 27.137994][ T571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 27.165533][ T441] rust_binder: 570: removing orphan mapping 0:8 [ 27.204961][ T36] audit: type=1400 audit(1755409866.651:221): avc: denied { mount } for pid=578 comm="syz.1.76" name="/" dev="ramfs" ino=4776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.240172][ T36] audit: type=1400 audit(1755409866.691:222): avc: denied { write } for pid=583 comm="syz.2.77" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.289954][ T586] can: request_module (can-proto-0) failed. [ 27.296490][ T36] audit: type=1400 audit(1755409866.741:223): avc: denied { bind } for pid=585 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.656308][ T597] exFAT-fs (rnullb0): invalid boot record signature [ 27.662984][ T597] exFAT-fs (rnullb0): failed to read boot sector [ 27.669397][ T597] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.693889][ T36] audit: type=1400 audit(1755409867.141:224): avc: denied { listen } for pid=599 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.731131][ T605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 27.738236][ T605] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 81) [ 27.738248][ T605] rust_binder: Error while translating object. [ 27.749083][ T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.755276][ T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 27.774873][ T607] tmpfs: Unknown parameter 'i}pHx8ñ?MAʸmsG [ 27.774873][ T607] o' [ 27.818500][ T36] audit: type=1400 audit(1755409867.262:225): avc: denied { ioctl } for pid=606 comm="syz.3.85" path="cgroup:[4026532406]" dev="nsfs" ino=4026532406 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.919462][ T609] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4216, limit: 5264, size: 18446744073709551583) [ 27.919487][ T609] rust_binder: Error while translating object. [ 27.932144][ T609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.938397][ T609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 28.030461][ T36] audit: type=1400 audit(1755409867.482:226): avc: denied { mount } for pid=620 comm="syz.0.89" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 28.091473][ T36] audit: type=1400 audit(1755409867.512:227): avc: denied { setopt } for pid=620 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.433081][ T632] input: syz0 as /devices/virtual/input/input6 [ 28.520339][ T638] process 'syz.2.96' launched './file0' with NULL argv: empty string added [ 28.712491][ T607] rust_binder: Write failure EFAULT in pid:46 [ 28.728594][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.777205][ T652] can0: slcan on ptm0. [ 28.898798][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 28.909594][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.930942][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.960506][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.000797][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.019363][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.028570][ T514] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 29.048537][ T31] usb 2-1: config 0 descriptor?? [ 29.191127][ T514] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.201325][ T514] usb 3-1: config 0 has no interfaces? [ 29.210169][ T669] netlink: 188 bytes leftover after parsing attributes in process `syz.0.102'. [ 29.219196][ T514] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 29.228243][ T514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.237455][ T514] usb 3-1: config 0 descriptor?? [ 29.246630][ T678] netlink: 'syz.3.106': attribute type 4 has an invalid length. [ 29.256133][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.265053][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.278324][ T678] netlink: 'syz.3.106': attribute type 17 has an invalid length. [ 29.325381][ T680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.334105][ T680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.381134][ T682] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 29.381160][ T682] rust_binder: Error while translating object. [ 29.390884][ T682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.402013][ T682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 29.446517][ T514] usb 3-1: USB disconnect, device number 3 [ 29.510945][ T652] can0 (unregistered): slcan off ptm0. [ 29.520112][ T700] rust_binder: Write failure EFAULT in pid:48 [ 29.544262][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.577948][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.588035][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.606912][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.624421][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.632920][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.632965][ T712] fuse: Bad value for 'rootmode' [ 29.640334][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.662521][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.670294][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.687767][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.699011][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.710516][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.717863][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.732182][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.742491][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.768367][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input7 [ 29.792612][ T31] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 29.833391][ T734] can0: slcan on ptm0. [ 29.890687][ T734] can0 (unregistered): slcan off ptm0. [ 29.907712][ T740] !@: renamed from xfrm0 (while UP) [ 29.914157][ T740] rust_binder: Write failure EFAULT in pid:63 [ 30.018459][ T63] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.181966][ T63] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.202273][ T63] usb 4-1: config 0 has no interfaces? [ 30.212377][ T63] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 30.228421][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.241393][ T63] usb 4-1: config 0 descriptor?? [ 30.328427][ T441] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 30.447778][ T726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.456347][ T726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.464123][ T441] usb 1-1: device descriptor read/64, error -71 [ 30.470881][ T726] rust_binder: Write failure EFAULT in pid:68 [ 30.498398][ T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.659470][ T63] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.678390][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.698351][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.708123][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.737780][ T63] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 30.746901][ T63] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 30.755010][ T63] usb 3-1: Manufacturer: syz [ 30.768607][ T63] usb 3-1: config 0 descriptor?? [ 31.118304][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 31.118321][ T36] audit: type=1400 audit(1755409870.562:252): avc: denied { lock } for pid=756 comm="syz.0.123" path="socket:[7357]" dev="sockfs" ino=7357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 31.189048][ T63] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 31.196328][ T63] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 31.230760][ T63] appleir 0003:05AC:8243.0003: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 31.397282][ T36] audit: type=1400 audit(1755409870.842:253): avc: denied { append } for pid=754 comm="syz.2.122" name="hiddev0" dev="devtmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.453453][ T755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.462471][ T755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.480090][ T755] tmpfs: Too few inodes for current use [ 31.502544][ T63] usb 3-1: USB disconnect, device number 4 [ 31.508448][ T10] usb 2-1: USB disconnect, device number 3 [ 31.861017][ T781] rust_binder: Write failure EFAULT in pid:89 [ 31.917929][ T36] audit: type=1400 audit(1755409871.362:254): avc: denied { write } for pid=782 comm="syz.0.129" path="socket:[6765]" dev="sockfs" ino=6765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.950098][ T783] fuse: Unknown parameter '0000000000000000000001100000000000000000008' [ 31.967291][ T36] audit: type=1400 audit(1755409871.412:255): avc: denied { ioctl } for pid=782 comm="syz.0.129" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.034595][ T783] overlayfs: failed to resolve './file1': -2 [ 32.047221][ T784] overlayfs: failed to resolve './file1': -2 [ 32.169727][ T36] audit: type=1400 audit(1755409871.622:256): avc: denied { read } for pid=790 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.240829][ T36] audit: type=1400 audit(1755409871.692:257): avc: denied { accept } for pid=790 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.298175][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 32.336749][ T36] audit: type=1400 audit(1755409871.782:258): avc: denied { create } for pid=800 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 32.449266][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 32.470944][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.499248][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 32.518131][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.526950][ T10] usb 3-1: config 0 descriptor?? [ 32.568186][ T789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.595899][ T821] rust_binder: Error while translating object. [ 32.595952][ T821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.608127][ T821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:115 [ 32.748127][ T329] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.768867][ T441] usb 4-1: USB disconnect, device number 3 [ 32.786298][ T823] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 32.793614][ T823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71 [ 32.801135][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 32.828168][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.837355][ T10] usb 3-1: USB disconnect, device number 5 [ 32.908117][ T329] usb 2-1: device descriptor read/64, error -71 [ 32.929531][ T831] fuse: Bad value for 'fd' [ 33.126545][ T36] audit: type=1400 audit(1755409872.572:259): avc: denied { mounton } for pid=832 comm="syz.3.147" path="/proc/79/task" dev="proc" ino=7553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 33.148462][ T329] usb 2-1: device descriptor read/64, error -71 [ 33.207917][ T36] audit: type=1400 audit(1755409872.652:260): avc: denied { transfer } for pid=839 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.229822][ T10] rust_binder: 0: removing orphan mapping 0:24 [ 33.281583][ T845] netlink: 96 bytes leftover after parsing attributes in process `syz.0.150'. [ 33.398059][ T329] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.528046][ T441] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 33.548067][ T329] usb 2-1: device descriptor read/64, error -71 [ 33.679263][ T441] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.687322][ T441] usb 1-1: not running at top speed; connect to a high speed hub [ 33.695731][ T441] usb 1-1: config 10 has an invalid interface number: 123 but max is 0 [ 33.704091][ T441] usb 1-1: config 10 has no interface number 0 [ 33.710275][ T441] usb 1-1: config 10 interface 123 has no altsetting 0 [ 33.718704][ T441] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=e0.bb [ 33.727762][ T441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.735772][ T441] usb 1-1: Product: syz [ 33.739967][ T441] usb 1-1: Manufacturer: syz [ 33.744539][ T441] usb 1-1: SerialNumber: syz [ 33.788014][ T329] usb 2-1: device descriptor read/64, error -71 [ 33.809696][ T36] audit: type=1400 audit(1755409873.262:261): avc: denied { write } for pid=848 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.898100][ T329] usb usb2-port1: attempt power cycle [ 33.930437][ T861] /dev/rnullb0: Can't open blockdev [ 34.158386][ T877] 9pnet_fd: Insufficient options for proto=fd [ 34.237980][ T329] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.245745][ T441] usb_ehset_test 1-1:10.123: probe with driver usb_ehset_test failed with error -32 [ 34.256406][ T441] usb 1-1: USB disconnect, device number 7 [ 34.281336][ T329] usb 2-1: device descriptor read/8, error -71 [ 34.354319][ T892] rust_binder: Read failure Err(EFAULT) in pid:114 [ 34.354819][ T896] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.398878][ T894] binder: Unknown parameter 'Ql ة*$#iʠy5l>WUx' [ 34.439047][ T329] usb 2-1: device descriptor read/8, error -71 [ 34.647895][ T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 34.657915][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.677944][ T329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.698913][ T329] usb 2-1: device descriptor read/8, error -71 [ 34.787920][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.826288][ T45] usb 4-1: config 7 has an invalid interface number: 43 but max is 0 [ 34.834500][ T45] usb 4-1: config 7 has no interface number 0 [ 34.840832][ T45] usb 4-1: config 7 interface 43 has no altsetting 0 [ 34.848448][ T329] usb 2-1: device descriptor read/8, error -71 [ 34.855446][ T45] usb 4-1: New USB device found, idVendor=8e38, idProduct=74d6, bcdDevice=d6.6c [ 34.864728][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.872866][ T45] usb 4-1: Product: syz [ 34.877026][ T45] usb 4-1: Manufacturer: syz [ 34.881808][ T45] usb 4-1: SerialNumber: syz [ 34.957973][ T329] usb usb2-port1: unable to enumerate USB device [ 35.037859][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.090478][ T902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.098969][ T902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.109382][ T45] usb-storage 4-1:7.43: USB Mass Storage device detected [ 35.132568][ T45] usb 4-1: USB disconnect, device number 4 [ 35.277884][ T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 35.407839][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.579320][ T928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.176'. [ 35.590641][ T45] hid (null): report_id 0 is invalid [ 35.596599][ T45] hid (null): invalid report_count -242816969 [ 35.603864][ T45] hid-generic 0006:0007:0008.0004: report_id 0 is invalid [ 35.611038][ T45] hid-generic 0006:0007:0008.0004: item 0 0 1 8 parsing failed [ 35.622363][ T45] hid-generic 0006:0007:0008.0004: probe with driver hid-generic failed with error -22 [ 35.651528][ T10] usb 3-1: device descriptor read/64, error -71 [ 35.767836][ T10] usb usb3-port1: attempt power cycle [ 35.809787][ T945] 9pnet_fd: Insufficient options for proto=fd [ 35.975021][ T957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 36.127740][ T10] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 36.158737][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.288661][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.355176][ T942] incfs: ino conflict with backing FS 1 [ 36.410466][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 36.410481][ T36] audit: type=1400 audit(1755409875.863:289): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 36.417688][ T45] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 36.469316][ T36] audit: type=1400 audit(1755409875.923:290): avc: denied { setopt } for pid=964 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.506299][ T967] rust_binder: Write failure EFAULT in pid:131 [ 36.506962][ T967] rust_binder: 131: no such ref 2 [ 36.528546][ T10] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 36.548571][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.608686][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.618846][ T45] usb 1-1: config 0 has no interfaces? [ 36.624323][ T45] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 36.633366][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.641911][ T45] usb 1-1: config 0 descriptor?? [ 36.680149][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.787774][ T10] usb usb3-port1: unable to enumerate USB device [ 36.807633][ T773] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.889175][ T45] usb 1-1: USB disconnect, device number 8 [ 36.957601][ T773] usb 4-1: Using ep0 maxpacket: 8 [ 36.964015][ T773] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.972428][ T773] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.981142][ T773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.991248][ T773] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 973, setting to 64 [ 37.002042][ T773] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.013218][ T773] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.022287][ T773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.030397][ T773] usb 4-1: Product: syz [ 37.034549][ T773] usb 4-1: Manufacturer: syz [ 37.039230][ T773] usb 4-1: SerialNumber: syz [ 37.246378][ T36] audit: type=1400 audit(1755409876.693:291): avc: denied { mount } for pid=970 comm="syz.3.191" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.273998][ T773] usb 4-1: USB disconnect, device number 5 [ 37.285957][ T776] udevd[776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.487088][ T982] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 37.537620][ T981] rust_binder: 150: no such ref 2 [ 37.546046][ T10] rust_binder: 980: removing orphan mapping 0:112 [ 37.554717][ T10] rust_binder: 0: removing orphan mapping 112:8 [ 37.573304][ T987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'. [ 37.701126][ T995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.701151][ T995] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 37.710721][ T995] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:163 [ 37.725836][ T45] rust_binder: 994: removing orphan mapping 0:24 [ 37.733830][ T998] capability: warning: `syz.0.201' uses deprecated v2 capabilities in a way that may be insecure [ 37.761115][ T36] audit: type=1400 audit(1755409877.213:292): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.791315][ T36] audit: type=1400 audit(1755409877.243:293): avc: denied { write } for pid=1001 comm="syz.0.202" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.898734][ T36] audit: type=1400 audit(1755409877.353:294): avc: denied { bind } for pid=1014 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.918419][ T36] audit: type=1400 audit(1755409877.353:295): avc: denied { name_bind } for pid=1014 comm="syz.0.206" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 37.923750][ T1017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.207'. [ 37.943913][ T36] audit: type=1400 audit(1755409877.353:296): avc: denied { node_bind } for pid=1014 comm="syz.0.206" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.972459][ T36] audit: type=1400 audit(1755409877.353:297): avc: denied { write } for pid=1014 comm="syz.0.206" name="udplite6" dev="proc" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.027795][ T36] audit: type=1400 audit(1755409877.483:298): avc: denied { mounton } for pid=1020 comm="syz.0.209" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.097543][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.115120][ T1028] /dev/rnullb0: Can't open blockdev [ 38.132713][ T1032] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 38.212072][ T1038] rust_binder: Error in use_page_slow: ESRCH [ 38.212086][ T1038] rust_binder: use_range failure ESRCH [ 38.218274][ T1038] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 38.223817][ T1038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.231635][ T1038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:147 [ 38.267450][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 38.275782][ T45] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 38.283990][ T45] usb 4-1: config 0 has no interface number 0 [ 38.290200][ T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 38.300272][ T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 38.311609][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 38.320732][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.328758][ T45] usb 4-1: Product: syz [ 38.333143][ T45] usb 4-1: Manufacturer: syz [ 38.337930][ T45] usb 4-1: SerialNumber: syz [ 38.343021][ T45] usb 4-1: config 0 descriptor?? [ 38.348340][ T1010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.355558][ T1010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.437084][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 38.450101][ T1044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 38.565558][ T1010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.576023][ T1010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 38.578790][ T1050] tmpfs: Unknown parameter 'noinode32' [ 38.650497][ T31] rust_binder: 1049: removing orphan mapping 0:8 [ 38.694834][ T1056] binder: Unknown parameter 'Ef@9C#kߝ7' [ 38.802384][ T1066] can0: slcan on ptm1. [ 38.903173][ T1066] can0 (unregistered): slcan off ptm1. [ 39.004186][ T1098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.227'. [ 39.191442][ T1010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.191466][ T1010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 39.201385][ T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 39.220656][ T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 39.231504][ T45] asix 4-1:0.251: probe with driver asix failed with error -71 [ 39.241684][ T45] usb 4-1: USB disconnect, device number 6 [ 39.287492][ T1121] binder: Bad value for 'max' [ 39.324828][ T1127] netlink: 'syz.1.238': attribute type 2 has an invalid length. [ 39.487299][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 39.587585][ T1146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.617273][ T31] usb 1-1: device descriptor read/64, error -71 [ 39.618479][ T1146] input: syz1 as /devices/virtual/input/input9 [ 39.658815][ T1150] bridge0: port 3(syz_tun) entered blocking state [ 39.665299][ T1150] bridge0: port 3(syz_tun) entered disabled state [ 39.671817][ T1150] syz_tun: entered allmulticast mode [ 39.677492][ T1150] syz_tun: entered promiscuous mode [ 39.682772][ T1150] bridge0: port 3(syz_tun) entered blocking state [ 39.689202][ T1150] bridge0: port 3(syz_tun) entered forwarding state [ 39.716605][ T441] rust_binder: 1151: removing orphan mapping 0:24 [ 39.737470][ T1156] rust_binder: Got transaction with invalid offset. [ 39.737547][ T1156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.744254][ T1156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 39.857272][ T31] usb 1-1: device descriptor read/64, error -71 [ 39.877394][ T45] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 39.935487][ T1165] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 39.935720][ T1165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.943738][ T1166] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 39.960132][ T1169] fuse: Unknown parameter 'gp_id' [ 39.973225][ T1169] fuse: Unknown parameter 'gp_id' [ 39.978718][ T1169] fuse: Unknown parameter 'gp_id' [ 39.983908][ T1169] fuse: Unknown parameter 'gp_id' [ 39.989052][ T1169] fuse: Unknown parameter 'gp_id' [ 39.994124][ T1169] fuse: Unknown parameter 'gp_id' [ 39.999250][ T1169] fuse: Unknown parameter 'gp_id' [ 40.004341][ T1169] fuse: Unknown parameter 'gp_id' [ 40.009533][ T1169] fuse: Unknown parameter 'gp_id' [ 40.014653][ T1169] fuse: Unknown parameter 'gp_id' [ 40.019873][ T1169] fuse: Unknown parameter 'gp_id' [ 40.024961][ T1169] fuse: Unknown parameter 'gp_id' [ 40.030201][ T1169] fuse: Unknown parameter 'gp_id' [ 40.035421][ T1169] fuse: Unknown parameter 'gp_id' [ 40.041153][ T1169] fuse: Unknown parameter 'gp_id' [ 40.041263][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.046305][ T1169] fuse: Unknown parameter 'gp_id' [ 40.054444][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 40.059341][ T1169] fuse: Unknown parameter 'gp_id' [ 40.067456][ T45] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 40.071864][ T1169] fuse: Unknown parameter 'gp_id' [ 40.080188][ T45] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 40.085211][ T1169] fuse: Unknown parameter 'gp_id' [ 40.093217][ T514] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 40.098582][ T1169] fuse: Unknown parameter 'gp_id' [ 40.105690][ T45] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 40.110922][ T1169] fuse: Unknown parameter 'gp_id' [ 40.120127][ T31] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 40.125131][ T1169] fuse: Unknown parameter 'gp_id' [ 40.132432][ T45] usb 3-1: config 129 has no interface number 0 [ 40.137747][ T1169] fuse: Unknown parameter 'gp_id' [ 40.143690][ T45] usb 3-1: config 129 has no interface number 1 [ 40.149006][ T1169] fuse: Unknown parameter 'gp_id' [ 40.155046][ T45] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 40.160387][ T1169] fuse: Unknown parameter 'gp_id' [ 40.173634][ T45] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 40.178631][ T1169] fuse: Unknown parameter 'gp_id' [ 40.189214][ T45] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 40.194518][ T1169] fuse: Unknown parameter 'gp_id' [ 40.207327][ T45] usb 3-1: config 129 interface 135 has no altsetting 0 [ 40.212476][ T1169] fuse: Unknown parameter 'gp_id' [ 40.219591][ T45] usb 3-1: config 129 interface 5 has no altsetting 0 [ 40.224738][ T1169] fuse: Unknown parameter 'gp_id' [ 40.233083][ T45] usb 3-1: string descriptor 0 read error: -22 [ 40.236413][ T1169] fuse: Unknown parameter 'gp_id' [ 40.242241][ T45] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 40.247544][ T1169] fuse: Unknown parameter 'gp_id' [ 40.256194][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.258358][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 40.263434][ T1169] fuse: Unknown parameter 'gp_id' [ 40.282230][ T1169] fuse: Unknown parameter 'gp_id' [ 40.287464][ T1169] fuse: Unknown parameter 'gp_id' [ 40.292744][ T1169] fuse: Unknown parameter 'gp_id' [ 40.297960][ T1169] fuse: Unknown parameter 'gp_id' [ 40.303191][ T1169] fuse: Unknown parameter 'gp_id' [ 40.308411][ T1169] fuse: Unknown parameter 'gp_id' [ 40.313557][ T1169] fuse: Unknown parameter 'gp_id' [ 40.318256][ T514] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 40.318674][ T1169] fuse: Unknown parameter 'gp_id' [ 40.327808][ T514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.332839][ T1169] fuse: Unknown parameter 'gp_id' [ 40.341821][ T514] usb 4-1: config 0 descriptor?? [ 40.346066][ T1169] fuse: Unknown parameter 'gp_id' [ 40.350695][ T31] usb 1-1: device descriptor read/64, error -71 [ 40.355969][ T1169] fuse: Unknown parameter 'gp_id' [ 40.367185][ T1169] fuse: Unknown parameter 'gp_id' [ 40.372323][ T1169] fuse: Unknown parameter 'gp_id' [ 40.377468][ T1169] fuse: Unknown parameter 'gp_id' [ 40.382564][ T1169] fuse: Unknown parameter 'gp_id' [ 40.387763][ T1169] fuse: Unknown parameter 'gp_id' [ 40.392865][ T1169] fuse: Unknown parameter 'gp_id' [ 40.398016][ T1169] fuse: Unknown parameter 'gp_id' [ 40.403114][ T1169] fuse: Unknown parameter 'gp_id' [ 40.408280][ T1169] fuse: Unknown parameter 'gp_id' [ 40.413376][ T1169] fuse: Unknown parameter 'gp_id' [ 40.418520][ T1169] fuse: Unknown parameter 'gp_id' [ 40.423600][ T1169] fuse: Unknown parameter 'gp_id' [ 40.428804][ T1169] fuse: Unknown parameter 'gp_id' [ 40.433916][ T1169] fuse: Unknown parameter 'gp_id' [ 40.439070][ T1169] fuse: Unknown parameter 'gp_id' [ 40.444177][ T1169] fuse: Unknown parameter 'gp_id' [ 40.449357][ T1169] fuse: Unknown parameter 'gp_id' [ 40.454443][ T1169] fuse: Unknown parameter 'gp_id' [ 40.459576][ T1169] fuse: Unknown parameter 'gp_id' [ 40.464666][ T1169] fuse: Unknown parameter 'gp_id' [ 40.470320][ T1169] fuse: Unknown parameter 'gp_id' [ 40.475431][ T1169] fuse: Unknown parameter 'gp_id' [ 40.597221][ T31] usb 1-1: device descriptor read/64, error -71 [ 40.717241][ T31] usb usb1-port1: attempt power cycle [ 41.057124][ T31] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 41.078139][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.208093][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.447053][ T31] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 41.468116][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.598048][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.707109][ T31] usb usb1-port1: unable to enumerate USB device [ 41.820535][ T1194] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.150224][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.157785][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.165256][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.172801][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 42.180110][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 42.271111][ T1204] overlayfs: missing 'lowerdir' [ 42.290874][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 42.290891][ T36] audit: type=1400 audit(1755409881.743:312): avc: denied { append } for pid=1205 comm="syz.0.263" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 42.655638][ T441] usb 3-1: USB disconnect, device number 10 [ 42.656924][ T31] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 42.685110][ T1209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.785590][ T36] audit: type=1400 audit(1755409882.233:313): avc: denied { accept } for pid=1217 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 42.807409][ T31] usb 1-1: device descriptor read/64, error -71 [ 42.820741][ T36] audit: type=1400 audit(1755409882.273:314): avc: denied { accept } for pid=1224 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.831891][ T1220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.840244][ T1220] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 42.849891][ T514] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 42.860298][ T1220] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:175 [ 42.865245][ T514] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 42.872461][ T36] audit: type=1400 audit(1755409882.313:315): avc: denied { block_suspend } for pid=1227 comm="syz.3.269" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.880068][ T514] asix 4-1:0.0: probe with driver asix failed with error -71 [ 42.899355][ T773] rust_binder: 1218: removing orphan mapping 0:24 [ 42.913587][ T514] usb 4-1: USB disconnect, device number 7 [ 42.993361][ T1232] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 43.002600][ T1232] overlayfs: missing 'lowerdir' [ 43.056877][ T31] usb 1-1: device descriptor read/64, error -71 [ 43.166879][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.296851][ T31] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 43.304410][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.357856][ T1241] netlink: 'syz.1.273': attribute type 32 has an invalid length. [ 43.436872][ T31] usb 1-1: device descriptor read/64, error -71 [ 43.546852][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.676818][ T31] usb 1-1: device descriptor read/64, error -71 [ 43.786778][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.794490][ T31] usb usb1-port1: attempt power cycle [ 43.927201][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.927511][ T1247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 43.943080][ T1247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 43.951888][ T1247] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 44.136762][ T31] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 44.157728][ T31] usb 1-1: device descriptor read/8, error -71 [ 44.176729][ T45] usb 3-1: device descriptor read/64, error -71 [ 44.286865][ T45] usb usb3-port1: attempt power cycle [ 44.293165][ T31] usb 1-1: device descriptor read/8, error -71 [ 44.536690][ T31] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 44.557722][ T31] usb 1-1: device descriptor read/8, error -71 [ 44.626722][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 44.647700][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.687642][ T31] usb 1-1: device descriptor read/8, error -71 [ 44.777645][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.794066][ T36] audit: type=1400 audit(1755409884.244:316): avc: denied { write } for pid=1268 comm="syz.3.281" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.799324][ T31] usb usb1-port1: unable to enumerate USB device [ 44.825964][ T1273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 44.896189][ T1283] fuse: Bad value for 'rootmode' [ 44.941518][ T36] audit: type=1400 audit(1755409884.394:317): avc: denied { accept } for pid=1287 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.006958][ T1292] tipc: Started in network mode [ 45.018230][ T1292] tipc: Node identity cea5e45ae902, cluster identity 4711 [ 45.025455][ T1292] tipc: Enabled bearer , priority 0 [ 45.036632][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 45.077364][ T1294] tipc: Disabling bearer [ 45.077598][ T45] usb 3-1: device descriptor read/8, error -71 [ 45.102548][ T1297] devpts: called with bogus options [ 45.111643][ T36] audit: type=1400 audit(1755409884.564:318): avc: denied { create } for pid=1296 comm="syz.1.290" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.146688][ T36] audit: type=1400 audit(1755409884.584:319): avc: denied { write } for pid=1296 comm="syz.1.290" name="file2" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.172829][ T36] audit: type=1400 audit(1755409884.584:320): avc: denied { open } for pid=1296 comm="syz.1.290" path="/98/file2" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.195534][ T36] audit: type=1400 audit(1755409884.584:321): avc: denied { ioctl } for pid=1296 comm="syz.1.290" path="/98/file2" dev="tmpfs" ino=545 ioctlcmd=0x1284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.257746][ T45] usb 3-1: device descriptor read/8, error -71 [ 45.355077][ T1323] netlink: 72 bytes leftover after parsing attributes in process `syz.0.298'. [ 45.369515][ T45] usb usb3-port1: unable to enumerate USB device [ 45.659549][ T1346] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.307'. [ 45.668859][ T1346] netlink: 280 bytes leftover after parsing attributes in process `syz.3.307'. [ 45.678095][ T1347] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.307'. [ 45.687178][ T1347] netlink: 280 bytes leftover after parsing attributes in process `syz.3.307'. [ 45.697475][ T1346] overlayfs: conflicting options: userxattr,verity=require [ 45.704909][ T1346] rust_binder: Write failure EFAULT in pid:226 [ 45.979821][ T1376] fuse: Unknown parameter '000000000000000000000040x0000000000000005' [ 46.017936][ T1387] 9pnet: Could not find request transport: fdrfdno=0xffffffffffffffff [ 46.036667][ T1389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 46.120930][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.160861][ T1396] input: syz1 as /devices/virtual/input/input10 [ 46.208124][ T1406] rust_binder: Read failure Err(EAGAIN) in pid:219 [ 46.208278][ T1406] rust_binder: got new transaction with bad transaction stack [ 46.214790][ T1406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 46.627349][ T1423] can: request_module (can-proto-6) failed. [ 46.946011][ T31] rust_binder: 1395: removing orphan mapping 0:24 [ 47.246354][ T773] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.397585][ T773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.407805][ T773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.418739][ T773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.429872][ T773] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.439007][ T773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.447025][ T773] usb 3-1: Product: syz [ 47.451192][ T773] usb 3-1: Manufacturer: syz [ 47.455790][ T773] usb 3-1: SerialNumber: syz [ 47.466679][ T773] usb 3-1: bad CDC descriptors [ 47.482801][ T1439] 9pnet_fd: Insufficient options for proto=fd [ 47.668967][ T45] usb 3-1: USB disconnect, device number 15 [ 48.196282][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.196307][ T1403] Bluetooth: hci0: command 0x1003 tx timeout [ 48.233320][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 48.233336][ T36] audit: type=1400 audit(1755409887.674:327): avc: denied { setopt } for pid=1468 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.249063][ T1473] rust_binder: Failed copying into alloc: EFAULT [ 48.258678][ T1473] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 48.265082][ T1473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.278285][ T1473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:240 [ 48.330482][ T36] audit: type=1400 audit(1755409887.774:328): avc: denied { shutdown } for pid=1474 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.757327][ T1495] netlink: 'syz.1.354': attribute type 27 has an invalid length. [ 48.775361][ T36] audit: type=1400 audit(1755409888.214:329): avc: denied { mount } for pid=1497 comm="syz.1.355" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.775811][ T1498] overlayfs: failed to clone upperpath [ 48.814258][ T36] audit: type=1400 audit(1755409888.254:330): avc: denied { remount } for pid=1499 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.072864][ T1505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.143389][ T1508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'. [ 49.188722][ T1513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.188749][ T1513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.197239][ T1513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.203748][ T1513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.446775][ T36] audit: type=1400 audit(1755409888.894:331): avc: denied { mount } for pid=1528 comm="syz.2.366" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.457275][ T1529] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 49.490470][ T1529] overlay: filesystem on ./bus not supported as upperdir [ 49.539380][ T36] audit: type=1400 audit(1755409888.984:332): avc: denied { ioctl } for pid=1530 comm="syz.0.367" path="socket:[11912]" dev="sockfs" ino=11912 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.626425][ T1535] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 49.626843][ T1536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.986031][ T773] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 50.146002][ T773] usb 1-1: Using ep0 maxpacket: 16 [ 50.152214][ T773] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 50.160449][ T773] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.170812][ T773] usb 1-1: config 1 has no interface number 0 [ 50.176905][ T773] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.190016][ T773] usb 1-1: config 1 interface 105 has no altsetting 0 [ 50.198690][ T773] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 50.208017][ T773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.216193][ T773] usb 1-1: Product: syz [ 50.222915][ T773] usb 1-1: Manufacturer: syz [ 50.227660][ T773] usb 1-1: SerialNumber: syz [ 50.286489][ T36] audit: type=1400 audit(1755409889.734:333): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 50.355243][ T36] audit: type=1400 audit(1755409889.794:334): avc: denied { create } for pid=1563 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.395893][ T1573] capability: warning: `syz.2.381' uses 32-bit capabilities (legacy support in use) [ 50.448166][ T773] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 50.481369][ T31] usb 1-1: USB disconnect, device number 17 [ 50.521631][ T1581] fuse: Unknown parameter 'f [ 50.521631][ T1581] V:Pzd' [ 50.529909][ T36] audit: type=1400 audit(1755409889.974:335): avc: denied { setopt } for pid=1580 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.560008][ T36] audit: type=1400 audit(1755409889.974:336): avc: denied { bind } for pid=1580 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.637493][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 50.953640][ T1611] rust_binder: Write failure EFAULT in pid:292 [ 51.070615][ T1618] overlayfs: overlapping lowerdir path [ 51.345881][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 51.496927][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.507093][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.516700][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.525748][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.533781][ T31] usb 1-1: SerialNumber: syz [ 51.740303][ T1618] netlink: 124 bytes leftover after parsing attributes in process `syz.0.395'. [ 51.753097][ T31] usb 1-1: USB disconnect, device number 18 [ 51.904046][ T1625] binder: Unknown parameter 'context' [ 51.910250][ T1625] binder: Unknown parameter 'context' [ 51.916127][ T1625] binder: Unknown parameter 'context' [ 51.921696][ T1625] binder: Unknown parameter 'context' [ 51.927442][ T1625] binder: Unknown parameter 'context' [ 51.933150][ T1625] binder: Unknown parameter 'context' [ 51.938716][ T1625] binder: Unknown parameter 'context' [ 51.944210][ T1625] binder: Unknown parameter 'context' [ 51.949750][ T1625] binder: Unknown parameter 'context' [ 51.955268][ T1625] binder: Unknown parameter 'context' [ 51.960843][ T1625] binder: Unknown parameter 'context' [ 51.966396][ T1625] binder: Unknown parameter 'context' [ 51.971938][ T1625] binder: Unknown parameter 'context' [ 51.977452][ T1625] binder: Unknown parameter 'context' [ 51.982970][ T1625] binder: Unknown parameter 'context' [ 51.988477][ T1625] binder: Unknown parameter 'context' [ 51.993959][ T1625] binder: Unknown parameter 'context' [ 51.999495][ T1625] binder: Unknown parameter 'context' [ 52.004996][ T1625] binder: Unknown parameter 'context' [ 52.010512][ T1625] binder: Unknown parameter 'context' [ 52.016023][ T1625] binder: Unknown parameter 'context' [ 52.021509][ T1625] binder: Unknown parameter 'context' [ 52.027010][ T1625] binder: Unknown parameter 'context' [ 52.032490][ T1625] binder: Unknown parameter 'context' [ 52.038382][ T1625] binder: Unknown parameter 'context' [ 52.043878][ T1625] binder: Unknown parameter 'context' [ 52.049407][ T1625] binder: Unknown parameter 'context' [ 52.054904][ T1625] binder: Unknown parameter 'context' [ 52.060431][ T1625] binder: Unknown parameter 'context' [ 52.065952][ T1625] binder: Unknown parameter 'context' [ 52.071427][ T1625] binder: Unknown parameter 'context' [ 52.076949][ T1625] binder: Unknown parameter 'context' [ 52.082444][ T1625] binder: Unknown parameter 'context' [ 52.267400][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 52.276684][ T1647] netlink: 80 bytes leftover after parsing attributes in process `syz.0.406'. [ 52.285855][ T1647] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 52.294191][ T1647] rust_binder: Write failure EINVAL in pid:302 [ 52.344655][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 52.351450][ T1657] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 52.367923][ T1657] rust_binder: 280: no such ref 1 [ 52.372992][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 52.428826][ T1670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.415'. [ 52.460399][ T1677] netlink: 72 bytes leftover after parsing attributes in process `syz.1.416'. [ 52.475863][ T1677] netlink: 316 bytes leftover after parsing attributes in process `syz.1.416'. [ 52.488833][ T1677] netlink: 316 bytes leftover after parsing attributes in process `syz.1.416'. [ 52.519991][ T1689] binder: Bad value for 'stats' [ 52.525251][ T1692] mmap: syz.1.421 (1692) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.548439][ T1697] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 52.548465][ T1697] rust_binder: Error while translating object. [ 52.558667][ T1697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.565341][ T1697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 52.631455][ T1715] bridge0: port 3(veth0_to_bridge) entered blocking state [ 52.647962][ T1715] bridge0: port 3(veth0_to_bridge) entered disabled state [ 52.655767][ T1715] veth0_to_bridge: entered allmulticast mode [ 52.662035][ T1715] veth0_to_bridge: entered promiscuous mode [ 52.668167][ T1715] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.680763][ T1715] bridge0: port 3(veth0_to_bridge) entered blocking state [ 52.687919][ T1715] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 53.187076][ T1747] SELinux: security_context_str_to_sid () failed with errno=-22 [ 53.245696][ T63] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 53.359009][ T1754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18197 sclass=netlink_route_socket pid=1754 comm=syz.0.440 [ 53.375443][ T1754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.440'. [ 53.420754][ T63] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.428317][ T63] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 53.437701][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.447302][ T63] usb 3-1: config 0 descriptor?? [ 53.471316][ T1761] __vm_enough_memory: pid: 1761, comm: syz.3.443, bytes: 18014402804453376 not enough memory for the allocation [ 53.833550][ T1778] veth1_vlan: mtu greater than device maximum [ 53.857469][ T63] pantherlord 0003:0E8F:0003.0005: hidraw0: USB HID v1.01 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 53.869526][ T63] pantherlord 0003:0E8F:0003.0005: no output reports found [ 53.956564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.969054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.981281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 53.993307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.005402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.017448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.029507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.041503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.053560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 54.067720][ T1744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.076435][ T1744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.092937][ T10] usb 3-1: USB disconnect, device number 16 [ 54.106808][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 54.106823][ T36] audit: type=1400 audit(3510819787.563:348): avc: denied { ioctl } for pid=1783 comm="syz.3.451" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.138488][ T1785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.138513][ T1785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.367907][ T1795] tipc: Enabling of bearer rejected, failed to enable media [ 58.275647][ C0] sched: DL replenish lagged too much [ 58.835672][ C0] net_ratelimit: 174241 callbacks suppressed [ 58.835692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.835740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.841752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.853672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.865612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.877860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.889566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.901438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.913395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.925426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.845676][ C0] net_ratelimit: 153446 callbacks suppressed [ 63.845698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.845792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.851761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.863639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.875615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.887602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.899334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.911209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.923169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.935160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.855665][ C0] net_ratelimit: 150566 callbacks suppressed [ 68.855694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.855695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.855739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.861770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.873801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.885644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.897516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.909392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.921461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.933198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.407129][ T36] audit: type=1326 audit(3510819803.353:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 73.865672][ C0] net_ratelimit: 153124 callbacks suppressed [ 73.865693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.865727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.871763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.883644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.895708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.907718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.919550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.931399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.943386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.955444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.266100][ T36] audit: type=1326 audit(3510819803.353:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 77.176741][ T36] audit: type=1326 audit(3510819803.353:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 78.875657][ C0] net_ratelimit: 153330 callbacks suppressed [ 78.875677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.875714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.881744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.893616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.905602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.917594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.929329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.941204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.953188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.965179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.134518][ T36] audit: type=1326 audit(3510819803.353:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 83.097204][ T36] audit: type=1326 audit(3510819803.353:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 83.885663][ C0] net_ratelimit: 156609 callbacks suppressed [ 83.885685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.885824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.891979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.903834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.915797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.927774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:23:8a:8a:13:ef, vlan:0) [ 83.939550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.951566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.963469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.975330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.077893][ T36] audit: type=1326 audit(3510819803.353:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 88.307738][ T36] audit: type=1326 audit(3510819803.353:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 88.895663][ C0] net_ratelimit: 167807 callbacks suppressed [ 88.895685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.895708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.901758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.913735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:23:8a:8a:13:ef, vlan:0) [ 88.925547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.937493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.949381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.961561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.973380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.985261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.137344][ T36] audit: type=1326 audit(3510819803.353:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 91.566191][ T335] bridge_slave_1: left allmulticast mode [ 92.409829][ T335] bridge_slave_1: left promiscuous mode [ 92.566053][ T36] audit: type=1326 audit(3510819803.353:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 92.606723][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.905673][ C1] net_ratelimit: 164292 callbacks suppressed [ 93.905693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.905712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.911899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.923633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.935514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.947479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.959345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.971340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.983267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:23:8a:8a:13:ef, vlan:0) [ 93.995056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.046038][ T36] audit: type=1326 audit(3510819803.353:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 94.105838][ T335] bridge_slave_0: left allmulticast mode [ 94.292370][ T335] bridge_slave_0: left promiscuous mode [ 94.426925][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.582423][ T36] audit: type=1326 audit(3510819803.773:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 [ 95.777902][ T36] audit: type=1326 audit(3510819805.143:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f260958ec23 code=0x7ffc0000 [ 98.747201][ T36] audit: type=1326 audit(3510819809.743:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1814 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26095c14a5 code=0x7ffc0000 [ 98.915678][ C0] net_ratelimit: 152787 callbacks suppressed [ 98.915700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.915736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:23:8a:8a:13:ef, vlan:0) [ 98.921851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.933783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.945705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.957721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.969465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.981398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.993401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.005662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.529047][ T36] audit: type=1326 audit(3510819804.683:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260958ebe9 code=0x7ffc0000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.155744][ T36] audit: type=1326 audit(3510819809.683:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f260958eca7 code=0x7ffc0000 [ 102.517703][ T36] audit: type=1400 audit(3510819827.473:364): avc: denied { execute } for pid=1816 comm="syz.2.461" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.925685][ C0] net_ratelimit: 153319 callbacks suppressed [ 103.925707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.925877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.931769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.943841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.955812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.967682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.979665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.991610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:23:8a:8a:13:ef, vlan:0) [ 104.003395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.015336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.448952][ T36] audit: type=1400 audit(3510819833.093:365): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2972]" dev="pipefs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 104.608341][ T1822] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 104.646437][ T36] audit: type=1400 audit(3510819836.153:366): avc: denied { mounton } for pid=1826 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.324796][ T1822] CPU: 1 UID: 0 PID: 1822 Comm: syz-executor Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 106.324831][ T1822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.324846][ T1822] Call Trace: [ 106.324853][ T1822] [ 106.324862][ T1822] __dump_stack+0x21/0x30 [ 106.324896][ T1822] dump_stack_lvl+0x10c/0x190 [ 106.324918][ T1822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.324941][ T1822] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 106.324965][ T1822] dump_stack+0x19/0x20 [ 106.324986][ T1822] warn_alloc+0x1bc/0x2a0 [ 106.325015][ T1822] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.325041][ T1822] ? __cfi_warn_alloc+0x10/0x10 [ 106.325063][ T1822] ? __get_vm_area_node+0x1dc/0x3a0 [ 106.325084][ T1822] ? kcov_ioctl+0x5d/0x5c0 [ 106.325107][ T1822] __vmalloc_node_range_noprof+0x68e/0x1420 [ 106.325134][ T1822] ? locks_remove_posix+0x38b/0x580 [ 106.325153][ T1822] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 106.325176][ T1822] ? expand_files+0xd6/0x700 [ 106.325197][ T1822] vmalloc_user_noprof+0x77/0x90 [ 106.325220][ T1822] ? kcov_ioctl+0x5d/0x5c0 [ 106.325241][ T1822] kcov_ioctl+0x5d/0x5c0 [ 106.325262][ T1822] ? bpf_lsm_file_ioctl+0xd/0x20 [ 106.325285][ T1822] ? security_file_ioctl+0x34/0xd0 [ 106.325304][ T1822] ? __cfi_kcov_ioctl+0x10/0x10 [ 106.325325][ T1822] __se_sys_ioctl+0x135/0x1b0 [ 106.325345][ T1822] __x64_sys_ioctl+0x7f/0xa0 [ 106.325364][ T1822] x64_sys_call+0x1878/0x2ee0 [ 106.325388][ T1822] do_syscall_64+0x58/0xf0 [ 106.325409][ T1822] ? clear_bhb_loop+0x50/0xa0 [ 106.325426][ T1822] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.325450][ T1822] RIP: 0033:0x7fadc0d8e7eb [ 106.325471][ T1822] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 106.325487][ T1822] RSP: 002b:00007ffdcc6e5bb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.325508][ T1822] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fadc0d8e7eb [ 106.325522][ T1822] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 106.325536][ T1822] RBP: 00007fadc0fb65d8 R08: 00000000000000da R09: 0000000000000000 [ 106.325548][ T1822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.325560][ T1822] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 106.325574][ T1822] [ 106.325585][ T1822] Mem-Info: [ 108.935661][ C0] net_ratelimit: 155054 callbacks suppressed [ 108.935683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.935771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.941761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.953665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.965654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.977495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.989509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.001505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:23:8a:8a:13:ef, vlan:0) [ 109.013296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.025200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)