last executing test programs: 3m54.393723584s ago: executing program 1 (id=167): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffff341) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x8006, 0x4, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/154, 0x9a, 0x1, 0x20}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x7a561b561224c868}], 0x0, 0x0, 0x0}) 3m54.276339386s ago: executing program 1 (id=168): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x208, 0x28, 0x200, 0x70bd2d, 0x0, {0x17}, [@generic="305ef4a065c9650a5a6629c32bf1bac90d204d19fa9b311fbce1df9b19491340794324cc1b8a2855e408d3678ee5e614158b6d03c5da8f998557cc9beaa72047e74c5f8c19e521db9b63c16e936065458453a83fb283793b3d62331cf4174e417b8609ebddcf5091007946ff1fda42a1c1723543e96b99be834642b412ea937f135e0cfa9e5060daa1caebd1d82df2a5f8e4a87681b3745b415b19f1b769852428a4276fa50939fa9ac24c5f82c43425caaea326a6cecfb5a72b692910daa4", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@mcast2}, @generic="761a2d9ff6d9fc541d9fe3519e35c1c6b1b4c432fb5bff97a2feeedad91aa78eba3dbea6cca14be279619552eda1c66f66d6b418ec18", @generic="e98fb9d138bce2c5092fd18d004c8f3df16050a92664be1bc6a03fdf0ab31f31aa0f5c311aef0cffdc70d2c39bd0cebcb00c7b584e", @nested={0x8, 0x141, 0x0, 0x1, [@nested={0x4, 0x1a}]}, @generic="4956a31be8d83c9bb2c937606beb369edac732d373935a2b05bbf3e2120afe6a3b7a6248f5853204597e25b4729637391069728e79dad80fa591d5f1c68f698c7713dcc62cab111c9858e61a4a35413ce968aa00939dea4c37030da64dcd6425e12336911bf20e86470aaad5a9f7436f72bfc6dbcc6c55d81a1239cea4bb7ede63181c1a9e53ef85a2e4d3bb751833199e616d9879a2174bb1ade8d56ac07ea2664e3d31dc5295dd99fb09"]}, 0x208}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) 3m54.180748468s ago: executing program 1 (id=170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x7, 0x0, 0x4}, 0x3, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xdfffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) getpid() (async) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="5522f8ac", 0x4}], 0x1, 0x14, 0x0) close(r0) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x57) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x40008d4) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sched_setaffinity(r6, 0x8, &(0x7f00000001c0)=0x7ff) 3m54.09423526s ago: executing program 1 (id=171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x810000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r1, &(0x7f0000000080)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x205) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x3}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, 0x9, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.08998097s ago: executing program 1 (id=172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x1, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xfa, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xff, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0xe, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x0, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000004, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.046503201s ago: executing program 1 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) getsockname(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c13c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$kvm(0xffffffffffffff9c, 0x0, 0x50800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m53.921445773s ago: executing program 32 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) getsockname(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000080)=0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c13c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$kvm(0xffffffffffffff9c, 0x0, 0x50800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m41.62544719s ago: executing program 3 (id=329): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00') (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000002, &(0x7f0000001400)={[{@none}]}) (async) sendfile(r0, r0, 0x0, 0x1000007fd) 3m40.730289718s ago: executing program 3 (id=336): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000481801100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3m40.714779958s ago: executing program 3 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x33) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x58, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x4) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r6, 0x4008700c) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000004c0)=0x1) (async) close_range(r2, 0xffffffffffffffff, 0x0) 3m40.59431205s ago: executing program 3 (id=339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m39.890308884s ago: executing program 3 (id=346): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000482403100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3m39.781952836s ago: executing program 3 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x325) unshare(0x8050000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) timerfd_gettime(r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x33, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 3m39.711610567s ago: executing program 33 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x325) unshare(0x8050000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) timerfd_gettime(r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x33, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.784052257s ago: executing program 2 (id=2233): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000340)=0x40) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002180)=0x10, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000002100)='veth0_to_bridge\x00', 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 1m41.733402548s ago: executing program 2 (id=2234): openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x503242, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') preadv(r1, &(0x7f0000000280), 0x0, 0x800, 0xa) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x0, 0x10000}) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a140000001100010000000000100000000000bf16"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000400)=[{&(0x7f00000001c0)="9657ee84a69dbc0992cefce985897507f5b40eb1e7dc58c6b2361c18320b21cb84eae6c286092200ef87798d9a00c3d0631a2a2c42", 0x35}, {0x0}, {0x0}], 0x3, 0x4, 0x3) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3000000012000100000000000000000000000000000000000000000d000700d0403a2d7d2d2b2900000000"], 0x30}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000002240)="b805000000b9fa0000000f01d9660f78c4020a52f7d6d605000004b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc7ff7502020fba600c980f320f3566b857000f00d0", 0x4b}], 0x1, 0x10, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x1, 0x7fffffff}) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0x10001}) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) r9 = syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "08f8415cbb"}, {0x5, 0x24, 0x0, 0x4}, {0xd}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x1cf, 0x2, 0x0, 0xc0}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m41.182008948s ago: executing program 2 (id=2237): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1m41.11824038s ago: executing program 2 (id=2238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40383, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) (async) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) getxattr(&(0x7f0000000540)='./bus\x00', &(0x7f00000005c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async) getxattr(&(0x7f0000000540)='./bus\x00', &(0x7f00000005c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c0210000500010725"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102a39ab910b80c0bc9ae0d01020301090229000101f8400409048afc0101033e080724010205050009050c0210000500010725"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket(0x22, 0x4, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x7, r7, 0x0, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="66b8010000000f01c1f30f090f56f96766c74424006400c0fe6766c7442402000000806766c744240600000000670f011c240fc72d36660fc730650f21f00f2044baf80c66b857931f8466efbafc0cec0f01d1", 0x53}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m39.930930143s ago: executing program 2 (id=2245): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x0, 0x0, &(0x7f0000000b00)}) socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c2e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat(r4, &(0x7f0000002380)='./file0\x00', 0x525100, 0x5) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa88090, &(0x7f00000002c0)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x35]}}], [{@smackfsroot={'smackfsroot', 0x3d, '/'}}, {@euid_gt={'euid>', r5}}]}) 1m39.700409468s ago: executing program 2 (id=2248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1m39.662080238s ago: executing program 34 (id=2248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 23.874371055s ago: executing program 0 (id=3344): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7e, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r0, &(0x7f00000004c0)="8b", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) unshare(0x62040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff80000003, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 22.967432652s ago: executing program 0 (id=3355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x9c}}, 0x74800) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) write(r4, &(0x7f0000000980)="a9", 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) ioctl$sock_proto_private(r3, 0x89ea, &(0x7f00000000c0)="8a86e3e3a85dd5021cccd497c8bc47130c332cc791dd41d380dcbf075bd14a73f3b8dc755569d34e737c055db0952f48ea56cfab979240930667dd9cbffa47d6") setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100000000ffffffe40000002f0000000000000000e00000000000000000000000fe8000000000000100000000000000aa3c040000020000100a0002000000000000000000000000000006ba3fefd213786b08bc0b3fcd50e01a9d0d5ac38bcd28be47792658"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) 22.07009958s ago: executing program 0 (id=3368): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mprotect(&(0x7f0000701000/0x3000)=nil, 0x3000, 0xc) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f00000003c0)={0x0, 0x30, 0xa0, {0xa0, 0x31, "046beb561658b365445511ad2496c2f33bcb467879acaaec432508ff70d3dd82327b310e1aa8ab0440ba35d25eb8ea7beafc44b57c79082076bf104a703c4af7ae9ad30fcc62d4e5cd84015fa65a87dc052a6d2f5ac9a9190fe413c0bc9d3a61273440a18e833205f2aa4158cccdbef2eed54b8f05b71dfc60f84fcb2801966e304df6de61c950126aa23729a825844a489a757ed6851ab6cbe1d9ce142b"}}, &(0x7f0000001780)={0x0, 0x3, 0x92, @string={0x92, 0x3, "3aeda010579ed41900129b4ef509f6f0d9184c246c32d14f010482000ce067894e0b0f6345d784a4667790a20f0c3da50e24bc252604e53c95ed19a7b998a63dfd9c36868c2e2c6399b309c63793909759672d05c10240d7a8b49c3f21ad6e7f4ae4f3c49f7d91012bce9c705bd9333475ecede88a13de8b9684edd4e93d98a2bece493f0b4f1aff0ad7feacea041b2e"}}}, &(0x7f0000001a00)={0x44, &(0x7f0000001840)={0x40, 0x12, 0x47, "7847d239902ac88861b328fe55c9e6e700011ff7f47194b08a405c5e8fce95b88b9734329585d9da6b90ff21f8e348c4e66f0ba8324a7c6b6efb9f9df961b23d148e764f432dcd"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000018c0)={0x20, 0x81, 0x2, "4101"}, &(0x7f0000001900)={0x20, 0x82, 0x1, "b3"}, &(0x7f0000001940)={0x20, 0x83, 0x2, "5eee"}, &(0x7f0000001980)={0x20, 0x84, 0x1, "d7"}, &(0x7f00000019c0)={0x20, 0x85, 0x3, "2ef31f"}}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x100, 0xb, 0xcb, 0x848}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={0x0, 0x3, 0x4}) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) write$tun(r4, &(0x7f0000000480)={@void, @void, @ipv6=@icmpv6={0x7, 0x6, "54bc7c", 0x12d8, 0x3a, 0x0, @mcast2, @remote, {[@srh={0x11, 0x4, 0x4, 0x2, 0x4, 0x8, 0x7, [@dev={0xfe, 0x80, '\x00', 0x18}, @private0]}, @fragment={0x29, 0x0, 0x7, 0x0, 0x0, 0x1e, 0x64}, @srh={0x3c, 0x4, 0x4, 0x2, 0x3, 0x40, 0xdd, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x1d, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}, @srh={0x2e, 0x8, 0x4, 0x4, 0x3, 0x8, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @mcast2]}], @time_exceed={0x3, 0x0, 0x0, 0x7, '\x00', {0x3, 0x6, "edb6d5", 0x6d, 0xc, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [@routing={0x2c, 0x12, 0x0, 0xe8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @mcast1, @private2, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3e}]}, @fragment={0x8, 0x0, 0x7f, 0x1, 0x0, 0x3, 0x67}, @fragment={0x3b, 0x0, 0xaf, 0x0, 0x0, 0x8, 0x68}, @dstopts={0x0, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x3d}, @ra={0x5, 0x2, 0x100}]}, @dstopts={0x16, 0x21b, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0xe}, @calipso={0x7, 0x10, {0x2, 0x2, 0x7, 0x180, [0x800]}}, @jumbo={0xc2, 0x4, 0x5}, @generic={0xd, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0xff, 0x8e, "d80c81e8b36a2e7d9ff63eca1d2dda07a018fc5dd6f4daae4f80413c68ee0a59a99d09538423e5a432dba472d75d2f283b31af9209c5662b103151801b0e3726aa8a8448d76891bcf8396908f45ba195e57f219fa104b32715c52b9fe107de471c916a0f78c0dcb511a07cd65f7367f5ea2ee1c5676fdf18268dcf99f6dbac6c503ae91c01cb2128222be48de244"}, @ra={0x5, 0x2, 0x9}]}, @srh={0x32, 0x6, 0x4, 0x3, 0x40, 0x20, 0x800, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, @local]}]}}}}}, 0x1300) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x90) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) r6 = dup3(r5, r4, 0x0) finit_module(r6, 0x0, 0x1) 21.584888539s ago: executing program 0 (id=3370): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/183, 0xb7}], 0x1, 0x8006, 0x2) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_MASTER={0x0, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_FILTER={0x12, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x0, 0x2, 0x16b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x44090) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_MASTER={0x0, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_FILTER={0x12, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x0, 0x2, 0x16b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x44090) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r5, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) (async) write$selinux_create(r5, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106ce", 0x1e}], 0x1) (async) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106ce", 0x1e}], 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xffffffffffffff87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) setfsgid(r8) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) setuid(r9) r10 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x289, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x289, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1004080, &(0x7f00000000c0)={[{@gid={'gid', 0x3d, r8}}], [{@uid_gt={'uid>', r9}}]}) 21.497357641s ago: executing program 0 (id=3375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) timerfd_create(0x8, 0x80800) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) fsmount(r3, 0x1, 0x70) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040)=0x2, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x185300, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) 20.979240611s ago: executing program 0 (id=3379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x220802, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) (async) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 10.667464522s ago: executing program 4 (id=3410): r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x3, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000000c0)=[0x0, 0x6, 0xc, 0x9, 0x4, 0x6, 0x4398, 0x10000]) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3a05050, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0]) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x40000000) 10.666286993s ago: executing program 6 (id=3411): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xfd697000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x1d}, {0x0, 0x0, 0x0, 0x2000040000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@remote, 0x1, 0x4, 0x3, 0x0, 0x209e5be2, 0x0, 0x9}]}]}, 0x17c}}, 0x48014) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') time(0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 10.665643982s ago: executing program 5 (id=3412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 9.136641212s ago: executing program 4 (id=3413): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@cpuid={0x14, 0x18, {0x8}}, @code={0xa, 0x5f, {"2ef381972c310000a07e0000430f7903c4820af542060f00d366baf80cb83b640384ef66bafc0cec0fc79b5936a7ce66ba610066b80f0066efc4617fe665044d0fc71f0f20d835200000000f22d8"}}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @rdmsr={0x32, 0x18, {0x250}}, @uexit={0x0, 0x18, 0xbf}], 0xc7}) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@cpuid={0x14, 0x18, {0x8}}, @code={0xa, 0x5f, {"2ef381972c310000a07e0000430f7903c4820af542060f00d366baf80cb83b640384ef66bafc0cec0fc79b5936a7ce66ba610066b80f0066efc4617fe665044d0fc71f0f20d835200000000f22d8"}}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @rdmsr={0x32, 0x18, {0x250}}, @uexit={0x0, 0x18, 0xbf}], 0xc7}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000481000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="66f20ff0130f01d40fc77e18b85e000f00d09a00008f002e2667d8d2bad004b8a900ef65dc870070643e660f38402e000066b9800000c00f326635000400000f30", 0x41}], 0x1, 0x1, &(0x7f0000000300), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) munlock(&(0x7f000081b000/0x3000)=nil, 0x3000) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (async) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x1) 9.136461972s ago: executing program 6 (id=3414): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) sendfile(r1, r2, 0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) gettid() socketpair(0x27, 0x3, 0xfff, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x4}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x4}], 0x0, 0x0, 0x0}) 9.090212823s ago: executing program 5 (id=3415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x8c) openat$incfs(r1, &(0x7f00000020c0)='.pending_reads\x00', 0x727200, 0x9) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af60, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303041090000000000000030303030302c7512ea2199a11ac61881b7dee272d4ca8d9c", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x7f, 0x1, 0xdcf, 0x5, 0xd, 0x0, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000002100)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb51c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x8, 0x6, 0x0, {0x3, 0x10000000000007, 0x0, 0x80000001, 0x0, 0x1, 0x256, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0xffffffffffffffff, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x800000000000007, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x18, 0x93a, 0x8001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0xdd, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0xff, 0x5, 0x1, {0x22, 0x9bc}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x84, 0x52, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x18, 0x3, 0x10}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xe, 0x7, 0x5, 0x20, 0x6d}, 0x38, &(0x7f0000000200)={0x5, 0xf, 0x38, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0x22, 0xf, 0x9, [0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0xa, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x47, 0xd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x58, 0x3, 0x1, 0x1, 0x9}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}, {0x69, &(0x7f00000002c0)=@string={0x69, 0x3, "c874bd4a3515c9a814d35bfaddb22ed701906cafa9fbb5990d8c1791d1a47f004314afb1db703ef98b42d0b6fb0d56a3fc320b8408d9177fbb54b99d00c9b7c99e0c9b4c3072e137497bb7be2f3bdbb70c3490801ef40479062fae33f87140896544a2cda6f915"}}, {0xa1, &(0x7f0000000340)=@string={0xa1, 0x3, "0d974102f1d229f8cc3cba08f264d5359e175735808532272b87ac0c52080d4bcc43a2ab64ddefaa79f406db82a944175919fe66fc00e37ff22f6b57d2dcd493c01b69344b163ad4144ad2425b398860d08847426085873a0cd8fd2cb8a6a8dca277264bf25201718ee09fa9a81da61720efc3de1ec5e207049843333ca57e880791e431105bb6acb53bfa1d37bbe421c005bff7fa20e6edced5fe87a5e493"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000800)={0x24, &(0x7f0000000600)={0x40, 0xc, 0xee, {0xee, 0x30, "adff857119f22cab6f4c9b2d37d2ef247717723cb3e02e976339166c3065773dad595e91770c9635afaa473735e74e8cba89d3ef32094fc8333897ffd6325d06d7ed18bd0588c358c57b2c69a8971b6ed56466d2ed573c1813f4b0638f055d0b4b5e460bb1362a4ae897502082dcced82e78a4f0c0715273908c4b3604be434dcd426c663f293cc20d06d2a0bdfb44710ff51fc2296d4ef1654a82a5c2263eacbb6da7ccabcd51d8b6ba0e0ed329fb9bbcc148084dc76c4dcf520ee52f2a6d5a263bcd16bf03a5f96cc0036f335dc9af27783a7aa0a957d917742c08f1170a6c9239c55037d31138ab776fa4"}}, &(0x7f0000000700)={0x0, 0x3, 0x67, @string={0x67, 0x3, "c30ce64f558b1b3e23f84a2ef665d039475f2f56fec0b6476039b6bc768a840691c756cc68d3a51d521c9921bd202f3f64e76fd0d48ff70c21834c82fa0e8b1109543b44a6e497c51c5af032eb805c18d11aa593b20992dde3ea726f142be949a8a314ca5c"}}, &(0x7f0000000780)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "8e01679c"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x80, 0x1, {0x22, 0xe3f}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000840)={0x20, 0x15, 0x73, "00fab8b83359f12f1ad452f9e45004a7411a0feb05d30e5ac6eda846459436195eeed4248c750a51ce7947ba0739ea6f56312ec861340214afaca5e0d31a6207b3c46d314f453d5086fc4a2fb9fce97ff44fbb3340d44d4275b902388849c2c1e20add61518004061dd0b1156edb3d7683c664"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x8f}, &(0x7f0000000940)={0x20, 0x1, 0x90, "fd4627908e62330b4ec14ef014870f1c6cf41574b1daad45692752cd16c462f48b0b21f298a86305c2f105be4be4de914d09e30643d9ce63e43d76a30a002fe3ddc72b3d90ddfa7e80980eb6a16ff04cb90c6df88936e9d9e8cf19bd07f7079b0c26fe370732e48eee35cab547cb3c85133b1c71464eaeea00e5959482dec19ee1c7af4d5663130f5edbcbdea7b1c92e"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x40}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 7.510346614s ago: executing program 4 (id=3416): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @empty, @multicast2}, 0xc) (async) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) (async, rerun: 64) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) (async) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009058b8b49d27f"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'vlan0\x00', @multicast}) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (rerun: 64) close(r6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x48, 0xffffffffffffffff) (rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x4, 0x1, 0x80000c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.509776024s ago: executing program 6 (id=3417): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r2, 0x407, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) (async) syz_open_dev$hidraw(0x0, 0x80000001, 0x410480) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x65, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x7f, 0xea, 0xd2, 0x8, 0x1d2a, 0x801, 0x72c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x8, 0x60, 0x80, 0x64, [{{0x9, 0x4, 0x70, 0xf, 0x5, 0x7b, 0x6, 0x72, 0xf7, [], [{{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x49, 0x1}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x6, 0x7, 0x0, [@generic={0x9, 0x4, "7016158ef74fc4"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x2, 0x9, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x7}]}}, {{0x9, 0x5, 0x8d, 0x0, 0x3ff, 0x9, 0x90, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xc, 0x3, 0x67, [@generic={0x4, 0x9, "63f6"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x1, 0x40, 0x40, 0x86}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "9aa40213515b9535fbdc8c0b3abe5284"}, @NL80211_ATTR_SSID={0x18, 0x34, @random="12f26c0807b76254f5d0127de37c201e76b56ec6"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x60}]}, 0x74}, 0x1, 0x0, 0x0, 0x50}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r7, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x100005) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 7.508824234s ago: executing program 5 (id=3418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, &(0x7f0000004480)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x200000, 0x81) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000034000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r4], 0x22c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000100)=0x6, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 5.778494837s ago: executing program 4 (id=3419): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x86dd, r4, 0x1, 0x20, 0x6, @broadcast}, 0x14) close(r1) r5 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r1, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xffffffef, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a"], 0x6c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@nfs_export_on}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa0, 0x0, &(0x7f0000000a40)=[@transaction_sg={0x40486311, {0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/241, 0xf1, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}, @enter_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0xa, 0x2, 0x20}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x1, 0x40}}, &(0x7f0000000200)={0xfffffffffffffe4f, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="24040000f40300072cbd7000fddbdf2505000000000000002a000000070000000000000000000000ff0000003b00000009000000a486000009000000050000000180000007000000800000000100000001800000090000002300000005000000000000000200000006000000000000001a000000080000000080000000000000ec0000000900000005000000010000003800000000000000cf0000007548775081f80000000400000000000001000000bec5ffff03000000e1b500000d0000000800000208000000790000000800000005000000ad0000000400000004000000ffffffff0e0000008e000000040000009d0000000200000003000000d9000000e300000000020000fdffffff05000000ffffff7f03000000ea000000ff070000000000000000000002000000c56e0000ed0800000b00000001000000ff7f00002248c601020000000800000007000000090000000300000006000000050000000400000006000000030000000000000000020000fe0f00000000008063a1000007000000cd0c000000008000020000000100000000020000ffffff7fff0300000800000000000000150000000200000004000000ff7f00000a0000007a00000003000000c700000007000000fa000000020000004bffffff0800000001040000ff00000001040000ff0700007f00000000000100010000000200000019ea1a5300040000830000000800000000040000ff07000008000000050000000900000001000000f7ffffff07000000082a0000bc0800000300000000000000010000000200000005000000000000000800000010000000ff01000001000100080000000100010000000000c100000005000000060000000000000000800000020000000600000006000000000400000400000005000000000000000400000007000000050000000600000003000000070000000001000081000000080000000600000040000000020000000f000000f8000000010100000100000095d5000000000000ff0f00000100000000800000e40e000005000000ffff0000d500000000000000020000000200000000000000060000000100000001000100050000000600000002000000000000000100000003000000030000000100000001000000ff0f000008000000060000000c0000000b000000000e0000ff7f000001000000030000000000400050000000030000004000000003000000080000000400000008000000090000000400000001000000f7ffffffd20e00000200000008000000ff0700000800000001000000000000000400000003000000e8030000060000008000000000000000fbffffff010000000500000002000000040000005bef000006000000f90f000001000000db0a0000060000000400000000040000040000000100000000000000010000800800000004000000000400000000010001000000010000000000000073cdd9eed3e45344848d5d69174e4af754d1bd6ec4cfa45b9aba11a589941e67d3f5bed4ff4c9bc46ca329a81072460d2135315160a7871f62f5f0fa743790b78a2c7503aeffda15ce4eecd04caed3bd00d00200e17ed9edb73b4c4271a21645a3166bc3d4"], 0x424}, 0x1, 0x0, 0x0, 0x20000040}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.777626778s ago: executing program 6 (id=3420): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000f3ffff054d564b"]) 3.910327034s ago: executing program 4 (id=3422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfa6cdc231a85e137d3c7951cf6a67dbc0eadb45126451e08d17b5f73001b0b4e8ccc3c23653f2aff79287577c503457bc9ce4c7e9672cd33981a8356e6a4912b7acc157314742183cba6e74c7f5596b4bac3894724d05cad647f6451a8f1f117f88d98b1986113698471f4803d06e8cdb9af0842fdbbbc6d8663d4653c", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,\x00']) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3.910090134s ago: executing program 6 (id=3423): socketpair(0x28, 0x0, 0x0, &(0x7f0000000140)) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x200801, 0x100) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x70000, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x3, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@nfs_export_on}]}) (async) setgroups(0xd329779ad33ee0b6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 3.909471794s ago: executing program 5 (id=3424): setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) (async) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000180)={{0x0, 0x7fffffff}, 0x100, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x4040) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x2d, 0x8, "1b8b48dcf8544f1b595584b2a59fb5710f1b46b208bfb8a4cc08ce1c56147e063d782c86c0792a85c6"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xb7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000050) pivot_root(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)='./file0\x00') (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) (async) r3 = open$dir(&(0x7f0000000840)='./file0\x00', 0x8000, 0xa0) (async) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) renameat(r3, &(0x7f0000000880)='./file0\x00', r4, &(0x7f0000000900)='./file1\x00') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r5) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) chdir(&(0x7f0000000ac0)='./file1\x00') r7 = dup(r5) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001400)={@dev, @empty, 0x0}, &(0x7f0000001440)=0xc) sendmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e20, 0x1, @remote, 0x8}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b80)="ebeb02f93425ebf484da7968ed56efa080ff2aa5e58cd805b7f33fab176d725a9f1c596d99de83f73648fdeb610d118be00b533e10a0dc67277f22e8fad76e5f64b8650b66b847e00ce8edad3c9612e1db", 0x51}, {&(0x7f0000000c00)="7b2b6a6136a54c3f8efe3e376afc5838a94e6e0e1887db144d0952f40d7645b4ad22849a073c2bb103968fdca41cfd57a5f55586df909be72da72278d5", 0x3d}, {&(0x7f0000000c40)="03e4ee0f1cd66a6eb01190f5baf9fde09e5a378d23e0d097fcc96d3097d9a6af6a823274289f0b60c92bfa7b01c86769155a8b9615873203af991511", 0x3c}, {&(0x7f0000000c80)="94dd4ac2feea040e50beaa855508d504080cac244ac131794691e0ecbdb98f5d6faad653b84421303950771282f3eb518b14aef9b1a42ad258d3fab6bc9807c6b97042700148f0ae42970ab1a38ace6fb7b7a22d456727b350a17afa7a0f9e9d5dec508f5a937b32f760c72bfcfed7a80c5c7cd5fa7d3d36cb7fb47b1840c72f0532005a7b493003fc94b2c26e4b6ec555dd0eb7a9a594ec59d2aecef4109e3dcc39dd38b2ea6340027670442ac8d5ca45cdd2c74962d848703a53cbee686ea7d9c5f596f6e5b074267642f7aad8", 0xce}, {&(0x7f0000000d80)="ae10cb790307e0b50748c71b3ed75b9946ecba1a9c2f5fbe94dc58de38d35a42748b5fead9159a9f6d9975497320447144996561a4ca53725cee3cf21c287ded02ced9428153e7ccc48ade38ccaa0e01b1e198b2a714df48de388509d7410fb7a4df509f9731406f7054825f29bc01b93f7346e0ec61d2ae4575908c02780660dc1427497e3caad9baf42e2458673e23ec7399eec25f7366a3c88c2cd1458f0d5ea2aaf8de3578d0aeadd65bf74f66579c3bc6d75eaab522df7106660443c0632b1df4de56c299f0538353436d7514abe2b5146e9de53f03c745096e116a0cd7aabdd46ffae84fa10f88fb25351b14dae6a9", 0xf2}], 0x5}}, {{&(0x7f0000000f00)=@l2={0x1f, 0x5, @none, 0x8}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000f80)="8823d31b53c4a31e1872021f50476fb345803217971005e7b5fad2a27843adc7e6d065557d880864f826672705c69d36fd7519667077e966992044f240b281197e6711e7bf6581d2f1def518ebc197de55809931ca8aac5ce86ebb9378acdb114c681de27df1793ad753783fa3910a9b6acf832890251713ca095c681e6581485a865f72d10de3aa9f13124d8c8d6883404937fa5d6f4acf11bd5a203ba504468f8646bb2eb539e4b25aee190f6fc948c12fc94749da7b0595ec6a0230", 0xbd}, {&(0x7f0000001040)="952d9f6ecafd30a69b1e3dce040431fb0426dd11dc2dcb4e0ffb7c95", 0x1c}, {&(0x7f0000001080)="7ec1c0180cafc7f8273a1768ea2ddfaf693b84fafcdd287057bba3b82cff503ff7c3c2f4f7d6d3ac0fec891fd4e1cff26480f76e42e1a9a1b2d5c217970baa191e813a90d054644ae22067e535e27bba1d0c10983b20c255db2b41883f707501f101ecde880d4a3ddffd8f05f5666728c310283f980fb213919e6be2fdf8a1c8dfa570bf708d63d09916030bebf23740b86a2ba0f13dbf650599c22c8eda43ffa311b443a36c0269b0782bae27bb90c16f854da287efbf10b283e19565345951f2627816e1085f212b67c3656f0083843ccc995d87cae55a183552f2205a7edf1d", 0xe1}, {&(0x7f0000001180)="85480219ee4c76d9ccd4df48fdad223017742bd945cee49d7979debf252a287f4450ff1a3fe7febddb08b7d9a90aed915e9bbc269bd232f59d63fe8e5c3f967c496334c4ab1d930163e1222fb1fe29c638b73afec903cadfe1", 0x59}, {&(0x7f0000001200)="75b8c364e4568c8b57c6435ffdd70f715f27f04bfadc2c0f07b69062ce85848b4219", 0x22}, {&(0x7f0000001240)="4ffba8ff151a0a0c00b3bdaaa53193ac011cdc4bb6a16ed7531824b1e6e443925cb3d02c03a18a324467540e5fd8885781924b8693e9a6842ea0fe2788cf801d7a45245d2b00e931557779fd182b1ab31b566803d0bd1defda3ca93fd7963562ed7092019079f98126cc38a773fbaae06bb5bb0a9a2357de1cdb94d1a4ea7cdb78441f316bad9195b1641a49ed4d49eaaa5f16e3f8a9def7315627a3840d94022458d67858e0322906e161006f6122dcb49acf2b", 0xb4}, {&(0x7f0000001300)="f8800dfe693051a8c013d5a1d8f5c14c040c2c46508c08ddc523df3a5a98", 0x1e}, {&(0x7f0000001340)="666a3fc5de9d989135e8e09ae84199e4e69ecd269c95d5411122db9b5242d9b133b88d322040fdfac2d554491f1e7b90ad34", 0x32}], 0x8}}, {{&(0x7f0000001480)=@xdp={0x2c, 0x8, r9, 0x19}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001500)="3895dd5e85d648f0a8ddbbcb746ced791f89ffe9bd0b38210aa0e0", 0x1b}, {&(0x7f0000001540)="9fb44059a756697be9f6b328fe59366693d5b284560200ba68162e45140102306d7276f222efacde18326b37433c4ed20da60f4a155d93fefc45dcba9bdd49b9f4983c6bd8b1072bfe30f0b6ec14108f", 0x50}, {&(0x7f00000015c0)="9a87f2c6acf1279484c1340a595aed45678258d4c37885422b3cd5c637ef62b11e7b0549cb038dd873a66dedd62ae8e1a683ec4a1071e58d26c83dcd86d071546911af68ede70fb40cbc0f2dae7f85bb12c2a6c4f74f1cda25412b61c299101de2690c629820b19e99b7e870267c14bcde8e3c912c5d435d9258a16a70f7a531292c8cf1a9aa33d2e0a37e782f93b4b7e321c9bb35670c397cb2c7552de94f180fa54ebdadc693eb8409cad22afc5047a40d8a2bd63d7ed65a9b89cf366aaac1410d64010fac7ca3b544daa4ec0701ad", 0xd0}, {&(0x7f00000016c0)="b3e79eaca98bf9e42d05d1f7a5bb5a76fd0bb6a089edca8fc2e2bbb42a3eea14851cce7d625600bf3b75badeca91e352af205618e30b0c5517e14c2d95aad731329d43268982f553369bd3536e6c33ba0047bf2365aee0f7e0605b4640cdfa10d6eeb67f6950b7c69f5984bc7d930b9d36375dbbd03885df20c5", 0x7a}, {&(0x7f0000001740)="86c03853edfa7c11d9659388858fb1afc2f424a6345872f98ebf10565e04b8099eef687592e9c972b26e58c166e7c819c90bd58d1d343a09817192fb02f98dd798936b52d04642c508c8831860702d999e82eef057ca3c4e4a9f8d62a86fc3004cc83281ddeec48e", 0x68}, {&(0x7f00000017c0)="13f14978e0f5d8fb51f2ea6ba2b419eeed7204b2b41e82b8e56ea9d5e6236370a379c27d50544b1a1f5b3cc5d1e5895f8a1c210a8d8219e04c46fc5e7d45b83efbb05bda3d2927a71fbd3ed91d4326210fdb29fb3772e74dcd99160941", 0x5d}, {&(0x7f0000001840)="bbabb6ffb1ebadd7ec9bb4716c9d83f884a30d4a46905bdf98187a2a5aa9eb2fc9ed066a90552a8e0fd333933a042e018093f1c027564412c934674e71bc4c956e306c", 0x43}, {&(0x7f00000018c0)="7986e544148f01d30e6fede273d519311bc8e81fb99b9d3564864746c0b5d785a338337820c23c19205b2fec4ec96f9db555e5ff03c261d2be3e18cc734ef7e847fc583ae0fb4e8217f53297e62c405b4447e53f74a5618f76004ffcb98da569582acba28f8d5d4596c9848f0605566f316927ae3647fdfa55835fe51735dbe0ab74618fa17cb589a1db9f372e7960721d064f8768764183adde8c746b391a32d1d68e13dae7e2860f8b69f801a37e4bb4537e5c3c1533b9ccf5577a85ea3d45d7e85c7916babf85bc092fc2ac64054f6661bf8b475efd6582b1fe569bb305a00759eb4eb803172538ae1184a230a87a", 0xf0}, {&(0x7f00000019c0)="de5096ea3ac469763b71bc510ba8f4331f4d4b5a7e116476bb5d02ab2122ab23296a9e11f727440bc036e1414dec1b10a7421f4a7e2c44e7a28c0083d2957a27eaf88912f3dfbfb5b3a9cc5c7a3beb8d43bad3fbe6b1de04487bdcd4b7219aea52b6f2d5b4159f7bc24995ee3480ea7b3eb16d3421a0cd5e53b5c22c94d1cebdb46b023fcb9e582f6c5820ce6144be865ce940c86f8c51865872eecd6f4bfd45a8d166847d0dba3c1064c7", 0xab}, {&(0x7f0000001a80)="0e5e1ac4b7c1e0101087fc376c85e26553b47cd768953ce4237db370e1985646054569c8dec94da8b9685c2d3a09bffdbc56054ffcdd22f66083f23ffdb9506985bdfc50184486c40dce1f6028361e8154a0e8ad3648d063345f6d5fdf5acf22", 0x60}], 0xa, &(0x7f0000001bc0)=[{0xb0, 0x0, 0x7, "36a92e3958768d49298e2dbfc1cc0f2dba0eee59f90e46d89bd63c94efabe8180b7c729d2c84348ad29dc936adf632ed0c1d56ae60a54d5a7e328e41f56053a774d022a18d041ff5912b90477c1f0f7049c5cc4d3d07defee1b8c5e3230281ee9762c709fd680a35da4fa299a8e7131f088c47d0cd0547de76a81b5f27cd447e35c7bd83b729bd8a1f4a1287ada51efaa669d7156ca33725a420e89c73405223"}], 0xb0}}], 0x3, 0x800) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000001d40)={0x80}) bind$packet(r4, &(0x7f0000001e00)={0x11, 0x18, r9, 0x1, 0x5, 0x6, @broadcast}, 0x14) recvmsg(r0, &(0x7f0000002140)={&(0x7f0000001e40)=@xdp, 0x80, &(0x7f0000002100)=[{&(0x7f0000001ec0)=""/114, 0x72}, {&(0x7f0000001f40)=""/241, 0xf1}, {&(0x7f0000002040)=""/129, 0x81}], 0x3}, 0x1) (async) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x1000, 0x77c, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000002180)=@loop={'/dev/loop', 0x0}, r10, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) lsetxattr(&(0x7f0000002300)='./file1\x00', &(0x7f0000002340)=@known='user.syz\x00', &(0x7f0000002380)='\xff\xff\xff\xff\xff\xff', 0x6, 0x3) 2.50211ms ago: executing program 4 (id=3425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a}) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4000000) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x1, 0x30}, @fda={0x66646185, 0x2, 0x2, 0x3d}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) 1.01821ms ago: executing program 6 (id=3426): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000002f00)={{r1}, r4, 0x10, @inherit={0x58, &(0x7f0000000500)={0x0, 0x2, 0x7fffffff, 0x2e, {0x0, 0x40, 0x100000001, 0x1, 0x2}, [0x170f1d00, 0xc]}}, @name="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"}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x3ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r6, &(0x7f0000000240)='./bus/file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x2) statx(r6, &(0x7f0000000480)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x1000, 0x2, &(0x7f0000000580)) sendfile(r2, r5, 0x0, 0x110003) sendto(r2, &(0x7f0000000140)="a0e4f80d9a103655ef1b9a909f08851b8210b44af3797a737929f77d0572305abef079886b4d27dfe252237031a032700500d15d6cf94188080989e21552570bfbd078e8e0a2cae03a8af8e4785b447fa27508447efa3838c0ec16fe73ffd505dd313be3574ddcc6d2a036910cc99b424ffbd1b6918f77d325df2bc0bf73cebf4759a10d891d3b34abdb415b12e921a0e931d42e51dae0df044a50a4186d24623b5d7b7f847911e5b51fd2a223886e42f9dd00c263cb7d1351014c1a5fd81809155e3bfd644ef67ee38088102122fd23e96d10d437476ba600f9f695787e32f06ea917ea5f85461ee60cff1a36fe41d5e8873e8cc8fe8f3f", 0xf8, 0x0, &(0x7f0000000040)=@in={0x2, 0x4e23, @private=0xa010101}, 0x80) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') unshare(0x62040200) read$FUSE(r7, &(0x7f0000000ec0)={0x2020}, 0x2020) 0s ago: executing program 5 (id=3427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x25, 0x0, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) (rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket(0x21, 0x804, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) getdents64(0xffffffffffffff9c, &(0x7f0000000280)=""/4096, 0x1000) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x6, 0x0, {0x2, 0x1, 0x1, 0x0, ')'}}, 0x2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): y_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.853658][ T2973] rust_binder: use_range failure ESRCH [ 86.863275][ T2972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:466 [ 86.870842][ T333] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 86.885853][ T2973] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 86.893006][ T2973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 86.893257][ T333] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 86.901260][ T2973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:466 [ 86.916602][ T333] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 86.943701][ T333] usb 6-1: USB disconnect, device number 7 [ 87.286424][ T333] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.359511][ T2978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'. [ 87.373450][ T2978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=2978 comm=syz.2.824 [ 87.438935][ T333] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 87.448296][ T333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.451854][ T2982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.456314][ T333] usb 6-1: Product: syz [ 87.456337][ T333] usb 6-1: Manufacturer: syz [ 87.464560][ T2982] rust_binder: Error while translating object. [ 87.467322][ T333] usb 6-1: SerialNumber: syz [ 87.472044][ T2982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.482683][ T2982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:608 [ 87.686650][ T2986] rust_binder: inc_ref_done called when no active inc_refs [ 87.695946][ T2986] rust_binder: 472: no such ref 1 [ 88.034178][ T2996] rust_binder: Error while translating object. [ 88.034219][ T2996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 88.040739][ T2996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:320 [ 88.254655][ T333] rtl8150 6-1:1.0: couldn't reset the device [ 88.286190][ T333] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 88.306345][ T333] usb 6-1: USB disconnect, device number 8 [ 88.438475][ T2998] kvm: kvm [2997]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 88.447597][ T2998] kvm: kvm [2997]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 88.615824][ T3011] loop9: detected capacity change from 0 to 7 [ 88.622317][ T3011] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.630394][ T3011] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.638609][ T3011] loop9: unable to read partition table [ 88.644357][ T3011] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 88.644357][ T3011] ) failed (rc=-5) [ 88.645743][ T942] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.666936][ T942] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.675158][ T942] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.683705][ T942] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.692061][ T942] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.796619][ T333] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 88.915646][ T3016] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.915678][ T3016] rust_binder: Read failure Err(EFAULT) in pid:326 [ 88.940542][ T3018] netlink: 68 bytes leftover after parsing attributes in process `syz.5.837'. [ 88.956515][ T333] usb 1-1: Using ep0 maxpacket: 8 [ 88.964972][ T333] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 88.967436][ T3018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.973355][ T3018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 88.979769][ T333] usb 1-1: config 179 has no interface number 0 [ 89.000622][ T333] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 89.012206][ T333] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 89.023763][ T333] usb 1-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.035710][ T333] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.049167][ T333] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.058315][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.085818][ T3008] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.278845][ T3050] kvm: MWAIT instruction emulated as NOP! [ 89.299602][ T333] usb 1-1: USB disconnect, device number 25 [ 89.519919][ T3063] sit0: entered promiscuous mode [ 89.531925][ T3063] netlink: 'syz.4.849': attribute type 1 has an invalid length. [ 89.539847][ T3063] netlink: 9 bytes leftover after parsing attributes in process `syz.4.849'. [ 89.549803][ T3050] overlayfs: statfs failed on './file0' [ 89.616799][ T3068] rust_binder: Error while translating object. [ 89.616853][ T3068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.623792][ T3068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 89.783013][ T3074] rust_binder: 354: no such ref 0 [ 89.797683][ T466] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 89.798137][ T3073] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 89.812756][ T3073] rust_binder: 354: no such ref 0 [ 89.893261][ T3079] input: syz1 as /devices/virtual/input/input15 [ 89.906395][ T3083] rust_binder: 3083 RLIMIT_NICE not set [ 89.911802][ T489] rust_binder: 3082: removing orphan mapping 0:1168 [ 89.927907][ T3085] 9pnet_fd: Insufficient options for proto=fd [ 89.946495][ T466] usb 3-1: Using ep0 maxpacket: 32 [ 89.953042][ T466] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.961630][ T466] usb 3-1: config 0 has no interface number 0 [ 89.961722][ T3094] rust_binder: Read failure Err(EAGAIN) in pid:495 [ 89.968212][ T466] usb 3-1: config 0 interface 184 has no altsetting 0 [ 89.984630][ T466] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.993934][ T466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.001965][ T466] usb 3-1: Product: syz [ 90.006298][ T466] usb 3-1: Manufacturer: syz [ 90.011257][ T466] usb 3-1: SerialNumber: syz [ 90.016679][ T466] usb 3-1: config 0 descriptor?? [ 90.022637][ T466] smsc75xx v1.0.0 [ 90.139909][ T3109] rust_binder: 502: no such ref 0 [ 90.145217][ T3109] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 90.152924][ T3109] rust_binder: 502: no such ref 0 [ 90.177531][ T36] audit: type=1400 audit(1757467268.075:416): avc: denied { accept } for pid=3120 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.179790][ T3123] pim6reg1: entered promiscuous mode [ 90.202395][ T3123] pim6reg1: entered allmulticast mode [ 90.223096][ T3065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.231764][ T3065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.442376][ T466] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 90.453885][ T466] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 90.463870][ T466] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 90.474320][ T466] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 90.500058][ T3138] binder: Bad value for 'max' [ 90.658101][ T3133] tipc: Enabled bearer , priority 0 [ 90.671468][ T3132] tipc: Disabling bearer [ 91.267601][ T3157] /dev/rnullb0: Can't open blockdev [ 91.446475][ T61] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 91.597854][ T61] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.608579][ T61] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.619189][ T61] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 91.629115][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.637495][ T61] usb 6-1: SerialNumber: syz [ 91.645582][ T61] usb 6-1: 0:2 : does not exist [ 92.057239][ T61] usb 6-1: USB disconnect, device number 9 [ 92.073560][ T942] udevd[942]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.118389][ T3171] overlayfs: failed to clone upperpath [ 92.161528][ T3175] netlink: 9 bytes leftover after parsing attributes in process `syz.4.889'. [ 92.568641][ T36] audit: type=1400 audit(1757467270.465:417): avc: denied { read } for pid=3187 comm="syz.5.894" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.591316][ T36] audit: type=1400 audit(1757467270.465:418): avc: denied { open } for pid=3187 comm="syz.5.894" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.616427][ T61] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 92.624516][ T466] usb 3-1: USB disconnect, device number 22 [ 92.629480][ T3188] /dev/rnullb0: Can't open blockdev [ 92.643660][ T3191] /dev/rnullb0: Can't open blockdev [ 92.648198][ T3192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:629 [ 92.739072][ T489] rust_binder: 3195: removing orphan mapping 0:4232 [ 92.766527][ T61] usb 1-1: Using ep0 maxpacket: 8 [ 92.772390][ T36] audit: type=1400 audit(1757467270.665:419): avc: denied { ioctl } for pid=3185 comm="syz.0.893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.773728][ T61] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.806623][ T61] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 92.814759][ T61] usb 1-1: config 0 has no interface number 0 [ 92.820968][ T61] usb 1-1: config 0 interface 93 has no altsetting 0 [ 92.830720][ T61] usb 1-1: New USB device found, idVendor=3285, idProduct=06b3, bcdDevice=64.3f [ 92.839887][ T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.852859][ T61] usb 1-1: Product: syz [ 92.857172][ T61] usb 1-1: SerialNumber: syz [ 92.863143][ T61] usb 1-1: config 0 descriptor?? [ 92.870256][ T36] audit: type=1400 audit(1757467270.765:420): avc: denied { create } for pid=3200 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.872956][ T3201] netlink: 'syz.5.899': attribute type 5 has an invalid length. [ 92.890428][ T36] audit: type=1400 audit(1757467270.765:421): avc: denied { write } for pid=3200 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.890464][ T36] audit: type=1400 audit(1757467270.765:422): avc: denied { nlmsg_write } for pid=3200 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.939055][ T3201] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.899'. [ 92.978179][ T36] audit: type=1400 audit(1757467270.875:423): avc: denied { read write } for pid=3205 comm="syz.5.901" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.001900][ T466] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 93.001930][ T36] audit: type=1400 audit(1757467270.875:424): avc: denied { open } for pid=3205 comm="syz.5.901" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.088371][ T36] audit: type=1400 audit(1757467270.985:425): avc: denied { read } for pid=3185 comm="syz.0.893" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.089105][ T3186] __vm_enough_memory: pid: 3186, comm: syz.0.893, bytes: 18014402804453376 not enough memory for the allocation [ 93.132009][ T61] usb 1-1: USB disconnect, device number 26 [ 93.157602][ T466] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 93.166718][ T466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.179032][ T466] usb 3-1: config 0 descriptor?? [ 93.216565][ T489] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 93.366491][ T489] usb 6-1: Using ep0 maxpacket: 8 [ 93.372948][ T489] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 93.382535][ T489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.391948][ T489] usb 6-1: config 0 descriptor?? [ 93.600483][ T489] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 93.600846][ T466] usb 3-1: Cannot set MAC address [ 93.619266][ T466] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 93.633834][ T466] usb 3-1: USB disconnect, device number 23 [ 93.926423][ T466] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 93.989507][ T3233] input: syz1 as /devices/virtual/input/input17 [ 94.076448][ T466] usb 3-1: Using ep0 maxpacket: 32 [ 94.083391][ T466] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.091102][ T466] usb 3-1: can't read configurations, error -61 [ 94.123887][ T3239] rust_binder: Write failure EFAULT in pid:557 [ 94.126577][ T3239] netlink: 'syz.0.912': attribute type 6 has an invalid length. [ 94.223577][ T3249] netlink: 'syz.4.915': attribute type 4 has an invalid length. [ 94.231563][ T466] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 94.231609][ T3249] netlink: 'syz.4.915': attribute type 21 has an invalid length. [ 94.247588][ T3249] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.915'. [ 94.253492][ T3253] rust_binder: 3245 RLIMIT_NICE not set [ 94.270733][ T3256] netlink: 'syz.4.916': attribute type 6 has an invalid length. [ 94.284225][ T3256] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.386438][ T466] usb 3-1: Using ep0 maxpacket: 32 [ 94.393176][ T466] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.401374][ T466] usb 3-1: can't read configurations, error -61 [ 94.407989][ T466] usb usb3-port1: attempt power cycle [ 94.746446][ T466] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 94.766830][ T466] usb 3-1: Using ep0 maxpacket: 32 [ 94.774301][ T466] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.782092][ T466] usb 3-1: can't read configurations, error -61 [ 94.916476][ T466] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 94.936964][ T466] usb 3-1: Using ep0 maxpacket: 32 [ 94.944236][ T466] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.953403][ T466] usb 3-1: can't read configurations, error -61 [ 94.959880][ T466] usb usb3-port1: unable to enumerate USB device [ 95.062038][ T3277] 9pnet_fd: Insufficient options for proto=fd [ 95.426712][ T489] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 95.437356][ T489] asix 6-1:0.0: probe with driver asix failed with error -71 [ 95.445944][ T489] usb 6-1: USB disconnect, device number 10 [ 95.701758][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 95.701777][ T36] audit: type=1400 audit(1757467273.595:433): avc: denied { mounton } for pid=3285 comm="syz.2.926" path="/203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.838993][ T3296] netlink: 'syz.0.929': attribute type 10 has an invalid length. [ 95.847343][ T3296] netlink: 17 bytes leftover after parsing attributes in process `syz.0.929'. [ 95.877358][ T3298] __vm_enough_memory: pid: 3298, comm: syz.0.930, bytes: 18014402804453376 not enough memory for the allocation [ 95.949243][ T3302] binder: Unknown parameter 'smackˆOYDt' [ 95.982111][ T36] audit: type=1400 audit(1757467273.875:434): avc: denied { accept } for pid=3303 comm="syz.5.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.020826][ T3308] loop7: detected capacity change from 0 to 7 [ 96.096434][ T489] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 96.110270][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.119487][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.128116][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.137868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.145760][ T3308] loop7: unable to read partition table [ 96.152352][ T3308] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 96.168902][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.178174][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.186685][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.196769][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.205198][ T109] loop7: unable to read partition table [ 96.218474][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.228427][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.237017][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.246395][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.254454][ T109] loop7: unable to read partition table [ 96.263540][ T489] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.264730][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.274128][ T489] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.283201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.292397][ T1233] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 96.307797][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.316981][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.326551][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.336006][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.345723][ T489] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 96.355906][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.365117][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 96.373297][ T489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.381750][ T489] usb 3-1: SerialNumber: syz [ 96.390746][ T489] usb 3-1: 0:2 : does not exist [ 96.516416][ T1233] usb 1-1: Using ep0 maxpacket: 8 [ 96.523522][ T1233] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 21733, setting to 1024 [ 96.534915][ T1233] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 96.545665][ T1233] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.559220][ T1233] usb 1-1: config 1 interface 0 has no altsetting 0 [ 96.567475][ T1233] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.576733][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.585308][ T1233] usb 1-1: Product: syz [ 96.586442][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.589829][ T1233] usb 1-1: Manufacturer: syz [ 96.602360][ T1233] usb 1-1: SerialNumber: syz [ 96.608169][ T3306] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.615698][ T3306] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.746453][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 96.752842][ T10] usb 6-1: config 36 has an invalid interface number: 228 but max is 0 [ 96.761629][ T10] usb 6-1: config 36 has no interface number 0 [ 96.768004][ T10] usb 6-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 96.778166][ T10] usb 6-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 96.788390][ T10] usb 6-1: config 36 interface 228 has no altsetting 0 [ 96.797028][ T10] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 96.806649][ T10] usb 6-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 96.813722][ T489] usb 3-1: USB disconnect, device number 28 [ 96.814842][ T10] usb 6-1: Product: syz [ 96.814862][ T10] usb 6-1: Manufacturer: syz [ 96.831354][ T490] udevd[490]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.833266][ T10] usb 6-1: SerialNumber: syz [ 96.852539][ T1233] usb 1-1: USB disconnect, device number 27 [ 97.078296][ T10] usb 6-1: USB disconnect, device number 11 [ 97.082450][ T942] udevd[942]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:36.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.369036][ T3322] loop7: detected capacity change from 0 to 7 [ 97.377824][ T942] loop7: unable to read partition table [ 97.384808][ T3322] loop7: unable to read partition table [ 97.395429][ T3322] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 97.410664][ T36] audit: type=1400 audit(1757467275.305:435): avc: denied { setattr } for pid=3328 comm="syz.0.943" name="/" dev="incremental-fs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.442438][ T36] audit: type=1400 audit(1757467275.305:436): avc: denied { accept } for pid=3330 comm="syz.4.944" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.497215][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 97.545599][ T3354] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT [ 97.545642][ T3354] rust_binder: Error in use_page_slow: EFAULT [ 97.557090][ T3354] rust_binder: use_range failure EFAULT [ 97.563597][ T3354] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 97.569421][ T3354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 97.577588][ T3354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:649 [ 97.608249][ T3361] can0: slcan on ttyS3. [ 97.758718][ T36] audit: type=1326 audit(1757467275.655:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 97.774735][ T3388] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 97.791091][ T36] audit: type=1326 audit(1757467275.655:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 97.840011][ T3394] 9pnet_fd: Insufficient options for proto=fd [ 97.846690][ T3385] can0 (unregistered): slcan off ttyS3. [ 97.846747][ T36] audit: type=1326 audit(1757467275.655:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 97.898416][ T36] audit: type=1326 audit(1757467275.655:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 97.927488][ T36] audit: type=1326 audit(1757467275.655:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 97.951926][ T36] audit: type=1326 audit(1757467275.655:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.5.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 98.136543][ T489] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 98.286471][ T489] usb 3-1: Using ep0 maxpacket: 16 [ 98.292909][ T489] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 98.304942][ T489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 59, changing to 9 [ 98.316046][ T489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 58205, setting to 1024 [ 98.328829][ T489] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 98.336460][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 98.338442][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.354328][ T489] usb 3-1: Product: syz [ 98.358703][ T489] usb 3-1: Manufacturer: syz [ 98.363712][ T489] usb 3-1: SerialNumber: syz [ 98.369134][ T489] usb 3-1: config 0 descriptor?? [ 98.471812][ T3432] mmap: syz.0.972 (3432) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.484329][ T3432] loop2: detected capacity change from 0 to 7 [ 98.490516][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 98.492127][ T490] loop2: unable to read partition table [ 98.496924][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.510058][ T10] usb 6-1: config 179 has no interface number 0 [ 98.510881][ T3432] loop2: unable to read partition table [ 98.517189][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.522993][ T3432] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 98.534686][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.561177][ T10] usb 6-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.572771][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 98.586474][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.587247][ T3399] futex_wake_op: syz.2.965 tries to shift op by 144; fix this program [ 98.595857][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.611839][ T3400] can0: slcan on ttyS3. [ 98.617905][ T3422] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 98.656526][ T489] usb 3-1: USB disconnect, device number 29 [ 98.697917][ T3399] can0 (unregistered): slcan off ttyS3. [ 98.706414][ T109] loop2: unable to read partition table [ 98.759216][ T3445] syzkaller0: entered promiscuous mode [ 98.771876][ T3445] syzkaller0: entered allmulticast mode [ 98.840818][ T1233] usb 6-1: USB disconnect, device number 12 [ 98.879629][ T109] loop2: unable to read partition table [ 99.097731][ T109] loop2: unable to read partition table [ 99.124628][ T109] loop2: unable to read partition table [ 99.223586][ T109] loop2: unable to read partition table [ 99.316545][ T109] loop2: unable to read partition table [ 99.411080][ T3501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.985'. [ 99.420448][ T3501] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 99.444578][ T3496] rust_binder: Error while translating object. [ 99.444628][ T3496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.450947][ T3496] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 99.460712][ T3496] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:412 [ 99.489739][ T3512] binder: Unknown parameter '0xffffffffffffffff' [ 99.497712][ T467] rust_binder: 3495: removing orphan mapping 0:24 [ 99.531685][ T3512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.985'. [ 99.724460][ T3527] overlayfs: failed to clone upperpath [ 99.863378][ T3540] can0: slcan on ttyS3. [ 99.901363][ T3541] can0 (unregistered): slcan off ttyS3. [ 99.957243][ T3548] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1001'. [ 99.980972][ T3547] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1001'. [ 100.020600][ T3561] binder: Bad value for 'max' [ 100.033592][ T3564] overlayfs: conflicting options: userxattr,metacopy=on [ 100.049331][ T3564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.049827][ T3564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 100.066724][ T3564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:624 [ 100.148776][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 100.170202][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 100.177127][ T3574] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1006'. [ 100.180298][ T3580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 100.218049][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 100.352492][ T3601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 100.440269][ T3616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.495202][ T3616] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 100.617910][ T3624] rust_binder: Write failure EFAULT in pid:456 [ 100.951259][ T3641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 100.976477][ T500] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 101.126435][ T500] usb 6-1: Using ep0 maxpacket: 8 [ 101.136621][ T500] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 101.145424][ T500] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.155662][ T500] usb 6-1: config 0 has no interface number 0 [ 101.161989][ T500] usb 6-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 101.177366][ T500] usb 6-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 101.186569][ T500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.194853][ T500] usb 6-1: Product: syz [ 101.199866][ T500] usb 6-1: Manufacturer: syz [ 101.204592][ T500] usb 6-1: SerialNumber: syz [ 101.215089][ T500] usb 6-1: config 0 descriptor?? [ 101.221191][ T3657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.221226][ T3657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:705 [ 101.221338][ T500] usb 6-1: bad CDC descriptors [ 101.273473][ T3664] binder: Unknown parameter 'contextÀ' [ 101.422494][ T10] usb 6-1: USB disconnect, device number 13 [ 101.457585][ T3679] rust_binder: Error while translating object. [ 101.457623][ T3679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 101.464137][ T3679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:727 [ 101.500172][ T3684] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 101.519372][ T3685] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 101.756469][ T467] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 101.907630][ T467] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 101.918183][ T467] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.928092][ T467] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.940554][ T467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.951755][ T467] usb 3-1: SerialNumber: syz [ 102.160969][ T467] usb 3-1: 0:2 : does not exist [ 102.168308][ T467] usb 3-1: USB disconnect, device number 30 [ 102.177106][ T942] udevd[942]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.386452][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 102.536523][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 102.542943][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.552248][ T10] usb 6-1: config 179 has no interface number 0 [ 102.558917][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.570014][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 102.581392][ T10] usb 6-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.592633][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.605989][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 102.615122][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.624287][ T3702] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 102.673307][ T3704] syz.2.1048 uses obsolete (PF_INET,SOCK_PACKET) [ 102.747886][ T3710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.833806][ T10] usb 6-1: USB disconnect, device number 14 [ 103.353922][ T3713] netlink: 'syz.5.1050': attribute type 16 has an invalid length. [ 103.362874][ T3713] netlink: 'syz.5.1050': attribute type 4 has an invalid length. [ 103.372127][ T3713] /dev/rnullb0: Can't open blockdev [ 103.427139][ T3715] overlayfs: conflicting options: userxattr,metacopy=on [ 103.455897][ T3715] KVM: debugfs: duplicate directory 3715-5 [ 103.536690][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 103.536709][ T36] audit: type=1400 audit(1757467281.435:549): avc: denied { create } for pid=3717 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.856438][ T467] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 104.020108][ T467] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 104.028685][ T467] usb 3-1: config 16 has no interface number 0 [ 104.036671][ T467] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 104.045821][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.053905][ T467] usb 3-1: Product: syz [ 104.058292][ T467] usb 3-1: Manufacturer: syz [ 104.065344][ T467] usb 3-1: SerialNumber: syz [ 104.170729][ T3755] /dev/rnullb0: Can't open blockdev [ 104.214566][ T3759] fuse: Bad value for 'group_id' [ 104.219816][ T3759] fuse: Bad value for 'group_id' [ 104.298578][ T467] usb 3-1: USB disconnect, device number 31 [ 104.307059][ T942] udevd[942]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.431214][ T3761] 9pnet_fd: Insufficient options for proto=fd [ 104.814568][ T3763] __nla_validate_parse: 3 callbacks suppressed [ 104.814590][ T3763] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1068'. [ 104.855184][ T3765] pim6reg1: entered promiscuous mode [ 104.860608][ T3765] pim6reg1: entered allmulticast mode [ 105.041273][ T3790] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1077'. [ 105.174904][ T36] audit: type=1400 audit(1757467283.065:550): avc: denied { append } for pid=3803 comm="syz.2.1081" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.200049][ T3804] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.200077][ T3804] rust_binder: Read failure Err(EFAULT) in pid:764 [ 105.459384][ T3820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.467046][ T3820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:775 [ 105.504563][ T3822] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1088'. [ 105.617644][ T3837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.619899][ T3837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.653520][ T3838] rust_binder: Error while translating object. [ 105.665278][ T3838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.679994][ T3838] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 105.703592][ T3838] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:516 [ 105.729413][ T3849] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1099'. [ 105.739597][ T489] rust_binder: 3834: removing orphan mapping 0:24 [ 105.877078][ T3847] tmpfs: Unknown parameter 'nr_i' [ 106.056401][ T489] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 106.206445][ T489] usb 6-1: Using ep0 maxpacket: 8 [ 106.212808][ T489] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.221349][ T489] usb 6-1: config 179 has no interface number 0 [ 106.227770][ T489] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 106.239394][ T489] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 106.250914][ T489] usb 6-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.262076][ T489] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.276314][ T489] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 106.285637][ T489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.295269][ T3856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 106.504223][ T489] usb 6-1: USB disconnect, device number 15 [ 106.683450][ T36] audit: type=1400 audit(1757467284.575:551): avc: denied { write } for pid=3874 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 106.710350][ T3877] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1109'. [ 106.856619][ T3891] loop7: detected capacity change from 0 to 16384 [ 106.865752][ T3891] tipc: Cannot configure node identity twice [ 107.034387][ T3891] loop7: detected capacity change from 16384 to 0 [ 107.059241][ T3898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.059282][ T3898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529 [ 107.070744][ T36] audit: type=1400 audit(1757467284.965:552): avc: denied { append } for pid=3899 comm="syz.0.1119" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.108033][ T3905] netlink: 'syz.5.1120': attribute type 58 has an invalid length. [ 107.294851][ T36] audit: type=1400 audit(1757467285.185:553): avc: denied { getopt } for pid=3931 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.469764][ T3968] fuse: Bad value for 'user_id' [ 107.474665][ T3968] fuse: Bad value for 'user_id' [ 107.546297][ T3977] netlink: 'syz.2.1147': attribute type 4 has an invalid length. [ 107.554169][ T3977] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1147'. [ 108.070154][ T4016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1161'. [ 108.082907][ T4018] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1162'. [ 108.266881][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 108.513850][ T4035] rust_binder: 4035 RLIMIT_NICE not set [ 108.519654][ T31] rust_binder: 4034: removing orphan mapping 0:1168 [ 108.618156][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1169'. [ 108.628228][ T36] audit: type=1400 audit(1757467286.525:554): avc: denied { read } for pid=4038 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.711206][ T4046] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 109.114550][ T4072] netlink: 'syz.4.1182': attribute type 4 has an invalid length. [ 109.130900][ T4072] netlink: 'syz.4.1182': attribute type 4 has an invalid length. [ 109.140897][ T4074] binder: Bad value for 'stats' [ 109.406465][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 109.557592][ T31] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 109.565849][ T31] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.575816][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.584138][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.593333][ T31] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.601605][ T31] usb 6-1: Product: syz [ 109.605786][ T31] usb 6-1: Manufacturer: syz [ 109.610492][ T31] usb 6-1: SerialNumber: syz [ 109.616164][ T31] usb 6-1: config 0 descriptor?? [ 109.622044][ T31] hub 6-1:0.0: bad descriptor, ignoring hub [ 109.628003][ T31] hub 6-1:0.0: probe with driver hub failed with error -5 [ 109.635589][ T31] usb 6-1: selecting invalid altsetting 0 [ 109.821837][ T4077] rust_binder: Write failure EINVAL in pid:570 [ 109.926523][ T467] usb 6-1: USB disconnect, device number 17 [ 109.956917][ T4122] fuse: Unknown parameter 'fd#€”Æ}‰YO<¹(' [ 110.372625][ T4136] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1206'. [ 110.636448][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 110.787768][ T31] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.800110][ T31] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.812200][ T31] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.823980][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 110.833534][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.842820][ T4138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 110.996255][ T4149] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1211'. [ 111.082017][ T31] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 111.089971][ T31] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input19 [ 111.101087][ T31] usb 6-1: USB disconnect, device number 18 [ 111.101115][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 111.846467][ T31] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 111.976528][ T31] usb 6-1: device descriptor read/64, error -71 [ 112.216458][ T31] usb 6-1: device descriptor read/64, error -71 [ 112.358844][ T4218] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1233'. [ 112.400417][ T4223] 9pnet_fd: Insufficient options for proto=fd [ 112.456422][ T31] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 112.586451][ T31] usb 6-1: device descriptor read/64, error -71 [ 112.826475][ T31] usb 6-1: device descriptor read/64, error -71 [ 112.936545][ T31] usb usb6-port1: attempt power cycle [ 113.032058][ T4250] syzkaller0: entered allmulticast mode [ 113.046517][ T4251] syzkaller0: entered promiscuous mode [ 113.065974][ T4250] syzkaller0: left promiscuous mode [ 113.074541][ T4250] syzkaller0: left allmulticast mode [ 113.117318][ T4268] fuseblk: Bad value for 'user_id' [ 113.122519][ T4268] fuseblk: Bad value for 'user_id' [ 113.165946][ T4278] tmpfs: Unknown parameter 'ÿ00000000000000000000' [ 113.286410][ T31] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 113.327443][ T31] usb 6-1: device descriptor read/8, error -71 [ 113.467462][ T31] usb 6-1: device descriptor read/8, error -71 [ 113.708790][ T4290] fuse: Unknown parameter 'subj_user' [ 113.716408][ T31] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 113.747427][ T31] usb 6-1: device descriptor read/8, error -71 [ 113.887540][ T31] usb 6-1: device descriptor read/8, error -71 [ 113.996505][ T31] usb usb6-port1: unable to enumerate USB device [ 114.338719][ T36] audit: type=1400 audit(1757467292.235:555): avc: denied { audit_write } for pid=4319 comm="syz.4.1270" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.909388][ T4350] batadv_slave_1: entered promiscuous mode [ 114.919079][ T4349] batadv_slave_1: left promiscuous mode [ 115.440449][ T36] audit: type=1326 audit(1757467293.335:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.461911][ T4365] tipc: Enabling not permitted [ 115.464607][ T36] audit: type=1326 audit(1757467293.335:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.493799][ T4365] tipc: Enabling of bearer rejected, failed to enable media [ 115.494462][ T36] audit: type=1326 audit(1757467293.335:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.528014][ T36] audit: type=1326 audit(1757467293.335:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.542504][ T4372] binder: Binderfs stats mode cannot be changed during a remount [ 115.551544][ T36] audit: type=1326 audit(1757467293.335:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.585658][ T36] audit: type=1326 audit(1757467293.335:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.594122][ T4374] netlink: 'syz.5.1289': attribute type 2 has an invalid length. [ 115.609789][ T36] audit: type=1326 audit(1757467293.335:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.640952][ T36] audit: type=1326 audit(1757467293.335:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 115.664944][ T36] audit: type=1326 audit(1757467293.335:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f40ac58eba9 code=0x7ffc0000 [ 116.647917][ T4404] syz.2.1300: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 116.663695][ T4404] CPU: 1 UID: 0 PID: 4404 Comm: syz.2.1300 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 116.663728][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.663747][ T4404] Call Trace: [ 116.663755][ T4404] [ 116.663766][ T4404] __dump_stack+0x21/0x30 [ 116.663802][ T4404] dump_stack_lvl+0x10c/0x190 [ 116.663832][ T4404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.663861][ T4404] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 116.663897][ T4404] dump_stack+0x19/0x20 [ 116.663924][ T4404] warn_alloc+0x1bc/0x2a0 [ 116.663951][ T4404] ? stack_depot_save_flags+0x38/0x800 [ 116.663974][ T4404] ? __cfi_warn_alloc+0x10/0x10 [ 116.664008][ T4404] ? kasan_save_track+0x4f/0x80 [ 116.664030][ T4404] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 116.664062][ T4404] ? xskq_create+0x68/0x2a0 [ 116.664085][ T4404] ? xsk_init_queue+0xb6/0x120 [ 116.664105][ T4404] ? xsk_setsockopt+0x43f/0x6f0 [ 116.664125][ T4404] ? do_sock_setsockopt+0x26a/0x400 [ 116.664150][ T4404] ? __x64_sys_setsockopt+0x1b8/0x250 [ 116.664167][ T4404] ? x64_sys_call+0x2adc/0x2ee0 [ 116.664192][ T4404] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.664214][ T4404] __vmalloc_node_range_noprof+0x135/0x1420 [ 116.664242][ T4404] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 116.664266][ T4404] ? avc_has_perm+0x144/0x220 [ 116.664288][ T4404] ? kasan_save_alloc_info+0x40/0x50 [ 116.664311][ T4404] ? __kasan_kmalloc+0x96/0xb0 [ 116.664328][ T4404] vmalloc_user_noprof+0x77/0x90 [ 116.664350][ T4404] ? xskq_create+0xdb/0x2a0 [ 116.664366][ T4404] xskq_create+0xdb/0x2a0 [ 116.664383][ T4404] xsk_init_queue+0xb6/0x120 [ 116.664400][ T4404] xsk_setsockopt+0x43f/0x6f0 [ 116.664416][ T4404] ? __cfi_xsk_setsockopt+0x10/0x10 [ 116.664431][ T4404] ? do_futex+0x309/0x500 [ 116.664448][ T4404] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 116.664469][ T4404] ? security_socket_setsockopt+0x33/0xd0 [ 116.664490][ T4404] ? __cfi_xsk_setsockopt+0x10/0x10 [ 116.664506][ T4404] do_sock_setsockopt+0x26a/0x400 [ 116.664523][ T4404] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 116.664542][ T4404] __x64_sys_setsockopt+0x1b8/0x250 [ 116.664560][ T4404] x64_sys_call+0x2adc/0x2ee0 [ 116.664584][ T4404] do_syscall_64+0x58/0xf0 [ 116.664609][ T4404] ? clear_bhb_loop+0x50/0xa0 [ 116.664631][ T4404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.664651][ T4404] RIP: 0033:0x7fa83c18eba9 [ 116.664671][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.664686][ T4404] RSP: 002b:00007fa83cf31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.664703][ T4404] RAX: ffffffffffffffda RBX: 00007fa83c3d5fa0 RCX: 00007fa83c18eba9 [ 116.664715][ T4404] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 116.664725][ T4404] RBP: 00007fa83c211e19 R08: 0000000000000004 R09: 0000000000000000 [ 116.664736][ T4404] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.664747][ T4404] R13: 00007fa83c3d6038 R14: 00007fa83c3d5fa0 R15: 00007ffec47d5f68 [ 116.664762][ T4404] [ 116.664797][ T4404] Mem-Info: [ 116.856784][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 116.862146][ T4404] active_anon:10214 inactive_anon:3 isolated_anon:0 [ 116.862146][ T4404] active_file:14541 inactive_file:29212 isolated_file:0 [ 116.862146][ T4404] unevictable:0 dirty:42 writeback:0 [ 116.862146][ T4404] slab_reclaimable:6109 slab_unreclaimable:71398 [ 116.862146][ T4404] mapped:25718 shmem:2231 pagetables:1191 [ 116.862146][ T4404] sec_pagetables:0 bounce:0 [ 116.862146][ T4404] kernel_misc_reclaimable:0 [ 116.862146][ T4404] free:1494880 free_pcp:5759 free_cma:0 [ 117.059278][ T4404] Node 0 active_anon:49556kB inactive_anon:12kB active_file:58164kB inactive_file:116848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102972kB dirty:168kB writeback:3000kB shmem:8924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:5908kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no [ 117.066399][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 117.112731][ T4404] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5672kB free_cma:0kB [ 117.130504][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 117.155140][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.162152][ T4404] lowmem_reserve[]: 0 3921 3921 [ 117.170248][ T4404] Normal free:3010604kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48356kB inactive_anon:3012kB active_file:58164kB inactive_file:116848kB unevictable:0kB writepending:168kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:17092kB local_pcp:2732kB free_cma:0kB [ 117.202613][ T4404] lowmem_reserve[]: 0 0 0 [ 117.208161][ T4404] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 117.209799][ T4409] input: syz1 as /devices/virtual/input/input20 [ 117.223870][ T4404] Normal: 6*4kB (ME) 56*8kB (UME) 1*16kB (E) 5*32kB (UE) 189*64kB (UME) 31*128kB (UME) 17*256kB (ME) 20*512kB (UME) 9*1024kB (UME) 10*2048kB (UME) 720*4096kB (UM) = 3010120kB [ 117.234601][ T10] usb 6-1: config 0 descriptor?? [ 117.248106][ T4404] 46239 total pagecache pages [ 117.262192][ T4404] 771 pages in swap cache [ 117.288607][ T4404] Free swap = 121380kB [ 117.290787][ T4411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.292863][ T4404] Total swap = 124996kB [ 117.304038][ T4404] 2097051 pages RAM [ 117.307969][ T4404] 0 pages HighMem/MovableOnly [ 117.312784][ T4404] 351533 pages reserved [ 117.317128][ T4404] 0 pages cma reserved [ 117.324410][ T4413] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1303'. [ 117.324935][ T4404] Memory allocations: [ 117.337870][ T4404] 0 B 0 init/main.c:1370 func:do_initcalls [ 117.337881][ T4413] gretap0: entered promiscuous mode [ 117.351287][ T4404] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 117.359945][ T4404] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 117.373166][ T4404] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 117.381210][ T4404] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 117.389342][ T4404] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 117.399599][ T4404] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 117.407809][ T4404] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 117.415840][ T4404] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 117.424107][ T4404] 0 B 0 init/initramfs.c:101 func:find_link [ 117.481802][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 117.570803][ T4437] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1312'. [ 117.599865][ T4439] KVM: debugfs: duplicate directory 4439-5 [ 118.146770][ T4453] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 118.155046][ T4453] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 118.479178][ T4469] rust_binder: Error while translating object. [ 118.479205][ T4469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 118.485534][ T4469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:711 [ 118.538042][ T4477] kvm: user requested TSC rate below hardware speed [ 118.578896][ T4481] 9pnet_fd: Insufficient options for proto=fd [ 119.138049][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 119.148312][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 119.158874][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 119.169075][ T10] usb 6-1: USB disconnect, device number 23 [ 119.896511][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 120.046403][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 120.052823][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.063856][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.073676][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.082902][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.092985][ T10] usb 6-1: config 0 descriptor?? [ 120.099503][ T10] hub 6-1:0.0: USB hub found [ 120.299215][ T10] hub 6-1:0.0: 1 port detected [ 120.588297][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 120.588332][ T36] audit: type=1400 audit(1757467298.485:580): avc: denied { nlmsg_write } for pid=4548 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 120.589458][ T4549] veth1_to_bridge: mtu less than device minimum [ 120.901141][ T10] hub 6-1:0.0: activate --> -90 [ 121.161286][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 121.168618][ T467] usb 6-1: USB disconnect, device number 24 [ 121.669845][ T10] rust_binder: 4521: removing orphan mapping 0:4208 [ 121.739326][ T4562] /dev/rnullb0: Can't open blockdev [ 122.504457][ T4580] 9pnet_fd: Insufficient options for proto=fd [ 122.592623][ T4595] fuse: Unknown parameter 'grou÷ŒéãJ+"Í_id' [ 122.653358][ T4601] overlay: ./file0 is not a directory [ 122.902929][ T36] audit: type=1400 audit(1757467300.795:581): avc: denied { create } for pid=4606 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.945719][ T4608] Invalid ELF header magic: != ELF [ 122.946431][ T36] audit: type=1400 audit(1757467300.835:582): avc: denied { module_load } for pid=4606 comm="syz.2.1373" path="/bus" dev="ramfs" ino=28627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 123.591750][ T4656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=4656 comm=syz.4.1386 [ 123.604895][ T4656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4656 comm=syz.4.1386 [ 123.700708][ T36] audit: type=1400 audit(1757467301.595:583): avc: denied { getopt } for pid=4628 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.279758][ T4685] netlink: 'syz.5.1396': attribute type 11 has an invalid length. [ 124.287839][ T4686] netlink: 'syz.5.1396': attribute type 11 has an invalid length. [ 124.717740][ T4700] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1400'. [ 125.166972][ T36] audit: type=1400 audit(1757467303.065:584): avc: denied { bind } for pid=4706 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.187384][ T36] audit: type=1400 audit(1757467303.065:585): avc: denied { name_bind } for pid=4706 comm="syz.4.1403" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 125.208808][ T36] audit: type=1400 audit(1757467303.065:586): avc: denied { node_bind } for pid=4706 comm="syz.4.1403" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 125.223949][ T4709] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1404'. [ 125.269741][ T4718] netlink: 'syz.2.1406': attribute type 11 has an invalid length. [ 125.293612][ T4722] futex_wake_op: syz.2.1408 tries to shift op by -1; fix this program [ 125.319545][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 126.220682][ T4767] netlink: 'syz.4.1426': attribute type 3 has an invalid length. [ 126.228937][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 126.256031][ T36] audit: type=1400 audit(1757467304.145:587): avc: denied { execute_no_trans } for pid=4770 comm="syz.4.1428" path="/474/file0" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.297512][ T36] audit: type=1400 audit(1757467304.195:588): avc: denied { execute } for pid=4777 comm="syz.5.1431" name="file0" dev="ramfs" ino=29448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 126.315003][ T4778] netlink: 'syz.5.1431': attribute type 27 has an invalid length. [ 126.320655][ T36] audit: type=1400 audit(1757467304.195:589): avc: denied { execute_no_trans } for pid=4777 comm="syz.5.1431" path="/file0" dev="ramfs" ino=29448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 126.354238][ T4778] gretap0: left promiscuous mode [ 126.370647][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.378171][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.386327][ T4791] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1431'. [ 126.436320][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1437'. [ 126.612491][ T4812] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 126.622220][ T4812] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 126.717194][ T4817] netlink: 'syz.2.1446': attribute type 27 has an invalid length. [ 126.800105][ T4838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=4838 comm=syz.2.1452 [ 127.036622][ T4860] fuse: Bad value for 'fd' [ 127.053358][ T4862] 9pnet_fd: Insufficient options for proto=fd [ 127.071172][ T4864] overlayfs: failed to clone upperpath [ 127.154002][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1465'. [ 127.262069][ T36] audit: type=1400 audit(1757467305.155:590): avc: denied { name_bind } for pid=4896 comm="syz.5.1474" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 127.463459][ T4923] raw_sendmsg: syz.4.1482 forgot to set AF_INET. Fix it! [ 127.471574][ T4923] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 127.480880][ T4923] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 127.788312][ T4946] Invalid ELF header magic: != ELF [ 128.180495][ T4970] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1497'. [ 128.414684][ T4985] overlayfs: missing 'workdir' [ 128.551600][ T4993] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1506'. [ 128.560787][ T4993] gretap0: entered promiscuous mode [ 128.998067][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'. [ 129.052765][ T36] audit: type=1400 audit(1757467306.945:591): avc: denied { create } for pid=5034 comm="syz.5.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 130.105387][ T5059] __nla_validate_parse: 1 callbacks suppressed [ 130.105403][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 130.123372][ T36] audit: type=1400 audit(1757467308.015:592): avc: denied { execute } for pid=5058 comm="syz.4.1525" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.344437][ T5061] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1526'. [ 130.799501][ T5067] 9pnet_fd: Insufficient options for proto=fd [ 131.328297][ T5074] /dev/loop0: Can't lookup blockdev [ 131.896663][ T5085] Invalid ELF header magic: != ELF [ 131.963011][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 132.227349][ T5090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5090 comm=syz.5.1538 [ 132.371903][ T36] audit: type=1400 audit(1757467310.265:593): avc: denied { relabelfrom } for pid=5093 comm="syz.5.1540" name="XDP" dev="sockfs" ino=30313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.395307][ T5096] SELinux: Context system_u:object_r:var_t:s0 is not valid (left unmapped). [ 132.406672][ T36] audit: type=1400 audit(1757467310.295:594): avc: denied { relabelto } for pid=5093 comm="syz.5.1540" name="XDP" dev="sockfs" ino=30313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:var_t:s0" [ 133.307062][ T5171] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1566'. [ 133.317951][ T5173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33303 sclass=netlink_audit_socket pid=5173 comm=syz.4.1567 [ 133.328033][ T5174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33303 sclass=netlink_audit_socket pid=5174 comm=syz.4.1567 [ 133.449860][ T36] audit: type=1400 audit(1757467311.336:595): avc: denied { write } for pid=5199 comm="syz.0.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.471738][ T36] audit: type=1400 audit(1757467311.336:596): avc: denied { ioctl } for pid=5199 comm="syz.0.1577" path="socket:[30426]" dev="sockfs" ino=30426 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.476034][ T5204] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1578'. [ 133.498788][ T36] audit: type=1400 audit(1757467311.336:597): avc: denied { sys_module } for pid=5199 comm="syz.0.1577" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.630698][ T5208] __vm_enough_memory: pid: 5208, comm: syz.0.1580, bytes: 18295873486192640 not enough memory for the allocation [ 133.632308][ T36] audit: type=1400 audit(1757467311.526:598): avc: denied { create } for pid=5205 comm="syz.4.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 133.973892][ T5233] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1589'. [ 134.067417][ T5238] overlayfs: failed to clone upperpath [ 134.125385][ T5248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=5248 comm=syz.2.1595 [ 135.254901][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 135.550760][ T5301] 9pnet_fd: Insufficient options for proto=fd [ 136.127565][ T5313] netlink: 'syz.4.1619': attribute type 12 has an invalid length. [ 136.414561][ T5361] 9pnet_fd: Insufficient options for proto=fd [ 136.534266][ T36] audit: type=1400 audit(1757467314.416:599): avc: denied { create } for pid=5376 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 136.576489][ T36] audit: type=1400 audit(1757467314.446:600): avc: denied { sys_admin } for pid=5376 comm="syz.2.1640" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 136.616396][ T36] audit: type=1400 audit(1757467314.446:601): avc: denied { associate } for pid=5380 comm="syz.2.1640" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 136.801342][ T5389] SELinux: failed to load policy [ 137.230918][ T5417] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1653'. [ 137.346082][ T5423] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 137.422230][ T5423] overlayfs: failed to clone upperpath [ 137.480187][ T5424] netlink: 1351 bytes leftover after parsing attributes in process `syz.4.1655'. [ 138.791697][ T5511] 9pnet_fd: Insufficient options for proto=fd [ 138.810094][ T5513] bridge0: port 3(veth1_macvtap) entered blocking state [ 138.817398][ T5513] bridge0: port 3(veth1_macvtap) entered disabled state [ 138.826195][ T5513] veth1_macvtap: entered allmulticast mode [ 138.832521][ T5513] veth1_macvtap: left allmulticast mode [ 138.838288][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 138.856927][ T36] audit: type=1400 audit(1757467316.746:602): avc: denied { module_load } for pid=5498 comm="syz.2.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 138.856943][ T5508] Invalid ELF header type: 2 != 1 [ 138.976023][ T36] audit: type=1400 audit(1757467316.856:603): avc: denied { accept } for pid=5520 comm="syz.5.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.977815][ T5521] fuse: Bad value for 'fd' [ 138.996650][ T36] audit: type=1400 audit(1757467316.866:604): avc: denied { bind } for pid=5520 comm="syz.5.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.620134][ T36] audit: type=1400 audit(1757467317.506:605): avc: denied { mounton } for pid=5540 comm="syz.2.1697" path="/464/file0" dev="tmpfs" ino=2503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.620164][ T5542] fuse: Unknown parameter 'gј¾ ' [ 139.672551][ T5548] netlink: 'syz.2.1699': attribute type 1 has an invalid length. [ 139.784279][ T36] audit: type=1326 audit(1757467317.666:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.2.1699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83c18eba9 code=0x0 [ 139.798768][ T5563] 9pnet_fd: Insufficient options for proto=fd [ 139.807909][ T5562] 9pnet_fd: Insufficient options for proto=fd [ 142.208646][ T5606] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 142.926150][ T5631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=5631 comm=syz.2.1728 [ 143.074040][ T5645] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1731'. [ 143.182347][ T5654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1736'. [ 143.209183][ T36] audit: type=1400 audit(1757467321.096:607): avc: denied { read } for pid=5657 comm="syz.5.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.230543][ T5658] tipc: Enabling of bearer rejected, media not registered [ 143.237751][ T36] audit: type=1400 audit(1757467321.096:608): avc: denied { read write } for pid=5653 comm="syz.0.1736" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.268396][ T36] audit: type=1400 audit(1757467321.096:609): avc: denied { open } for pid=5653 comm="syz.0.1736" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.313553][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'. [ 143.330496][ T5679] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 144.323943][ T5697] fuse: Bad value for 'fd' [ 144.387785][ T36] audit: type=1400 audit(1757467322.276:610): avc: denied { write } for pid=5709 comm="syz.2.1754" name="file0" dev="tmpfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.410956][ T36] audit: type=1400 audit(1757467322.276:611): avc: denied { open } for pid=5709 comm="syz.2.1754" path="/480/file0" dev="tmpfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.433955][ T36] audit: type=1400 audit(1757467322.276:612): avc: denied { lock } for pid=5709 comm="syz.2.1754" path="/480/file0" dev="tmpfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.340899][ T36] audit: type=1400 audit(1757467323.226:613): avc: denied { mounton } for pid=5753 comm="syz.2.1767" path="/bus" dev="ramfs" ino=33035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 145.451266][ T5772] fuseblk: Bad value for 'user_id' [ 145.456706][ T5772] fuseblk: Bad value for 'user_id' [ 145.525627][ T5792] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1779'. [ 145.612848][ T5804] 9pnet_fd: Insufficient options for proto=fd [ 146.667044][ T36] audit: type=1400 audit(1757467324.556:614): avc: denied { relabelfrom } for pid=5850 comm="syz.2.1801" name="" dev="pipefs" ino=33155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 146.693043][ T36] audit: type=1401 audit(1757467324.556:615): op=setxattr invalid_context="" [ 148.666373][ T36] audit: type=1400 audit(1757467326.546:616): avc: denied { setattr } for pid=5914 comm="syz.4.1821" name="" dev="pipefs" ino=33223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 148.666448][ T5916] 9pnet_fd: Insufficient options for proto=fd [ 149.204689][ T5933] bpf: Bad value for 'mode' [ 149.541905][ T36] audit: type=1326 audit(1757467327.426:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.4.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ac58eba9 code=0x7fc00000 [ 149.572911][ T36] audit: type=1400 audit(1757467327.456:618): avc: denied { getopt } for pid=5944 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.573077][ T5945] tmpfs: Invalid uid '0x00000000ffffffff' [ 150.160188][ T5951] overlayfs: failed to clone upperpath [ 150.739258][ T5984] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1846'. [ 151.030488][ T36] audit: type=1400 audit(1757467328.916:619): avc: denied { execheap } for pid=5989 comm="syz.4.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 151.083128][ T6000] /dev/loop0: Can't lookup blockdev [ 151.084592][ T6001] netlink: 'syz.2.1852': attribute type 7 has an invalid length. [ 151.098544][ T6001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6001 comm=syz.2.1852 [ 151.124790][ T6005] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1854'. [ 151.199173][ T6025] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 151.277072][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1858'. [ 151.286239][ T6038] netlink: 'syz.5.1858': attribute type 3 has an invalid length. [ 151.433254][ T6041] rust_binder: 6040 RLIMIT_NICE not set [ 151.436844][ T6040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.442922][ T6040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:835 [ 151.709464][ T489] rust_binder: 0: removing orphan mapping 0:4248 [ 151.775243][ T6057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1870'. [ 151.797210][ T6057] /dev/loop0: Can't lookup blockdev [ 152.006239][ T6088] rust_binder: Error while translating object. [ 152.006274][ T6088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.012598][ T6088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 152.023027][ T6088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 152.988406][ T6128] netlink: 'syz.4.1895': attribute type 4 has an invalid length. [ 153.187885][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.194973][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.203407][ T6135] bridge_slave_0: entered allmulticast mode [ 153.207648][ T6148] overlay: Unknown parameter '/' [ 153.210220][ T6135] bridge_slave_0: entered promiscuous mode [ 153.221125][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.228424][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.235862][ T6135] bridge_slave_1: entered allmulticast mode [ 153.243302][ T6135] bridge_slave_1: entered promiscuous mode [ 153.258268][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1904'. [ 153.289006][ T6154] tipc: Enabling of bearer rejected, failed to enable media [ 153.319305][ T6156] veth0_virt_wifi: entered allmulticast mode [ 153.329801][ T6155] veth0_virt_wifi: left allmulticast mode [ 153.350738][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.357854][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.365261][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.372522][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.421045][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.429045][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.439898][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.447097][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.456116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.463237][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.471404][ T6178] netlink: 'syz.5.1911': attribute type 4 has an invalid length. [ 153.481901][ T6178] netlink: 'syz.5.1911': attribute type 17 has an invalid length. [ 153.517195][ T6135] veth0_vlan: entered promiscuous mode [ 153.528657][ T6135] veth1_macvtap: entered promiscuous mode [ 153.647770][ T6198] netlink: 'syz.2.1919': attribute type 11 has an invalid length. [ 153.656882][ T6198] overlayfs: failed to clone upperpath [ 153.663933][ T6198] overlayfs: missing 'lowerdir' [ 153.666088][ T6199] overlayfs: missing 'lowerdir' [ 153.741813][ T6202] netlink: 'syz.2.1920': attribute type 4 has an invalid length. [ 153.801772][ T6205] 9pnet_fd: Insufficient options for proto=fd [ 154.025607][ T6210] overlayfs: failed to clone upperpath [ 154.128426][ T36] audit: type=1400 audit(1757467332.006:620): avc: denied { ioctl } for pid=6217 comm="syz.4.1925" path="socket:[34834]" dev="sockfs" ino=34834 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.154895][ T36] audit: type=1400 audit(1757467332.016:621): avc: denied { connect } for pid=6217 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.227276][ T6236] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1931'. [ 154.250946][ T36] audit: type=1400 audit(1757467332.136:622): avc: denied { mounton } for pid=6237 comm="syz.5.1932" path="/file0" dev="ramfs" ino=34230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 154.383955][ T6245] overlayfs: failed to resolve './file2': -2 [ 154.412057][ T36] audit: type=1400 audit(1757467332.296:623): avc: denied { setattr } for pid=6246 comm="syz.4.1936" name="PACKET" dev="sockfs" ino=35013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.469110][ T36] audit: type=1400 audit(1757467332.356:624): avc: denied { map } for pid=6251 comm="syz.4.1938" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.495778][ T36] audit: type=1400 audit(1757467332.386:625): avc: denied { ioctl } for pid=6251 comm="syz.4.1938" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.865198][ T6291] netlink: 'syz.2.1951': attribute type 4 has an invalid length. [ 154.873270][ T6292] netlink: 'syz.2.1951': attribute type 4 has an invalid length. [ 154.883515][ T6291] netlink: 'syz.2.1951': attribute type 4 has an invalid length. [ 154.947368][ T6303] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1955'. [ 154.952380][ T6307] overlayfs: failed to clone upperpath [ 154.964193][ T6307] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 155.602596][ T6336] binder: Unknown parameter 'fowner<00000000000000000000' [ 155.730875][ T36] audit: type=1400 audit(1757467333.616:626): avc: denied { setattr } for pid=6349 comm="syz.4.1973" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.817409][ T6366] can0: slcan on ttyS3. [ 155.889212][ T6366] can0 (unregistered): slcan off ttyS3. [ 155.922037][ T6375] random: crng reseeded on system resumption [ 155.928278][ T36] audit: type=1400 audit(1757467333.806:627): avc: denied { write } for pid=6374 comm="syz.4.1979" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 155.995398][ T36] audit: type=1400 audit(1757467333.806:628): avc: denied { open } for pid=6374 comm="syz.4.1979" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.084940][ T6375] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 156.100340][ T6375] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 156.200655][ T6411] fuse: Bad value for 'user_id' [ 156.205610][ T6411] fuse: Bad value for 'user_id' [ 156.360460][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1983'. [ 157.019581][ T36] audit: type=1326 audit(1757467334.906:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.5.2007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a2c78eba9 code=0x0 [ 157.108350][ T6474] rust_binder: Error while translating object. [ 157.108386][ T6474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.115063][ T6474] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 157.124745][ T6474] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:63 [ 157.142292][ T467] rust_binder: 6473: removing orphan mapping 0:24 [ 157.396459][ T467] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.546437][ T467] usb 5-1: Using ep0 maxpacket: 8 [ 157.552687][ T467] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.561119][ T467] usb 5-1: config 179 has no interface number 0 [ 157.567555][ T467] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.578643][ T467] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.590089][ T467] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.601516][ T467] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 157.612950][ T467] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.626306][ T467] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.635472][ T467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.644822][ T6478] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.843584][ T6492] 9pnet_fd: Insufficient options for proto=fd [ 157.867605][ T333] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 157.977644][ T6520] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 158.083889][ T6533] tmpfs: Unknown parameter '18446744073709551615' [ 158.277102][ T467] usb 5-1: USB disconnect, device number 2 [ 158.277159][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.277193][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.306529][ T467] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 158.421881][ T36] audit: type=1400 audit(1757467336.306:630): avc: denied { map } for pid=6563 comm="syz.2.2037" path="socket:[35505]" dev="sockfs" ino=35505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.943211][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 158.952566][ T6589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2047'. [ 158.961817][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 159.012280][ T6589] rust_binder: Write failure EFAULT in pid:74 [ 159.012772][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 159.027918][ T6589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2047'. [ 159.037106][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 159.262667][ T6610] rust_binder: Write failure EFAULT in pid:863 [ 159.275474][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.289583][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.298692][ T6606] bridge_slave_0: entered allmulticast mode [ 159.305088][ T6606] bridge_slave_0: entered promiscuous mode [ 159.311776][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.318962][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.326066][ T6606] bridge_slave_1: entered allmulticast mode [ 159.332920][ T6606] bridge_slave_1: entered promiscuous mode [ 159.411600][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.418894][ T6606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.426273][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.433358][ T6606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.475134][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.483759][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.501317][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.508621][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.520774][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.527866][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.574060][ T6606] veth0_vlan: entered promiscuous mode [ 159.591851][ T6606] veth1_macvtap: entered promiscuous mode [ 159.732535][ T36] audit: type=1326 audit(1757467337.616:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.2074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x0 [ 159.896468][ T333] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 160.047640][ T333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.057939][ T333] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 160.067105][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.075806][ T333] usb 3-1: config 0 descriptor?? [ 160.266415][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.283549][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.292484][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.302753][ T6669] rust_binder: Write failure EFAULT in pid:2 [ 160.306648][ T333] usb 3-1: USB disconnect, device number 32 [ 160.417787][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 160.430773][ T31] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 160.439965][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.448245][ T31] usb 5-1: Product: syz [ 160.452473][ T31] usb 5-1: Manufacturer: syz [ 160.457217][ T31] usb 5-1: SerialNumber: syz [ 160.463444][ T31] usb 5-1: config 0 descriptor?? [ 160.469838][ T31] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 160.476943][ T31] usb 5-1: No valid video chain found. [ 160.576109][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2080'. [ 160.675915][ T6714] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 160.826830][ T333] usb 5-1: USB disconnect, device number 3 [ 161.076513][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 161.227698][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.238706][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.248598][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.261921][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.271125][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.280022][ T31] usb 3-1: config 0 descriptor?? [ 161.360275][ T6739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 161.463182][ T6743] validate_nla: 4 callbacks suppressed [ 161.463207][ T6743] netlink: 'syz.4.2096': attribute type 4 has an invalid length. [ 161.490839][ T36] audit: type=1400 audit(1757467339.376:632): avc: denied { write } for pid=6741 comm="syz.4.2096" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 161.688981][ T31] plantronics 0003:047F:FFFF.0006: bogus close delimiter [ 161.696086][ T31] plantronics 0003:047F:FFFF.0006: item 0 0 2 10 parsing failed [ 161.705116][ T31] plantronics 0003:047F:FFFF.0006: parse failed [ 161.711528][ T31] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 161.726436][ T489] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.876421][ T489] usb 5-1: Using ep0 maxpacket: 8 [ 161.882841][ T489] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 161.892628][ T36] audit: type=1400 audit(1757467339.786:633): avc: denied { map } for pid=6726 comm="syz.2.2090" path="socket:[36293]" dev="sockfs" ino=36293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 161.894077][ T489] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 32 [ 161.928096][ T489] usb 5-1: config 1 interface 0 has no altsetting 0 [ 161.932372][ T333] usb 3-1: USB disconnect, device number 33 [ 161.939452][ T489] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.950098][ T489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.958146][ T489] usb 5-1: Product: syz [ 161.962354][ T489] usb 5-1: Manufacturer: ꬼ衩鬗ïâ¥ë¹”솓쓕乹疠얻쯄悱￰葩çµéŽ¿å¾šÏ…ë­¿ç”ƒæ‚¹á·©å·•ï¯œ [ 161.974269][ T489] usb 5-1: SerialNumber: syz [ 161.980059][ T6743] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 162.417575][ T489] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 162.428328][ T489] usb 5-1: USB disconnect, device number 4 [ 162.459584][ T6753] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 162.470133][ T36] audit: type=1400 audit(1757467340.356:634): avc: denied { relabelto } for pid=6750 comm="syz.2.2100" name="file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:pam_var_run_t:s0" [ 162.496765][ T36] audit: type=1400 audit(1757467340.356:635): avc: denied { associate } for pid=6750 comm="syz.2.2100" name="file0" dev="tmpfs" ino=35 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_var_run_t:s0" [ 162.846441][ T489] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 162.997485][ T489] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 163.005645][ T489] usb 3-1: config 0 has no interface number 0 [ 163.011823][ T489] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.022936][ T489] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.032740][ T489] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 163.045760][ T489] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 163.055218][ T489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.065211][ T489] usb 3-1: config 0 descriptor?? [ 163.090426][ T6765] incfs: Options parsing error. -22 [ 163.095838][ T6765] incfs: mount failed -22 [ 163.474091][ T489] uclogic 0003:28BD:0934.0007: Interface probing failed: -22 [ 163.481647][ T489] uclogic 0003:28BD:0934.0007: interface is invalid, ignoring [ 163.677296][ T333] usb 3-1: USB disconnect, device number 34 [ 164.716599][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.867547][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.877675][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.890736][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 164.900056][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.909020][ T31] usb 5-1: config 0 descriptor?? [ 165.318223][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 165.325480][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 165.332797][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 165.340144][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 165.347431][ T31] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 165.356505][ T31] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 165.387517][ T6805] ªªªªªª<_¥m]€LÏÂ: renamed from lo (while UP) [ 165.672257][ T6814] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 166.027795][ T31] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 166.036866][ T31] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 166.044749][ T31] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 166.047619][ T6827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.056195][ T31] usb 5-1: USB disconnect, device number 5 [ 166.237559][ T6834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=6834 comm=syz.5.2131 [ 166.250862][ T6834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=6834 comm=syz.5.2131 [ 166.263638][ T36] audit: type=1400 audit(1757467344.136:636): avc: denied { execute } for pid=6836 comm="syz.4.2132" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.381695][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2140'. [ 166.456508][ T6866] overlayfs: failed to clone upperpath [ 166.719787][ T36] audit: type=1326 audit(1757467344.606:637): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.2146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f775af8eba9 code=0x0 [ 166.926441][ T333] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 167.077555][ T333] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.087830][ T333] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.097714][ T333] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 167.107059][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.115096][ T333] usb 3-1: SerialNumber: syz [ 167.121863][ T333] usb 3-1: 0:2 : does not exist [ 167.325493][ T333] usb 3-1: USB disconnect, device number 35 [ 167.637369][ T6895] rust_binder: 158: no such ref 4294967293 [ 167.643372][ T6895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 167.857681][ T36] audit: type=1400 audit(1757467345.746:638): avc: denied { map } for pid=6900 comm="syz.2.2153" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.004725][ T6919] tipc: Enabled bearer , priority 0 [ 168.286398][ T31] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 168.437555][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.447761][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.457505][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 168.466676][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 168.474764][ T31] usb 3-1: SerialNumber: syz [ 168.487548][ T31] usb 3-1: 0:2 : does not exist [ 168.506205][ T6934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 168.506942][ T6934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.549916][ T36] audit: type=1400 audit(1757467346.436:639): avc: denied { setattr } for pid=6942 comm="syz.5.2164" name="UDP-Lite" dev="sockfs" ino=37402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.584555][ T6945] can0: slcan on ttyS3. [ 168.692829][ T31] usb 3-1: USB disconnect, device number 36 [ 168.716258][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.836430][ T333] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.986445][ T333] usb 5-1: Using ep0 maxpacket: 16 [ 168.993488][ T333] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 169.002368][ T333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.012542][ T333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.023217][ T333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.032431][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.040493][ T333] usb 5-1: Product: syz [ 169.044682][ T333] usb 5-1: Manufacturer: syz [ 169.049370][ T333] usb 5-1: SerialNumber: syz [ 169.071352][ T6975] netlink: 'syz.5.2169': attribute type 6 has an invalid length. [ 169.091372][ T36] audit: type=1400 audit(1757467346.976:640): avc: denied { create } for pid=6979 comm="syz.5.2170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 169.096928][ T6980] ./file0: Can't lookup blockdev [ 169.111871][ T36] audit: type=1400 audit(1757467346.986:641): avc: denied { mounton } for pid=6979 comm="syz.5.2170" path="/file0" dev="ramfs" ino=37429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 169.139182][ T31] tipc: Node number set to 2346226829 [ 169.226806][ T6997] fuse: Bad value for 'rootmode' [ 169.233138][ T36] audit: type=1400 audit(1757467347.116:642): avc: denied { nlmsg_read } for pid=6996 comm=C007B0FDA31C0A171BFA8120DD21D9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 169.405309][ T7015] pim6reg1: entered promiscuous mode [ 169.410815][ T7015] pim6reg1: entered allmulticast mode [ 169.460536][ T333] usb 5-1: 0:2 : does not exist [ 169.469134][ T333] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 169.490959][ T333] usb 5-1: USB disconnect, device number 6 [ 169.503323][ T7017] udevd[7017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.520100][ T6944] can0 (unregistered): slcan off ttyS3. [ 169.716448][ T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 169.867590][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.877569][ T31] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 169.886649][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.895295][ T31] usb 3-1: config 0 descriptor?? [ 170.035899][ T36] audit: type=1326 audit(1757467347.916:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.5.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2c78eba9 code=0x7fc00000 [ 170.163986][ T7054] virtiofs: Bad value for 'dax' [ 170.188627][ T7056] overlayfs: failed to clone upperpath [ 170.195274][ T7056] 9pnet_fd: Insufficient options for proto=fd [ 170.303391][ T31] pantherlord 0003:0810:0001.0009: hidraw0: USB HID v0.03 Device [HID 0810:0001] on usb-dummy_hcd.2-1/input0 [ 170.315529][ T31] pantherlord 0003:0810:0001.0009: no output reports found [ 170.336415][ T333] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 170.487668][ T333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.498190][ T333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.508254][ T333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 170.517921][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.526150][ T333] usb 5-1: SerialNumber: syz [ 170.533925][ T333] usb 5-1: 0:2 : does not exist [ 170.558882][ T31] usb 3-1: USB disconnect, device number 37 [ 170.739593][ T333] usb 5-1: USB disconnect, device number 7 [ 170.755177][ T7067] netlink: 'syz.5.2189': attribute type 4 has an invalid length. [ 170.763057][ T7067] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2189'. [ 170.812368][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 170.821461][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 170.830784][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2192'. [ 170.873793][ T7084] overlayfs: failed to clone upperpath [ 170.880787][ T36] audit: type=1400 audit(1757467348.766:644): avc: denied { bind } for pid=7083 comm="syz.5.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.506430][ T333] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.557089][ T7101] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2201'. [ 171.608930][ T7107] 9pnet_fd: Insufficient options for proto=fd [ 171.638083][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2206'. [ 171.646454][ T333] usb 5-1: device descriptor read/64, error -71 [ 171.753308][ T7121] new mount options do not match the existing superblock, will be ignored [ 171.763835][ T7121] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 171.886389][ T333] usb 5-1: device descriptor read/64, error -71 [ 171.978525][ T7129] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.986704][ T7129] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 171.996425][ T7129] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.005139][ T7129] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 172.051671][ T7135] rust_binder: Error while translating object. [ 172.051727][ T7135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 172.058128][ T7135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 172.136539][ T333] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 172.286398][ T333] usb 5-1: device descriptor read/64, error -71 [ 172.536808][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 172.546396][ T333] usb 5-1: device descriptor read/64, error -71 [ 172.586001][ T7186] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.594196][ T7186] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 172.603107][ T7186] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 172.611318][ T7186] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 172.656512][ T333] usb usb5-port1: attempt power cycle [ 172.996386][ T333] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 173.018568][ T333] usb 5-1: device descriptor read/8, error -71 [ 173.147686][ T333] usb 5-1: device descriptor read/8, error -71 [ 173.198113][ T7194] syzkaller0: entered promiscuous mode [ 173.203681][ T7194] syzkaller0: entered allmulticast mode [ 173.214806][ T7194] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 173.235246][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.243964][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.253052][ T36] audit: type=1400 audit(1757467351.146:645): avc: denied { create } for pid=7197 comm="syz.2.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 173.396564][ T333] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.417581][ T333] usb 5-1: device descriptor read/8, error -71 [ 173.459560][ T36] audit: type=1400 audit(1757467351.346:646): avc: denied { setattr } for pid=7211 comm="syz.0.2241" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 173.467326][ T466] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 173.547465][ T333] usb 5-1: device descriptor read/8, error -71 [ 173.637959][ T466] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.646507][ T466] usb 3-1: not running at top speed; connect to a high speed hub [ 173.655376][ T466] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 173.664046][ T466] usb 3-1: config 1 has no interface number 0 [ 173.670364][ T333] usb usb5-port1: unable to enumerate USB device [ 173.677288][ T466] usb 3-1: config 1 interface 138 has no altsetting 0 [ 173.685769][ T466] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 173.695003][ T466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.703190][ T466] usb 3-1: Product: syz [ 173.707453][ T466] usb 3-1: Manufacturer: syz [ 173.712088][ T466] usb 3-1: SerialNumber: syz [ 174.486745][ T466] usb 3-1: USB disconnect, device number 38 [ 174.495842][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.584970][ T7223] tipc: Enabling of bearer rejected, already enabled [ 174.599068][ T46] bridge_slave_1: left allmulticast mode [ 174.604981][ T46] bridge_slave_1: left promiscuous mode [ 174.610797][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.618420][ T7225] x_tables: duplicate underflow at hook 2 [ 174.624935][ T46] bridge_slave_0: left allmulticast mode [ 174.630974][ T46] bridge_slave_0: left promiscuous mode [ 174.636799][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.698131][ T7225] veth1: entered allmulticast mode [ 174.704699][ T7224] veth1: left allmulticast mode [ 174.772480][ T46] veth1_macvtap: left promiscuous mode [ 174.778085][ T46] veth0_vlan: left promiscuous mode [ 174.854040][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.861729][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.869235][ T7229] bridge_slave_0: entered allmulticast mode [ 174.875522][ T7229] bridge_slave_0: entered promiscuous mode [ 174.882593][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.889709][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.896868][ T7229] bridge_slave_1: entered allmulticast mode [ 174.903130][ T7229] bridge_slave_1: entered promiscuous mode [ 174.957664][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.964740][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.972122][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.979205][ T7229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.000848][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.009114][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.019023][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.026124][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.036155][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.043311][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.073993][ T7229] veth0_vlan: entered promiscuous mode [ 175.085652][ T7229] veth1_macvtap: entered promiscuous mode [ 175.149513][ T7241] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 175.158619][ T7241] SELinux: failed to load policy [ 175.386507][ T489] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 175.444065][ T7261] overlayfs: failed to clone upperpath [ 175.537660][ T489] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.548121][ T489] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.558570][ T489] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.567784][ T489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.575984][ T489] usb 5-1: SerialNumber: syz [ 175.745063][ T36] audit: type=1400 audit(1757467353.626:647): avc: denied { nlmsg_write } for pid=7281 comm="syz.5.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.789534][ T489] usb 5-1: 0:2 : does not exist [ 175.794622][ T489] usb 5-1: unit 5: unexpected type 0x09 [ 175.804029][ T489] usb 5-1: USB disconnect, device number 12 [ 175.882246][ T7289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=7289 comm=syz.5.2265 [ 176.179852][ T7310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2273'. [ 176.218489][ T7313] /dev/loop0: Can't lookup blockdev [ 176.288637][ T36] audit: type=1326 audit(1757467354.176:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7325 comm="syz.5.2277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a2c78eba9 code=0x0 [ 176.452825][ T7333] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.461028][ T7333] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 176.470539][ T7333] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 176.479247][ T7333] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 176.656110][ T7336] rust_binder: Error while translating object. [ 176.656160][ T7336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.663043][ T7336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:924 [ 176.845377][ T7340] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.247374][ T7357] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.262022][ T7357] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 177.270661][ T7357] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.278760][ T7357] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 177.666777][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2295'. [ 178.032761][ T489] rust_binder: 7370: removing orphan mapping 0:4232 [ 178.049546][ T7382] tipc: Started in network mode [ 178.054461][ T7382] tipc: Node identity 2ee69be31b89, cluster identity 4711 [ 178.061802][ T7382] tipc: Enabled bearer , priority 0 [ 178.068659][ T7381] tipc: Enabling of bearer rejected, already enabled [ 178.198019][ T7383] tipc: Disabling bearer [ 178.305194][ T7390] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 178.313445][ T7390] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 178.322970][ T7390] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 178.332121][ T7390] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 178.363330][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.455428][ T7402] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 178.455454][ T7402] rust_binder: Read failure Err(EFAULT) in pid:224 [ 178.563579][ T7407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.570446][ T7407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 179.366349][ T7424] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.383988][ T7424] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 179.392407][ T7424] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.400603][ T7424] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 179.800321][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2321'. [ 179.910421][ T7464] netlink: 'syz.0.2324': attribute type 20 has an invalid length. [ 179.920007][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2324'. [ 180.396387][ T626] Bluetooth: hci0: command 0x1003 tx timeout [ 180.396584][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.426022][ T7494] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 180.547256][ T7492] kvm: kvm [7491]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x50c0c74800 [ 180.559282][ T7505] overlay: ./file0 is not a directory [ 180.562698][ T36] audit: type=1400 audit(1757467358.446:649): avc: denied { lock } for pid=7495 comm="syz.6.2337" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 180.695834][ T7516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.695868][ T7516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 180.706169][ T7516] rust_binder: 255: no such ref 2 [ 180.720886][ T7516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:255 [ 180.736082][ T7519] rust_binder: Error while translating object. [ 180.745424][ T7519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 180.752949][ T7519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:257 [ 181.045269][ T7542] netlink: 'syz.5.2352': attribute type 1 has an invalid length. [ 181.053196][ T7542] netlink: 'syz.5.2352': attribute type 2 has an invalid length. [ 181.056416][ T489] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.077246][ T7544] netlink: 4432 bytes leftover after parsing attributes in process `syz.5.2353'. [ 181.087902][ T7544] netlink: 'syz.5.2353': attribute type 46 has an invalid length. [ 181.121613][ T7548] tipc: Can't bind to reserved service type 2 [ 181.129108][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2355'. [ 181.149943][ T7550] fuse: Bad value for 'fd' [ 181.155159][ T7550] overlayfs: failed to clone upperpath [ 181.179804][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2358'. [ 181.216395][ T489] usb 5-1: device descriptor read/64, error -71 [ 181.236762][ T7562] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 181.456414][ T489] usb 5-1: device descriptor read/64, error -71 [ 181.706386][ T489] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.737486][ T7587] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 181.747250][ T36] audit: type=1400 audit(1757467359.646:650): avc: denied { relabelto } for pid=7586 comm="syz.0.2370" name="331" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 181.773543][ T36] audit: type=1400 audit(1757467359.646:651): avc: denied { associate } for pid=7586 comm="syz.0.2370" name="331" dev="tmpfs" ino=1837 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 181.801059][ T36] audit: type=1400 audit(1757467359.646:652): avc: denied { write } for pid=293 comm="syz-executor" name="331" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 181.827061][ T36] audit: type=1400 audit(1757467359.646:653): avc: denied { remove_name } for pid=293 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 181.854473][ T36] audit: type=1400 audit(1757467359.646:654): avc: denied { rmdir } for pid=293 comm="syz-executor" name="331" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 181.886414][ T489] usb 5-1: device descriptor read/64, error -71 [ 182.126381][ T489] usb 5-1: device descriptor read/64, error -71 [ 182.196033][ T46] bridge_slave_1: left allmulticast mode [ 182.202286][ T46] bridge_slave_1: left promiscuous mode [ 182.209098][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.220384][ T46] bridge_slave_0: left allmulticast mode [ 182.235267][ T46] bridge_slave_0: left promiscuous mode [ 182.252405][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.262150][ T489] usb usb5-port1: attempt power cycle [ 182.374337][ T46] tipc: Disabling bearer [ 182.432257][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.439603][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.447502][ T7596] bridge_slave_0: entered allmulticast mode [ 182.454111][ T7596] bridge_slave_0: entered promiscuous mode [ 182.461359][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.471272][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.479261][ T7596] bridge_slave_1: entered allmulticast mode [ 182.485989][ T7596] bridge_slave_1: entered promiscuous mode [ 182.492640][ T46] tipc: Left network mode [ 182.616390][ T489] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.652282][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.659402][ T489] usb 5-1: device descriptor read/8, error -71 [ 182.659583][ T7596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.673135][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.680435][ T7596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.710154][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.719457][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.730369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.737515][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.758352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.765509][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.788608][ T489] usb 5-1: device descriptor read/8, error -71 [ 182.797325][ T7596] veth0_vlan: entered promiscuous mode [ 182.822731][ T7596] veth1_macvtap: entered promiscuous mode [ 182.845328][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'. [ 182.880377][ T7626] overlayfs: failed to clone upperpath [ 182.895587][ T7626] tipc: Enabling of bearer rejected, failed to enable media [ 182.924054][ T7630] fuse: Bad value for 'fd' [ 182.958434][ T7628] rust_binder: Error while translating object. [ 182.958483][ T7628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.965483][ T7628] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 182.975787][ T7628] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:2 [ 182.995237][ T1233] rust_binder: 7627: removing orphan mapping 0:24 [ 183.026460][ T489] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 183.057451][ T489] usb 5-1: device descriptor read/8, error -71 [ 183.098799][ T7637] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2383'. [ 183.111915][ T7639] kvm: kvm [7638]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 183.121928][ T7639] kvm: kvm [7638]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 183.167300][ T7642] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 183.176163][ T7642] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 183.187397][ T489] usb 5-1: device descriptor read/8, error -71 [ 183.230407][ T7646] fuse: Bad value for 'fd' [ 183.250203][ T7646] usb usb7: usbfs: process 7646 (syz.5.2387) did not claim interface 0 before use [ 183.297488][ T7649] incfs: Backing dir is not set, filesystem can't be mounted. [ 183.305173][ T7649] incfs: mount failed -2 [ 183.305759][ T489] usb usb5-port1: unable to enumerate USB device [ 183.333122][ T7651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.333163][ T7651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 183.674225][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2393'. [ 183.772428][ T7663] rust_binder: Error while translating object. [ 183.772470][ T7663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.779120][ T7663] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 183.790683][ T7663] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:43 [ 183.808988][ T1233] rust_binder: 7662: removing orphan mapping 0:24 [ 183.818556][ T7666] __vm_enough_memory: pid: 7666, comm: syz.6.2396, bytes: 18014402804453376 not enough memory for the allocation [ 183.858028][ T7668] binder: Unknown parameter 'fowner' [ 183.890595][ T7676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=7676 comm=syz.4.2400 [ 183.916887][ T7680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 184.005702][ T36] audit: type=1400 audit(1757467361.886:655): avc: denied { listen } for pid=7695 comm="syz.6.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.087105][ T7698] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 184.096422][ T7698] overlayfs: missing 'lowerdir' [ 184.251125][ T1233] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.252668][ T36] audit: type=1400 audit(1757467362.136:656): avc: denied { create } for pid=7720 comm="syz.0.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 184.346561][ T36] audit: type=1400 audit(1757467362.229:657): avc: denied { accept } for pid=7732 comm="syz.0.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 184.391259][ T7719] netlink: 'syz.5.2414': attribute type 4 has an invalid length. [ 184.399343][ T7719] netlink: 'syz.5.2414': attribute type 5 has an invalid length. [ 184.407318][ T7719] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2414'. [ 184.427430][ T1233] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.435921][ T1233] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.463804][ T1233] usb 7-1: config 220 has no interface number 2 [ 184.472166][ T1233] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.491642][ T1233] usb 7-1: config 220 interface 0 has no altsetting 0 [ 184.499075][ T1233] usb 7-1: config 220 interface 76 has no altsetting 0 [ 184.506078][ T1233] usb 7-1: config 220 interface 1 has no altsetting 0 [ 184.522405][ T1233] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.532955][ T1233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.541387][ T1233] usb 7-1: Product: syz [ 184.545714][ T1233] usb 7-1: Manufacturer: syz [ 184.550636][ T1233] usb 7-1: SerialNumber: syz [ 184.662069][ T7771] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2433'. [ 184.666398][ T36] audit: type=1400 audit(1757467362.549:658): avc: denied { create } for pid=7770 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 184.709520][ T7778] rust_binder: Error while translating object. [ 184.709581][ T7778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 184.719212][ T7778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:291 [ 185.308603][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2439'. [ 185.567333][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 185.567352][ T36] audit: type=1400 audit(1757467363.459:711): avc: denied { create } for pid=7809 comm="syz.0.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 185.601877][ T36] audit: type=1400 audit(1757467363.489:712): avc: denied { read write } for pid=6135 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.626568][ T36] audit: type=1400 audit(1757467363.499:713): avc: denied { read write } for pid=7811 comm="syz.4.2449" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 185.650564][ T36] audit: type=1400 audit(1757467363.499:714): avc: denied { read } for pid=7811 comm="syz.4.2449" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 185.673439][ T36] audit: type=1400 audit(1757467363.499:715): avc: denied { read write } for pid=7811 comm="syz.4.2449" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 185.696944][ T36] audit: type=1400 audit(1757467363.499:716): avc: denied { mounton } for pid=7811 comm="syz.4.2449" path="/97/file0" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 186.056366][ T36] audit: type=1400 audit(1757467363.939:717): avc: denied { read write } for pid=7229 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.106388][ T36] audit: type=1400 audit(1757467363.949:718): avc: denied { create } for pid=7815 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 186.132414][ T36] audit: type=1400 audit(1757467363.949:719): avc: denied { read } for pid=7815 comm="syz.6.2450" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 186.158644][ T36] audit: type=1400 audit(1757467363.949:720): avc: denied { read } for pid=7815 comm="syz.6.2450" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 188.892958][ T8036] netlink: 'syz.6.2523': attribute type 4 has an invalid length. [ 189.601445][ T1233] usb 7-1: selecting invalid altsetting 0 [ 189.611460][ T1233] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 189.617950][ T1233] usb 7-1: No valid video chain found. [ 189.681417][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.997332][ T8098] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2544'. [ 190.358884][ T8109] sit0: entered promiscuous mode [ 190.365059][ T8109] netlink: 'syz.4.2548': attribute type 1 has an invalid length. [ 190.373051][ T8109] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2548'. [ 190.508921][ T8122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8122 comm=syz.0.2553 [ 190.523526][ T8123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8123 comm=syz.0.2553 [ 190.597670][ T36] kauditd_printk_skb: 673 callbacks suppressed [ 190.597688][ T36] audit: type=1400 audit(1757467368.489:1394): avc: denied { create } for pid=8140 comm="syz.0.2560" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 190.633608][ T36] audit: type=1400 audit(1757467368.519:1395): avc: denied { create } for pid=8142 comm="syz.0.2561" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 190.662036][ T36] audit: type=1400 audit(1757467368.549:1396): avc: denied { create } for pid=8144 comm="syz.0.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 190.681674][ T36] audit: type=1400 audit(1757467368.549:1397): avc: denied { create } for pid=8144 comm="syz.0.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 190.701287][ T36] audit: type=1400 audit(1757467368.549:1398): avc: denied { create } for pid=8144 comm="syz.0.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 191.068967][ T36] audit: type=1400 audit(1757467368.959:1399): avc: denied { read write } for pid=7229 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.093239][ T36] audit: type=1400 audit(1757467368.959:1400): avc: denied { read } for pid=8146 comm="syz.6.2563" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 191.116504][ T36] audit: type=1400 audit(1757467368.979:1401): avc: denied { read write } for pid=7229 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.140987][ T36] audit: type=1400 audit(1757467368.989:1402): avc: denied { remount } for pid=8152 comm="syz.6.2564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0 [ 191.161286][ T36] audit: type=1400 audit(1757467368.989:1403): avc: denied { read write } for pid=7229 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.756374][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.756395][ T626] Bluetooth: hci0: command 0x1003 tx timeout [ 192.001609][ T8232] bridge0: port 3(syz_tun) entered blocking state [ 192.008298][ T8232] bridge0: port 3(syz_tun) entered disabled state [ 192.014986][ T8232] syz_tun: entered allmulticast mode [ 192.021116][ T8232] syz_tun: entered promiscuous mode [ 192.026663][ T8232] bridge0: port 3(syz_tun) entered blocking state [ 192.033120][ T8232] bridge0: port 3(syz_tun) entered forwarding state [ 192.416637][ T8281] can0: slcan on ptm2. [ 192.433053][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 192.445766][ T8280] can0 (unregistered): slcan off ptm2. [ 193.048856][ T8329] syz.5.2625 (8329): attempted to duplicate a private mapping with mremap. This is not supported. [ 193.656988][ T8364] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2637'. [ 193.787093][ T8375] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2641'. [ 194.978156][ T289] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.985253][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.191506][ T8476] pim6reg1: entered promiscuous mode [ 195.197248][ T8476] pim6reg1: entered allmulticast mode [ 195.535040][ T8517] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 195.594540][ T36] kauditd_printk_skb: 25673 callbacks suppressed [ 195.594558][ T36] audit: type=1400 audit(1757471981.495:26819): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.603811][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.623457][ T36] audit: type=1400 audit(1757471981.505:26820): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.633195][ T148] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 195.659142][ T148] audit: backlog limit exceeded [ 195.660893][ T7596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.664850][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.671500][ T36] audit: type=1400 audit(1757471981.505:26821): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.678240][ T148] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 195.699520][ T7596] audit: audit_lost=89 audit_rate_limit=0 audit_backlog_limit=64 [ 197.024503][ T626] Bluetooth: hci0: command 0x1003 tx timeout [ 197.030570][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.390221][ T289] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.424548][ T630] Bluetooth: hci0: command 0x1003 tx timeout [ 199.430657][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.132135][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2764'. [ 200.142254][ T8689] netlink: 'syz.5.2764': attribute type 4 has an invalid length. [ 200.384501][ T626] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 200.384508][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 200.604487][ T36] kauditd_printk_skb: 32563 callbacks suppressed [ 200.604508][ T36] audit: type=1400 audit(1757471986.496:58975): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.639920][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.646891][ T148] audit: audit_lost=226 audit_rate_limit=0 audit_backlog_limit=64 [ 200.654804][ T148] audit: backlog limit exceeded [ 200.659910][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.666514][ T36] audit: type=1400 audit(1757471986.496:58976): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.688347][ T148] audit: audit_lost=227 audit_rate_limit=0 audit_backlog_limit=64 [ 200.696276][ T148] audit: backlog limit exceeded [ 200.701521][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.708169][ T36] audit: type=1400 audit(1757471986.496:58977): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.323670][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2810'. [ 202.335877][ T8809] netlink: 'syz.6.2810': attribute type 64 has an invalid length. [ 202.359845][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.361536][ T8809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8809 comm=syz.6.2810 [ 202.506738][ T8812] FAULT_INJECTION: forcing a failure. [ 202.506738][ T8812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.520626][ T8812] CPU: 0 UID: 0 PID: 8812 Comm: syz.5.2811 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 202.520658][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.520671][ T8812] Call Trace: [ 202.520678][ T8812] [ 202.520686][ T8812] __dump_stack+0x21/0x30 [ 202.520719][ T8812] dump_stack_lvl+0x10c/0x190 [ 202.520746][ T8812] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.520776][ T8812] ? vsnprintf+0x7b4/0x1aa0 [ 202.520806][ T8812] ? check_stack_object+0x107/0x140 [ 202.520828][ T8812] dump_stack+0x19/0x20 [ 202.520856][ T8812] should_fail_ex+0x3d9/0x530 [ 202.520878][ T8812] should_fail+0xf/0x20 [ 202.520896][ T8812] should_fail_usercopy+0x1e/0x30 [ 202.520920][ T8812] _copy_from_user+0x22/0xb0 [ 202.520946][ T8812] kstrtouint_from_user+0xc2/0x150 [ 202.520967][ T8812] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 202.520987][ T8812] ? selinux_file_permission+0x309/0xb30 [ 202.521015][ T8812] ? __cfi_selinux_file_permission+0x10/0x10 [ 202.521041][ T8812] proc_fail_nth_write+0x89/0x210 [ 202.521072][ T8812] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 202.521101][ T8812] ? bpf_lsm_file_permission+0xd/0x20 [ 202.521133][ T8812] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 202.521163][ T8812] vfs_write+0x3c3/0xe80 [ 202.521183][ T8812] ? __cfi_vfs_write+0x10/0x10 [ 202.521202][ T8812] ? __kasan_check_write+0x18/0x20 [ 202.521233][ T8812] ? mutex_lock+0x92/0x1c0 [ 202.521256][ T8812] ? __cfi_mutex_lock+0x10/0x10 [ 202.521281][ T8812] ? __fget_files+0x2c5/0x340 [ 202.521306][ T8812] ksys_write+0x141/0x250 [ 202.521326][ T8812] ? __cfi_ksys_write+0x10/0x10 [ 202.521346][ T8812] ? fdget+0x189/0x1f0 [ 202.521368][ T8812] ? __kasan_check_read+0x15/0x20 [ 202.521400][ T8812] __x64_sys_write+0x7f/0x90 [ 202.521420][ T8812] x64_sys_call+0x271c/0x2ee0 [ 202.521453][ T8812] do_syscall_64+0x58/0xf0 [ 202.521484][ T8812] ? clear_bhb_loop+0x50/0xa0 [ 202.521517][ T8812] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.521544][ T8812] RIP: 0033:0x7f1c4038d65f [ 202.521562][ T8812] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 202.521589][ T8812] RSP: 002b:00007f1c4113d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 202.521614][ T8812] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1c4038d65f [ 202.521629][ T8812] RDX: 0000000000000001 RSI: 00007f1c4113d0a0 RDI: 0000000000000004 [ 202.521644][ T8812] RBP: 00007f1c4113d090 R08: 0000000000000000 R09: 0000000000000000 [ 202.521658][ T8812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 202.521671][ T8812] R13: 00007f1c405d6038 R14: 00007f1c405d5fa0 R15: 00007ffe786f2c08 [ 202.521689][ T8812] [ 202.846492][ T8818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8818 comm=syz.5.2814 [ 204.384480][ T626] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.384496][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 205.035795][ T8876] syz.5.2835 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.614519][ T36] kauditd_printk_skb: 48406 callbacks suppressed [ 205.614541][ T36] audit: type=1400 audit(1757471991.506:98526): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.622625][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.642115][ T36] audit: type=1400 audit(1757471991.516:98527): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.649451][ T148] audit: audit_lost=3181 audit_rate_limit=0 audit_backlog_limit=64 [ 205.669946][ T36] audit: type=1400 audit(1757471991.516:98528): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.699009][ T36] audit: type=1400 audit(1757471991.516:98529): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.703120][ T148] audit: backlog limit exceeded [ 205.720467][ T36] audit: type=1400 audit(1757471991.516:98530): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.729694][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.753149][ T148] audit: audit_lost=3182 audit_rate_limit=0 audit_backlog_limit=64 [ 205.918025][ T8919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.925474][ T8919] IPv6: NLM_F_CREATE should be set when creating new route [ 205.932982][ T8919] IPv6: NLM_F_CREATE should be set when creating new route [ 205.945458][ T8919] netlink: 'syz.6.2853': attribute type 4 has an invalid length. [ 205.955462][ T8919] netlink: 'syz.6.2853': attribute type 17 has an invalid length. [ 208.447435][ T9051] pim6reg1: entered promiscuous mode [ 208.453102][ T9051] pim6reg1: entered allmulticast mode [ 209.517900][ T9106] syzkaller0: entered promiscuous mode [ 209.523971][ T9106] syzkaller0: entered allmulticast mode [ 210.426801][ T9131] can0: slcan on ttyS3. [ 210.624487][ T36] kauditd_printk_skb: 40296 callbacks suppressed [ 210.624506][ T36] audit: type=1400 audit(1757471996.516:138697): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.632863][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.657705][ T36] audit: type=1400 audit(1757471996.526:138698): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.668704][ T148] audit: audit_lost=3226 audit_rate_limit=0 audit_backlog_limit=64 [ 210.690143][ T6135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.697168][ T36] audit: type=1400 audit(1757471996.526:138699): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.701014][ T148] audit: backlog limit exceeded [ 210.718887][ T36] audit: type=1400 audit(1757471996.526:138700): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.724017][ T6135] audit: audit_lost=3227 audit_rate_limit=0 audit_backlog_limit=64 [ 210.744803][ T36] audit: type=1400 audit(1757471996.526:138701): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 211.224651][ T9129] can0 (unregistered): slcan off ttyS3. [ 212.201738][ T9245] netlink: 'syz.5.2971': attribute type 30 has an invalid length. [ 212.875091][ T9260] syzkaller0: entered promiscuous mode [ 212.880892][ T9260] syzkaller0: entered allmulticast mode [ 213.259876][ T9284] netlink: 328 bytes leftover after parsing attributes in process `syz.5.2986'. [ 213.288133][ T9286] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2987'. [ 213.298372][ T9286] gretap0: entered promiscuous mode [ 213.306358][ T9286] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2987'. [ 213.315823][ T9286] 0ªî{X¹¦: renamed from gretap0 [ 213.321898][ T9286] 0ªî{X¹¦: left promiscuous mode [ 213.327473][ T9286] 0ªî{X¹¦: entered allmulticast mode [ 213.334015][ T9286] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 214.845746][ T9326] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3000'. [ 214.935969][ T9336] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3004'. [ 215.634505][ T36] kauditd_printk_skb: 44578 callbacks suppressed [ 215.634572][ T36] audit: type=1400 audit(1757472001.526:181332): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.643007][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.663073][ T36] audit: type=1400 audit(1757472001.536:181333): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.671034][ T148] audit: audit_lost=3877 audit_rate_limit=0 audit_backlog_limit=64 [ 215.691708][ T36] audit: type=1400 audit(1757472001.536:181334): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.699973][ T148] audit: backlog limit exceeded [ 215.721001][ T36] audit: type=1400 audit(1757472001.536:181335): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.726502][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.747136][ T36] audit: type=1400 audit(1757472001.536:181336): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.754033][ T148] audit: audit_lost=3878 audit_rate_limit=0 audit_backlog_limit=64 [ 216.454689][ T9416] netlink: 'syz.6.3033': attribute type 4 has an invalid length. [ 216.464063][ T9416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9416 comm=syz.6.3033 [ 216.490742][ T9417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9417 comm=syz.6.3033 [ 216.891598][ T9469] netlink: 1432 bytes leftover after parsing attributes in process `syz.4.3054'. [ 216.901964][ T9469] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3054'. [ 217.331790][ T289] Bluetooth: hci0: Frame reassembly failed (-84) [ 217.793767][ T289] Bluetooth: hci1: Frame reassembly failed (-84) [ 217.903303][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3071'. [ 217.922407][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 219.344484][ T9518] Bluetooth: hci0: command 0x1003 tx timeout [ 219.344490][ T626] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.824526][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 219.824706][ T626] Bluetooth: hci1: command 0x1003 tx timeout [ 219.984494][ T9518] Bluetooth: hci2: command 0x1003 tx timeout [ 219.984647][ T630] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 220.644634][ T36] kauditd_printk_skb: 44507 callbacks suppressed [ 220.644653][ T36] audit: type=1400 audit(1757472006.546:225561): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.673214][ T36] audit: type=1400 audit(1757472006.546:225562): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.679869][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.694476][ T36] audit: type=1400 audit(1757472006.546:225563): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.700966][ T148] audit: audit_lost=3973 audit_rate_limit=0 audit_backlog_limit=64 [ 220.723079][ T36] audit: type=1400 audit(1757472006.546:225564): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.730383][ T148] audit: backlog limit exceeded [ 220.751156][ T36] audit: type=1400 audit(1757472006.546:225565): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.756762][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.777182][ T36] audit: type=1400 audit(1757472006.546:225566): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.654572][ T36] kauditd_printk_skb: 50054 callbacks suppressed [ 225.654592][ T36] audit: type=1400 audit(1757472011.546:274743): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.683239][ T36] audit: type=1400 audit(1757472011.556:274744): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.689699][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.704841][ T36] audit: type=1400 audit(1757472011.556:274745): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.711348][ T148] audit: audit_lost=4267 audit_rate_limit=0 audit_backlog_limit=64 [ 225.732568][ T36] audit: type=1400 audit(1757472011.556:274746): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.740953][ T148] audit: backlog limit exceeded [ 225.762143][ T36] audit: type=1400 audit(1757472011.556:274747): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.762181][ T36] audit: type=1400 audit(1757472011.556:274748): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 225.768200][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.664540][ T36] kauditd_printk_skb: 48847 callbacks suppressed [ 230.664559][ T36] audit: type=1400 audit(1757472016.566:323594): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.672585][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.692363][ T36] audit: type=1400 audit(1757472016.566:323595): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.698822][ T148] audit: audit_lost=4269 audit_rate_limit=0 audit_backlog_limit=64 [ 230.720965][ T36] audit: type=1400 audit(1757472016.566:323596): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.728377][ T148] audit: backlog limit exceeded [ 230.749952][ T36] audit: type=1400 audit(1757472016.566:323597): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.755553][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.776570][ T36] audit: type=1400 audit(1757472016.566:323598): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 230.783226][ T148] audit: audit_lost=4270 audit_rate_limit=0 audit_backlog_limit=64 [ 235.511929][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 235.662063][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3106'. [ 235.674560][ T36] kauditd_printk_skb: 45876 callbacks suppressed [ 235.674577][ T36] audit: type=1400 audit(1757472021.576:369195): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.677407][ T9602] netlink: 'syz.6.3106': attribute type 4 has an invalid length. [ 235.689374][ T36] audit: type=1400 audit(1757472021.576:369196): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.723369][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.731824][ T36] audit: type=1400 audit(1757472021.576:369197): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 235.743103][ T148] audit: audit_lost=4364 audit_rate_limit=0 audit_backlog_limit=64 [ 235.763494][ T9608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.768016][ T148] audit: backlog limit exceeded [ 235.774332][ T9608] audit: audit_lost=4365 audit_rate_limit=0 audit_backlog_limit=64 [ 235.779544][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 235.787209][ T36] audit: type=1400 audit(1757472021.576:369198): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 236.195395][ T9639] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3121'. [ 237.028134][ T329] Bluetooth: hci2: Frame reassembly failed (-84) [ 237.098383][ T9670] netlink: 'syz.6.3132': attribute type 4 has an invalid length. [ 237.107089][ T9670] netlink: 'syz.6.3132': attribute type 2 has an invalid length. [ 237.584475][ T630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.584481][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 237.685188][ T9703] veth0_vlan: entered allmulticast mode [ 237.788748][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.942361][ T9717] pim6reg1: entered promiscuous mode [ 238.948122][ T9717] pim6reg1: entered allmulticast mode [ 239.104476][ T9518] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 239.110690][ T53] Bluetooth: hci2: command 0x1003 tx timeout [ 239.824469][ T630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.824477][ T9518] Bluetooth: hci0: command 0x1003 tx timeout [ 240.282699][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3177'. [ 240.579690][ T9841] syzkaller0: left promiscuous mode [ 240.685168][ T36] kauditd_printk_skb: 43850 callbacks suppressed [ 240.685188][ T36] audit: type=1400 audit(2000000004.680:411519): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.693248][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.719441][ T148] audit: audit_lost=4876 audit_rate_limit=0 audit_backlog_limit=64 [ 240.724201][ T6135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.729875][ T9856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.734638][ T6135] audit: audit_lost=4877 audit_rate_limit=0 audit_backlog_limit=64 [ 240.740726][ T148] audit: backlog limit exceeded [ 240.748723][ T36] audit: type=1400 audit(2000000004.680:411520): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 240.753997][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.774822][ T6135] audit: backlog limit exceeded [ 242.795357][T10003] sock: sock_set_timeout: `syz.6.3249' (pid 10003) tries to set negative timeout [ 245.340965][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.694485][ T36] kauditd_printk_skb: 43560 callbacks suppressed [ 245.694506][ T36] audit: type=1400 audit(2000000009.680:453991): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.708451][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.722445][ T36] audit: type=1400 audit(2000000009.690:453992): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.729395][ T148] audit: audit_lost=5242 audit_rate_limit=0 audit_backlog_limit=64 [ 245.750093][ T36] audit: type=1400 audit(2000000009.690:453993): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.758383][ T148] audit: backlog limit exceeded [ 245.779358][ T36] audit: type=1400 audit(2000000009.690:453994): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.785157][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.805502][ T36] audit: type=1400 audit(2000000009.690:453995): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 245.812160][ T148] audit: audit_lost=5243 audit_rate_limit=0 audit_backlog_limit=64 [ 247.344473][ T9518] Bluetooth: hci0: command 0x1003 tx timeout [ 247.344800][ T630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.661097][T10197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3317'. [ 249.417110][T10231] can0: slcan on ttyS3. [ 250.055164][T10207] can0 (unregistered): slcan off ttyS3. [ 250.704563][ T36] kauditd_printk_skb: 45682 callbacks suppressed [ 250.704599][ T36] audit: type=1400 audit(2000000014.700:499677): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.717290][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 250.746854][ T148] audit: audit_lost=5244 audit_rate_limit=0 audit_backlog_limit=64 [ 250.754480][ T36] audit: type=1400 audit(2000000014.700:499678): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.765516][ T148] audit: backlog limit exceeded [ 250.781697][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 250.788361][ T148] audit: audit_lost=5245 audit_rate_limit=0 audit_backlog_limit=64 [ 250.794508][ T36] audit: type=1400 audit(2000000014.700:499679): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.796523][ T148] audit: backlog limit exceeded [ 250.824107][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 251.935157][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 252.160740][T10343] syzkaller0: entered promiscuous mode [ 252.166860][T10343] syzkaller0: entered allmulticast mode [ 253.581385][ T10] rust_binder: 0: removing orphan mapping 0:1192 [ 253.984470][ T9518] Bluetooth: hci0: command 0x1003 tx timeout [ 253.985390][ T630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.714536][ T36] kauditd_printk_skb: 44259 callbacks suppressed [ 255.714563][ T36] audit: type=1400 audit(2000000019.710:543250): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 255.723237][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.742803][ T36] audit: type=1400 audit(2000000019.710:543251): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 255.749299][ T148] audit: audit_lost=5476 audit_rate_limit=0 audit_backlog_limit=64 [ 255.784873][T10422] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.789556][T10419] audit: audit_backlog=65 > audit_backlog_limit=64 [ 255.793092][T10422] audit: audit_lost=5477 audit_rate_limit=0 audit_backlog_limit=64 [ 255.798639][ T36] audit: type=1400 audit(2000000019.710:543252): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 255.808878][ T148] audit: backlog limit exceeded [ 255.829250][T10419] audit: audit_lost=5478 audit_rate_limit=0 audit_backlog_limit=64 [ 258.712881][T10454] cgroup: fork rejected by pids controller in /syz4 [ 259.740705][T10493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10493 comm=syz.5.3403 [ 260.724509][ T36] kauditd_printk_skb: 45026 callbacks suppressed [ 260.724529][ T36] audit: type=1400 audit(2000000024.720:587545): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.732472][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.752403][ T36] audit: type=1400 audit(2000000024.720:587546): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.758757][ T148] audit: audit_lost=5723 audit_rate_limit=0 audit_backlog_limit=64 [ 260.780263][ T36] audit: type=1400 audit(2000000024.720:587547): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.787890][ T148] audit: backlog limit exceeded [ 260.809222][ T36] audit: type=1400 audit(2000000024.720:587548): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.814788][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.835598][ T36] audit: type=1400 audit(2000000024.720:587549): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.842138][ T148] audit: audit_lost=5724 audit_rate_limit=0 audit_backlog_limit=64 [ 265.734442][ T36] kauditd_printk_skb: 48958 callbacks suppressed [ 265.734462][ T36] audit: type=1400 audit(2000000029.720:636330): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.742411][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.769255][ T148] audit: audit_lost=5784 audit_rate_limit=0 audit_backlog_limit=64 [ 265.770592][ T7596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.777426][ T148] audit: backlog limit exceeded [ 265.783908][ T7596] audit: audit_lost=5785 audit_rate_limit=0 audit_backlog_limit=64 [ 265.789772][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.797482][ T36] audit: type=1400 audit(2000000029.730:636331): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.804157][ T148] audit: audit_lost=5786 audit_rate_limit=0 audit_backlog_limit=64 [ 265.825120][ T7596] audit: backlog limit exceeded [ 268.634831][T10554] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3419'. [ 270.744538][ T36] kauditd_printk_skb: 49072 callbacks suppressed [ 270.744559][ T36] audit: type=1400 audit(2000000034.740:685136): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.752769][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.772385][ T36] audit: type=1400 audit(2000000034.740:685137): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.778745][ T148] audit: audit_lost=5876 audit_rate_limit=0 audit_backlog_limit=64 [ 270.800582][ T36] audit: type=1400 audit(2000000034.740:685138): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.808157][ T148] audit: backlog limit exceeded [ 270.829513][ T36] audit: type=1400 audit(2000000034.740:685139): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.834584][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 270.861865][ T148] audit: audit_lost=5877 audit_rate_limit=0 audit_backlog_limit=64 [ 270.864552][ T36] audit: type=1400 audit(2000000034.740:685140): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.572442][ T489] usb 7-1: USB disconnect, device number 2 [ 274.649077][ T329] bridge_slave_1: left allmulticast mode [ 274.664739][ T329] bridge_slave_1: left promiscuous mode [ 274.670452][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.695533][ T329] bridge_slave_0: left allmulticast mode [ 274.701517][ T329] bridge_slave_0: left promiscuous mode [ 274.707717][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.780002][ T8744] bridge0: port 3(syz_tun) entered disabled state [ 274.787418][ T8744] syz_tun (unregistering): left allmulticast mode [ 274.793921][ T8744] syz_tun (unregistering): left promiscuous mode [ 274.800644][ T8744] bridge0: port 3(syz_tun) entered disabled state [ 274.816789][ T329] tipc: Left network mode [ 274.822827][ T329] veth1_macvtap: left promiscuous mode [ 275.077467][ T329] bridge_slave_1: left allmulticast mode [ 275.083331][ T329] bridge_slave_1: left promiscuous mode [ 275.089245][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.097270][ T329] bridge_slave_0: left allmulticast mode [ 275.103051][ T329] bridge_slave_0: left promiscuous mode [ 275.108939][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.117611][ T329] bridge_slave_1: left allmulticast mode [ 275.123309][ T329] bridge_slave_1: left promiscuous mode [ 275.129281][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.137196][ T329] bridge_slave_0: left allmulticast mode [ 275.143313][ T329] bridge_slave_0: left promiscuous mode [ 275.149188][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.300530][ T329] veth1_macvtap: left promiscuous mode [ 275.306232][ T329] veth0_vlan: left promiscuous mode [ 275.312311][ T329] veth1_macvtap: left promiscuous mode [ 275.318136][ T329] veth0_vlan: left promiscuous mode [ 275.754483][ T36] kauditd_printk_skb: 47356 callbacks suppressed [ 275.754502][ T36] audit: type=1400 audit(2000000039.740:730921): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.762127][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.783802][ T36] audit: type=1400 audit(2000000039.750:730922): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.790298][ T148] audit: audit_lost=6403 audit_rate_limit=0 audit_backlog_limit=64 [ 275.811542][ T36] audit: type=1400 audit(2000000039.750:730923): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.819412][ T148] audit: backlog limit exceeded [ 275.841674][ T36] audit: type=1400 audit(2000000039.750:730924): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.846335][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.867208][ T36] audit: type=1400 audit(2000000039.750:730925): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.873634][ T148] audit: audit_lost=6404 audit_rate_limit=0 audit_backlog_limit=64 [ 280.764440][ T36] kauditd_printk_skb: 50270 callbacks suppressed [ 280.764459][ T36] audit: type=1400 audit(2000000044.750:781195): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.772585][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.792669][ T36] audit: type=1400 audit(2000000044.760:781196): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.799007][ T148] audit: audit_lost=6405 audit_rate_limit=0 audit_backlog_limit=64 [ 280.820462][ T36] audit: type=1400 audit(2000000044.760:781197): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.828224][ T148] audit: backlog limit exceeded [ 280.828550][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 280.850131][ T36] audit: type=1400 audit(2000000044.760:781198): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 280.854672][ T148] audit: audit_lost=6406 audit_rate_limit=0 audit_backlog_limit=64 [ 280.861512][ T36] audit: type=1400 audit(2000000044.760:781199): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0