last executing test programs: 4.420483468s ago: executing program 1 (id=529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b70b0000007c7d04652538"], 0x14}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0xf94a, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x40044) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x31) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r5], 0x1}, 0x58) getsockname$packet(r4, &(0x7f0000000780), &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000800)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000840)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x6, 0x9, {{0xa, 0x4, 0x1, 0xb, 0x28, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x13, 0xb3, [@empty, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r8, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x6a, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1}}}}) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000980)={@local}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x1, 0x700, 0xa, 0xfffffffa, {{0x2f, 0x4, 0x0, 0x3a, 0xbc, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0x10, "e5f6e34a1ef75bb643a7ca1ad8f8"}, @timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x1, [{@remote, 0x58}, {@rand_addr=0x64010101, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0xf, 0xc3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0xf, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101]}, @rr={0x7, 0x2b, 0xbe, [@rand_addr=0x64010100, @empty, @loopback, @private=0xa010102, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @private=0xa010102]}, @ssrr={0x89, 0x7, 0xfd, [@empty]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x2, 0xc, "4aecca9a33fa9cca0c6c"}, {0x0, 0x2}, {0x5, 0x6, "578cb0d1"}, {0x1, 0x5, "1a06ae"}]}, @ssrr={0x89, 0x7, 0xd0, [@empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'pimreg1\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00006ed0a20df807990123eee101010000a600001309b7f91c38e4dccca5b49516cdaad3bff97a210011f557a984c218ddd1b98138696c5ed50dbe1ada03786c37d4a29de6c80508f2c4b7ab16c8bc11d3a9b185da8e5080b659086566a68a0cdabd5dea3f74e1472c4c05edddc79a11909ef10a", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004084) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x809d8c480cf91354, 0x0) unshare(0x2000000) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 4.412024189s ago: executing program 1 (id=530): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0xffd7, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000000)=0x4800008, 0x4) close(r0) 4.389727671s ago: executing program 1 (id=531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffff7fffffffff]}, 0x0, 0x0, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881af, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000001a00)=""/4075, 0xfeb}], 0x1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1e, &(0x7f0000000200), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0xc5, &(0x7f0000000280)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x80, 0x0, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x8c}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x5, 0x0, 0x3, 0x4, 0x8e}, @mixer_unit={0x6, 0x24, 0x4, 0x8, 0x9, "ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x40, 0x1001}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x80, 0x1, 0xac, 0x7f, "fc82667350c1f0b0a7"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0xd, 0xd, "1c998a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x8, 0xe, {0x7, 0x25, 0x1, 0x2, 0xa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4d, 0x9, 0x2}, @as_header={0x7, 0x24, 0x1, 0x7, 0xb4, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x5, 0x9, "265069166a8bfd59"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x5, 0x7, {0x7, 0x25, 0x1, 0xc0, 0x9c, 0x80}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x45, 0xf8, 0x40, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0xdc, &(0x7f0000000580)=@string={0xdc, 0x3, "dbc6131de60d15bd01301d68b61c673fe2995381b1fcaf7e648c7f8cdc722e064986025d94942e2bb5df3bd936f872e920dbc24d7bf0f3987c76efa35ad499dab3f12f06528d58c80bcdb4ff1599f5d078e1d843268311048958bee33989237782c40799cf503904fbecdfbbb47d534864c7e65c6e92213e871fc7846275dc2275c46f32c39306d5fe7815f0314366de8f25ee2ad2b733331b1e0472a838c78cf30b8491d8973b050cfa1d5ff5baed6dd9bc9da28f12ce62dd2a5c1b2693bcb88d1fe89c56a49165d557f8c05dc4d2773cf20c7d09931c41a505"}}, {0x23, &(0x7f0000000140)=@string={0x23, 0x3, "739963ba07672370c157fddba2fac36371b352e981b15a7d39b7663701035d3551"}}, {0x71, &(0x7f0000000180)=@string={0x71, 0x3, "1546eeb85ecd76df39157a779cb9e322f87b6576be59d106324f9fd80ab01b2281202afcbc309c8ef44e64cafbed836719dd7343ed9264b60aca0d138d31b67f2eaa2d443ad602b4f66788de4d5e6c7ca3f6b9a9ed4ef734074f07235f06ef5d3823c50d3f57ec9b7df3e85696c71d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44a}}, {0xb7, &(0x7f0000000680)=@string={0xb7, 0x3, "397ced51c8c9b897ab36a1c5992fd9bfc94188b50251fe46b9d2aa237da2649cc2e8bea8313ded90de0fb502489c1d68f0f00a197fa816a45812b83ecaa8bc5ad3da5abb23060adf4883ae3663ea45e1d4ac141fa7c92d80e1deaede75ac68915e9900fe1a0a4fc0ba7e512c570fce1e48b608b7a41826a1ec20bba9ac8385baf4275dfa5c4e4b3505e7ede13252725a06eba6d5d213059f28be7fc18fde6cf37f01694334e7036cb7229aa892db132f67bab09ce9"}}]}) 3.208254356s ago: executing program 3 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 3.134760781s ago: executing program 3 (id=555): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffe, 0xf0ffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000140)={0x20, 0x7, 0x42, "01e831a6fe8620a6d8e31b0714ca90a41884c95ac676779ca236070a30becb9a6a4319c7ad6fab08219caf33e8fef57156986eabff9139897d8b6189ee118f237c91"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f0000000740)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x1f8, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@broadcast, @broadcast, 0xffffff00, 0xffffffff, 0x10, 0x7, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, {[0xcc0a196133deee2d, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x6, 0x7, 0x200, 0xab3f, 0x3, 0x2, 'ip6_vti0\x00', 'veth1_vlan\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xf, 0xffffffff}}}, {{@arp={@empty, @broadcast, 0xffffffff, 0xffffffff, 0x10, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x80, 0x1, 0x907, 0x3, 0x1, 0x7, 'vxcan1\x00', 'lo\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x5f21c3ec}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0xd3e}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) close_range(r0, 0xffffffffffffffff, 0x0) 2.639561452s ago: executing program 2 (id=566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) umount2(0x0, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r3 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r3, r2, 0x0, 0xffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 2.637246462s ago: executing program 2 (id=567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x1a, 0x8105200, 0x437c, 0xfffa, 0xfffffff7, 0x99, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="7dd65336f15ef758e6f0bc07ce4e79eb6155df369449fb92d40d6590b95668b27e3aa0f72dc171a17a843b534a260359e59e072171f25b2b6d07c054ea9d894b338bde260bb62a3e1ba7fe43190175de7431fbc774608cc174c19c3da62dcd248d580c20937f0c10b8dc2b0c0dcbb57d03bf6a62a50a297e8edd34c2581b61c5ec6b3a5db36fc19036b99b26a8d3a532623ebf3bb6c90b6a1e1fd5c3fb8c039c76214503da2d4e45ff9e3fe8c99c05b974856c7c1ae6a7169f2eb8484e7f08ab600c52076e5b760f13c85574a89a570fa9f86ad0b3921dc3b7380179629fd46df6df1108ca865708772e23634b935c613e2618579fa55c7d445d0a770169e9ffeb6691f8a440ac68402a10d67c77e2d05929819bd2c7e8250e83bea1aee52a937cfad0af98186d325e31dfa1e63efcdf3438601be64b8805d28fb9373b78e9d8a929a1a63ad9fba4d92babf5d95936fdd2e0872492ff079f606289be9f16308e25f0ab1ec8f825a3f138d7ddcbb6b6e66475aa096c7975f59cad9895bdf7dac12d178f9987a5f7f7f8e8d555edbd85aa58c1b8215357184d04c1383f7b7d7b62a751f5d322d9904bda233d11629f5426a18801d4770a5420572569f48d039c1517f839080810e2f3c8d151d2f5a7cebe3cf13e956857b675b97c6b4097cc8d8525c6fcfb409c201631b42be7472a06e2c97753b8b14765e7bc61c86bcefb7e1b4254b2e8bc1dd30658c7e5aafee4a664499b262caec2b880df256cb690b8f76b63b8b76f4ec543c1a6473f5875cc43b2d249ae33205d2e3a8ff74bc8342fbad866eb1fb047515a5393b3111fa358c6dd27f0da021b0e8e16627cf8024b8794b4d3261679828a57ee8f1c6a570c180291e404263f67c48afab156c9913333693520056dd7cbdd1bef7ad700e2bcc050c0603538008be2d065feb93dc0f27708b83637e7c4d87e9534f402055140f15bef94a2196934af9b050c7760e33e30c4e17fada99553831a0dfc823277bf4280a0d5815ade13328f71d1fd94aaed566cba2a774ef10429e7ec2e54a313143cfff0c4e501b3c44c063e35077727734bc77c030f7a2de6ff8d6486fb499107d3b4f2a0afd1cccf64337235100f3329078f07709ca3958824d1cb4835991450e7c8a164cd886b026b89faf9a8c1a1f7493a3991e35278b97865a568b35a965c9091f8fe7f43be56a4cf9eb19d2b12888d57b144b9e97f43c777cf407352747a2e58eedd55c1e9406baf65714ebe193c37ab7f8cb5b4be58d5f7e92c90f8b0d030139d6d8120542253e2ee7f330f3c5ba699fae901db73d98786aa90a9ae16192974db99be5b79c3e01df5977dc0a467717f80e03fc0e2615a538c3ee4552b99f517295729b6150fc879b7bb9418ef6e9a03aeb7641be2830b298759a65282677301c57be298a2481d77ebae66931e908f9fa642b9b9248d5597e0617218dac6c872680405e3f2383a20e48aefefd694a3e9cbebdab7daddb158fc4486e304daf7c5ccf8af310bec3e998a48b37531e1dd6dee6760c9c9072381baae259009ccfd2b04b0e59c04c01e5f2106311e2991daabd44db16700dc29ab2765964729f62ff1a14c6ae69741fb4757f4ac29e32d7199bba795c410af832d56adb1a633e680e97dc93ae8d51c860f87e077592cdf8a0979898d3168a57ca776a19052b2942184c1eac404f781689de82688acf99eaedd4801af37de041bcead1202d5cdbd69026485067f28a6ec5504e30776895f022a372ec40081f22ab8f38ebc77d4b0bf5a64e3f064a7c454702840966645f96f2c37fc63a67120de516beeb3b8d30feb7f33485b22edd3285ba458c255560b8baaf115ad9b377652481c67bc67af191543be4d46b8cb0c6c2229f9d830d05b47b2ef4447a13635d42ac8dfecc7896ee0ce31d369138e150d62b6c1264c045593792f132b1382044d83e51d50c325fc46cd4c831f7e37650f9ce03875c971308636623ef0ff6ebc13c7908c8ec179caf613fd892f00c77b387d26ff6f529e7c20b97b611cb3a24d822c783a3b0db5bd718308f9cd4c870c741b5813cda3db3fecd2c87bd34447bef837de5b79fd2628f69cbb9dc3997749b48140fcd01b120468e98f193ac5d7fd9ed68194dbb746ba73a098b84e1823d5d51938269ef8d27a4ab94465bf633e2e4bfe01d2efad806e6e4bc5f557dd6a513ed4e9e9af571f458f6c5f72093d844826b59988aeedef4c22b4021bccc3ab00ef0a03b17facd6491dc3fb2369283cd635f47bd04c5b98445c0c2ed1dde9ea54acc0d82f720a57190d8610eb8c8ea0e3aceec429d90013ccc7fb7d35f71d4bbd24320dd50d2758c9e612b8273bf95be8bd0be1671b7aa469f6532e116ffbecad559e0f4402c0a35738e47b5e53f807ebfdf22c4b8f781e9ba8256960fe2073c1aca333aa58649f906945d1b961cd28b1b89c81ef5bf6990a318e1f33616b8642064f2c8b855c2b98c1b2435062d348fb760a2ff1a3040192eee6b2c9020fe25e0d25b7f9ed0897d0c3ed2925eab6be9f7d4bbac979508df4fe0ca3086ab6e5a7cc34258a7fe94b2f4cb64d752c36e1851fece7ebbe7c148947f4f266f231e4719e2a98a1ff374df1765ae2c61c4eb5d5b8e398bf28535c95a381a7eb8810ed91475e34123791550771940991784e0ac8a518ae8ce7461a439940cf6b0e7a61c93f5147867e300c9e77b9112bd12e939e054099c93dbc406d0ca460ffe00605c80ae705b997ecd5ec1be69775b2a631c0d81e7efb0b8c2e842569b8e572e10e154db4b3529793ceb214d73894748024c14492c1836d7e61e55db6c9f0379832374d98d5f6b9cc271f4193cc0f32cf27990997dcbb4dfe2721acbf3c7351294f80789d0a9e444180224b6a48ce7da45c648a855ff206a3c50954cce6f77172c333bbd65f876c559079c6c687774db175dedeab8f9f88a61142cb0854100ea480950760e9b806d0817d72d70d2c2bca2e824720bf745845f2c0920e1231df3f248beff10a36b7fbcda74ee8e7664fc63f3890493024c0b700c3533689616ee29f499d8e015ee4078baaaff8b3d8a892c3887ed9daf5746e7c2e5379d5deee7c2e82a808f2187513055d3108c8c9271cdd3bbc86b751152f3132f949b7745f9cfade81b14df00662a53c0b3554447313c5bb0412dd8c53aa6095ae920d2fb2bf3e48f35268ceaac64747f815dd04e99380f0432efff1715e351e726fa53c0b1f7c7d3819dbde7bf0566006271d8f6c59154c72a5e99a1762dc2948b5cb46eef1650908be30b757a6332f4f258547c499247bd03cc5ba7e065fc108e6fae8e3d3f47c2e0b3615fcb33fd3f40f59b6e3569ff6a036528cbc0862706425a0103b0d283ba7fe19ad7cef15b6adbc34fde89edfa1d7a9ba838744efccb4f2f1511d356e0c6cb6d4b00e0ce64d7aa0acb6975067bf358579bfdbf991d39ea15fa6098c0461b3177ad92dc25ff2883640f12da452e76640c71b6cd2a8a9ded9f450d915ae259af198eee36a37a2c602db2fc26965a0f72f3d353721a53e7ddaa062bfd4dc050c4b985cbd6049d84fc0bdde5e455d43898d1ba58aeb3353ec5815bd0bef5b8bd749e897de474a51040ae558e33ce0549bb615e66baa757bc9be0d8f717a6f620025f8802de515f101804a3fc713b2aa9cc9429d35b98c90e51815bddff7d17114a5337e87a626a055d5f52cb80a6dfd130ac6841424d5eb923083aae033d61894aad596ce3d2baddbadf31eb49872b3c107f1205042f86a8293b3a670acd19a77363127d817beb6933b6a3e0292134cb7fc555c561f4eb255ceb0bb5b17e56f201f3d80905d7704aaacce8a70370f4b81728cd21e1f82f2019b682031512f41d870777f16397af691c5404317194e3f6fca1559a6e42d8bd950634a1262b3032ff88e213dc3cb553730b249f5825d5bdee6410dca398e9d51249eac5a8cc8054b7ba591b89048655cb5223cdae82b17118f9bfdc70f79439bbc7e44f5de1b6106e9a71b4910e680b11e0380a237357375deb24c2b8e7bc3830eb0fcfe055ca6fc0497ed647d0184a6c31cff5060e715a01496a5ddbcc49910fb12004c3587a517eee942756a84dc13b0c0ef04f57f49bd7d44edf8aa667363a6f3e10f1aa17a72f1bf48c68472478f07db773f9428a1d73df1b02e38d9c79c8d244d11f60e4158ee12521095f242c2ae859412fa0e86a672abfa89f2cddb294bbc09989973b64a9b2008c134d530ae369951be10f207ea93f4ffc306062ee982175d798525bbf5437b24658d31a82b8506fb9a7922e988a9b8691bce976af796d6bcd6f9e3107358bf6ecf2a2c17d49116cb50ac732e4613971264613a273f5005fb52890ec509aa7e7e68feb1404677ec41ae5b7e1291431fdf3cef4f635b5281c2557f3c41be0d3a6fac7566cb8340ec0e415c49e63318aa22d897d1eeddbb8027efacebbf5e89ab75ec270ec8a3f553f53d2c8a235c2cd554eceae64e9a203f316a7358806fb6fe72d20e9c67f4ade6bbf5c2c53d44b48ff50152155760a5c5bb6e11063c470bbb785654d92f9c92badc587ef4214c1f722676e5818573465965c7e913a2307b087937b4a0a8881c6970a10b4c34bd3bbb714bba9e58c461dc09fd8fab6a3d1cbbcd1682bd996a53c119ef8cd2dcb84b9fd143b3408777db40621280e94208c62948c692d34116c52147f4e5456583ff2add8e521c2db33cb1471d80ee4c9ebe92ad4bdf57cbed7f941d15a0c87d901f032463958a8a90a9c1fea4615eae0b1f655ca2084487940d9c7744b2da1a27ff1b04a93b13b8ef22ed479b09629562d9a962b320fd2da3fff85b101ac4fd4ef9877284656ba984223a49d4598d900d04471e64d36a986c9ea0e2689fe6cd5e22022a014ed11f76a5a9e5c15169c142dca1f37202d7bc1b7ca5161c5626a650deb099351aedea2aaf920612df240b103561e790fac1943533355d5b4732d120756801249e28034f7cfe798b4385be267d8482f5bd022d609fd91c9d253183a72ecce905f04a59268ea1d210fece2acaca9daf6736f60335fc70525c21068fb4b3c0b33b946dfc8dd2cfbae0679b8f01a308ec116482ca644c8d70570f87d8e092bd56b4520d414e04dc0da33a5bbec10b4368b2943eb51097a45c77c64ae757c488802b39733c1e6bca727028c34e72e76eea2ed553e74a05ed3df40f37a8a8f9eb0ec3ed483c7da9fb4be41fdfcda7cc78ef7136a6b1217064e8a4526b1ed42ce3840db437c5eaee61f662a4e1a5db9892aea06819556063b3ea410a379dd9ecfe798b43f0b4779ba494c207158530fc539cc043e391df7ea4d0329c038137e6894ed177485cb57565a0d0b3c8a1871ee83b0fc0061db13537f43b5081c972b57286d50b1562d3255b472ea462798e63a7223ddf1fe6ebe06bf95105201a493df01495e8bb6a498f62383c70c4370bbc2df768db3df619f74370c52c9b59cbbd1553a7b0bc462b40568a00037ac5f59b5fd4d971eb78940f1dcc9a7616140961dd861cf21cb59151f9b7dc610853ad810c4f12fe7b89013fb2be57b68e464d9dc4fc3d4a030623fc4d0abee25bd6673ba737ed1bb935bb11c610ebad9d70ecabf1db85fbc0375ae26e084a0300773e3989858d523ccbd38665a5a83dbf09a4f69d3beab32109774daa4ff4a39f9977834fb29a887094b470f7b5af8605647eb76ed8022bed68b41ac77829c02c10857f04ee213c0fb5fb5658cd40b78127c38949e98ae1e07cc25a1af845a512c3a514a9e488acc730df783b779e544bb3573efcdc3d2bc949957ee77dd975103050ab24810e577df19d7fedbd7f6e41e4ad74be529690df8d721770cfb44bebc2d64f3f0b11a9dd1ce6045df4b0318622f4c18465c423cb110635e22eca69a0e1dea71144bd12f552b201a456d8e3f0bd066d3448e380fa095cd0fa9225f3458fea5589d661bf156753b06ca51a46bb3c6824915b8afb5c0739981e6a4a476b5e7b2f14a370c3b1d1ceff3ee6cf95eb583bc6b9b4bf008e5a369df9d5ce6c8b31f013e1cb103d9a6b0f658b9f5e2b4c48936392139fe2c5ee3dafbbdbd48f54ad31f7a7e00ea8dc0ed818036ccb95df003d680412a25902f9a35c4cba72225c5cc05638e952a43640df76455c037d42ecb0a48d342779613fcc830cfe7fb4da7bafabdbbd1f20bda9c83a4f1a19dcf64816d9f9f6f857b33366031fbe714810c80395afcd129cad90c2aa0cac1f35145e7749d51416260cb042414c8b9812ab15859be4c244e40ab7f2722f3333ea83ea1fcfbba62d797c3fe1153ae0c69d1afb7a34659c2321761400a041bfbfc14d114cffa931861e0641a8a93b6da8950cb0d7c8f86acd7573f1175665b9e0615c75c058b630968c794222c8b71b48d8e899d94716ccb23b8a8f9ae95c508c5cb2d8ceb5101e161443bd685c6f4a81ba01b3833a9a802e581781ff04c0a78972ff405822d22cdccfdf37f147214d6fcc0c1d3ac6ee9164de24d6800802f5f7312b01535d91229c73adad8e8ac539ffa217b96fff5628bd980d15afc339bc85841858331e83dee80d8971c38fb378da46ed7bc81bc71b33080cae89bed15f75f26fd4524c7f3aaef2196febdda3515131f9ba72212d5ec1dd56eb297eb9ebe0e3c50353827821ee0e2e9f35d9ef08a9441bd3964451cafdab6a1abeced2b94e0881c86f3886fc2d03aee92c716ff50aaa8324618b0abada643bed45059dec9f2fb700725c2dbd8e98877a27f9852f2281433a1dd19d73438cdf2c44c61f90ff3895ef070d90fa4dad44e660947b8144d1eb9c2d588b71de2b7b966ed5018a903cf66ad71595247b8b60501a1e6e0beff4d07a706cc643ef8da0ae37302ef1e35b2447e4f47aae92f3395b7479ded06182631c143529a26036dfbc12192924654beaaa1c0213f50a83864bc56b9f0e4bd9314950dafe9187c51b628ac6fb7f0dba472ae3cd2e6a743602b00ad6794382d14f2f2a8a36d1dee433f8e53039a6cf941daa5e005555d8221c236f367c389fba5e75af2f409742acb7f6da84f309e59f8d32ad8f3b4a21b1ded11ddd8c44025ed0855d1f069999da947193381e8e2b1f09fb6d37a021e0e7157d2f929035fe4a443d9c561e72a1984f79ec562db81aa66b620ad978cbedbfcbc0417ea7e52d1a3410236caab41bc3c14586a1533a4391e3379cd689118fe56c2440aa42aa1f9dedce32d080629aee7d78a77fd74f6d4b6a91d3279d5dd069d0c377ee4b76c9ccf4fd8ffac02de91c83d344d0ca6a2d145a31d124543fb6a4f447198264abde67ff6ee5b782414e2204864f861328804a1a8a6c2306db6167fd0da9ac146b4b19d781f0d25f9349990d82b90dcb7075add3a38cbbadd2458b92c183ab6a3948e74e8daab52813ede538cce6a8f202bdb8139193320d28a5cb1d7a868efdce50d31b554d74ab6e522e606890ee3d0237713323d2dc5ab48bb24a7f4f368a70c024d97c1c9b9561fe37d23efbe87e7019c44d97c014780d80cf378553dc5fd6fc367a01a75ba3767658da898f1438f5eeafe2a448aa69d7b7caaceeb6f5975ee5c7b644c3a7916476cad2b229dd96e1d9d79e5f2a608d0efb2169a4712caff9d0b1868762719be0e9af951489967f4baf5fbbfb0b1ff40ddb2e03e367c0520e3c18b1888a5d96336a323a631d1b0cf4e8d5d1d6837adcfdcdae731ea4be91021d51c58bf73266f6690115343dd89df8c67061bb756b80f18682f581fc98dd2df2d8cae7d9b55e0d092448a4dbaccfcf8533926a90bdab33967430fd3885b73ddcef02636c92c494eec02da841810d0a8897fdff237cdf20a554de6a3f0932bfd487a15dae08ae3899bfab30af88dc5904decf387c72f06e841b5a427478211e2b7739fcc700acbbb937c6120a46e545768a682791e2a5c5275529f7671c583a54bf343fc44f4302b14b3b4026d484c27eefc3237b63c8724b8b480145ba13952b1d143ab649d22fa64a9b55fb9fe5caa03c149161da3c889fb470d693317cac65e36fdf68b5d310d19d748985bbfb96a020504d5f136f2618d7577b0d5fc52c91d5a304a603dd76ec4a261b9d7c0dff4e87e299b29490375f39c48c23894e67c4bb6df0b63698690e09553952c7030a414d0a9b0c2df515b1fe6c62273f57ae3784a1772212fffa559bfb80834bae3788f7796e86726d25fbeccdd75556ed59245f19eed1820f28b9b2d798770b79a86da72a2d195bdbf3c42c802edc19c22541526c79eea586de53bce741eb667aded63e09cd2fd4295187d7b24ca10715361891dfb69c3d50f7f387bebae6a51e90ac87e2061c1e03cfb4fcca8a76b04444e7586bdfbe11c5c6a91dc944eac32b2c5a79b5d54f2f5652ffded0ee325a75e2001a3ebbec0451b3e07a3e00eacb266a5c4788b88ad18c8ada7e8b2a7f1c1ae15d566513f4f077e5f1eb898059a4419e032f35cd643411d89856ef98474d76ddb0d50f440a4d7479e7f44d4e23a3d4fec680b6780fab44739811edbdfaa5d54023f2d594f9a3616048ec618a7d33333f83095a24f1ff10cca9c8ba9f3e154ecb884d8270a1ed68d62711210bb0f24eb4c9851b8e59517395aaae34d43055386c80378f04e37769e5180dd05bdaabe94758d3bdfc3699d81d5384b920c7a2a457cdd8a2755ff4691812b580f4ceae129dcd169003327b5df64cd2f2fdc41965f2174de5900fcb579d8e5f2d7a1353094923b690e852af7f49e204603dbc0be156a494767cd5fcea108ac5f0da35179feb6c6941cf9d92c978090a71a51c43067b2990874c07cdd33ed616beb1ff04de98d0217ae076bc62c27039edcf3b6c396dbb186aeb173664b72334abea372d171619c466701f46d6142e58cbe17f9f5039e236601e2de2bc15100c9b7278f53b7660734035a868c979379f686fea4260c515260d0128cf76fd17cfe3571c4b149c536be635053125c80fec9e4494ff59136f3775d2c5f2bb829f00e8869b33607ab98bd39b32d98c1be3856ff89a325920ccf94adf0e35932db84e043d6b75d92c4e474729e8cd1a6404e08dd54abb0837fde604628542a316a8246a6a083dc1d299427bfeebeabf1bc90f8d0994d5784a9c8f2f7f8dd88ed305ca464ba437eab895ad61a551fe4e72e73c1191e24a4eb87d4c20de0cee8abc00c7c4584b3bd3b2030b97a46b0b9c883aa1a035614448c6f03b0039f23c830ce03a7dd792679894e670edba1b6d896395f322dd45ad0f1731577f537571fab68e6c58b6aca609ac816aefeaefba6d96949c371b8e92d699ccc58635261f4eba64c020c1132be164f54af4723639a70e5306682ba49228c47263b0f18379ab0dbd5d3ac1e868fd209425b0857d096653938cbee32b7173836c8f1fcc3e9339d408440fec2bce72dd2a271e3cdf1f023cf672ee4352b940627ad1b7e91651a3417525eb3dc79970d2bd18755eb4f8d74ec5dcf89ac041aa420a28465e7555cfd7289a6a68b47e1dd01e598b661865f5e158bfea0ded498eb7903823c19aba1660276830df40f4e71bce0e4f53596ae4d68ff3c58871b02deaffe89ba66fc2a92be7681bb4896b8e6c7d812453e87285661140773ae374be3d285dedc3b6067e132886cd58f5e5987c8173271ce53ee903c0001275f9b222333d08b7f7b7c3f844ad524d371f6d2aa7ba47a6fdf189e2bef451905b2d4d989c7c60360ba99af1ca42fff1a059bba94289d8d3d037598dd965883fba6038a2df57f444de68391f77602fff36d866e7d4f6adc4c835080c707370b4f92f8c9487033729470c551c1a0cdaca0a8e665694cd6106bc1a3c19b32d136a7f3c21addf0933ea3a516f7a774fae6393ce20bb63cddec478380271b25d9892059a0e9ee9ca69399a9cac92ae2f5dfc5582c776ddfed8610c8eb41e1b41b43d7b9b492ce402d270d495fc808dfaf95dcec63283c72d7ae687902edd723a7571b08901b62afbac00b12c76468b30578b1c72cd2c53ea8a033ec2057866503918b0a3439d16c8a151340a6ffbeacb85585db0cd64253ed4ad2202544c33e54d88af7c68341be3bb8099397595c3f8712922c2c6e17f0d6a1a517932fd87be65dd364e68d3da9a082c494131101b46be3feb606ae4234a46df3498d6d0b313974a8ec9af00b49a7de2eae783c271319331c72410f089d2f7aa5f81b3636f2075056f9cb72bc9f77d528a36c649d61168d452e839424105b9b86844b7c30e030d918e0442a328f2edaa020b71d679f76c84bed30debc910e9a518b99fe989211da04e0fc32af1aeb6c1785d32f594402cf205150b1be9fd773124cd6d4b4669f2931e0f70758df073d95cdd6006060da5de262ea7d2d4838713191622589e4a1a6479650185bd8c0e4b9df8d865a0ce811959a58a5f6b2417f5aa9eef468add900eca0edeb7640eda7b1ce4ac80349b0101111a0ad4b19c070e690bbfdba70370ac0c97810309dcfa2ed157f746260d8cbed21be7e4544dc12511882b35d11b5833389e839d212c013d97f8911a7d0660cf69fcf456bafb407bd474ca42b6c3c1ef5f14bdad6de9080353fa727ea66f11165e2b46f9b4a2ca4e8ae4c39fae5f5022358a8a1999364a9820a2632e243d034469f5ec169ad5b7b5e00a18e14aeaac66b44a6894ef003a30b16dd5b9f663eb272fb56657f752b573dcb476e623a8aaac2e27c2eb251ce8b2829448e49af4cd86613ecad4426bb4ec115e4e13639ea0aa7934cd919d3dbd21b0c5a9d087fb4670e740dbde8495ed1ad95117f3a6550bfdb5a2d16f613e94ec8aa71f7c41843b5fd5fd91a5e4def5620b4ac21fbaa90cb18b13d034d05e9cb83be0514a0bfe8f8d1edac3d5ee93e039f0d6d05d9760263c6116b9fdadf69ef630818415005674b6e30503a8dcf6d92440ec44c400cb8f104bd1300f39767cdab549098d3a28ece4b225f63dbad7045a7c86f8f93c0c4c4864c7ff2093bdce148fbcf4dfe56c9e3c839f6ead64e0157e30f7731742bb87910d19f6a0b018b8a19d63cd8a13de1b738bc43bf166e7ab99b165d145da6b695bc4e6e02f4e75a540a9a2fe4df78b7dfd94686903f1dfd451f6395856e8a8865b8ba3e2f3c62f16b7f88235c70acf235e7e862096a286e3d5da4faf32f1a59c9580aa6acd8d3a5765770b47ab34d3471012c0beba6dd970b9b9f8f266e63417596e46721e9558b7513f6c50c92c5f8732e033e5a5b85771b5ce5d38f095266309f31f5f8161fcde7d31c83c702c18797fe1ec762521c5eb499420c70ff391653fc4c1bd67b7b671f609ec6c786001cda02a56a5e1ab4084e5e57425b191abd5f97b3328ff19b506d6b273cc1e07c9ca1f644bac536e55e3df9cbaf2c5fb3ea0d7da063c90da651eac76c111f01ea38bf18d016fb09cf1938c1567a5844dd4ce7a884871a8db6feafe9424e478b5ec82c7860be095d119c330246d41adad48aeb2871e82033a3b77f5f35a687c94ebecf05177ba7dc97de5f6c2116480b1b635d7a9e61b1097dcb79543b008a595ddcdcb4be602621f43ae331aeef16a53de7f7537d4ace4d7568cf24e02dc8d5ab3ba7998391ab4", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x18, 0x0, 0xa, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x12004004, 0x0, 0x8, 0x40000000, 0x2, 0x0, 0x0, 0x100}}, 0xffffffffffffffd1) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.582935426s ago: executing program 2 (id=568): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x564b143a, 0x83, 0xfffb, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000004}}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) shutdown(r4, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000280)={0x18, 0x0, r3, {0xf}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 2.50744915s ago: executing program 2 (id=571): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2d667fc4af"], 0x15) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.450717724s ago: executing program 2 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x8994, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x80a0000, 0xffffff75, 0x0, 0x6, 0x0, [{0x40, 0x7, 0x9, '\x00', 0x7}, {0x1, 0x6, 0x41, '\x00', 0x2}, {0xdc, 0x10, 0x6, '\x00', 0xb}, {0xf, 0x3, 0x1, '\x00', 0xc}, {0xa7, 0x40, 0x28, '\x00', 0x1}, {0xd0, 0x5, 0x5b, '\x00', 0xa1}, {0x3, 0x0, 0x9, '\x00', 0x6}, {0x9, 0x8, 0x34, '\x00', 0x8}, {0x2, 0x0, 0x3, '\x00', 0x1}, {0x5, 0x1, 0x0, '\x00', 0x5}, {0xa, 0x1, 0x32, '\x00', 0xd}, {0x2, 0x4, 0xfc, '\x00', 0x7}, {0xce, 0x0, 0x6, '\x00', 0x3}, {0x3, 0xf2, 0x3, '\x00', 0x43}, {0x7, 0x29, 0x4, '\x00', 0x7f}, {0x2, 0xfb, 0x8, '\x00', 0x94}, {0x9, 0x1e, 0x8, '\x00', 0x9}, {0x10, 0xa, 0x99, '\x00', 0x1}, {0x6, 0x2, 0x7d}, {0xb8, 0x17, 0x81, '\x00', 0x2}, {0x5, 0x5, 0x4, '\x00', 0xfe}, {0x40, 0x3, 0xf8, '\x00', 0x1a}, {0x9, 0x6, 0x7, '\x00', 0x80}, {0x43, 0x7, 0x1, '\x00', 0x1}]}}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r9, 0x8008976) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000003000000000000000000000000800000"]) r10 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x400041c0}, 0x24000004) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r12, 0x8955, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x20, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x10}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x16}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xcb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 2.450112434s ago: executing program 2 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa7337e99116097b1e5c6d87e07e2579"}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_usb_connect$uac1(0x1, 0xcf, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xfd, 0x70, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x0, 0xcd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x1, 0x1, "8f01d86bbab9d3"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x28, 0x3, 0x4, 0xd, "5fd7a41d02"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x2, 0x6, "20f839e28953"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x8, 0xf5, "e80a7477a768a207"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x10, 0x0, {0x7, 0x25, 0x1, 0x1, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0xa9, 0x6, "", 'ID<'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x18}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x1, 0x0, {0x7, 0x25, 0x1, 0x6, 0xe4, 0x4}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0xed, 0x7e, 0x8, 0x3}, 0x58, &(0x7f0000000380)={0x5, 0xf, 0x58, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0xf00, 0x0, [0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x6, 0xff00, 0x7f, [0xff00, 0x3f3f, 0xff0000, 0x30, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x9, 0x2, 0x4, 0x28}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x1, 0xff}]}, 0x9, [{0xe1, &(0x7f0000000400)=@string={0xe1, 0x3, "c579316e8f0fd1ab576b6f9e271e67e2b1a470f49820c510267129cc086e3a3e6ba0939a68efd8d40b4107aa222bd511b28b4f220cd4b37d8a660aa960c5b33d6759a22b3056195d8ea0ac2a1f7ce382e49b27aed4964138773f7b65ae4b555a7e26b545eb516f5bdbb0cbc956f0297d0e0a717e41d1e5e4c40af9a5c750c92a746b41f1bf38a6f9ab4b1140811f3be62c6b71b5db5ebb3ee20db367c9bc4baca4fb196a2c4757be38e6252f8f417350a0fccd5443b72c4df35f660e1f28e081a67477c63a66aca8aec52080cdddec8b72063b34001e4b99c759aebf1a73cf"}}, {0xa2, &(0x7f0000000500)=@string={0xa2, 0x3, "d460bfc7cd0792d7de117bf0c8eb22b05da2e172d3c143baf92cd166ce2d8819963209af99eb1e7bcbd3d4b256ed3a79e23bd797f9cd65ccdea66572f346875fe4a038d12963560127bc049185cbd90f1d8d926195dea23a9d1838e2ebef64ba0000845c5c6ecd59e0766e168aaab805078facdcc02560ff1c603da140ff404b24207d80da883b63324cb119b2e8c68a683b2f987a8d11bd679c8e36fa135df4"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0xcf, &(0x7f00000005c0)=@string={0xcf, 0x3, "e4464b71a67a57208da02ad0acfce246593860e8288faf029be9f538cf8195f482183a49ce7f21fd94bfb7672bcea777e93e25e752e7ab775cfd345f44069d219b3db74fb4404f208c47cb2cab835f99d031e40054832c990035aa8f06dd102c3f02583b6384542dc0331a2d4fa97bd93126c194bc2b8ad3be8e85181e06c75ae98c44e0287e922c5efc8d2fd731d97ab9ed9f1b49bf7fc45dab61639360ed12667031db0a2f2cc90b7fb472d183b91030d1cf40b372eec4152a15258b0b0e2ec451dd4a194fd36db4289babf7"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x843}}, {0xdb, &(0x7f00000007c0)=@string={0xdb, 0x3, "03db2695166058342b95fe273ac81f52e56f34e344e58da64bb1076ba087f084537b61f3571304a3bb94bcdf9272a0e9866280010f2c439ad6f4dd440bfeaf0ed3f94bbdf6442d3b9d8f7179b4436a0c2ad6b06f80367046c1115a306490a44da6d7437f1026c3077e72403f2e4f6561f11df59dcf1a43091096c7628e817a28ab90124c7f712656ce71da515120e681ef9d4fdb9365cde9ebc39409bfa4e808806e98ec7b72eb8790a108c06734e45d2757280145b26512662e6808b42462cff309f3996339d885f6f9fb86ca8ca7bbc5bbf85dcaadfc5bba"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x449}}, {0xd7, &(0x7f00000008c0)=@string={0xd7, 0x3, "d91691ee414cbf099f949f22b70c88f94c4ec827f023441847d8ed04e7324a44e2b49a4162dcb90a72157cbe616cad592599f873a48dadbb66d94453d41c160ff1fc4dd9c470320dbb5d6298ee85b9a9e245f631d517755e904d406381866c89b26830d453b322885ac6d800da6ad304529b9dacd2b65584694d75fad1ed0011f9812443a6e27d438c13303f7eafa8a050183bdaddce654978bfe6586e64df8b2c3cf5dc13d434fbd14939313c1c2b6e089d28a93a3979af95848a87441362e762dd6ddccf538e230a06142d4f54a64092ff79df2e"}}]}) syz_usb_disconnect(r9) ptrace(0x10, r8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000200)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 1.372982943s ago: executing program 1 (id=580): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x0, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x8, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x6, 0x8, 0x0, 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x0, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x4], 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x5}, @feature_unit={0x4, 0x24, 0x6, 0x6, 0x3, 0x1, [0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x0, 0x3, {0x7, 0x25, 0x1, 0x80, 0x2, 0x81}}}}}}}]}}, 0x0) (rerun: 64) fcntl$dupfd(r0, 0x406, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x9) 616.248811ms ago: executing program 3 (id=592): setresgid(0x0, 0xee00, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 581.141533ms ago: executing program 3 (id=593): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x1) getpriority(0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xc5f5, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) unshare(0x62040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x7003, [0xffff, 0x3ff, 0xa, 0x80000000]}, &(0x7f0000000000)=0x54) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x5) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, 0x0) 502.710538ms ago: executing program 3 (id=594): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x80000001a) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = syz_open_pts(r2, 0x41082) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000100)={0x5, 0x5, 0x146d, 0x3, 0x5f, "1ea05a6d3996a93bdb891717c4ea15a571442e", 0x0, 0x6}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) (async) unshare(0x60000600) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f0000000a80)=""/181, 0xb5}, {&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000480)=""/85, 0x55}], 0x9}, 0x1009}], 0x3, 0x40012160, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000500)={0x0, 0x0}) ioprio_get$pid(0x1, r7) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 483.982479ms ago: executing program 3 (id=595): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100e2ffffffffff400101c0"]) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000010000800006000000000000043a6e0c6bd6bad305316093ba3f6b3b79000008000d00"/55]) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0xffff) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r11, r11, 0x0, 0x7a680000) read$FUSE(r11, 0x0, 0xeffd) timer_settime(r2, 0x0, &(0x7f0000000080)={{r3, r4+60000000}, {0x0, 0x3938700}}, &(0x7f0000000100)) r12 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) fsetxattr$system_posix_acl(r12, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000000000000000800060000000000100007000000000020"], 0x24, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r13, 0xc400941d, 0x0) 378.596106ms ago: executing program 0 (id=601): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8990, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r8, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r8, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x220, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')**^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x618}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "438753f412a0770a49140261fda909a7ed2b43c44c495fb9f9b7678b5b2653294eec305f8db01bf6d5794cf45efbad6f40d7feddf788f6fdf424027a72cd70868e47d816a0be84c9cf6bf3359b00e2e6549c77c79f3b5b97a5fd775f0a7406986932f2c0b6003f68567b3c5026e8af8ae6136be19b2ed64da964a626c7590c7c818b3fa2a05b2514373a0154578c360ae82d54e9a1908b14262cb124a2da79b08c393c3963de1a675e93e6f5fd5ddd14"}, @ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "938f3bb72fe87532152bcc2a88ca79c1bd8edb065bf36e61672c97bac898d16170366bbc93631f6fea1660d071d0a37248f19a93c2beea57a7f98d18477a267e3ff9db1bccf6e816da4ba165736bf427c0fdc06ee0f9b1a6616bf0ef58b4886ce3df246efe4d94d9dde36e4e5f0ae22f8cbd8e423b3f6210a5a96bffb238f7bdcdb57693311f9ced98b88ef682368088ff1cc11c91e52d1208e7a34b48659ad879be286c4cd598f619a304d7748e36b4c2bf43cb5924bfb5358aa5626b3e21eb56abce9b1b525b6b6dd2543a5830089e62be7a1cc83f1e813e3153f2612d937b8fbab5e3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffe00}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000810}, 0xc841) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 378.137026ms ago: executing program 0 (id=602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 368.201437ms ago: executing program 0 (id=603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffffffffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00') ftruncate(r4, 0x7fffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0xe0bc, 0x4, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8, 0x6, 0x7, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xdddd0000, 0x2013c0}) setns(0xffffffffffffffff, 0x80) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x22) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="140000000002000000000000ad9676dea757db9ccafec3f2a7546514a125cf4fc95f4304421a514d6b59082507250d35239662c8ac79ed097cc8c00a34da23244fb7865206299b79847361b930ff69caf2"], 0x18}}], 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000040)={0x5, {0xc, 0x8, 0x1ff, 0x11c, 0x14f}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x81, 0x100000000, 0xff, 0x8, 0x98c0, 0x800000000000009, 0x2, 0x9, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x1, 0x49, 0x65f, 0x5, 0x9020, 0x1, 0x8, 0x7, 0xc1, 0x5, 0x0, 0x2, 0xa, 0xd, 0x200000000000096, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0xc, 0x9, 0x888f, 0x3, 0x4, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x5, 0x8, 0x1ff, 0x3fd, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0x200e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0x7, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x6, 0x7, 0x2, 0xcdc, 0x4000000008, 0x2, 0x3, 0x2, 0x2, 0x6, 0x6, 0x8, 0xc0000000000000, 0x400, 0x97, 0x8, 0x0, 0x3007, 0x9, 0x0, 0x6, 0x2, 0x5, 0x8061f, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0xc, 0x4, 0x6, 0x105, 0x1e, 0x0, 0x2, 0x5, 0xfffffffffefffffb, 0x2, 0x5, 0xdfd4, 0xfffd, 0x10, 0x5, 0x3, 0xfffffffffffffffe, 0x53e0f0fe, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xa693, 0xcc, 0x1, 0x3]}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 359.311188ms ago: executing program 0 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x2af) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"]) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) close_range(r5, 0xffffffffffffffff, 0x0) 306.909431ms ago: executing program 0 (id=605): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x14, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40488a0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYRES32=r3]) (async) statfs(&(0x7f0000000340)='./file0\x00', 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 306.694201ms ago: executing program 0 (id=606): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) dup3(r0, r0, 0x80000) prctl$PR_MCE_KILL_GET(0x22) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r2, r2, r2) setfsuid(0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085507, 0x0) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) r5 = socket$packet(0x11, 0xa, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0043051327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ftruncate(r4, 0x10000) fcntl$addseals(r4, 0x409, 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004000) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) 21.038359ms ago: executing program 1 (id=607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x11}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x23}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) setpriority(0x2, 0xff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x101, 0x0) userfaultfd(0x80801) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000500)=""/74, 0x4a}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40000000, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 20.311826][ T36] audit: type=1400 audit(1761643022.940:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.312883][ T282] cgroup: Unknown subsys name 'net' [ 20.334477][ T36] audit: type=1400 audit(1761643022.940:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.361769][ T36] audit: type=1400 audit(1761643022.980:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.361902][ T282] cgroup: Unknown subsys name 'devices' [ 20.542485][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.548072][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.638895][ T36] audit: type=1400 audit(1761643023.260:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.662119][ T36] audit: type=1400 audit(1761643023.260:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.684152][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.686985][ T36] audit: type=1400 audit(1761643023.260:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.718491][ T36] audit: type=1400 audit(1761643023.330:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.725479][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.743897][ T36] audit: type=1400 audit(1761643023.330:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.778336][ T36] audit: type=1400 audit(1761643023.360:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.803864][ T36] audit: type=1400 audit(1761643023.360:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.611840][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.618885][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.625968][ T290] bridge_slave_0: entered allmulticast mode [ 21.632136][ T290] bridge_slave_0: entered promiscuous mode [ 21.644571][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.651611][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.658626][ T292] bridge_slave_0: entered allmulticast mode [ 21.664864][ T292] bridge_slave_0: entered promiscuous mode [ 21.671064][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.678067][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.685132][ T292] bridge_slave_1: entered allmulticast mode [ 21.691257][ T292] bridge_slave_1: entered promiscuous mode [ 21.697259][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.704321][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.711378][ T290] bridge_slave_1: entered allmulticast mode [ 21.717473][ T290] bridge_slave_1: entered promiscuous mode [ 21.723472][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.730526][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.737557][ T291] bridge_slave_0: entered allmulticast mode [ 21.743722][ T291] bridge_slave_0: entered promiscuous mode [ 21.756846][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.763898][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.770953][ T291] bridge_slave_1: entered allmulticast mode [ 21.777050][ T291] bridge_slave_1: entered promiscuous mode [ 21.809137][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.816211][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.823312][ T289] bridge_slave_0: entered allmulticast mode [ 21.829469][ T289] bridge_slave_0: entered promiscuous mode [ 21.841528][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.848554][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.855665][ T289] bridge_slave_1: entered allmulticast mode [ 21.861817][ T289] bridge_slave_1: entered promiscuous mode [ 21.996363][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.003411][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.010695][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.017709][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.027190][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.034250][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.041500][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.048503][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.061853][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.068886][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.076156][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.083186][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.103280][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.110322][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.117559][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.124591][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.147436][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.154656][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.162290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.169397][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.176707][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.184226][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.191504][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.198684][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.210581][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.217603][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.229360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.236402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.256691][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.263751][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.278313][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.285355][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.305398][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.312446][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.320281][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.327310][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.334749][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.341774][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.350759][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.357780][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.388078][ T291] veth0_vlan: entered promiscuous mode [ 22.406315][ T292] veth0_vlan: entered promiscuous mode [ 22.417752][ T289] veth0_vlan: entered promiscuous mode [ 22.438015][ T291] veth1_macvtap: entered promiscuous mode [ 22.451443][ T292] veth1_macvtap: entered promiscuous mode [ 22.458024][ T289] veth1_macvtap: entered promiscuous mode [ 22.472067][ T290] veth0_vlan: entered promiscuous mode [ 22.504378][ T290] veth1_macvtap: entered promiscuous mode [ 22.512153][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.591384][ T339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.591438][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 22.611649][ T347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.626223][ T349] binder: Bad value for 'stats' [ 22.852810][ T370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.892195][ T372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=372 comm=syz.2.15 [ 22.949533][ T384] bridge0: entered allmulticast mode [ 22.977935][ T386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 22.999595][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.009556][ T391] netlink: 92 bytes leftover after parsing attributes in process `syz.2.21'. [ 23.020809][ T391] netlink: 'syz.2.21': attribute type 27 has an invalid length. [ 23.029548][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.150012][ T411] input: syz0 as /devices/virtual/input/input4 [ 23.158041][ T411] 9pnet_fd: Insufficient options for proto=fd [ 23.164416][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 23.175431][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 23.184407][ T45] usb 4-1: config 1 has an invalid interface number: 226 but max is 0 [ 23.192975][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 23.203243][ T45] usb 4-1: config 1 has no interface number 0 [ 23.209330][ T45] usb 4-1: config 1 interface 226 altsetting 137 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 23.209602][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 23.223575][ T45] usb 4-1: config 1 interface 226 has no altsetting 0 [ 23.236203][ T45] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 23.245476][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.253637][ T45] usb 4-1: Product: syz [ 23.257872][ T45] usb 4-1: Manufacturer: syz [ 23.262706][ T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 23.262711][ T45] usb 4-1: SerialNumber: syz [ 23.262729][ T10] usb 1-1: config 0 has no interface number 0 [ 23.286085][ T10] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 23.296538][ T10] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 23.306510][ T331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.314036][ T10] usb 1-1: config 0 interface 41 has no altsetting 0 [ 23.322338][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 23.331495][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.339471][ T10] usb 1-1: Product: syz [ 23.343649][ T10] usb 1-1: Manufacturer: syz [ 23.348234][ T10] usb 1-1: SerialNumber: syz [ 23.353692][ T10] usb 1-1: config 0 descriptor?? [ 23.358936][ T366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 23.366174][ T366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 23.469572][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 23.473508][ T367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 23.475805][ T331] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 23.491898][ T331] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 23.500562][ T331] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 23.509546][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 23.519196][ T331] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 23.529037][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.542276][ T331] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 23.551466][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.560360][ T331] usb 3-1: config 0 descriptor?? [ 23.574599][ T366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.579594][ T394] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.583374][ T366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.601006][ T366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 23.608217][ T366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 23.740244][ T394] usb 2-1: not running at top speed; connect to a high speed hub [ 23.748717][ T394] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 23.758038][ T394] usb 2-1: config 1 has no interface number 1 [ 23.764165][ T394] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 23.778742][ T394] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 23.787990][ T331] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 23.798665][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.808520][ T331] usb 3-1: USB disconnect, device number 2 [ 23.814429][ T394] usb 2-1: Product: syz [ 23.818606][ T394] usb 2-1: Manufacturer: syz [ 23.824460][ T331] usblp0: removed [ 23.828504][ T394] usb 2-1: SerialNumber: syz [ 24.023646][ T10] Error reading MAC address [ 24.028605][ T366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 24.035977][ T366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 24.046347][ T394] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 24.055786][ T394] usb 2-1: failed to enable PITCH for EP 0x82 [ 24.065203][ T394] usb 2-1: USB disconnect, device number 2 [ 24.080050][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.299578][ T331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.444539][ T10] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 24.453867][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 24.461367][ T10] usb 1-1: USB disconnect, device number 2 [ 24.468634][ T331] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 24.477331][ T331] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 24.485960][ T331] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 24.495408][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 24.505207][ T331] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 24.515232][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.528401][ T331] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 24.537511][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.549925][ T331] usb 3-1: config 0 descriptor?? [ 24.757144][ T331] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 25.049918][ T431] random: crng reseeded on system resumption [ 25.309521][ T331] usb 3-1: USB disconnect, device number 3 [ 25.320513][ T331] usblp0: removed [ 25.551660][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 25.551690][ T36] audit: type=1400 audit(1761643028.180:174): avc: denied { setopt } for pid=435 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.577338][ T36] audit: type=1400 audit(1761643028.180:175): avc: denied { create } for pid=435 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.596924][ T36] audit: type=1400 audit(1761643028.180:176): avc: denied { ioctl } for pid=435 comm="syz.1.32" path="socket:[4514]" dev="sockfs" ino=4514 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.627022][ T36] audit: type=1400 audit(1761643028.180:177): avc: denied { write } for pid=435 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.646888][ T36] audit: type=1400 audit(1761643028.230:178): avc: denied { ioctl } for pid=440 comm="syz.1.33" path="socket:[4588]" dev="sockfs" ino=4588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.649754][ T445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 25.674641][ T36] audit: type=1400 audit(1761643028.230:179): avc: denied { getopt } for pid=440 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.711066][ T36] audit: type=1400 audit(1761643028.280:180): avc: denied { getopt } for pid=444 comm="syz.1.35" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.721127][ T45] usb 4-1: USB disconnect, device number 2 [ 25.747137][ T462] FAT-fs (rnullb0): bogus number of reserved sectors [ 25.760479][ T462] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 25.764148][ T36] audit: type=1400 audit(1761643028.280:181): avc: denied { read write } for pid=444 comm="syz.1.35" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.791398][ T460] capability: warning: `syz.3.37' uses deprecated v2 capabilities in a way that may be insecure [ 25.806991][ T36] audit: type=1400 audit(1761643028.280:182): avc: denied { open } for pid=444 comm="syz.1.35" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 25.829940][ T36] audit: type=1400 audit(1761643028.370:183): avc: denied { mounton } for pid=448 comm="syz.1.36" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 25.870341][ T469] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 25.932685][ T475] Zero length message leads to an empty skb [ 25.955475][ T478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 25.955566][ T478] rust_binder: Read failure Err(EFAULT) in pid:27 [ 25.981392][ T484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.001787][ T483] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 26.017111][ T483] rust_binder: Write failure EINVAL in pid:69 [ 26.100568][ T488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.106716][ T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 26.144598][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.165637][ T497] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 26.178092][ T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 26.236519][ T503] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.245636][ T503] rust_binder: Read failure Err(EFAULT) in pid:83 [ 26.299428][ T512] rust_binder: Error while translating object. [ 26.305914][ T512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.312313][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 26.323955][ T45] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 26.346390][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.354540][ T45] usb 4-1: Product: syz [ 26.358710][ T45] usb 4-1: Manufacturer: syz [ 26.364311][ T45] usb 4-1: SerialNumber: syz [ 26.372835][ T45] r8152-cfgselector 4-1: Unknown version 0x0000 [ 26.379174][ T45] r8152-cfgselector 4-1: config 0 descriptor?? [ 26.793693][ T394] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 27.040953][ T533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.59'. [ 27.108860][ T534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.402150][ T549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'. [ 27.599555][ T394] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.659986][ T562] syzkaller0: entered promiscuous mode [ 27.665455][ T562] syzkaller0: entered allmulticast mode [ 27.760687][ T394] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.771226][ T394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.780811][ T394] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.789923][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.797981][ T394] usb 4-1: SerialNumber: syz [ 28.004319][ T540] netlink: 124 bytes leftover after parsing attributes in process `syz.3.60'. [ 28.074060][ T394] usb 4-1: USB disconnect, device number 4 [ 28.243454][ T574] rust_binder: 133: no such ref 6 [ 28.248502][ T574] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 28.719575][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.800407][ T585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 28.819563][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.837252][ T589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 28.872700][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 28.873339][ T592] rust_binder: Error in use_page_slow: ESRCH [ 28.882999][ T592] rust_binder: use_range failure ESRCH [ 28.889293][ T592] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 28.889590][ T66] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 28.898726][ T592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.912603][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:139 [ 28.912845][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 28.957017][ T66] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 28.971477][ T66] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 28.980718][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.988711][ T66] usb 3-1: Product: syz [ 28.992945][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 29.000978][ T66] usb 3-1: Manufacturer: syz [ 29.006101][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.013845][ T45] usb 4-1: can't read configurations, error -61 [ 29.020360][ T66] usb 3-1: SerialNumber: syz [ 29.025753][ T607] rust_binder: Error while translating object. [ 29.025776][ T607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.026106][ T66] usb 3-1: config 0 descriptor?? [ 29.041246][ T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:151 [ 29.048224][ T66] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 29.149584][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.157906][ T617] syz.1.87 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 29.172911][ T617] process 'syz.1.87' launched './file0' with NULL argv: empty string added [ 29.193136][ T620] rust_binder: inc_ref_done called when no active inc_refs [ 29.205253][ T623] rust_binder: Write failure EINVAL in pid:161 [ 29.248685][ T66] scsi host1: usb-storage 3-1:0.0 [ 29.299541][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 29.306100][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.313695][ T45] usb 4-1: can't read configurations, error -61 [ 29.320086][ T45] usb usb4-port1: attempt power cycle [ 29.459570][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.507640][ T626] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 29.609184][ T66] usb 3-1: USB disconnect, device number 4 [ 29.620662][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 29.631201][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 29.640338][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.648306][ T10] usb 2-1: Product: 둨黈艭䠸᪳雃錠첩숮뉵쬮依፾祄쫟쒈狼媗阀ጺ扗偗쬆ᯎඉ毩눞늻쒩ᆆ㣵舄ыﳤ蕫ℛ⭤낞蝎䭫谘롞禀ꑴ뺗첝⑬芵檀捴歭铛慲殑⛠韯⻽ﾔ틦Գ癓抋獈᫁㳠녙ᷩ䗄냞煰ʸ쎟蕌裐묒 [ 29.673433][ T10] usb 2-1: Manufacturer: Ъ [ 29.677942][ T10] usb 2-1: SerialNumber: ኍ曼便ꦜ涅箢ᒺ貽ﵿ鯣類挟㻞혶嚾幌ㅋ怜䲥⒙䓂ꉥ⬺ﳂ姍嘝뾹橞奊虁ع饿鈥↕۬Ừ첱퉥截ꊜ轔⶞솿⥙钬쮞乤Ʞ띄鑢ᇅ [ 29.679559][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 29.719999][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 29.726551][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.734306][ T45] usb 4-1: can't read configurations, error -61 [ 29.869574][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 29.889925][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 29.896607][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 29.904243][ T45] usb 4-1: can't read configurations, error -61 [ 29.911757][ T45] usb usb4-port1: unable to enumerate USB device [ 30.108155][ T623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:161 [ 30.108178][ T623] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.117480][ T623] rust_binder: Read failure Err(EFAULT) in pid:161 [ 30.133561][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 30.152272][ T10] usb 2-1: USB disconnect, device number 3 [ 30.158653][ T10] usblp0: removed [ 30.169564][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.319567][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 30.325805][ T45] usb 1-1: config 0 has no interfaces? [ 30.332094][ T45] usb 1-1: config 0 has no interfaces? [ 30.338333][ T45] usb 1-1: config 0 has no interfaces? [ 30.346454][ T45] usb 1-1: string descriptor 0 read error: -71 [ 30.352693][ T45] usb 1-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 30.361787][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.370287][ T45] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 30.379084][ T45] usb 1-1: no configuration chosen from 3 choices [ 30.386533][ T45] usb 1-1: USB disconnect, device number 3 [ 36.589421][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 36.589439][ T36] audit: type=1400 audit(1761643039.210:235): avc: denied { ioctl } for pid=632 comm="syz.0.92" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 36.597632][ T639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 36.620461][ T633] rust_binder: Got transaction with invalid offset. [ 36.628816][ T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.636047][ T638] capability: warning: `syz.3.95' uses 32-bit capabilities (legacy support in use) [ 36.636247][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 36.647466][ T638] rust_binder: 17: no such ref 3 [ 36.656660][ T36] audit: type=1400 audit(1761643039.230:236): avc: denied { accept } for pid=636 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.666590][ T638] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 36.674643][ T36] audit: type=1400 audit(1761643039.230:237): avc: denied { connect } for pid=635 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.705225][ T638] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 36.730789][ T638] rust_binder: Write failure EFAULT in pid:17 [ 36.749526][ T36] audit: type=1400 audit(1761643039.370:238): avc: denied { write } for pid=653 comm="syz.1.98" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.790118][ T656] ======================================================= [ 36.790118][ T656] WARNING: The mand mount option has been deprecated and [ 36.790118][ T656] and is ignored by this kernel. Remove the mand [ 36.790118][ T656] option from the mount to silence this warning. [ 36.790118][ T656] ======================================================= [ 36.798493][ T36] audit: type=1400 audit(1761643039.420:239): avc: denied { remount } for pid=655 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.838569][ T656] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 36.854631][ T663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.857631][ T36] audit: type=1400 audit(1761643039.490:240): avc: denied { mounton } for pid=662 comm="syz.2.101" path="/proc/58/task" dev="proc" ino=5776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.983711][ T36] audit: type=1400 audit(1761643039.610:241): avc: denied { setattr } for pid=690 comm="syz.2.110" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.019897][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.081730][ T696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 37.149545][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.151208][ T698] binder: Unknown parameter 'measure' [ 37.165014][ T36] audit: type=1400 audit(1761643039.790:242): avc: denied { setopt } for pid=697 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.184851][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 37.190052][ T416] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.202297][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.210746][ T66] usb 2-1: config 6 has no interfaces? [ 37.221290][ T66] usb 2-1: New USB device found, idVendor=7392, idProduct=e822, bcdDevice=18.84 [ 37.230491][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.238461][ T66] usb 2-1: Product: syz [ 37.242840][ T66] usb 2-1: Manufacturer: syz [ 37.247442][ T66] usb 2-1: SerialNumber: syz [ 37.309564][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 37.315866][ T45] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 37.324325][ T45] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 37.333012][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 37.341995][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.351815][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.361637][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.371434][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 37.381237][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.394368][ T416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.404486][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 37.413529][ T416] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.422482][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.434194][ T416] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.443546][ T45] usb 1-1: config 0 descriptor?? [ 37.448584][ T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.457128][ T416] usb 4-1: SerialNumber: syz [ 37.464053][ T36] audit: type=1400 audit(1761643040.100:243): avc: denied { unlink } for pid=653 comm="syz.1.98" name="#1" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.488394][ T654] /dev/rnullb0: Can't open blockdev [ 37.496194][ T66] usb 2-1: USB disconnect, device number 4 [ 37.512197][ T36] audit: type=1400 audit(1761643040.110:244): avc: denied { mount } for pid=653 comm="syz.1.98" name="/" dev="overlay" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.658296][ T45] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.670781][ T45] usb 1-1: USB disconnect, device number 4 [ 37.677203][ T45] usblp0: removed [ 37.848185][ T416] usb 4-1: 0:2 : does not exist [ 37.864332][ T416] usb 4-1: USB disconnect, device number 9 [ 38.095438][ T734] 9pnet_fd: Insufficient options for proto=fd [ 38.129601][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.199149][ T736] fuse: Unknown parameter 'fu0x0000000000000006' [ 38.258123][ T737] netlink: 'syz.1.126': attribute type 27 has an invalid length. [ 38.299536][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 38.305979][ T45] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 38.314513][ T45] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 38.323278][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 38.332364][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.342285][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 38.352122][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 38.372594][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 38.383011][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.396124][ T45] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 38.405298][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.414286][ T45] usb 1-1: config 0 descriptor?? [ 38.533089][ T743] rust_binder: Write failure EINVAL in pid:44 [ 38.533543][ T743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.540626][ T743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 38.621145][ T45] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 38.824975][ T394] usb 1-1: USB disconnect, device number 5 [ 38.833547][ T394] usblp0: removed [ 38.954928][ T760] kvm: kvm [759]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 38.963967][ T760] kvm: kvm [759]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 38.974678][ T760] kvm: kvm [759]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 38.985656][ T760] kvm: kvm [759]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 38.994961][ T760] kvm: kvm [759]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 39.079895][ T765] rust_binder: Write failure EFAULT in pid:179 [ 39.089661][ T767] fuse: Unknown parameter '00000000000000000000004' [ 39.113594][ T769] FAT-fs (rnullb0): bogus number of reserved sectors [ 39.120394][ T769] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 39.120400][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.137915][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 39.147298][ T769] overlay: Unknown parameter 'smackfsdef' [ 39.188002][ T781] loop5: detected capacity change from 0 to 7 [ 39.244098][ T782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 39.261451][ T45] usb 3-1: device descriptor read/64, error -71 [ 39.351084][ T789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.499572][ T45] usb 3-1: device descriptor read/64, error -71 [ 39.519544][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.670773][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.682484][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.693805][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.703847][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.716963][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.731604][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.748754][ T10] usb 2-1: config 0 descriptor?? [ 39.759552][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.889573][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.129651][ T45] usb 3-1: device descriptor read/64, error -71 [ 40.161332][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.168752][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.209536][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.227133][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.237224][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 40.244950][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 40.252724][ T45] usb usb3-port1: attempt power cycle [ 40.263650][ T10] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 40.297715][ T811] netlink: 'syz.0.151': attribute type 11 has an invalid length. [ 40.413052][ T811] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 40.420505][ T811] rust_binder: Write failure EINVAL in pid:90 [ 40.495801][ T820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 40.599526][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.630650][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.760577][ T45] usb 3-1: device descriptor read/8, error -71 [ 40.809531][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.960595][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.972251][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.983271][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.992555][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 41.000723][ T10] usb 1-1: Manufacturer: syz [ 41.006124][ T10] usb 1-1: config 0 descriptor?? [ 41.019534][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.050519][ T45] usb 3-1: device descriptor read/8, error -71 [ 41.180502][ T45] usb 3-1: device descriptor read/8, error -71 [ 41.299543][ T45] usb usb3-port1: unable to enumerate USB device [ 42.014908][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 42.014924][ T36] audit: type=1400 audit(1761643044.640:268): avc: denied { mounton } for pid=823 comm="syz.0.155" path="/31/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 42.044966][ T824] overlay: ./file0 is not a directory [ 42.053188][ T10] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 42.054260][ T839] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 42.063161][ T10] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 42.071270][ T839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 42.076848][ T10] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 42.097535][ T10] usb 1-1: USB disconnect, device number 6 [ 42.270594][ T10] usb 2-1: USB disconnect, device number 5 [ 42.297314][ T843] FAT-fs (rnullb0): bogus number of reserved sectors [ 42.303336][ T842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 42.304090][ T843] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 42.326556][ T847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.348165][ T850] rust_binder: Write failure EINVAL in pid:199 [ 42.588729][ T861] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 42.594958][ T861] rust_binder: Error while translating object. [ 42.603785][ T861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.610016][ T861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 42.709548][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.797266][ T880] rust_binder: Write failure EFAULT in pid:118 [ 42.837505][ T36] audit: type=1400 audit(1761643045.460:269): avc: denied { ioctl } for pid=885 comm="syz.3.175" path="socket:[7522]" dev="sockfs" ino=7522 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.879025][ T36] audit: type=1400 audit(1761643045.500:270): avc: denied { read write } for pid=887 comm="syz.3.176" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.880438][ T66] hid-generic 0001:7A29:80000000.0003: unknown main item tag 0x5 [ 42.903686][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 42.910208][ T888] __vm_enough_memory: pid: 888, comm: syz.3.176, bytes: 18014402804453376 not enough memory for the allocation [ 42.915408][ T36] audit: type=1400 audit(1761643045.500:271): avc: denied { open } for pid=887 comm="syz.3.176" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.929292][ T66] hid-generic 0001:7A29:80000000.0003: unknown main item tag 0xe [ 42.951362][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.958059][ T66] hid-generic 0001:7A29:80000000.0003: unknown main item tag 0x6 [ 42.967935][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.975958][ T66] hid-generic 0001:7A29:80000000.0003: unknown main item tag 0x4 [ 42.986238][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.992708][ T66] hid-generic 0001:7A29:80000000.0003: item fetching failed at offset 55/84 [ 43.001483][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.010236][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.018162][ T10] usb 2-1: Product: syz [ 43.025876][ T66] hid-generic 0001:7A29:80000000.0003: probe with driver hid-generic failed with error -22 [ 43.029772][ T10] usb 2-1: Manufacturer: syz [ 43.045568][ T10] usb 2-1: SerialNumber: syz [ 43.059563][ T416] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.089743][ T36] audit: type=1400 audit(1761643045.720:272): avc: denied { map } for pid=889 comm="syz.3.177" path="socket:[6875]" dev="sockfs" ino=6875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.112651][ T36] audit: type=1400 audit(1761643045.720:273): avc: denied { read } for pid=889 comm="syz.3.177" path="socket:[6875]" dev="sockfs" ino=6875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.189623][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 43.196445][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.203085][ T893] binder: Unknown parameter 'context[7' [ 43.207386][ T45] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 43.219592][ T45] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 43.233779][ T416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.244710][ T416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 43.257546][ T45] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 43.266893][ T45] usb 1-1: config 128 has no interface number 0 [ 43.273215][ T416] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 43.282326][ T45] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 43.292774][ T416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.300826][ T45] usb 1-1: config 128 interface 127 has no altsetting 0 [ 43.308586][ T416] usb 3-1: config 0 descriptor?? [ 43.314418][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 43.320306][ T859] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 43.323961][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.337494][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 43.338918][ T36] audit: type=1400 audit(1761643045.970:274): avc: denied { create } for pid=858 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 43.354044][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 43.366913][ T45] usb 1-1: Product: syz [ 43.377145][ T706] udevd[706]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.380414][ T45] usb 1-1: Manufacturer: syz [ 43.400391][ T45] usb 1-1: SerialNumber: syz [ 43.411719][ T10] usb 2-1: USB disconnect, device number 6 [ 43.421679][ T36] audit: type=1400 audit(1761643046.040:275): avc: denied { setopt } for pid=900 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.448588][ T36] audit: type=1400 audit(1761643046.080:276): avc: denied { compute_member } for pid=905 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.474697][ T912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 43.716820][ T416] uclogic 0003:5543:0522.0004: No inputs registered, leaving [ 43.735116][ T416] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 43.782672][ T45] usb 1-1: USB disconnect, device number 7 [ 43.784439][ T706] udevd[706]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.874633][ T917] rust_binder: Write failure EINVAL in pid:207 [ 43.913826][ T924] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.941037][ T928] rust_binder: Write failure EFAULT in pid:218 [ 43.952681][ T36] audit: type=1400 audit(1761643046.580:277): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=501 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 44.510306][ T951] netlink: 1323 bytes leftover after parsing attributes in process `syz.3.195'. [ 44.663092][ T972] rust_binder: Error while translating object. [ 44.663138][ T972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.669448][ T972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 45.110284][ T995] netlink: 51 bytes leftover after parsing attributes in process `syz.3.210'. [ 45.240063][ T999] binder: Unknown parameter '' [ 45.499538][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.548811][ T1003] rust_binder: Write failure EFAULT in pid:139 [ 45.571048][ T1008] exFAT-fs (rnullb0): invalid boot record signature [ 45.583862][ T1008] exFAT-fs (rnullb0): failed to read boot sector [ 45.590228][ T1008] exFAT-fs (rnullb0): failed to recognize exfat type [ 45.605763][ T1011] rust_binder: Write failure EINVAL in pid:147 [ 45.606547][ T1011] rust_binder: 147: no such ref 4294967294 [ 45.649544][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 45.655727][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.665881][ T10] usb 4-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.678832][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 45.685457][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 45.694498][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.703039][ T10] usb 4-1: config 0 descriptor?? [ 45.708955][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 45.873535][ T10] usb 3-1: USB disconnect, device number 9 [ 45.912184][ T45] usb 4-1: USB disconnect, device number 10 [ 45.947608][ T1016] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 46.037775][ T1029] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 46.045580][ T1029] netlink: 17 bytes leftover after parsing attributes in process `syz.3.222'. [ 46.471958][ T1039] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 46.481752][ T1039] netlink: 104 bytes leftover after parsing attributes in process `syz.0.225'. [ 46.491557][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 46.562165][ T1041] rust_binder: Write failure EFAULT in pid:158 [ 46.613043][ T1052] binder: Unknown parameter '0xffffffffffffffff' [ 46.706680][ T1057] rust_binder: Error while translating object. [ 46.706748][ T1057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.712947][ T1057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 46.743729][ T1066] rust_binder: Write failure EINVAL in pid:135 [ 46.753877][ T1066] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 46.760095][ T1066] rust_binder: Error in use_page_slow: EFAULT [ 46.770568][ T1066] rust_binder: use_range failure EFAULT [ 46.776833][ T1066] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 46.783012][ T1066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.791080][ T1066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:135 [ 46.842754][ T1077] block device autoloading is deprecated and will be removed. [ 47.349572][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.496166][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 47.496183][ T36] audit: type=1400 audit(1761643050.120:306): avc: denied { listen } for pid=1113 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.503056][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 47.531632][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.541342][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.549313][ T10] usb 4-1: Product: syz [ 47.553501][ T10] usb 4-1: Manufacturer: syz [ 47.558079][ T10] usb 4-1: SerialNumber: syz [ 47.662297][ T1138] netlink: 'syz.2.261': attribute type 4 has an invalid length. [ 47.670041][ T1138] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.261'. [ 47.687401][ T1132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.687425][ T1132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 47.755116][ T1140] rust_binder: Error while translating object. [ 47.764590][ T1140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 47.770821][ T1140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:230 [ 47.772152][ T1112] rust_binder: Write failure EFAULT in pid:193 [ 47.799113][ T1112] rust_binder: Write failure EFAULT in pid:193 [ 47.805642][ T1142] binder: Unknown parameter '0x0000000000000003' [ 47.819033][ T1112] rust_binder: Write failure EINVAL in pid:193 [ 47.823262][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.856694][ T10] usb 4-1: USB disconnect, device number 11 [ 47.928292][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178 [ 48.038362][ T36] audit: type=1401 audit(1761643050.660:307): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F62696E64657266732F62696E64657230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 48.064036][ T1163] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 48.174109][ T1165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'. [ 48.209605][ T331] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 48.299284][ T1181] netlink: 72 bytes leftover after parsing attributes in process `syz.2.277'. [ 48.308690][ T1182] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 48.339128][ T1193] netlink: 92 bytes leftover after parsing attributes in process `syz.2.281'. [ 48.355862][ T331] usb 2-1: device descriptor read/64, error -71 [ 48.415919][ T36] audit: type=1400 audit(1761643051.040:308): avc: denied { bind } for pid=1192 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.435225][ T36] audit: type=1400 audit(1761643051.050:309): avc: denied { listen } for pid=1192 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.599532][ T331] usb 2-1: device descriptor read/64, error -71 [ 48.839584][ T331] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 48.979545][ T331] usb 2-1: device descriptor read/64, error -71 [ 49.045477][ T1218] netlink: 'syz.2.288': attribute type 4 has an invalid length. [ 49.053377][ T1218] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.288'. [ 49.152289][ T36] audit: type=1400 audit(1761643051.780:310): avc: denied { setopt } for pid=1227 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.239548][ T331] usb 2-1: device descriptor read/64, error -71 [ 49.349637][ T331] usb usb2-port1: attempt power cycle [ 49.469389][ T36] audit: type=1326 audit(1761643052.090:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d918efc9 code=0x7ffc0000 [ 49.492664][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 49.500239][ T36] audit: type=1326 audit(1761643052.090:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d918efc9 code=0x7ffc0000 [ 49.523665][ T36] audit: type=1326 audit(1761643052.110:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d918efc9 code=0x7ffc0000 [ 49.547130][ T36] audit: type=1326 audit(1761643052.110:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d918efc9 code=0x7ffc0000 [ 49.570568][ T36] audit: type=1326 audit(1761643052.110:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1237 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa0d918efc9 code=0x7ffc0000 [ 49.689566][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 49.689672][ T331] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 49.695839][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.712259][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.722417][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.730690][ T331] usb 2-1: device descriptor read/8, error -71 [ 49.731497][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.745655][ T45] usb 1-1: Product: syz [ 49.749851][ T45] usb 1-1: Manufacturer: syz [ 49.754430][ T45] usb 1-1: SerialNumber: syz [ 49.839595][ T404] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.860559][ T331] usb 2-1: device descriptor read/8, error -71 [ 49.961497][ T45] usb 1-1: 0:2 : does not exist [ 49.968104][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 49.979205][ T45] usb 1-1: USB disconnect, device number 8 [ 49.987399][ T706] udevd[706]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.004198][ T404] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.014319][ T404] usb 4-1: config 0 has no interfaces? [ 50.019798][ T404] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.028800][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.037394][ T404] usb 4-1: config 0 descriptor?? [ 50.111127][ T331] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 50.130685][ T331] usb 2-1: device descriptor read/8, error -71 [ 50.260623][ T331] usb 2-1: device descriptor read/8, error -71 [ 50.279864][ T45] usb 4-1: USB disconnect, device number 12 [ 50.304735][ T1256] random: crng reseeded on system resumption [ 50.369620][ T331] usb usb2-port1: unable to enumerate USB device [ 50.382003][ T1262] 9pnet_fd: Insufficient options for proto=fd [ 50.719613][ T331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 50.749599][ T404] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 50.871643][ T331] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 50.882618][ T404] usb 4-1: device descriptor read/64, error -71 [ 50.888990][ T331] usb 1-1: config 1 interface 0 has no altsetting 0 [ 50.897566][ T331] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.40 [ 50.906979][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.916857][ T331] usb 1-1: Product: 晩뾘ꢈ悉멩憩胄⊅䐖꿙᜴ﶏ湕㏀ꝇ쉹⵻补붋醤㭮恫栥亃ᬷ४秱嗡ⰵ붝⫂폕䌺㝑뛣儚⋼鮃쬾䭃㗖軘鎁첌艰販ҁ [ 50.935396][ T331] usb 1-1: Manufacturer: ﳿ [ 50.942809][ T331] usb 1-1: SerialNumber: 昂䈇간㣱榦寞楄倭埈♹멳捽戰鵅賩仄켐颅৯᥋‎枥ꬽ丑桖⃠릾琮዁⾑囤ᕁ摏૳룚㸗ㅂ慣ﶞ從蓒弾䜯⺻瞍油譆豾쇻씑湙མ豌랑ꛪ偵뽽㞰尜希❇ [ 51.062320][ T1293] rust_binder: inc_ref_done called when no active inc_refs [ 51.062338][ T1293] rust_binder: inc_ref_done called when no active inc_refs [ 51.071594][ T1292] rust_binder: Write failure EFAULT in pid:241 [ 51.119612][ T404] usb 4-1: device descriptor read/64, error -71 [ 51.121433][ T1295] netlink: 'syz.1.316': attribute type 12 has an invalid length. [ 51.213116][ T1301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'. [ 51.222135][ T1301] tipc: Invalid UDP bearer configuration [ 51.222159][ T1301] tipc: Enabling of bearer rejected, failed to enable media [ 51.287291][ T1307] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 4084) [ 51.287340][ T1307] rust_binder: Error while translating object. [ 51.298041][ T1307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.304235][ T1307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 51.359534][ T404] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 51.387360][ T331] usbhid 1-1:1.0: can't add hid device: -71 [ 51.393411][ T331] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 51.402779][ T331] usb 1-1: USB disconnect, device number 9 [ 51.509569][ T404] usb 4-1: device descriptor read/64, error -71 [ 51.729557][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 51.749543][ T404] usb 4-1: device descriptor read/64, error -71 [ 51.859636][ T404] usb usb4-port1: attempt power cycle [ 51.880534][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 51.891467][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.902583][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.912682][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 51.916862][ T1327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.925871][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 51.926534][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 51.953570][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 51.962042][ T45] usb 2-1: Manufacturer: syz [ 51.967650][ T45] usb 2-1: config 0 descriptor?? [ 52.040480][ T1336] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 52.047757][ T1336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 52.092232][ T1342] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 52.199621][ T404] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.220595][ T404] usb 4-1: device descriptor read/8, error -71 [ 52.349544][ T416] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 52.350578][ T404] usb 4-1: device descriptor read/8, error -71 [ 52.376730][ T1343] /dev/rnullb0: Can't open blockdev [ 52.377295][ T45] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 52.389135][ T45] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 52.397584][ T45] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 52.479556][ T416] usb 1-1: device descriptor read/64, error -71 [ 52.576724][ T45] usb 2-1: USB disconnect, device number 11 [ 52.599591][ T404] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.620690][ T404] usb 4-1: device descriptor read/8, error -71 [ 52.719541][ T416] usb 1-1: device descriptor read/64, error -71 [ 52.760654][ T404] usb 4-1: device descriptor read/8, error -71 [ 52.869641][ T404] usb usb4-port1: unable to enumerate USB device [ 52.959562][ T416] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 53.089232][ T1347] rust_binder: Write failure EINVAL in pid:278 [ 53.089616][ T416] usb 1-1: device descriptor read/64, error -71 [ 53.094502][ T1347] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 53.095813][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 53.095827][ T36] audit: type=1400 audit(1761643055.720:399): avc: denied { accept } for pid=1346 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 53.102148][ T1347] rust_binder: Error in use_page_slow: EFAULT [ 53.137706][ T1347] rust_binder: use_range failure EFAULT [ 53.143791][ T1347] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 53.149340][ T1347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 53.157344][ T1347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:278 [ 53.185043][ T36] audit: type=1400 audit(1761643055.810:400): avc: denied { append } for pid=1348 comm="syz.1.335" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.272099][ T36] audit: type=1400 audit(1761643055.900:401): avc: denied { mounton } for pid=1350 comm="syz.1.336" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.329567][ T416] usb 1-1: device descriptor read/64, error -71 [ 53.439676][ T416] usb usb1-port1: attempt power cycle [ 53.507910][ T1361] /dev/rnullb0: Can't open blockdev [ 53.513605][ T36] audit: type=1400 audit(1761643056.140:402): avc: denied { setopt } for pid=1360 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.555173][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 53.571088][ T36] audit: type=1400 audit(1761643056.200:403): avc: denied { connect } for pid=1369 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.590874][ T36] audit: type=1400 audit(1761643056.200:404): avc: denied { ioctl } for pid=1369 comm="syz.3.342" path="socket:[11319]" dev="sockfs" ino=11319 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.779528][ T416] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.800647][ T416] usb 1-1: device descriptor read/8, error -71 [ 53.816184][ T36] audit: type=1400 audit(1761643056.440:405): avc: denied { remount } for pid=1388 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.851000][ T36] audit: type=1400 audit(1761643056.480:406): avc: denied { create } for pid=1394 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.931163][ T416] usb 1-1: device descriptor read/8, error -71 [ 53.959544][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.109548][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 54.116327][ T45] usb 4-1: config 1 has an invalid interface number: 191 but max is 1 [ 54.124553][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 54.133255][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.143348][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 54.152223][ T45] usb 4-1: config 1 has no interface number 0 [ 54.158288][ T45] usb 4-1: config 1 interface 191 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 54.171615][ T416] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.179189][ T45] usb 4-1: config 1 interface 191 has no altsetting 0 [ 54.187461][ T45] usb 4-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=ef.f2 [ 54.196567][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.204636][ T45] usb 4-1: Product: syz [ 54.208816][ T45] usb 4-1: Manufacturer: syz [ 54.213503][ T45] usb 4-1: SerialNumber: syz [ 54.218635][ T416] usb 1-1: device descriptor read/8, error -71 [ 54.350589][ T416] usb 1-1: device descriptor read/8, error -71 [ 54.385253][ T36] audit: type=1400 audit(1761643057.010:407): avc: denied { write } for pid=1398 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.430735][ T45] usb 4-1: USB disconnect, device number 17 [ 54.459641][ T416] usb usb1-port1: unable to enumerate USB device [ 54.572900][ T1408] cannot load conntrack support for proto=3 [ 54.662886][ T36] audit: type=1400 audit(1761643057.300:408): avc: denied { mounton } for pid=1400 comm="syz.2.353" path="/95/file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 54.804778][ T1424] rust_binder: 328: no such ref 0 [ 54.855198][ T1429] rust_binder: Write failure EINVAL in pid:333 [ 54.855808][ T1429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.862175][ T1429] rust_binder: Write failure EINVAL in pid:333 [ 54.868758][ T1429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333 [ 54.874976][ T1429] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.884105][ T1429] rust_binder: Read failure Err(EFAULT) in pid:333 [ 54.901674][ T1431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.908486][ T1431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.914930][ T1431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:335 [ 55.040385][ T1438] __vm_enough_memory: pid: 1438, comm: syz.1.366, bytes: 18014402804453376 not enough memory for the allocation [ 55.125358][ T1456] rust_binder: Write failure EINVAL in pid:350 [ 55.126187][ T1456] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.133923][ T1456] rust_binder: Read failure Err(EFAULT) in pid:350 [ 55.376283][ T1468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 55.391725][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 55.550579][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.557216][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 55.566270][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.574796][ T45] usb 2-1: config 0 descriptor?? [ 55.981823][ T45] logitech-hidpp-device 0003:046D:C262.0006: unknown main item tag 0x0 [ 55.990668][ T45] logitech-hidpp-device 0003:046D:C262.0006: item fetching failed at offset 4/5 [ 55.999907][ T45] logitech-hidpp-device 0003:046D:C262.0006: hidpp_probe:parse failed [ 56.008078][ T45] logitech-hidpp-device 0003:046D:C262.0006: probe with driver logitech-hidpp-device failed with error -22 [ 56.184272][ T404] usb 2-1: USB disconnect, device number 12 [ 63.600820][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 63.600836][ T36] audit: type=1400 audit(1761643066.230:410): avc: denied { append } for pid=1483 comm="syz.1.383" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.636446][ T1488] 9pnet_fd: Insufficient options for proto=fd [ 63.643103][ T36] audit: type=1400 audit(1761643066.230:411): avc: denied { associate } for pid=1482 comm="syz.2.381" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 63.664720][ T36] audit: type=1400 audit(1761643066.280:412): avc: denied { accept } for pid=1486 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.783101][ T1508] 9pnet_fd: Insufficient options for proto=fd [ 63.869540][ T404] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 64.029512][ T404] usb 2-1: Invalid ep0 maxpacket: 64 [ 64.169811][ T404] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 64.182980][ T1525] netlink: 72 bytes leftover after parsing attributes in process `syz.0.399'. [ 64.197910][ T1527] /dev/rnullb0: Can't open blockdev [ 64.319541][ T404] usb 2-1: Invalid ep0 maxpacket: 64 [ 64.325041][ T404] usb usb2-port1: attempt power cycle [ 64.380615][ T1552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 64.390039][ T1552] fuse: Bad value for 'rootmode' [ 64.403467][ T1554] EXT4-fs: dax option not supported [ 64.446321][ T1565] sit0: entered promiscuous mode [ 64.452335][ T1565] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 64.460122][ T1565] netlink: 1 bytes leftover after parsing attributes in process `syz.2.413'. [ 64.679558][ T404] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 64.699870][ T404] usb 2-1: Invalid ep0 maxpacket: 64 [ 64.829571][ T404] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 64.849924][ T404] usb 2-1: Invalid ep0 maxpacket: 64 [ 64.855316][ T404] usb usb2-port1: unable to enumerate USB device [ 65.038765][ T1588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.038789][ T1588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:256 [ 65.079636][ T36] audit: type=1400 audit(1761643067.715:413): avc: denied { connect } for pid=1597 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.369544][ T416] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 65.519561][ T416] usb 4-1: Invalid ep0 maxpacket: 64 [ 65.649722][ T416] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 65.778825][ T36] audit: type=1400 audit(1761643068.405:414): avc: denied { create } for pid=1637 comm="syz.0.437" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.799600][ T36] audit: type=1400 audit(1761643068.415:415): avc: denied { read } for pid=1637 comm="syz.0.437" name="file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.800304][ T416] usb 4-1: Invalid ep0 maxpacket: 64 [ 65.823296][ T36] audit: type=1400 audit(1761643068.415:416): avc: denied { open } for pid=1637 comm="syz.0.437" path="/103/file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.829107][ T416] usb usb4-port1: attempt power cycle [ 65.894076][ T36] audit: type=1400 audit(1761643068.525:417): avc: denied { create } for pid=1650 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 66.097983][ T1657] tc_dump_action: action bad kind [ 66.161859][ T1660] mmap: syz.2.444 (1660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.189560][ T416] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 66.209903][ T416] usb 4-1: Invalid ep0 maxpacket: 64 [ 66.339571][ T416] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 66.359912][ T416] usb 4-1: Invalid ep0 maxpacket: 64 [ 66.365293][ T416] usb usb4-port1: unable to enumerate USB device [ 66.417091][ T1665] fuse: Bad value for 'fd' [ 66.429223][ T1667] fuse: Unknown parameter '0000000000000000000300000000000000000003' [ 66.577877][ T1684] overlayfs: failed to resolve './file1/file0': -2 [ 66.614908][ T1688] rust_binder: Error while translating object. [ 66.614958][ T1688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 66.621205][ T1688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:360 [ 66.641736][ T1690] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 66.650888][ T1690] rust_binder: Error while translating object. [ 66.659536][ T1690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.665740][ T1690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 66.685595][ T1694] /dev/rnullb0: Can't open blockdev [ 66.728187][ T1698] rust_binder: 369: no such ref 0 [ 66.733499][ T1698] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 66.741054][ T1698] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 67.309155][ T1709] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 67.466476][ T36] audit: type=1400 audit(1761643070.095:418): avc: denied { write } for pid=1720 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.493735][ T36] audit: type=1400 audit(1761643070.105:419): avc: denied { read } for pid=1720 comm="syz.2.466" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.501922][ T1725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.467'. [ 67.952473][ T1758] fuse: Unknown parameter 'gr/up_id' [ 68.030245][ T1777] overlayfs: missing 'lowerdir' [ 68.163269][ T1792] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.171542][ T1792] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.439536][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 68.519528][ T331] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 68.582309][ T1802] 9pnet_fd: Insufficient options for proto=fd [ 68.589643][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 68.595899][ T45] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 68.604391][ T45] usb 2-1: config 0 has no interface number 0 [ 68.610670][ T45] usb 2-1: config 0 interface 184 has no altsetting 0 [ 68.619734][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 68.623786][ T1811] netlink: 'syz.2.494': attribute type 27 has an invalid length. [ 68.628871][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.628894][ T45] usb 2-1: Product: syz [ 68.628907][ T45] usb 2-1: Manufacturer: syz [ 68.628922][ T45] usb 2-1: SerialNumber: syz [ 68.634746][ T45] usb 2-1: config 0 descriptor?? [ 68.663924][ T45] smsc75xx v1.0.0 [ 68.671602][ T1811] sit0: left promiscuous mode [ 68.678178][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.680610][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.685388][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.696185][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.714495][ T331] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 68.723626][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.733805][ T331] usb 4-1: config 0 descriptor?? [ 69.060101][ T1845] 9pnet_fd: Insufficient options for proto=fd [ 69.251732][ T1800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.260287][ T1800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.270263][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 69.276700][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 69.287478][ T331] usb 4-1: USB disconnect, device number 22 [ 70.071681][ T1798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.072493][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 70.081553][ T1798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.101524][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 70.112316][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 70.121993][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 70.132323][ T45] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 70.141814][ T45] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 70.151547][ T45] usb 2-1: USB disconnect, device number 17 [ 70.159567][ T416] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 70.320583][ T416] usb 4-1: config 16 has an invalid interface number: 236 but max is 1 [ 70.328901][ T416] usb 4-1: config 16 has an invalid interface number: 175 but max is 1 [ 70.337506][ T416] usb 4-1: config 16 has no interface number 0 [ 70.343701][ T416] usb 4-1: config 16 has no interface number 1 [ 70.349895][ T416] usb 4-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 70.361117][ T416] usb 4-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 70.371903][ T416] usb 4-1: config 16 interface 175 has no altsetting 0 [ 70.379153][ T416] usb 4-1: language id specifier not provided by device, defaulting to English [ 70.392619][ T416] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 70.401699][ T416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.616905][ T416] usb 4-1: bad CDC descriptors [ 70.622877][ T416] usb 4-1: USB disconnect, device number 23 [ 70.780090][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 70.780107][ T36] audit: type=1400 audit(1761643073.415:427): avc: denied { bind } for pid=1891 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.834073][ T1897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.834109][ T1897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 70.882782][ T1907] IPv6: syztnl0: Disabled Multicast RS [ 70.913345][ T36] audit: type=1401 audit(1761643073.545:428): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 71.128865][ T36] audit: type=1400 audit(1761643073.755:429): avc: denied { create } for pid=1916 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.241627][ T416] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 71.262374][ T36] audit: type=1400 audit(1761643073.895:430): avc: denied { create } for pid=1921 comm="syz.3.534" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.283076][ T36] audit: type=1400 audit(1761643073.895:431): avc: denied { read } for pid=1921 comm="syz.3.534" name="file2" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.305338][ T36] audit: type=1400 audit(1761643073.895:432): avc: denied { open } for pid=1921 comm="syz.3.534" path="/94/file2" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 71.327942][ T36] audit: type=1400 audit(1761643073.955:433): avc: denied { write } for pid=1921 comm="syz.3.534" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.349649][ T36] audit: type=1400 audit(1761643073.955:434): avc: denied { remove_name } for pid=1921 comm="syz.3.534" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.372413][ T36] audit: type=1400 audit(1761643073.955:435): avc: denied { unlink } for pid=1921 comm="syz.3.534" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.421092][ T416] usb 2-1: not running at top speed; connect to a high speed hub [ 71.429770][ T416] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.438465][ T416] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 71.447800][ T416] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 71.456496][ T416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.466586][ T416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.476829][ T416] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.485910][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.493902][ T416] usb 2-1: Product: 䘕룮쵞ᔹ睺릜⋣篸癥妾ۑ伲뀊∛₁ﰪゼ躜仴쩤枃䍳鋭뙤쨊ግㆍ羶ꨮ䐭혺됂柶幍籬ꦹ仭㓷伇⌇ٟ巯⌸ළ圿鯬囨잖 [ 71.510927][ T416] usb 2-1: Manufacturer: 饳멣朇瀣埁甆揃덱놁絚뜹㝦́㕝 [ 71.519080][ T416] usb 2-1: SerialNumber: ఄ [ 71.855749][ T1935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 71.864672][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 72.034888][ T1959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 72.111184][ T36] audit: type=1400 audit(2000000000.260:436): avc: denied { unlink } for pid=292 comm="syz-executor" name="file2" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.389570][ T331] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 72.501082][ T1991] incfs: Error accessing: ./file0. [ 72.506252][ T1991] incfs: mount failed -20 [ 72.540775][ T331] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 72.550332][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.559229][ T331] usb 4-1: config 0 descriptor?? [ 72.564199][ T1996] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1996 comm=syz.2.561 [ 72.565353][ T1996] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1549 sclass=netlink_xfrm_socket pid=1996 comm=syz.2.561 [ 72.593071][ T1996] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1996 comm=syz.2.561 [ 72.630730][ T2000] fuse: Unknown parameter 'bd' [ 72.681736][ T2008] fuse: Unknown parameter 'rootmod' [ 72.772409][ T2012] netlink: 112 bytes leftover after parsing attributes in process `syz.0.569'. [ 73.950634][ T416] usb 2-1: 0:2 : does not exist [ 73.962775][ T416] usb 2-1: USB disconnect, device number 18 [ 74.185606][ T1981] x_tables: duplicate underflow at hook 1 [ 74.192108][ T331] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 74.202170][ T331] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 74.212417][ T331] asix 4-1:0.0: probe with driver asix failed with error -71 [ 74.220575][ T331] usb 4-1: USB disconnect, device number 24 [ 74.259551][ T416] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 74.409569][ T416] usb 2-1: Using ep0 maxpacket: 16 [ 74.415800][ T416] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 74.424633][ T416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.434727][ T416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.444847][ T416] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.453889][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.461877][ T416] usb 2-1: Product: syz [ 74.466014][ T416] usb 2-1: Manufacturer: syz [ 74.470616][ T416] usb 2-1: SerialNumber: syz [ 74.677694][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.686724][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.695735][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.705490][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.713938][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.718828][ T2082] rust_binder: Write failure EFAULT in pid:296 [ 74.722803][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.738697][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.748699][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.757337][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.766060][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.791206][ T416] usb 2-1: 0:2 : does not exist [ 74.801897][ T416] usb 2-1: USB disconnect, device number 19 [ 74.817660][ T1487] udevd[1487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.865356][ T2103] 9pnet_fd: Insufficient options for proto=fd [ 74.904065][ T2115] tipc: Started in network mode [ 74.908988][ T2115] tipc: Node identity ac14142f, cluster identity 4711 [ 74.915892][ T2115] tipc: New replicast peer: 0.0.0.0 [ 74.921346][ T2115] tipc: Enabled bearer , priority 10 [ 74.972011][ T2124] 9pnet_fd: Insufficient options for proto=fd [ 75.079566][ T66] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 75.229520][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 75.236044][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.244543][ T66] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.254316][ T66] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 75.264081][ T66] usb 4-1: config 8 interface 0 has no altsetting 0 [ 75.272119][ T66] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 75.281243][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.289229][ T66] usb 4-1: Product: syz [ 75.293440][ T66] usb 4-1: Manufacturer: syz [ 75.303082][ T66] usb 4-1: SerialNumber: syz [ 75.520634][ T2094] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 75.533219][ T2094] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 75.541636][ T2094] CPU: 1 UID: 0 PID: 2094 Comm: syz.3.595 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 75.553082][ T2094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.563138][ T2094] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 75.569380][ T2094] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 75.588977][ T2094] RSP: 0018:ffffc9000ee97820 EFLAGS: 00010202 [ 75.595044][ T2094] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888107351300 [ 75.603003][ T2094] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 75.610959][ T2094] RBP: ffffc9000ee97a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 75.618921][ T2094] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 75.626884][ T2094] R13: 7fffffffffff0000 R14: ffff88810c264010 R15: ffff88810c264000 [ 75.634934][ T2094] FS: 00007fa0da0a46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.643871][ T2094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.650439][ T2094] CR2: 000000110c3430a5 CR3: 000000011e85c000 CR4: 00000000003526b0 [ 75.658400][ T2094] Call Trace: [ 75.661673][ T2094] [ 75.664593][ T2094] ? __cfi_iter_file_splice_write+0x10/0x10 [ 75.670478][ T2094] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 75.676624][ T2094] ? __kasan_check_write+0x18/0x20 [ 75.681726][ T2094] ? __cfi_iter_file_splice_write+0x10/0x10 [ 75.687620][ T2094] direct_splice_actor+0x279/0x4b0 [ 75.692717][ T2094] splice_direct_to_actor+0x4fb/0xbc0 [ 75.698075][ T2094] ? __cfi_direct_splice_actor+0x10/0x10 [ 75.703695][ T2094] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 75.709577][ T2094] do_splice_direct+0x182/0x270 [ 75.714432][ T2094] ? __cfi_do_splice_direct+0x10/0x10 [ 75.719784][ T2094] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 75.725660][ T2094] ? security_file_permission+0x2e/0xc0 [ 75.731209][ T2094] ? rw_verify_area+0xac/0x230 [ 75.735967][ T2094] do_sendfile+0x5c8/0xfb0 [ 75.740373][ T2094] ? vfs_writev+0xcf0/0xcf0 [ 75.744865][ T2094] ? __se_sys_futex+0x28f/0x300 [ 75.749698][ T2094] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 75.755488][ T2094] __x64_sys_sendfile64+0x193/0x1f0 [ 75.760676][ T2094] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 75.766378][ T2094] ? switch_fpu_return+0x12/0x20 [ 75.771299][ T2094] x64_sys_call+0xa26/0x2ee0 [ 75.775877][ T2094] do_syscall_64+0x58/0xf0 [ 75.780274][ T2094] ? clear_bhb_loop+0x50/0xa0 [ 75.784933][ T2094] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.790807][ T2094] RIP: 0033:0x7fa0d918efc9 [ 75.795214][ T2094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.814804][ T2094] RSP: 002b:00007fa0da0a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 75.823204][ T2094] RAX: ffffffffffffffda RBX: 00007fa0d93e5fa0 RCX: 00007fa0d918efc9 [ 75.831179][ T2094] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000e [ 75.839135][ T2094] RBP: 00007fa0d9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.847097][ T2094] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 75.855056][ T2094] R13: 00007fa0d93e6038 R14: 00007fa0d93e5fa0 R15: 00007ffea50060d8 [ 75.863035][ T2094] [ 75.866050][ T2094] Modules linked in: [ 75.870255][ T2094] ---[ end trace 0000000000000000 ]--- [ 75.871475][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 75.871488][ T36] audit: type=1400 audit(2000000004.030:450): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 75.876269][ T2094] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 75.883811][ T36] audit: type=1400 audit(2000000004.030:451): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.903791][ T2094] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 75.910932][ T36] audit: type=1400 audit(2000000004.030:452): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.931250][ T2094] RSP: 0018:ffffc9000ee97820 EFLAGS: 00010202 [ 75.951042][ T36] audit: type=1400 audit(2000000004.030:453): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.972142][ T2094] [ 75.978817][ T36] audit: type=1400 audit(2000000004.030:454): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.006604][ T2094] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888107351300 [ 76.021540][ T36] audit: type=1400 audit(2000000004.030:455): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.029352][ T416] tipc: Node number set to 2886997039 [ 76.052496][ T36] audit: type=1400 audit(2000000004.030:456): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.057792][ T2094] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 76.088084][ T2094] RBP: ffffc9000ee97a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 76.096090][ T2094] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 76.104108][ T2094] R13: 7fffffffffff0000 R14: ffff88810c264010 R15: ffff88810c264000 [ 76.112120][ T2094] FS: 00007fa0da0a46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 76.121072][ T2094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.127664][ T2094] CR2: 00007fc31e5b3ad8 CR3: 000000011e85c000 CR4: 00000000003526b0 [ 76.135655][ T2094] Kernel panic - not syncing: Fatal exception [ 76.141935][ T2094] Kernel Offset: disabled [ 76.146244][ T2094] Rebooting in 86400 seconds..