last executing test programs: 7m4.086231979s ago: executing program 3 (id=513): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0xffffffff, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0xffffffff, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async) 7m4.085664079s ago: executing program 3 (id=514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440260000010109024a000101000001090400001202ef0600030b"], 0x0) r1 = socket(0x5, 0x800, 0xa8c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) listen(r1, 0xba11) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendfile(r4, r3, 0x0, 0x1ff) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 7m3.594249516s ago: executing program 3 (id=518): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) socket$inet6(0x2d, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x401, 0x10001, 0x8, 0x1bf, 0x6e4e, 0x6}, &(0x7f0000000040)={0x200, 0xf97f, 0x9, 0x7a09, 0x80, 0x2, 0x6}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 7m3.557833157s ago: executing program 3 (id=519): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x2f, @multicast2, 0x4e22, 0x1, 'wlc\x00', 0x1, 0x5}, {@remote, 0x4e23, 0x10000, 0x108, 0x6, 0xe}}, 0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000100)) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r6, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080100}, 0x4008000) syz_usb_control_io(r4, &(0x7f0000000480)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="401d7a0000007a222311938196e25a0cf7f0a22d649d30bad5440bf5207725cf44f023026cea47ea66bca4334cc39c57e91019367e33ed4312d22e6d1d614e7d46ffba465a70c61312f681be39ee627b002897acd4bd0ff7e0e1cacdd36992de1a35857070cb6d39ea4af015ad0d7eec513a0d668aede9529961d447ce51892fa7bd99cd56bbcf08d6a19e86708723ff68"], &(0x7f0000000240)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "f55675f25e5c1d9fb777708383bc3731f340e2dc173f2cb8bba1f9a6b0659762b3ab9171dc172d0514eef643176c87e074be6b2f09e7777890c2f428738ee7ae764b90afe414820ada88560b6a5d2904ab2f09efc8094550ad1e7ebd2d26f5037041da851e4553d95b062ab1aabebcdbb009bc312e60607541aa760d8f68f133176f641b16b7ece3d0f4f421f112d35ce247a63d5517ecab40ca34c1d0796817dbc4546159d729f262dd7c687f54d9688cacf2deceb1c4426d606087994b6ceb7879b15c529a8a0c062673dee532a9ed9444bba28408"}}, &(0x7f0000000340)={0x0, 0xf, 0xc8, {0x5, 0xf, 0xc8, 0x4, [@generic={0x3f, 0x10, 0x2, "b97cfdc0b68e33e0446cbd8ed5e8c8652052d5653a37d07d2b9ba415c86c7a1abdcb34c7702139a42825ca5dec3207860aca8119419285a8301c1304"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xdb, 0x8, 0x8, 0x9, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x2, 0x8177}, @generic={0x72, 0x10, 0x4, "6acf346220bb7db2270a98469dc2d07589871e20a7d708dd9c929e8df51fc69dd679c91166ce9e2e0583c7f9101a629cb55ba4f5ee78937f20ef3ff4adb8ba3dbbcc2b5dfe5fba7cd8d3c28fc3f24cb4358c39e6b7ee0f89f858df4252860b7e2b7554d0de550e366e63ced4a72f67"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0xf4, 0xdf, "d755b2ad", "0a6d8393"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x1, 0xd, 0xd5}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x40, 0xa, 0xe9, "79c411e42332fffebe15f112dd826070f8c6bc8a5a2988f91b3c52fdb28e56864a3cad30ae2959a565a9d6b6916660bc5531b4fd55052631c61a4fff652276844b027150a350cd729df4d497d4495016fe941faeeb0c0508f2da5c0000afe39b007c6b834015d886cfabb15884a499bcd9098b2f877228190a2ba5fbab52136d36c1a516f2b035883ed9820fa587642910643a95af73997f237a1495027a912dfc9ff1ea8bf6b2b6a12135175825c5d377ff4841c0b11c4e6cbde421b1de9111ca385f6e3aabcda7d5ab19f59e1188817c2f028b40e15ea0e88744ceb0f0f47a0b1f009cea6326b95e"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x10, 0x40, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0xb, 0x2, "e337"}, &(0x7f0000000780)={0x40, 0xf, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'oH'}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0xe9}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xfa}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0xb}}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001280)={0x8, {{0x2, 0x4e21, @remote}}, 0x0, 0x1, [{{0x2, 0x4e22, @local}}]}, 0x110) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_usb_control_io(r4, &(0x7f00000016c0)={0x2c, &(0x7f00000015c0)={0x0, 0x1, 0x89, {0x89, 0xe, "39dae62b3b5c79d3311fdc92fdbe1e58c8e1e3348cc5367ec828c9fac8dadbd1abe259ebc08ab667efadbb540aee2437137df11f893e71c1daf78f0ba4a9749cb89284802a9d2c066a2cef9aa3b0f0f6f4438396175bee552628b7bb8d928007b1156c771dd55c737ea392cb745c8cc70f305254571475a5686c53b837f0fa74d9cf6e137a3394"}}, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0003040000000403240516f53d50325e2c1221575c216f984ddc6d54786c824af36ed15f2cf82b7d95b99a019991ba49b2a3d3c8e7cb98f6f01cb1827cbe565e3ff20bca57e5fa118ecc474d8f77729ef225f403f3f47ce0d6c01a8243bc4b24dfee60e4134037940d224be96c928ce507d7c1eeb93726cfe556e720b382ad990aa37ed8597249cf5b67742ef6"], &(0x7f0000001780)={0x0, 0xf, 0x15e, {0x5, 0xf, 0x15e, 0x5, [@generic={0x44, 0x10, 0x2, "57a1ca68d49f28f08ce9971562ba3e7b4646ff751c72f18319da6674579cc14b561bbdbcf0e0f7e1f070ee12953ecdab470febdf77c6c9e6edc70746d71a646f0f"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3bdb9ac4dbeeb88e344560117461b4e8"}, @generic={0x6e, 0x10, 0x2, "b6ca841c6d53c8b028352a57299422efb2e4fa279a69468155fb3f596245d4602febbaf2e8515dcbacc6b262647e73d31adbbdea6a4f9c70f6868924856851e3f074ae7018b1f2c6a5efc35fca21fa7c766f6782165622d67699e474386c0de9ddd16a44f3f4ce2e7dfdb4"}, @generic={0x7f, 0x10, 0xcb9f0bb8f45cb361, "76e1b964eb45f4d04013096af96bf664da2d1639cb8def88fbe0e2066efe12bd0d792b73c595c3ce870391af0352d626e685b7a1708be588b74d0802cba7e839c5fd6b5ead5e05717e8130da76c011c3e80dac0bf7ed0d756767a6f1c2e86ea99a87ec0eb489670ab0f21f4dfbe45712d23f628a75add985d6598dbf"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c0cde0e61270d79f765d801ebb884c6"}]}}, &(0x7f0000001540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x10, 0x4, 0x0, "df97750b", "9f23f72a"}}, &(0x7f0000001680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0x9, 0x0, 0x9d, 0x6}}}, &(0x7f0000001cc0)={0x84, &(0x7f0000001700)={0x0, 0x17, 0x7, "f86dce8885fea0"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001940)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000019c0)={0x20, 0x0, 0x8, {0x10, 0x10, [0xf00]}}, &(0x7f0000001a00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001a40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001a80)={0x40, 0xb, 0x2, "0cb0"}, &(0x7f0000001ac0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001b00)={0x40, 0x13, 0x6}, &(0x7f0000001b40)={0x40, 0x17, 0x6, @random="dbc93b3887e7"}, &(0x7f0000001b80)={0x40, 0x19, 0x2, "bfbd"}, &(0x7f0000001bc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001c00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001c40)={0x40, 0x1e, 0x1}, &(0x7f0000001c80)={0x40, 0x21, 0x1, 0x80}}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0) bind$tipc(r8, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000001740)={&(0x7f0000001580)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x4090) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bind$inet(r7, &(0x7f0000001d80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00') syz_usb_control_io(r4, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b00)={0x20, 0xb, 0x7d, {0x7d, 0xb, "c542e1dc386fd2db4c3569f5ac0233b6a9529a0a99318f7781167853779afe29bef363017c83103bd0cc7feb22188917a0572590eb279f62e76388e5917745529d7142fd5502c51b04d3aa541e137eb467df04040377e0de3cea313789a6f550c99bce9df2b5ca96c85124d5f5671e465ed34be61536771004c199"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000f4c000000050f4c000414100402676d67d056ab8ca3bab5c01de3ad1ad30710021e81080014100469ad02ccd9cae8a381aec085d58aa91cd918100a0143000000000f05000f00ff0000000000c0000000"], &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x8, 0x40, 0x7, "e62405d0", "7bcc6d8d"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x5, 0x6, 0x7f, 0xfff, 0xffff}}}, &(0x7f00000011c0)={0x84, &(0x7f0000000d00)={0x0, 0x6, 0xde, "536ca1ff1a159c13cee633767bb216bee1b91718fdd76f9e8346837022deac9644cac846ef6fb680d5b89866e3eb9737c4ac3b17c14a2697c3bb51aa810a667804633653e3e7fc0471e5bd8b1de90c9630d4d827d1b4697eb4556575d0d840f2a5b3b2c690f008784876fbef1d90b7caddfa273e0bebde50a9d6b753d87b924a347a66474adc43c03d7b6bbe09babbd49207327df04a144e02682dfd280a1f786c39ea9591ae4bcb031dc5200db89dba136664b9d7f09fa164db5734eb6dc0dbd001eb7a599e694e29b813a3e22c73074fc16611ee180b306b9a2ac0e2df"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e40)={0x0, 0x8, 0x1}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000f00)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000f80)={0x40, 0xb, 0x2, "6bcb"}, &(0x7f0000000fc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001000)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001040)={0x40, 0x17, 0x6}, &(0x7f0000001080)={0x40, 0x19, 0x2, "fcff"}, &(0x7f00000010c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001100)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000001140)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000001180)={0x40, 0x21, 0x1, 0x9}}) 7m3.000779946s ago: executing program 3 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = fsmount(r0, 0x0, 0x0) (rerun: 32) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async, rerun: 32) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x3a1a, 0x0, 0x3, 0x38}, 0x0, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) 7m2.995582376s ago: executing program 3 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open$dir(&(0x7f0000000a80)='./file0\x00', 0x40, 0x3) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 7m2.959826886s ago: executing program 32 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open$dir(&(0x7f0000000a80)='./file0\x00', 0x40, 0x3) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000000)='./file0\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4m39.092596305s ago: executing program 0 (id=2718): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0x9, 0xe, 0x10, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1b6f, 0x3, 0x9, 0x9, 0x9, 0x4, 0x94, 0x8000, 0xb, 0x4, 0x1, 0x1ff, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x3, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x5, 0x9, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x10, 0x0, 0x7, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0xffffffff, 0x6, 0x6, 0x7, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0x4], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x8, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0x1973, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c73, 0x7fff, 0x8002, 0x1, 0x9, 0x6, 0xc7d, 0x7, 0x7, 0x71b, 0x2, 0x7, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r1, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 4m39.020729706s ago: executing program 0 (id=2719): r0 = socket(0x7, 0x4, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a00"], 0x1c}}, 0x804) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x801, 0x0) r2 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x9a, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x7, 0x10, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "35f764d5bd7f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x575, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x12}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x3, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x1, 0x5, 0x4, 0x7, 0xe}, @country_functional={0x6, 0x24, 0x7, 0x4}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xf, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x3, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x8, 0x2, 0x2, 0x40, 0x1}, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="c7f9dabd8cf5d081fcdb200d3e366cdc02f6ec85"], 0x1, [{0xa9, &(0x7f0000000600)=@string={0xa9, 0x3, "bdc2ae4078b0e8aaa2ee17ac13d027a9959617056f30accfbca1f0f53b8a0898b671120f8b5e1d602ab121ede041a054f5061ce7b7b28d3e9757a1fc7ec2fe61a721a82f592f282aded59f5ea09d85903c61c90f69ad1be65bb08f640cbeafabcfbbe1bb6569f9548e60550c01c0a19593875f56efd429ac50340ad8bb2e9f758a0183ad2e01dd9c038946a9d881f4d1dfc2fd1dcca94e4abe6b7300be8f4bc738b193e2577789"}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BLKGETDISKSEQ(r6, 0x80081280, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x3, 0xcc, 0x1, 0x5, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x6, 0x0, 0x180, 0x8000000000000001, 0x200, 0xf1, 0x0, 0x8000000000000, 0x9, 0x0, 0xa, 0x200000000000, 0xa, 0x3, 0xbd9], 0x100000, 0x3c0210}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)={0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/71, &(0x7f0000000280)=""/197, &(0x7f00000004c0)=""/225, 0xdddd0000}) fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) ppoll(&(0x7f0000000240)=[{r1, 0x88}, {0xffffffffffffffff, 0xa2a1}], 0x56, 0x0, 0x0, 0x0) 4m38.472717105s ago: executing program 0 (id=2724): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'bond_slave_0\x00', 0x9}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000500)={{'\x00', 0x1}, {0x81}, 0xa2, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="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", 0x12e, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x286}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 4m38.392865166s ago: executing program 0 (id=2726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca52d6a648ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d4c4053afce6d1e93b47137843d149e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f44437918005356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bb719767767c3d5178e2a10765c6b2ae80753f403125a9203ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002980)={{0x0, 0x0, 0x80}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)={0x1}) ppoll(&(0x7f00000006c0)=[{r3, 0x5104}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000023c0)=ANY=[@ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000089a7729876ad70434304cfa35e94421d0bf38276c57e4eabe16a1b7ea0ab22cc6a066d3a58d7698e226fd3ef2beb7525d426b20870f77295c0cae33a43773f787acca2f44370fc80b5e15fb9437d3ecf47"]) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000500)) rt_sigaction(0x3e, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001580)={0x0, 0x2, 0x80000, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000001980)={r10, 0xfffffffffffffffe, 0x0, [0x4, 0x8000000000000001, 0x5, 0x7, 0x7], [0x8, 0x7, 0x9, 0xff, 0x1, 0x2, 0x0, 0xa4cb, 0x80000001, 0xa60, 0xfffffffffffffc00, 0x2, 0xffffffffffffdfa6, 0x8, 0x5, 0x7, 0x8, 0x15, 0xe, 0x8001, 0x0, 0x5, 0x9, 0x7f, 0xfb, 0x8, 0x3, 0x80, 0x2, 0xfffffffffffffff8, 0x5, 0xc000000000000000, 0x80000, 0x6, 0xc4b, 0xffffffffffffff40, 0x1, 0x2b, 0x6, 0x2, 0x2, 0x1, 0xc, 0x3, 0x6b53, 0x1, 0x7fffffffffffffff, 0x5, 0x2, 0x9, 0x1, 0x9, 0x2b0, 0x81, 0x7, 0xb42f, 0x40000000000007, 0xfff, 0x0, 0x9, 0xffffffffffffffff, 0xc, 0x0, 0x6, 0x8000000000000001, 0x10001, 0x1, 0x6, 0x5, 0x4, 0xb15, 0x5, 0x10000, 0x3, 0xc2, 0x7, 0x7, 0x5, 0xc, 0x7, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x6, 0x1ff, 0x800, 0x0, 0xc02a, 0x6, 0x8, 0x0, 0x1, 0x8, 0x9, 0xf, 0x9, 0x40, 0x6, 0x7, 0x3, 0x3, 0x2040, 0xe, 0x2, 0x3, 0xb, 0x7fffffff, 0x3e96f19a, 0x4, 0xffffffff80000001, 0x9e, 0xdc1, 0x3, 0x4, 0xffffffffffff2ed6, 0x1000000000002, 0x4, 0x8, 0xc, 0x3]}) 4m38.220706279s ago: executing program 0 (id=2728): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0xa8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x7706, 0x2) 4m37.872982284s ago: executing program 0 (id=2729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000000400)) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 4m37.829691295s ago: executing program 33 (id=2729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000000400)) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 2m2.435981251s ago: executing program 5 (id=5041): r0 = socket$inet6(0xa, 0x3, 0x8) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988ca", 0xe}], 0x12) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000880)=""/203, 0xcb, 0x60, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) shutdown(r2, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02e8282bcd801c5aa7aed276181fd012da08728b000000000000000000"], 0x10}}, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x2, 0x0, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r3, &(0x7f0000000bc0)={0x2c, 0x79, 0x1}, 0x7) (async) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) (async) r5 = socket(0x8000000010, 0x800, 0x0) write(r1, &(0x7f00000006c0)="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", 0xfc) (async) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="02050608190000002cbd7000ffdbdf2502000b000a000000020000000000000002000100000004d5010b96020000002002000a00080000000100000000000000050017003c2000000a004e210000008e20010000000000000000000000000000000000000000000004000300000000010500000000000000010000000000000009000000000000000800120002000100b36b6e00f00100df15d33bf350d082f277c8bbb3c6cc0006002b001003000005000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb"], 0xc8}}, 0x400c091) (async) write$P9_RSTAT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="4e0000007d0200000047000100030000000103000000080000000000000000df7f000300000004000000010000000000000001000000001000ff0f0000000000000000000000000000000000000051f51faa94d19616cd36366f6dfd33ea5037501e41753f1951fd7d71d361e4411a388ff4840c0748c42afaf75852064293dcc8ccda47abeb57bb2ebdbf24c59b71567eb71f0f053b208edefcb9b065394dd2e41191ab7e7b516a0d17c179777e5332fe0c8ada4522ebd3d90b9cc115f043a93cc4b8f9e316e407bc9bb5fe2d2c7a2055e9289fe6dacc5b74c933b9da660104a5ed395dc46393fd169b0947d455adb0a207ee8108d7a829eb424b83a3cae7613b31f2789d0b9cdb56cd0000000000063db99032d1"], 0x4e) (async) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000380)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = epoll_create1(0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x3}, 0x4) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) 2m2.413374191s ago: executing program 5 (id=5042): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0xd) pread64(r3, &(0x7f0000000240)=""/195, 0xc3, 0x3) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000000c0)=0x81b}) read$FUSE(r1, &(0x7f0000002f40)={0x2020}, 0x2020) 2m2.359938402s ago: executing program 5 (id=5044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000023000040000000800000000000000000"]) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r5 = eventfd(0xb) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) close_range(r5, r6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x78, 0x0, &(0x7f0000000300)=[@register_looper, @register_looper, @release={0x40046306, 0x1}, @exit_looper, @request_death={0x400c630e, 0x2}, @clear_death, @reply={0x40406301, {0xdbf, 0x0, 0x0, 0x0, 0xf0e2ae2503f41b98, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x4, &(0x7f0000000140)=""/145, 0x91, 0x1, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/28, 0x1c, 0x1, 0x28}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000380)=0x1) 2m2.347716062s ago: executing program 5 (id=5047): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x20000000007, 0x80, 0x2, 0x4000000000800002, 0xfffffffffffffffd, 0x7, 0x3e, 0x6, 0x2, 0x1000040000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x400], 0x10000, 0xe9053}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000018c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000080c0003"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4, 0x0, 0x0, 0x18, 0x40, 0x15, 0x4d}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee00) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000005bc0), 0x12) (async) ioctl$FIOCLEX(r0, 0x5451) 2m2.260557973s ago: executing program 5 (id=5049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010001090003206d04000100001209022400010000000000000000e9becfefac3cce895875d710b3a4c6c37d8e625feeeb1a2f09232ce9780000000057eb268cb1901d2c184e58c67d0ce0e30d2a166f7fc2476a9921f6af3a801233e8c66ae2e3a221440a6a562906dba66e881f7dac277b40ff7afb2dc960b06f1d4b212eca0000000000002224b83c29fda5f1d63fa33cc74660d98fcd5f2766b608ea65886228c52e8dffe6094e0000", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0xffffff02, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000011c0)={0x644, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x5ec, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @loopback, 0x1800000}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b320a9c08c53f1f85ab73e3de5de65c96b8e39b798e3539bf79532675f9a0350"}]}, {0x32c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xe}, 0xf}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cb9e4972e40fb9567f89cdaa7fff5b989f0f66b712ea9bd5c7cc5b78b2185d59"}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e4f7befeac4a203655c783c23f82e1f7aee3fa241dd62c0c518b02538bf719ab"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1d2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c451d93e0961b7ac7b40fa2d160bb039e1525271e3a30ff2f12b4390b8f8d0fd"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x76f9, @private1, 0x3}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x16c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "25176bac7566cfd7c59c20839811a949cebcef3e1b619be103a519825d55dc03"}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x644}, 0x1, 0x0, 0x0, 0x40040}, 0x20008851) (async) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.209272245s ago: executing program 5 (id=5051): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1220000, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@subj_type={'subj_type', 0x3d, '})&'}}, {@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}, {@permit_directio}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '.{&\'^-&'}}, {@smackfsroot}]}}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfe7e, 0x0, 0x0}}, @clear_death, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x3}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 2m2.158765735s ago: executing program 34 (id=5051): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1220000, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@subj_type={'subj_type', 0x3d, '})&'}}, {@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}, {@permit_directio}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '.{&\'^-&'}}, {@smackfsroot}]}}) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfe7e, 0x0, 0x0}}, @clear_death, @free_buffer={0x40086303, r4}, @release={0x40046306, 0x3}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1m57.92360832s ago: executing program 6 (id=5150): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x234) 1m57.879445631s ago: executing program 6 (id=5152): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7374980000000000ecff606c2c005d5b6779be5971e815eb5718e040edb6f3276ffc501b3583913e4f50d8fbf01e895dc0543a29c993cb3e13aebff86938af2c9643ee389fe97c82d064e04bcbcfc2f182c1bda660db1739e7157e98d82b1eddb868ece838707c1ba032d1c89a1b41b72618d609d5224fd173543d3e2503928494ec68d4fbf886d5fc38c751011abc45dc0703538c4552779c7f525eaaf1e24a8f6c64d992ca78fe7caae45e4f0d0ea58fc9e7cc4b5b8543b7bf5d900f367a038a23992efdba2cae7e34baee8770bc9c6ea059fb41b91800d9c3fe89bc5be689b732801dfb0cfbbf7ce92df830a6a6d8e7ac0000"]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 1m57.792828282s ago: executing program 6 (id=5155): syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81000905f7ffffff000000090583"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m56.388560524s ago: executing program 6 (id=5192): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x234) 1m56.305477905s ago: executing program 6 (id=5195): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffe}, 0x1c) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket(0x21, 0x80000, 0x1) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009800), 0x0, 0x2100, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x300, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000008000301"], 0x54}}, 0x20004010) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0x40) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) ioctl$FIONREAD(r8, 0xc0286988, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x8, &(0x7f0000000000), 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) 1m56.222330736s ago: executing program 6 (id=5199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) listen(r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10d241, 0x26) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 1m56.123189198s ago: executing program 35 (id=5199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) listen(r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10d241, 0x26) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 1m51.042802857s ago: executing program 7 (id=5276): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@metacopy_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 1m50.936791848s ago: executing program 7 (id=5278): mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x234) 1m50.894963559s ago: executing program 7 (id=5279): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRES16=r0]) (async) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)) 1m50.82064818s ago: executing program 7 (id=5280): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x6d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f5278e10889e8f9ee49b0102030109025b000140fef0090904000000ace79a002c"], 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x1000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB=',cpu'], 0x5) r5 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x103) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x2d, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 1m49.448172101s ago: executing program 7 (id=5295): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2, @broadcast}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000004c0)={0x4, {{0xa, 0x4e20, 0x2, @mcast1, 0x1}}, {{0xa, 0x4e22, 0x3, @mcast2, 0x80000000}}}, 0x108) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x83a, {0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x25daa903, 0xffffffffffffffff, 0x0, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0xd9f, 0x0, 0x0, 0x40, 0x6}}, 0x50) chown(&(0x7f0000000080)='./file0\x00', r5, r6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r8, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000080)=[{r9, 0x9390}, {r10}], 0x2, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r10}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/76, 0x0, 0x1, 0x1c}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/75, 0x0, 0x2, 0x28}}, &(0x7f0000000380)}}], 0x0, 0x0, 0x0}) 1m49.409067442s ago: executing program 7 (id=5298): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(0x0, 0x7) unshare(0x2c020400) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x20}, {r4}, {r2, 0x200}, {r4, 0x4000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x3]}, 0x8) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x24044841, &(0x7f0000000180)={0xa, 0x4e23, 0x99, @empty}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x24044841, &(0x7f0000000180)={0xa, 0x4e23, 0x99, @empty}, 0x1c) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, &(0x7f0000000340)={0x0, 0x2, 0x51, {0x51, 0xd, "09cc5d1d4a3e2f81967cb706c7fdb2df2ab2b4de0ce4558164f443bb68981537ec32e8ac305eb3ca39a44ba87f6acafbef8bc9fe395ac8859ca809698ef558cb94ff37243698884bb13e86d5494521"}}, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x20, 0xe, 0x4, "a84c010d"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, "fc"}, &(0x7f0000000580)={0x20, 0x84, 0x1, '~'}, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x83}, @timestamp={0x44, 0x4, 0x5e, 0x0, 0x4}]}}}], 0x18}}], 0x1, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m49.359293852s ago: executing program 36 (id=5298): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(0x0, 0x7) unshare(0x2c020400) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x20}, {r4}, {r2, 0x200}, {r4, 0x4000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={[0x3]}, 0x8) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x24044841, &(0x7f0000000180)={0xa, 0x4e23, 0x99, @empty}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x24044841, &(0x7f0000000180)={0xa, 0x4e23, 0x99, @empty}, 0x1c) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x20, 0x9, 0x4, "e12995f2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, &(0x7f0000000340)={0x0, 0x2, 0x51, {0x51, 0xd, "09cc5d1d4a3e2f81967cb706c7fdb2df2ab2b4de0ce4558164f443bb68981537ec32e8ac305eb3ca39a44ba87f6acafbef8bc9fe395ac8859ca809698ef558cb94ff37243698884bb13e86d5494521"}}, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x20, 0xe, 0x4, "a84c010d"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x1, "fc"}, &(0x7f0000000580)={0x20, 0x84, 0x1, '~'}, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x83}, @timestamp={0x44, 0x4, 0x5e, 0x0, 0x4}]}}}], 0x18}}], 0x1, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 4.442634812s ago: executing program 2 (id=6697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000800)="ba4000b8e6008ed03b940f73da0eccb8f0028ed80f23d80f21f86635800000200f238c66b9800000c00f326635000400000f306c0ffcdf36efddc666b9800000c0c4c249cf9009186635004000000f300f01c4", 0x53}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf080000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000800)="ba4000b8e6008ed03b940f73da0eccb8f0028ed80f23d80f21f86635800000200f238c66b9800000c00f326635000400000f306c0ffcdf36efddc666b9800000c0c4c249cf9009186635004000000f300f01c4", 0x53}], 0x1, 0x1c, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf080000"]) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) 3.391202268s ago: executing program 2 (id=6699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$usbfs(&(0x7f00000018c0), 0x1ff, 0x2) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x7d23000) read(0xffffffffffffffff, 0x0, 0x0) read$usbfs(r3, &(0x7f0000000000)=""/29, 0x1d) mount$overlay(0x0, &(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000340), 0x20, &(0x7f0000000380)={[{@redirect_dir_nofollow}, {@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0/file0'}}], [{@dont_measure}, {@hash}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '/selinux/policy\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fuse\x00'}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0xf}}]}) umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0xa) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, 0x50) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x10000000000, {0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, {0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x125e6ce9, 0xfffffffd, 0xa000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x6201, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) splice(r6, 0x0, r5, 0x0, 0x400000107ffff000, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, 0x9, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xcfdb9dcc07eda948}, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 3.303309579s ago: executing program 2 (id=6709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x0, 0xfffff008}, {0x6}]}) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000180)={0x8001, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}}}, 0x108) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000080)) (async) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020) (async) r5 = socket(0x11, 0x3, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0xdd12}], 0x1}, 0x4001) (async) r9 = geteuid() (async) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1461004}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0403000016000104fcfffffffffffffffe800000000000d7f9353884eac416bbfc0200000000000000000000000000004e2100084e200008020040a000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x8000}, 0x4018) 3.199944451s ago: executing program 2 (id=6713): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000002180)=[{{&(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x83}]}}}], 0x18}}], 0x1, 0x804) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r4 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)={0x2, 0x0, @b}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r5, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340), 0x53}, 0x45801) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}, @register_looper, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1.911443631s ago: executing program 1 (id=6731): recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/51, 0x33, 0x100, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/210, 0xd2}], 0x2, &(0x7f0000000380)=""/75, 0x4b}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f00000005c0)=""/92, 0x5c}], 0x2, &(0x7f0000000680)=""/60, 0x3c}, 0x2163) mkdirat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x55) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x31}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000c04}, 0x4000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000840)={0x2, 0x1}, 0x4) r4 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f0000000980)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000009c0)=0x0) mount$9p_unix(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1080, &(0x7f0000000a00)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_loose}, {@access_any}, {@aname={'aname', 0x3d, ','}}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@uid_gt={'uid>', 0xee00}}, {@fowner_gt={'fowner>', r6}}, {@smackfsfloor}]}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x4, 0x7e, 0x49, @remote, @mcast1, 0x7800, 0x19, 0x5}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000b80)={r7, 0x1, 0x6, @multicast}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x56) fchmod(r2, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000cc0)='wg1\x00', 0x10) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000d00)) sendmsg$NFT_BATCH(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4040040) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000e40)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000e80)=0x2c) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000f00)}, {&(0x7f0000000f40)="c0a783155f2df164528dd934e2ddbe6171d4351fb0d5fa80fa7cee42", 0x1c}], 0x2, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xff, 0x1, 0x3, [{@rand_addr=0x64010101, 0x1}, {@remote, 0x9}, {@empty, 0x40}, {@loopback, 0x8}, {@remote, 0x800}, {@multicast2, 0x678b}, {@broadcast, 0x4000}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x1, [0x6]}, @timestamp_prespec={0x44, 0xc, 0xcc, 0x3, 0x5, [{@broadcast, 0x10}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}, 0x20000000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000001100)='wg1\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r8, &(0x7f00000031c0)={0x18, 0x0, r9, {0x8}}, 0x18) read$FUSE(r8, &(0x7f0000003200)={0x2020}, 0x2020) open(&(0x7f0000005240)='./file0\x00', 0x2000, 0x245) 1.740458413s ago: executing program 1 (id=6734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1203000, 0x1400, 0x8, 0x3}, 0x20) (async, rerun: 32) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) (async) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r2, r2, &(0x7f0000001000), 0xffff) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) (async) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "dcf7e087779d5ac6453aa8647731d1df00babb01ed135fd2b56b"}}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 1.660982765s ago: executing program 1 (id=6735): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xffffffffffffffff) (async) fcntl$setpipe(r3, 0x407, 0xffffffffffffffff) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000080)={0xc00000, 0x1200000004}, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/187, &(0x7f0000000200)=0xbb) 536.201792ms ago: executing program 4 (id=6750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 460.961283ms ago: executing program 8 (id=6751): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="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", 0x101}], 0x1, 0x0, 0x0, 0x1}, 0x8884) close(r0) recvmsg$unix(r1, &(0x7f00000020c0)={0x0, 0x0, 0x0}, 0x1102) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket(0x15, 0x3, 0x5) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b42a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871befae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed49dcfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fb930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4305531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r6, 0xb7aaa000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000a40)=0xc, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 460.690333ms ago: executing program 4 (id=6752): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000001940)={0x7, 'veth1_macvtap\x00', {0x2}, 0x1}) copy_file_range(r0, &(0x7f0000000000)=0x8, r1, 0x0, 0x7ff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 432.945063ms ago: executing program 8 (id=6753): lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002280)) (async, rerun: 64) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (rerun: 64) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10000003) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x5, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) (async, rerun: 32) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) (async) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='%\'\x00', 0x0) (async, rerun: 32) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x163642, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r5 = fcntl$dupfd(r4, 0x0, r0) (rerun: 32) flock(r5, 0x5) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r6, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2, 0x1}, 0x10) (async, rerun: 64) ioctl$FIBMAP(r3, 0x1, 0x0) (async, rerun: 64) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000002300)=""/17) 422.813994ms ago: executing program 4 (id=6754): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./file1/file4\x00', 0x1a3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000640)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket(0x22, 0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(0x0, r2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000700)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, 0xffffffffffffffff, 0x7dfff000) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0xa99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xffffe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x6) sendto$inet6(r7, &(0x7f0000000300)="dfa1334025e49708bc73bd1d8e38bd977f65454ea5569d01a63190eb0a3c09b6bd3da443fdc0ba427693fe172a8570c773beb3c2de33b71c6ff28bead0daad9781dc378641f72d3177df02290770fa491b87bd6915807b7a447a0325ee8eec140e6aee5cf2c18cc43a5a738533b41497118bd34bcafd5274d9bec7d27eda27a083d6e6cbd30f76964bea0d", 0x8b, 0x20000844, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffff8, @local, 0x2}, 0x1c) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x2040) accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) 292.991026ms ago: executing program 1 (id=6755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x2) read$FUSE(r3, &(0x7f0000000dc0)={0x2020}, 0x2020) syz_io_uring_setup(0x66ce, &(0x7f0000000300)={0x0, 0x3c05, 0x2, 0x2, 0x187}, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@handle={0x73682a85, 0x0, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 291.812676ms ago: executing program 4 (id=6756): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)={0x0, 0x2, 0x2, 0x1, 0x0, [@local]}, 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 291.559986ms ago: executing program 8 (id=6757): r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt(r3, 0x6, 0x3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x4, 0x2, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 185.692847ms ago: executing program 8 (id=6758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcff"], 0x58) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="080005000700ff"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x19b, 0x74}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1c9}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x50}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040904}, 0x4000010) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xffffeffffffff7fb) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r6, 0x4758f000) 182.143917ms ago: executing program 2 (id=6759): openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3de4, 0x201) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 167.175818ms ago: executing program 4 (id=6760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3, 0x4, 0xbe, 0x480, 0xb, 0x8}) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 80.898889ms ago: executing program 8 (id=6761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000002d00)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', r3, r4) 78.586829ms ago: executing program 2 (id=6762): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/175, 0xfffffe14) 75.12963ms ago: executing program 1 (id=6763): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) socketpair(0x1d, 0x800, 0x3b, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000180)={0x1000000, 0xffffffffffffffff, 0x1}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x30e000, 0x1000, 0x0, 0x4}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 34.94564ms ago: executing program 1 (id=6764): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 26.43567ms ago: executing program 4 (id=6765): ioprio_set$uid(0x0, 0x0, 0x4007) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@mcast1, 0xb, r3}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x9, r5, 0xb, r6}, 0x10) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x9, r5, 0xb, r6}, 0x10) clock_gettime(0x0, &(0x7f0000000680)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) memfd_secret(0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x32600) (async) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x900, 0x12) (async) write$cgroup_int(r7, &(0x7f00000000c0)=0x900, 0x12) 0s ago: executing program 8 (id=6766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) r3 = syz_open_dev$loop(&(0x7f0000000080), 0xd0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x301000, 0x800, 0x3, 0x1}, 0x20) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r7}, 0x10) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x100000, 0x4) shutdown(r4, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000500)=""/148, 0x94}], 0x52, 0x80000001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@request_death, @acquire_done={0x40106309, 0x2}, @decrefs], 0xffa6, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) kernel console output (not intermixed with test programs): usb7-port1: unable to enumerate USB device [ 366.724241][T15010] futex_wake_op: syz.1.5122 tries to shift op by -1; fix this program [ 366.846667][T15017] fuse: Unknown parameter '00000000000000000000' [ 366.920937][T15024] can: request_module (can-proto-0) failed. [ 367.497826][T15058] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 367.589062][T15070] overlayfs: failed to clone lowerpath [ 367.782326][T15095] batadv_slave_1: entered promiscuous mode [ 367.811169][T15099] batadv_slave_1: left promiscuous mode [ 367.845476][T15102] binder: Unknown parameter 'st˜' [ 368.004022][T15119] netlink: 'syz.1.5159': attribute type 4 has an invalid length. [ 368.175646][ T9] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 368.348505][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 368.362527][ T9] usb 7-1: config 179 has no interface number 0 [ 368.377364][ T9] usb 7-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 368.399271][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 368.425805][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 65535, setting to 8 [ 368.437391][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 368.455617][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 368.473642][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 368.483198][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.506123][T15114] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 368.744691][ T9] usb 7-1: USB disconnect, device number 6 [ 368.766968][T15183] 9pnet_fd: p9_fd_create_unix (15183): problem connecting socket: ./file0: -111 [ 369.429349][ T311] bridge_slave_1: left allmulticast mode [ 369.437823][ T311] bridge_slave_1: left promiscuous mode [ 369.443456][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.461015][ T311] bridge_slave_0: left allmulticast mode [ 369.485651][ T311] bridge_slave_0: left promiscuous mode [ 369.491307][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.668826][ T311] veth1_macvtap: left promiscuous mode [ 369.674370][ T311] veth0_vlan: left promiscuous mode [ 369.947721][T15243] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.973706][T15243] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.990709][T15243] bridge_slave_0: entered allmulticast mode [ 370.001133][T15243] bridge_slave_0: entered promiscuous mode [ 370.017067][T15243] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.024165][T15243] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.034843][T15243] bridge_slave_1: entered allmulticast mode [ 370.044535][T15243] bridge_slave_1: entered promiscuous mode [ 370.213271][T15243] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.220362][T15243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.227643][T15243] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.234652][T15243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.303390][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.310757][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.327482][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.334551][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.344865][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.351938][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.417507][T15243] veth0_vlan: entered promiscuous mode [ 370.470054][T15243] veth1_macvtap: entered promiscuous mode [ 370.605201][ T36] kauditd_printk_skb: 1009 callbacks suppressed [ 370.605220][ T36] audit: type=1400 audit(626.572:22045): avc: denied { mounton } for pid=15297 comm="syz.4.5222" path="/279/file0" dev="tmpfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 370.637168][ T36] audit: type=1400 audit(626.572:22046): avc: denied { create } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.658197][ T36] audit: type=1400 audit(626.612:22047): avc: denied { mounton } for pid=15297 comm="syz.4.5222" path="/279" dev="tmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 370.680201][ T36] audit: type=1400 audit(626.612:22048): avc: denied { mount } for pid=15297 comm="syz.4.5222" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 370.702070][ T36] audit: type=1400 audit(626.622:22049): avc: denied { create } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.723532][ T36] audit: type=1400 audit(626.622:22050): avc: denied { write } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.744631][ T36] audit: type=1400 audit(626.622:22051): avc: denied { read } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.764738][ T36] audit: type=1400 audit(626.622:22052): avc: denied { read } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.784757][ T36] audit: type=1400 audit(626.632:22053): avc: denied { write } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.804771][ T36] audit: type=1400 audit(626.632:22054): avc: denied { create } for pid=15296 comm="syz.7.5207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.854338][T15304] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5224'. [ 370.863953][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5224'. [ 370.988019][T15314] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.003209][T15314] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 371.014618][T15314] overlayfs: failed to clone upperpath [ 371.091655][T15312] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 371.099081][T15312] rust_binder: Write failure EINVAL in pid:8 [ 371.989812][T15341] overlayfs: failed to clone lowerpath [ 372.194785][T15350] netlink: 'syz.2.5241': attribute type 27 has an invalid length. [ 372.217403][T15350] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.224646][T15350] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.311905][T15414] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5265'. [ 374.409038][T15423] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5264'. [ 374.657450][ T12] tipc: Subscription rejected, illegal request [ 374.669405][T15447] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.673080][T15445] tipc: Started in network mode [ 374.683080][T15445] tipc: Node identity 4, cluster identity 4711 [ 374.690322][T15445] tipc: Node number set to 4 [ 374.702644][T15447] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 374.715176][T15447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 375.065643][ T345] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 375.216332][ T345] usb 8-1: Using ep0 maxpacket: 16 [ 375.225915][ T345] usb 8-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 375.257421][ T345] usb 8-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 375.276443][ T345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.284502][ T345] usb 8-1: Product: syz [ 375.289920][ T345] usb 8-1: Manufacturer: syz [ 375.329934][ T345] usb 8-1: SerialNumber: syz [ 375.607822][ T36] kauditd_printk_skb: 372 callbacks suppressed [ 375.607841][ T36] audit: type=1400 audit(631.582:22427): avc: denied { ioctl } for pid=15456 comm="syz.7.5280" path="socket:[63046]" dev="sockfs" ino=63046 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.640337][ T345] ftdi_sio 8-1:64.0: Ignoring interface reserved for JTAG [ 375.649922][ T345] usb 8-1: USB disconnect, device number 2 [ 375.815962][ T36] audit: type=1400 audit(631.792:22428): avc: denied { create } for pid=15493 comm="syz.2.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.835170][ T36] audit: type=1400 audit(631.792:22429): avc: denied { create } for pid=15493 comm="syz.2.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.855442][ T36] audit: type=1400 audit(631.792:22430): avc: denied { ioctl } for pid=15493 comm="syz.2.5294" path="socket:[62278]" dev="sockfs" ino=62278 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.879790][ T36] audit: type=1400 audit(631.792:22431): avc: denied { create } for pid=15493 comm="syz.2.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 375.899041][ T36] audit: type=1400 audit(631.792:22432): avc: denied { mounton } for pid=15493 comm="syz.2.5294" path="/187/file0" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 375.921532][ T36] audit: type=1400 audit(631.792:22433): avc: denied { create } for pid=15493 comm="syz.2.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.160523][ T36] audit: type=1400 audit(632.132:22434): avc: denied { unmount } for pid=15243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.180095][ T36] audit: type=1400 audit(632.132:22435): avc: denied { unmount } for pid=15243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.199714][ T36] audit: type=1400 audit(632.132:22436): avc: denied { unmount } for pid=15243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.252771][ T311] bridge_slave_1: left allmulticast mode [ 376.259556][ T311] bridge_slave_1: left promiscuous mode [ 376.265386][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.274028][ T311] bridge_slave_0: left allmulticast mode [ 376.281670][ T311] bridge_slave_0: left promiscuous mode [ 376.287726][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.409258][ T311] veth1_macvtap: left promiscuous mode [ 376.414800][ T311] veth0_vlan: left promiscuous mode [ 376.666966][T15515] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.685618][T15515] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.692697][T15515] bridge_slave_0: entered allmulticast mode [ 376.699622][T15515] bridge_slave_0: entered promiscuous mode [ 376.707847][T15515] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.719545][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.730329][T15515] bridge_slave_1: entered allmulticast mode [ 376.737272][T15515] bridge_slave_1: entered promiscuous mode [ 376.982345][T15515] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.989438][T15515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.996772][T15515] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.003802][T15515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.124821][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.134556][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.158939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.166034][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.199666][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.206742][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.363614][T15515] veth0_vlan: entered promiscuous mode [ 377.437125][T15515] veth1_macvtap: entered promiscuous mode [ 377.820624][T15571] rust_binder: Write failure EINVAL in pid:4 [ 378.435665][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 378.630803][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 378.647714][ T9] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 378.675622][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.705787][ T9] usb 9-1: config 0 has no interface number 0 [ 378.722952][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 378.745623][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.765620][ T9] usb 9-1: Product: syz [ 378.769824][ T9] usb 9-1: Manufacturer: syz [ 378.774414][ T9] usb 9-1: SerialNumber: syz [ 378.781706][T15603] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5330'. [ 378.804641][ T9] usb 9-1: config 0 descriptor?? [ 379.033696][T15594] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 379.035912][ T314] usb 9-1: USB disconnect, device number 2 [ 379.517757][T15640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=15640 comm=syz.4.5342 [ 379.754585][T15653] SELinux: security_context_str_to_sid () failed with errno=-22 [ 380.065643][ T314] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 380.215645][ T314] usb 9-1: Using ep0 maxpacket: 8 [ 380.223177][ T314] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 380.233540][ T314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.245504][ T314] usb 9-1: config 0 descriptor?? [ 380.347921][T15689] 9pnet_fd: Insufficient options for proto=fd [ 380.477139][T15696] 9pnet_fd: Insufficient options for proto=fd [ 380.655593][ T36] kauditd_printk_skb: 553 callbacks suppressed [ 380.655609][ T36] audit: type=1400 audit(636.622:22990): avc: denied { ioctl } for pid=15652 comm="syz.8.5348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.686382][ T36] audit: type=1400 audit(636.632:22991): avc: denied { ioctl } for pid=15652 comm="syz.8.5348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.750407][ T36] audit: type=1400 audit(636.722:22992): avc: denied { execmem } for pid=15704 comm="syz.1.5365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 380.815881][ T36] audit: type=1400 audit(636.792:22993): avc: denied { create } for pid=15704 comm="syz.1.5365" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.837027][ T36] audit: type=1400 audit(636.792:22994): avc: denied { ioctl } for pid=15704 comm="syz.1.5365" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63582 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.865761][ T36] audit: type=1400 audit(636.792:22995): avc: denied { ioctl } for pid=15704 comm="syz.1.5365" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63582 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 380.891384][ T36] audit: type=1400 audit(636.842:22996): avc: denied { ioctl } for pid=15652 comm="syz.8.5348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.915948][ T36] audit: type=1400 audit(636.842:22997): avc: denied { ioctl } for pid=15652 comm="syz.8.5348" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.940403][ T36] audit: type=1400 audit(636.902:22998): avc: denied { execmem } for pid=15704 comm="syz.1.5365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 380.959376][ T36] audit: type=1400 audit(636.902:22999): avc: denied { execute } for pid=15704 comm="syz.1.5365" path=2F6D656D66643A76A6F56C6A362C72AFE8102FEC67EDE36880B821793677DADDB90A52E84099B98A0F5A09908B70108486748ABAC6FBD20CEF26ADA84DE808B023AC29811E8A0C1144E36C875C1548647E5C1195F8E6A7C3BC182B92924E07A77F4E9B4CF8EB517302F9AD698F0FFF026E9D85EA1A2A1B49D81CE89B5953251D1086A00BEAD989DAA75764A445758C736DA12ED1B2491AB2FD419816CA8379F91AE706680776A8D8CE59C0E676B5F59DBEA538B432D85624E6C81CAF8EA1EF61B12FEE313DBF4DEA770CA2871C281A2DEBFB56EB34D4435DC77B74F9D560495A0348D986E1324E1FD87BF57A40E0202864656C6574656429 dev="tmpfs" ino=1208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 381.076497][T15654] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 381.076523][T15654] rust_binder: Error while translating object. [ 381.085206][T15654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.091448][T15654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 381.294168][T15715] netlink: 'syz.4.5369': attribute type 4 has an invalid length. [ 381.311166][T15715] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5369'. [ 381.617081][T15721] netlink: 424 bytes leftover after parsing attributes in process `syz.1.5372'. [ 382.757001][ T314] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 382.767068][ T314] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 382.795669][ T314] asix 9-1:0.0: probe with driver asix failed with error -71 [ 382.816284][ T314] usb 9-1: USB disconnect, device number 3 [ 382.848929][T15747] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 382.865625][T15747] rust_binder: Write failure EINVAL in pid:22 [ 383.011563][T15744] overlayfs: failed to clone upperpath [ 383.285651][ T314] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 383.301346][T15756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5383'. [ 383.449174][ T314] usb 9-1: unable to get BOS descriptor or descriptor too short [ 383.458725][ T314] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 383.471986][ T314] usb 9-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 383.482140][ T314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.490185][ T311] tipc: Subscription rejected, illegal request [ 383.497334][ T314] usb 9-1: Product: syz [ 383.501647][ T314] usb 9-1: Manufacturer: syz [ 383.508036][ T314] usb 9-1: SerialNumber: syz [ 383.616546][T15777] tmpfs: Unknown parameter 'nosw' [ 383.867856][T15810] vcan0: MTU too low for tipc bearer [ 383.873233][T15810] tipc: Enabling of bearer rejected, failed to enable media [ 385.098792][T15846] /dev/rnullb0: Can't lookup blockdev [ 385.826033][ T36] kauditd_printk_skb: 241 callbacks suppressed [ 385.826050][ T36] audit: type=1326 audit(641.802:23241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15746 comm="syz.8.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472f8e929 code=0x7fc00000 [ 385.859166][ T314] usb 9-1: USB disconnect, device number 4 [ 385.879156][ T36] audit: type=1400 audit(641.842:23242): avc: denied { read write } for pid=15515 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.887263][T15611] udevd[15611]: setting mode of /dev/bus/usb/009/004 to 020664 failed: No such file or directory [ 385.925739][T15611] udevd[15611]: setting owner of /dev/bus/usb/009/004 to uid=0, gid=0 failed: No such file or directory [ 385.951659][ T36] audit: type=1400 audit(641.842:23243): avc: denied { read write open } for pid=15515 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.984477][ T36] audit: type=1400 audit(641.842:23244): avc: denied { ioctl } for pid=15515 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.013627][ T36] audit: type=1400 audit(641.952:23245): avc: denied { read write } for pid=15515 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.062068][ T36] audit: type=1400 audit(641.952:23246): avc: denied { read write open } for pid=15515 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.094989][ T36] audit: type=1400 audit(641.952:23247): avc: denied { ioctl } for pid=15515 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.149231][ T36] audit: type=1400 audit(642.012:23248): avc: denied { create } for pid=15883 comm="syz.4.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.176828][ T36] audit: type=1400 audit(642.022:23249): avc: denied { read } for pid=15885 comm="syz.8.5434" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.202906][ T36] audit: type=1400 audit(642.022:23250): avc: denied { read open } for pid=15885 comm="syz.8.5434" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 386.444922][T15884] fuse: Unknown parameter 'gr˜¤WOTßMÌ00000000000000000000' [ 386.585636][ T376] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 386.747505][ T376] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 386.757432][ T376] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 386.770132][ T376] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.779186][ T376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.787181][ T376] usb 9-1: Product: syz [ 386.791320][ T376] usb 9-1: Manufacturer: syz [ 386.795913][ T376] usb 9-1: SerialNumber: syz [ 387.004302][T15900] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5439'. [ 387.214597][T15890] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 387.235981][T15890] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 387.660550][ T376] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 387.666606][ T376] cdc_ncm 9-1:1.0: bind() failure [ 387.672648][ T376] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 387.680846][ T376] cdc_ncm 9-1:1.1: bind() failure [ 388.015841][T15891] netlink: 'syz.8.5436': attribute type 4 has an invalid length. [ 388.028830][T15891] netlink: 'syz.8.5436': attribute type 4 has an invalid length. [ 388.619166][T15939] overlayfs: failed to clone lowerpath [ 389.314357][ T376] usb 9-1: USB disconnect, device number 5 [ 389.503450][T16011] netlink: 'syz.8.5481': attribute type 4 has an invalid length. [ 389.755649][ T314] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 389.905623][ T314] usb 9-1: Using ep0 maxpacket: 16 [ 389.912630][ T314] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 389.920847][ T314] usb 9-1: config 0 has no interface number 0 [ 389.926942][ T314] usb 9-1: config 0 interface 113 has no altsetting 0 [ 389.936419][ T314] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 389.945469][ T314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.953476][ T314] usb 9-1: Product: syz [ 389.957652][ T314] usb 9-1: Manufacturer: syz [ 389.962226][ T314] usb 9-1: SerialNumber: syz [ 389.968297][ T314] usb 9-1: config 0 descriptor?? [ 390.107034][T16027] fuse: Bad value for 'fd' [ 390.201605][T16011] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 390.201629][T16011] rust_binder: Read failure Err(EFAULT) in pid:42 [ 390.346667][ T376] usb 9-1: USB disconnect, device number 6 [ 390.936162][ T36] kauditd_printk_skb: 453 callbacks suppressed [ 390.936179][ T36] audit: type=1400 audit(646.912:23704): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.967711][ T36] audit: type=1400 audit(646.932:23705): avc: denied { create } for pid=16080 comm="syz.4.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 390.988119][ T36] audit: type=1400 audit(646.932:23706): avc: denied { name_bind } for pid=16080 comm="syz.4.5508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 391.015157][ T36] audit: type=1400 audit(646.932:23707): avc: denied { node_bind } for pid=16080 comm="syz.4.5508" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 391.036953][ T36] audit: type=1400 audit(646.982:23708): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.065641][ T314] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 391.073726][ T36] audit: type=1400 audit(647.042:23709): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.098214][ T36] audit: type=1400 audit(647.042:23710): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.122687][ T36] audit: type=1400 audit(647.042:23711): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.147117][ T36] audit: type=1400 audit(647.042:23712): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.171543][ T36] audit: type=1400 audit(647.042:23713): avc: denied { ioctl } for pid=16067 comm="syz.8.5504" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.215627][ T314] usb 9-1: device descriptor read/64, error -71 [ 391.455664][ T314] usb 9-1: device descriptor read/64, error -71 [ 391.695629][ T314] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 391.827550][T16120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5522'. [ 391.836607][ T314] usb 9-1: device descriptor read/64, error -71 [ 392.076074][ T314] usb 9-1: device descriptor read/64, error -71 [ 392.186122][ T314] usb usb9-port1: attempt power cycle [ 392.525668][ T314] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 392.547372][ T314] usb 9-1: device descriptor read/8, error -71 [ 392.677912][ T314] usb 9-1: device descriptor read/8, error -71 [ 392.915782][ T314] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 392.948031][ T314] usb 9-1: device descriptor read/8, error -71 [ 393.078059][ T314] usb 9-1: device descriptor read/8, error -71 [ 393.185710][ T314] usb usb9-port1: unable to enumerate USB device [ 393.323929][T16172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5544'. [ 393.412228][T16181] 9pnet_fd: Insufficient options for proto=fd [ 393.722977][T16213] overlayfs: failed to clone upperpath [ 393.866569][T16224] fuse: Bad value for 'fd' [ 393.892291][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5565'. [ 393.959434][T16234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.084370][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5569'. [ 394.093472][T16242] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5569'. [ 394.353329][T16265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.356998][T16265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.622826][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5582'. [ 394.716484][ T376] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 394.769001][T16303] 9pnet: p9_errstr2errno: server reported unknown error aaaaaa [ 394.822011][T16307] tipc: Enabled bearer , priority 10 [ 394.865634][ T376] usb 9-1: Using ep0 maxpacket: 32 [ 394.874562][ T376] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 394.883694][ T376] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 394.892793][ T376] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 394.906629][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.916809][ T376] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 394.926963][ T376] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 394.940444][ T376] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 394.949973][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.955671][T16318] tipc: Enabling of bearer rejected, failed to enable media [ 394.960657][ T376] usb 9-1: config 0 descriptor?? [ 395.188549][ T376] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 395.397951][ T376] usb 9-1: USB disconnect, device number 11 [ 395.422936][T16376] bpf: Bad value for 'mode' [ 395.425434][ T376] usblp0: removed [ 395.946357][ T36] kauditd_printk_skb: 648 callbacks suppressed [ 395.946375][ T36] audit: type=1400 audit(651.922:24362): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.975865][ T36] audit: type=1400 audit(651.922:24363): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.995691][ T36] audit: type=1400 audit(651.922:24364): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.015643][ T36] audit: type=1400 audit(651.922:24365): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.034742][T16396] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5621'. [ 396.035959][ T36] audit: type=1400 audit(651.922:24366): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.064060][ T36] audit: type=1400 audit(651.922:24367): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.083887][ T36] audit: type=1400 audit(651.922:24368): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.104228][ T36] audit: type=1400 audit(651.922:24369): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.124491][ T36] audit: type=1400 audit(651.922:24370): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.144801][ T36] audit: type=1400 audit(651.922:24371): avc: denied { create } for pid=16390 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.926109][T16431] overlayfs: failed to clone lowerpath [ 399.676382][T16538] 9pnet_fd: Insufficient options for proto=fd [ 399.785462][T16548] /dev/sg0: Can't lookup blockdev [ 399.814693][T16550] binder: Bad value for 'stats' [ 400.303858][T16568] overlayfs: failed to clone upperpath [ 400.486700][T16581] overlayfs: failed to clone upperpath [ 400.958047][ T36] kauditd_printk_skb: 440 callbacks suppressed [ 400.958063][ T36] audit: type=1400 audit(656.932:24812): avc: denied { create } for pid=16588 comm="syz.4.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.983399][ T36] audit: type=1400 audit(656.932:24813): avc: denied { bind } for pid=16588 comm="syz.4.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.002362][ T36] audit: type=1400 audit(656.932:24814): avc: denied { create } for pid=16588 comm="syz.4.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 401.021402][ T36] audit: type=1400 audit(656.932:24815): avc: denied { listen } for pid=16588 comm="syz.4.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.040545][ T36] audit: type=1400 audit(656.932:24816): avc: denied { write } for pid=16565 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.059653][ T36] audit: type=1400 audit(656.942:24817): avc: denied { write } for pid=16565 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.078622][ T36] audit: type=1400 audit(656.952:24818): avc: denied { write } for pid=16565 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.097583][ T36] audit: type=1400 audit(656.962:24819): avc: denied { write } for pid=16565 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.116558][ T36] audit: type=1400 audit(656.972:24820): avc: denied { write } for pid=16565 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.136572][ T36] audit: type=1400 audit(656.982:24821): avc: denied { write } for pid=16565 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.170516][T16593] tmpfs: Unknown parameter 'O¼]›‰`Ì)É ˆE+ŸV0þÎobw' [ 402.298456][T16646] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 402.337331][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5710'. [ 402.979776][T16675] overlayfs: failed to clone upperpath [ 403.140556][T16705] cgroup: release_agent respecified [ 403.157138][T16707] 9pnet: Could not find request transport: tcp÷ÿÿÿÿÿÿÿ0210ŒU”00D4e22 [ 403.496937][T16723] overlayfs: failed to clone upperpath [ 403.669009][T16742] TCP: TCP_TX_DELAY enabled [ 403.812509][T16736] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 404.306071][T16770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.177162][T16805] overlayfs: missing 'lowerdir' [ 405.196937][T16807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.208734][T16807] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 405.216122][T16807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 405.226324][T16807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:92 [ 405.437857][T16827] overlayfs: failed to clone upperpath [ 405.525635][ T1249] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 405.665658][ T1249] usb 9-1: device descriptor read/64, error -71 [ 405.905654][ T1249] usb 9-1: device descriptor read/64, error -71 [ 406.016026][ T36] kauditd_printk_skb: 1201 callbacks suppressed [ 406.016044][ T36] audit: type=1400 audit(661.992:26023): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.046794][ T36] audit: type=1400 audit(661.992:26024): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.086014][ T36] audit: type=1400 audit(662.062:26025): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.145628][ T1249] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 406.153814][ T36] audit: type=1400 audit(662.122:26026): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.179010][ T36] audit: type=1400 audit(662.122:26027): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.203545][ T36] audit: type=1400 audit(662.152:26028): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.228048][ T36] audit: type=1400 audit(662.182:26029): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.252877][ T36] audit: type=1400 audit(662.202:26030): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.277325][ T36] audit: type=1400 audit(662.222:26031): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.301737][ T36] audit: type=1400 audit(662.222:26032): avc: denied { ioctl } for pid=16813 comm="syz.8.5771" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.385624][ T1249] usb 9-1: device descriptor read/64, error -71 [ 406.625627][ T1249] usb 9-1: device descriptor read/64, error -71 [ 406.736038][ T1249] usb usb9-port1: attempt power cycle [ 407.075626][ T1249] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 407.097963][ T1249] usb 9-1: device descriptor read/8, error -71 [ 407.208128][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5792'. [ 407.248093][ T1249] usb 9-1: device descriptor read/8, error -71 [ 407.337771][T16886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16886 comm=syz.1.5795 [ 407.382754][T16887] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5793'. [ 407.495612][ T1249] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 407.518509][ T1249] usb 9-1: device descriptor read/8, error -71 [ 407.562180][T16892] overlayfs: failed to clone upperpath [ 407.593425][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5798'. [ 407.602439][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5798'. [ 407.648419][ T1249] usb 9-1: device descriptor read/8, error -71 [ 407.756067][ T1249] usb usb9-port1: unable to enumerate USB device [ 408.523480][T16948] SELinux: security_context_str_to_sid () failed with errno=-22 [ 408.603843][T16953] binder: Unknown parameter 'smackfsdef' [ 408.952126][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5825'. [ 408.961573][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5825'. [ 408.972341][T16978] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 408.972363][T16978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 408.980935][T16978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:118 [ 409.553925][T17003] bpf: Bad value for 'gid' [ 409.569275][T17003] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 409.652901][T17018] overlayfs: conflicting options: metacopy=off,verity=on [ 409.894751][T17037] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=55466 sclass=netlink_xfrm_socket pid=17037 comm=syz.1.5847 [ 409.965242][T17047] overlayfs: failed to clone upperpath [ 410.111643][T17052] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5851'. [ 410.637130][T17065] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 410.893232][ T314] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 411.002566][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'. [ 411.012120][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'. [ 411.027680][ T36] kauditd_printk_skb: 807 callbacks suppressed [ 411.027697][ T36] audit: type=1400 audit(667.002:26840): avc: denied { create } for pid=17081 comm="syz.4.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.054943][ T36] audit: type=1400 audit(667.002:26841): avc: denied { write } for pid=17081 comm="syz.4.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.074920][ T36] audit: type=1400 audit(667.002:26842): avc: denied { read } for pid=17081 comm="syz.4.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.095363][ T36] audit: type=1400 audit(667.002:26843): avc: denied { read } for pid=17081 comm="syz.4.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.097568][ T314] usb 9-1: not running at top speed; connect to a high speed hub [ 411.115749][ T36] audit: type=1400 audit(667.002:26844): avc: denied { ioctl } for pid=17081 comm="syz.4.5862" path="socket:[67274]" dev="sockfs" ino=67274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.125447][ T314] usb 9-1: config 1 interface 0 altsetting 144 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 411.160927][ T314] usb 9-1: config 1 interface 0 has no altsetting 0 [ 411.168228][ T36] audit: type=1400 audit(667.002:26845): avc: denied { sys_module } for pid=17081 comm="syz.4.5862" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 411.193191][ T36] audit: type=1400 audit(667.002:26846): avc: denied { write } for pid=17081 comm="syz.4.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.214478][ T314] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.214801][ T36] audit: type=1400 audit(667.052:26847): avc: denied { mounton } for pid=17083 comm="syz.4.5863" path="/463/file0" dev="tmpfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 411.223938][ T314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.245849][ T36] audit: type=1400 audit(667.052:26848): avc: denied { mounton } for pid=17083 comm="syz.4.5863" path="/463" dev="tmpfs" ino=2544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 411.255398][ T314] usb 9-1: Product: 䈚亴䗚犈ﬗ໢ᾯæ·äºî—§è‹šï­Šîª–ãªìŸªâ²‚䡬岽䓠ﵵí…⠃렸詿å¢è¶®è«‘燾♋뀇嬄⹥踽éžê†°éª­ê­¢å¸°â°¸ï—®ï췿ꨲꆑí·â“Šå–„䙂鬿‹˜ëž¾æ—¥ê™®â¨¸å†™î”µè…¿ì€‰Ò©å¨ªæŠ¤æ¿œê‰Æ¤å±¯ï§§ï¸–ᆨ鴞㊯烩婷竴礲ï‚å¤å¨†â†„淑⺫á˜ä˜¯é„²í„¡Ú®íšŠã·§Î·î®‡à®è–¹î…“僤痠 [ 411.280337][ T36] audit: type=1400 audit(667.052:26849): avc: denied { mount } for pid=17083 comm="syz.4.5863" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 411.334253][ T314] usb 9-1: Manufacturer: 㷬﩯豭鼓栿꩔ꈺ집㑭ꜯ钅률퀤䪆㢊ꔬ [ 411.343224][ T314] usb 9-1: SerialNumber: syz [ 411.357075][T17065] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 411.570867][ T314] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 411.583733][ T314] usb 9-1: USB disconnect, device number 16 [ 411.594434][T16778] udevd[16778]: setting owner of /dev/bus/usb/009/016 to uid=0, gid=0 failed: No such file or directory [ 411.890246][T17111] fuse: Bad value for 'fd' [ 412.197013][T17127] sit0: entered promiscuous mode [ 412.705000][T17150] /dev/rnullb0: Can't lookup blockdev [ 413.376902][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5902'. [ 414.091206][T17222] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 414.322847][T17242] /dev/rnullb0: Can't lookup blockdev [ 414.696869][T17271] overlayfs: failed to clone upperpath [ 414.709924][T17275] overlay: Unknown parameter 'mounts' [ 414.803538][T17280] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5934'. [ 414.978411][T17282] fuse: Unknown parameter '' [ 415.190283][T17298] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5942'. [ 415.200627][T17298] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 415.312452][T17309] fuse: Unknown parameter '{roup_it' [ 415.353243][T17316] 9p: Unknown Cache mode or invalid value fscache [ 415.432700][T17329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5953'. [ 415.626993][T17337] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.629287][T17337] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 415.643067][T17337] rust_binder: Write failure EINVAL in pid:162 [ 416.045665][ T376] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 416.062588][ T36] kauditd_printk_skb: 677 callbacks suppressed [ 416.062601][ T36] audit: type=1400 audit(672.032:27527): avc: denied { ioctl } for pid=17348 comm="syz.8.5960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.094130][ T36] audit: type=1400 audit(672.052:27528): avc: denied { ioctl } for pid=17348 comm="syz.8.5960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.121785][ T36] audit: type=1400 audit(672.062:27529): avc: denied { ioctl } for pid=17348 comm="syz.8.5960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.146267][ T36] audit: type=1400 audit(672.072:27530): avc: denied { create } for pid=17356 comm="syz.1.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.167685][ T36] audit: type=1400 audit(672.072:27531): avc: denied { ioctl } for pid=17356 comm="syz.1.5963" path="socket:[68768]" dev="sockfs" ino=68768 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.192072][ T36] audit: type=1400 audit(672.142:27532): avc: denied { ioctl } for pid=17348 comm="syz.8.5960" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.216531][ T36] audit: type=1400 audit(672.142:27533): avc: denied { create } for pid=17373 comm="syz.1.5964" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.238260][ T36] audit: type=1400 audit(672.142:27534): avc: denied { ioctl } for pid=17373 comm="syz.1.5964" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68774 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.264258][ T36] audit: type=1400 audit(672.142:27535): avc: denied { ioctl } for pid=17373 comm="syz.1.5964" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68774 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.289840][ T36] audit: type=1400 audit(672.142:27536): avc: denied { read } for pid=17373 comm="syz.1.5964" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=68774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 416.291948][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.324822][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.334601][ T376] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 416.343664][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.352934][ T376] usb 9-1: config 0 descriptor?? [ 416.568074][ T376] usbhid 9-1:0.0: can't add hid device: -71 [ 416.583774][ T376] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 416.596180][ T376] usb 9-1: USB disconnect, device number 17 [ 416.655942][T17395] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 416.785636][T17398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.872191][T17404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.890394][T17404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.890669][T17404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.995478][T17413] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 417.005753][T17413] SELinux: failed to load policy [ 417.245635][ T314] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 417.385628][ T314] usb 9-1: device descriptor read/64, error -71 [ 417.625640][ T314] usb 9-1: device descriptor read/64, error -71 [ 417.714126][T17465] fuse: Unknown parameter '¶¢$ÎbÓxAµqÏŠ”ãS' [ 417.865639][ T314] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 418.006770][ T314] usb 9-1: device descriptor read/64, error -71 [ 418.245730][ T314] usb 9-1: device descriptor read/64, error -71 [ 418.356062][ T314] usb usb9-port1: attempt power cycle [ 418.383129][T17504] overlayfs: failed to clone upperpath [ 418.563669][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6013'. [ 418.695610][ T314] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 418.717468][ T314] usb 9-1: device descriptor read/8, error -71 [ 418.847430][ T314] usb 9-1: device descriptor read/8, error -71 [ 419.086048][ T314] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 419.107501][ T314] usb 9-1: device descriptor read/8, error -71 [ 419.237457][ T314] usb 9-1: device descriptor read/8, error -71 [ 419.345689][ T314] usb usb9-port1: unable to enumerate USB device [ 419.767613][T17553] 9pnet_fd: Insufficient options for proto=fd [ 419.998831][T17563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17563 comm=syz.4.6030 [ 420.024125][T17563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17563 comm=syz.4.6030 [ 420.048903][T17563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17563 comm=syz.4.6030 [ 420.079334][T17565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.096351][T17563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=17563 comm=syz.4.6030 [ 420.814849][T17579] can: request_module (can-proto-0) failed. [ 420.993924][T17595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.997141][T17595] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 421.014334][T17595] rust_binder: Error while translating object. [ 421.025230][T17595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 421.031460][T17595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 421.085031][ T36] kauditd_printk_skb: 538 callbacks suppressed [ 421.085049][ T36] audit: type=1400 audit(677.052:28075): avc: denied { create } for pid=17608 comm="syz.4.6048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.120652][ T36] audit: type=1400 audit(677.072:28076): avc: denied { read } for pid=17610 comm="syz.8.6047" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.143069][ T36] audit: type=1400 audit(677.072:28077): avc: denied { read open } for pid=17610 comm="syz.8.6047" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.167041][ T36] audit: type=1400 audit(677.072:28078): avc: denied { ioctl } for pid=17610 comm="syz.8.6047" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.192974][ T36] audit: type=1400 audit(677.072:28079): avc: denied { name_bind } for pid=17610 comm="syz.8.6047" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 421.215089][ T36] audit: type=1400 audit(677.092:28080): avc: denied { read write } for pid=17610 comm="syz.8.6047" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.236032][T17611] rust_binder: Write failure EINVAL in pid:203 [ 421.238945][ T36] audit: type=1400 audit(677.092:28081): avc: denied { read write open } for pid=17610 comm="syz.8.6047" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.270492][ T36] audit: type=1400 audit(677.092:28082): avc: denied { ioctl } for pid=17610 comm="syz.8.6047" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.296175][ T36] audit: type=1400 audit(677.092:28083): avc: denied { read } for pid=17610 comm="syz.8.6047" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 421.318467][ T36] audit: type=1400 audit(677.092:28084): avc: denied { read open } for pid=17610 comm="syz.8.6047" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 421.377009][T17617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 421.464618][T17620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 421.471113][T17620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 421.581802][T17628] overlayfs: failed to clone upperpath [ 421.642929][T17635] tipc: Started in network mode [ 421.647968][T17635] tipc: Node identity ac14142f, cluster identity 4711 [ 421.654855][T17635] tipc: New replicast peer: 0.0.0.0 [ 421.661364][T17635] tipc: Enabled bearer , priority 10 [ 421.670363][T17635] netlink: 'syz.2.6057': attribute type 4 has an invalid length. [ 421.679079][T17635] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6057'. [ 421.695445][T17635] /dev/rnullb0: Can't lookup blockdev [ 422.775645][ T314] tipc: Node number set to 2886997039 [ 437.340590][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 437.340609][ T36] audit: type=1400 audit(693.311:28160): avc: denied { create } for pid=17641 comm="syz.1.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.368596][T17644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.368880][T17644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.404148][ T36] audit: type=1400 audit(693.311:28161): avc: denied { create } for pid=17641 comm="syz.1.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.450903][ T36] audit: type=1400 audit(693.311:28162): avc: denied { create } for pid=17641 comm="syz.1.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.466217][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6063'. [ 437.497247][ T36] audit: type=1400 audit(693.311:28163): avc: denied { create } for pid=17641 comm="syz.1.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.537412][ T36] audit: type=1400 audit(693.321:28164): avc: denied { create } for pid=17646 comm="syz.4.6063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 437.560692][ T36] audit: type=1400 audit(693.321:28165): avc: denied { execmem } for pid=17646 comm="syz.4.6063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 437.584791][T17652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 437.590411][T17672] audit: audit_backlog=65 > audit_backlog_limit=64 [ 437.591551][T17644] audit: audit_backlog=65 > audit_backlog_limit=64 [ 437.598150][T17672] audit: audit_lost=209 audit_rate_limit=0 audit_backlog_limit=64 [ 437.614263][T17644] rust_binder: Error while translating object. [ 437.614283][T17644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 437.621069][T17669] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6068'. [ 437.625597][T17644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 437.903096][T17689] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 437.963441][T17691] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 438.060641][T17694] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 438.189006][T17713] fuse: Bad value for 'fd' [ 438.323777][T17727] cgroup: Unknown subsys name 'measure' [ 439.071911][T17769] syzkaller0: entered promiscuous mode [ 439.077479][T17769] syzkaller0: entered allmulticast mode [ 439.277304][T17784] @: renamed from vlan0 [ 439.350940][T17791] overlayfs: failed to resolve '?': -2 [ 439.398223][T17795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=17795 comm=syz.2.6113 [ 440.017030][T17809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 440.242660][T17831] Dead loop on virtual device ip6_vti0, fix it urgently! [ 440.266502][T17830] overlayfs: failed to clone upperpath [ 440.402298][T17842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 440.466848][T17851] netlink: 'syz.1.6133': attribute type 29 has an invalid length. [ 440.484255][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 440.495164][T17849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.545084][T17854] binder: Unknown parameter 'pcr' [ 440.593333][T17856] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 440.607484][T17856] binder: Bad value for 'stats' [ 440.614701][T17856] binder: Bad value for 'stats' [ 440.615052][T17858] overlay: Unknown parameter './binderfs' [ 440.658020][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.658302][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.665174][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.673765][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.684910][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.691891][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.698749][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.705485][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.713739][T17860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 441.318467][T17877] overlayfs: failed to clone upperpath [ 441.552232][T17906] batadv_slave_1: entered promiscuous mode [ 441.558726][T17903] batadv_slave_1: left promiscuous mode [ 442.598034][ T36] kauditd_printk_skb: 735 callbacks suppressed [ 442.598051][ T36] audit: type=1400 audit(698.571:28881): avc: denied { write } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 442.639294][ T36] audit: type=1400 audit(698.571:28882): avc: denied { write } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 442.658093][ T36] audit: type=1400 audit(698.571:28883): avc: denied { create } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.681296][ T36] audit: type=1400 audit(698.571:28884): avc: denied { write } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.712349][ T36] audit: type=1400 audit(698.571:28885): avc: denied { mounton } for pid=17945 comm="syz.1.6160" path="/567" dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 442.771730][ T36] audit: type=1400 audit(698.571:28886): avc: denied { mount } for pid=17945 comm="syz.1.6160" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 442.839746][ T36] audit: type=1400 audit(698.571:28887): avc: denied { create } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 442.885272][ T36] audit: type=1400 audit(698.571:28888): avc: denied { read } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 442.925444][ T36] audit: type=1400 audit(698.571:28889): avc: denied { create } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 442.964535][ T36] audit: type=1400 audit(698.571:28890): avc: denied { write } for pid=17945 comm="syz.1.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 443.339382][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6178'. [ 443.349246][T17995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17995 comm=syz.1.6178 [ 443.846082][T18011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 443.865582][T18011] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 443.911155][T18016] can: request_module (can-proto-0) failed. [ 444.041147][T18022] overlayfs: missing 'lowerdir' [ 444.863140][T18071] overlayfs: failed to clone upperpath [ 444.863190][T18070] overlayfs: failed to clone upperpath [ 445.160742][T18094] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 445.228663][T18097] exFAT-fs (rnullb0): invalid boot record signature [ 445.245606][T18097] exFAT-fs (rnullb0): failed to read boot sector [ 445.255590][T18097] exFAT-fs (rnullb0): failed to recognize exfat type [ 445.373011][T18108] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6217'. [ 445.457188][T18120] binder: Bad value for 'context' [ 445.705218][T18143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 445.719806][T18143] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 445.726315][T18143] rust_binder: Read failure Err(EFAULT) in pid:302 [ 445.795170][T18148] /dev/md0: Can't lookup blockdev [ 445.796020][T18149] /dev/md0: Can't lookup blockdev [ 445.840179][T18151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 445.842990][T18151] rust_binder: Error in use_page_slow: ESRCH [ 445.849999][T18151] rust_binder: use_range failure ESRCH [ 445.859786][T18151] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 445.865292][T18151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 445.873312][T18151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:311 [ 445.924017][T18154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.963901][T18154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.054293][T18163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 446.054949][T18166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 446.473091][T18195] fuse: Bad value for 'fd' [ 447.325610][ T1249] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 447.479052][ T1249] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.496256][ T1249] usb 9-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 447.502292][T18230] overlayfs: failed to clone upperpath [ 447.505378][ T1249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.518943][ T1249] usb 9-1: Product: syz [ 447.523757][ T1249] usb 9-1: Manufacturer: syz [ 447.529274][ T1249] usb 9-1: SerialNumber: syz [ 447.544441][ T1249] usb 9-1: config 0 descriptor?? [ 447.565888][ T1249] usb 9-1: bad CDC descriptors [ 447.600080][T18233] overlayfs: failed to clone upperpath [ 447.615126][ T36] kauditd_printk_skb: 643 callbacks suppressed [ 447.615144][ T36] audit: type=1400 audit(703.581:29534): avc: denied { create } for pid=18235 comm="syz.2.6259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.646368][ T36] audit: type=1400 audit(703.611:29535): avc: denied { connect } for pid=18235 comm="syz.2.6259" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.666644][ T36] audit: type=1400 audit(703.611:29536): avc: denied { setopt } for pid=18235 comm="syz.2.6259" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.686903][ T36] audit: type=1400 audit(703.611:29537): avc: denied { create } for pid=18235 comm="syz.2.6259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 447.706295][ T36] audit: type=1400 audit(703.621:29538): avc: denied { name_bind } for pid=18232 comm="syz.4.6258" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 447.727750][ T36] audit: type=1400 audit(703.661:29539): avc: denied { create } for pid=18238 comm="syz.2.6260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.750289][ T36] audit: type=1400 audit(703.721:29540): avc: denied { create } for pid=18241 comm="syz.2.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.771331][T18244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 447.771508][ T36] audit: type=1400 audit(703.721:29541): avc: denied { connect } for pid=18241 comm="syz.2.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.772957][T18244] rust_binder: Error in use_page_slow: ESRCH [ 447.779164][ T36] audit: type=1400 audit(703.721:29542): avc: denied { write } for pid=18241 comm="syz.2.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.813696][T18221] rust_binder: Error in use_page_slow: ESRCH [ 447.823843][ T36] audit: type=1400 audit(703.721:29543): avc: denied { create } for pid=18240 comm="syz.4.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 447.835585][T18221] rust_binder: use_range failure ESRCH [ 447.851953][T18244] rust_binder: use_range failure ESRCH [ 447.858075][T18244] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 447.862137][T18221] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 447.863646][T18244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 447.874122][T18221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 447.884374][T18244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:330 [ 447.889028][T18221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:330 [ 447.908516][ T376] usb 9-1: USB disconnect, device number 22 [ 448.675600][ T376] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 448.815605][ T376] usb 9-1: device descriptor read/64, error -71 [ 449.065631][ T376] usb 9-1: device descriptor read/64, error -71 [ 449.305630][ T376] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 449.314841][ T311] bridge_slave_1: left allmulticast mode [ 449.321475][ T311] bridge_slave_1: left promiscuous mode [ 449.327287][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.335471][ T311] bridge_slave_0: left allmulticast mode [ 449.341807][ T311] bridge_slave_0: left promiscuous mode [ 449.347922][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.455678][ T376] usb 9-1: device descriptor read/64, error -71 [ 449.543597][ T311] tipc: Disabling bearer [ 449.549022][ T311] tipc: Left network mode [ 449.556302][ T311] veth1_macvtap: left promiscuous mode [ 449.562049][ T311] veth0_vlan: left promiscuous mode [ 449.625424][T18303] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.632495][T18303] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.639597][T18303] bridge_slave_0: entered allmulticast mode [ 449.646096][T18303] bridge_slave_0: entered promiscuous mode [ 449.652930][T18303] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.660007][T18303] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.667074][T18303] bridge_slave_1: entered allmulticast mode [ 449.673206][T18303] bridge_slave_1: entered promiscuous mode [ 449.705616][ T376] usb 9-1: device descriptor read/64, error -71 [ 449.746378][T18303] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.753410][T18303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.760690][T18303] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.767726][T18303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.807548][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.814820][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.828736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.835719][ T376] usb usb9-port1: attempt power cycle [ 449.835802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.851880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.858949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.922881][T18303] veth0_vlan: entered promiscuous mode [ 449.952236][T18303] veth1_macvtap: entered promiscuous mode [ 450.175606][ T376] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 450.209128][ T376] usb 9-1: device descriptor read/8, error -71 [ 450.337749][ T376] usb 9-1: device descriptor read/8, error -71 [ 450.425635][ T1249] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 450.575657][ T376] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 450.579094][T18336] overlay: Unknown parameter 'mounts' [ 450.588693][ T1249] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 450.597143][ T1249] usb 2-1: config 0 has no interface number 0 [ 450.603218][ T1249] usb 2-1: config 0 interface 137 has no altsetting 0 [ 450.612078][ T376] usb 9-1: device descriptor read/8, error -71 [ 450.620708][ T1249] usb 2-1: New USB device found, idVendor=356d, idProduct=b432, bcdDevice=39.60 [ 450.632322][ T1249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.640554][ T1249] usb 2-1: Product: syz [ 450.644723][ T1249] usb 2-1: Manufacturer: syz [ 450.649469][ T1249] usb 2-1: SerialNumber: syz [ 450.655421][ T1249] usb 2-1: config 0 descriptor?? [ 450.747817][ T376] usb 9-1: device descriptor read/8, error -71 [ 450.855846][ T376] usb usb9-port1: unable to enumerate USB device [ 450.865440][T18319] overlay: Unknown parameter 'pcr' [ 450.874944][ T1249] cdc_acm 2-1:0.137: Zero length descriptor references [ 450.886151][ T1249] cdc_acm 2-1:0.137: probe with driver cdc_acm failed with error -22 [ 450.895135][ T1249] usb 2-1: USB disconnect, device number 32 [ 451.231380][T18350] overlayfs: failed to clone upperpath [ 451.421803][T18352] rust_binder: Error while translating object. [ 451.421846][T18352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 451.428553][T18352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:8 [ 451.739040][T18370] overlayfs: failed to clone upperpath [ 451.845608][ T345] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 451.991808][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6310'. [ 452.002648][ T345] usb 2-1: not running at top speed; connect to a high speed hub [ 452.003008][T18385] binder: Bad value for 'max' [ 452.013091][ T345] usb 2-1: config index 0 descriptor too short (expected 32914, got 146) [ 452.024376][ T345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.034531][ T345] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 452.043763][ T345] usb 2-1: config 1 has no interface number 1 [ 452.049877][ T345] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 452.062687][ T345] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 452.076704][ T345] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.085758][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.093726][ T345] usb 2-1: Product: syz [ 452.097891][ T345] usb 2-1: Manufacturer: syz [ 452.102529][ T345] usb 2-1: SerialNumber: syz [ 452.312572][T18359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 452.312609][T18359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 452.324645][ T345] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 452.341541][ T345] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 452.364866][ T345] usb 2-1: USB disconnect, device number 33 [ 452.399575][T17692] udevd[17692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 452.644718][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 452.644735][ T36] audit: type=1400 audit(2000000004.540:30118): avc: denied { create } for pid=18400 comm="syz.2.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.735914][ T36] audit: type=1400 audit(2000000004.630:30119): avc: denied { read write } for pid=15515 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.760360][ T36] audit: type=1400 audit(2000000004.630:30120): avc: denied { read write open } for pid=15515 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.789817][ T36] audit: type=1400 audit(2000000004.630:30121): avc: denied { ioctl } for pid=15515 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.844895][ T36] audit: type=1400 audit(2000000004.630:30122): avc: denied { create } for pid=18402 comm="syz.2.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 452.895629][ T36] audit: type=1400 audit(2000000004.640:30123): avc: denied { create } for pid=18402 comm="syz.2.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 452.960694][ T36] audit: type=1400 audit(2000000004.640:30124): avc: denied { write } for pid=18402 comm="syz.2.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 452.997907][T18415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 453.021179][T18423] binder: Unknown parameter '01777777777777777777777' [ 453.061652][T18425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 453.066616][ T36] audit: type=1400 audit(2000000004.640:30125): avc: denied { read } for pid=18402 comm="syz.2.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.207065][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.226472][ T36] audit: type=1400 audit(2000000004.640:30126): avc: denied { read } for pid=18402 comm="syz.2.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.237061][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.283455][T18411] bridge_slave_0: entered allmulticast mode [ 453.290064][T18411] bridge_slave_0: entered promiscuous mode [ 453.295599][ T36] audit: type=1400 audit(2000000004.690:30127): avc: denied { create } for pid=18405 comm="syz.8.6319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.297775][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.323503][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.331462][T18411] bridge_slave_1: entered allmulticast mode [ 453.337823][T18411] bridge_slave_1: entered promiscuous mode [ 453.514411][ T310] bridge_slave_1: left allmulticast mode [ 453.521472][ T310] bridge_slave_1: left promiscuous mode [ 453.527163][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.536905][ T310] bridge_slave_0: left allmulticast mode [ 453.545091][ T310] bridge_slave_0: left promiscuous mode [ 453.551098][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.689627][ T310] tipc: Left network mode [ 453.700449][ T310] veth1_macvtap: left promiscuous mode [ 453.706077][ T310] veth0_vlan: left promiscuous mode [ 453.807269][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.814341][T18411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.821640][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.828691][T18411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.905891][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.914685][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.932423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.939516][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.958534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.965620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.053242][T18411] veth0_vlan: entered promiscuous mode [ 454.140590][T18411] veth1_macvtap: entered promiscuous mode [ 454.382558][T18470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.522324][T18475] rust_binder: Error while translating object. [ 454.536445][T18475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 454.552416][T18475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 454.667064][T18486] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 454.737980][T18488] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 454.738002][T18488] rust_binder: Error while translating object. [ 454.748477][T18488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 454.754644][T18488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 455.111696][T18499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=238 sclass=netlink_route_socket pid=18499 comm=syz.1.6346 [ 455.293546][T18503] can: request_module (can-proto-0) failed. [ 455.391703][T18507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.392704][T18507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 455.400944][T18509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:378 [ 455.446788][T18511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.705636][ T345] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 455.865592][ T345] usb 5-1: Using ep0 maxpacket: 32 [ 455.872745][ T345] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 455.882344][ T345] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 455.890984][ T345] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 455.900706][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 455.910871][ T345] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 455.921619][ T345] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 455.934667][ T345] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 455.943726][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.953126][ T345] usb 5-1: config 0 descriptor?? [ 456.163870][ T345] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 456.288090][T18525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 456.296396][T18525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:395 [ 456.366085][ T345] usb 5-1: USB disconnect, device number 70 [ 456.395054][ T345] usblp0: removed [ 456.585616][ T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 456.644345][T18532] binder: Bad value for 'stats' [ 456.925595][ T313] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 457.055639][T18553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 457.055676][T18553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:21 [ 457.065082][T18553] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 457.074184][T18553] rust_binder: Read failure Err(EFAULT) in pid:21 [ 457.110922][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 457.156678][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.187829][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.204350][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.227854][ T313] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.240866][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.264060][ T313] usb 2-1: config 0 descriptor?? [ 457.271039][T18574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 457.274480][T18575] rust_binder: Got transaction with invalid offset. [ 457.281327][T18575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 457.292940][T18575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 457.443839][T18577] cgroup: fork rejected by pids controller in /syz4 [ 457.652856][ T36] kauditd_printk_skb: 6174 callbacks suppressed [ 457.652885][ T36] audit: type=1400 audit(2000000009.550:36281): avc: denied { read write open } for pid=18572 comm="syz.4.6374" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 457.721797][ T313] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 457.743658][ T36] audit: type=1400 audit(2000000009.550:36282): avc: denied { read write } for pid=18572 comm="syz.4.6374" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 457.785416][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 457.795596][ T36] audit: type=1400 audit(2000000009.550:36283): avc: denied { read write open } for pid=18572 comm="syz.4.6374" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 457.816573][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 457.845590][ T36] audit: type=1400 audit(2000000009.550:36284): avc: denied { read write } for pid=18572 comm="syz.4.6374" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 457.855624][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 457.871360][ T36] audit: type=1400 audit(2000000009.550:36285): avc: denied { read write open } for pid=18572 comm="syz.4.6374" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 457.893222][T18576] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.902559][T18598] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.909562][T18534] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.919781][T18733] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.920326][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 457.927731][T18598] audit: audit_lost=224 audit_rate_limit=0 audit_backlog_limit=64 [ 457.942769][T18534] rust_binder: Error in use_page_slow: ESRCH [ 457.942790][T18534] rust_binder: use_range failure ESRCH [ 457.943699][T18734] overlayfs: failed to clone lowerpath [ 457.952076][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 457.967595][T18534] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 457.967625][T18534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 457.975624][T18534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:54 [ 457.985476][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.035600][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.043010][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.064170][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.072074][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.108491][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.125089][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.146236][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.164548][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.172469][ T313] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 458.205158][ T313] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0015/input/input37 [ 458.212860][T18771] binder: Bad value for 'stats' [ 458.231341][ T313] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 458.259429][ T313] usb 2-1: USB disconnect, device number 34 [ 458.350473][T18776] fido_id[18776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 458.434328][T18782] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 458.444069][T18782] SELinux: failed to load policy [ 458.717649][T18805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 458.717681][T18805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:61 [ 458.814053][T18813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 458.868593][T18813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.915709][T18813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.023428][T18827] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 459.048272][T18827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 459.095607][ T313] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 459.176298][T18836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 459.181734][T18836] x_tables: duplicate underflow at hook 1 [ 459.203567][T18836] rust_binder: Error while translating object. [ 459.203607][T18836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 459.210190][T18836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 459.268034][ T313] usb 9-1: config 0 has an invalid interface number: 9 but max is 0 [ 459.288538][ T313] usb 9-1: config 0 has no interface number 0 [ 459.307703][ T313] usb 9-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 459.317732][ T313] usb 9-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 459.349548][ T313] usb 9-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 459.375590][ T313] usb 9-1: config 0 interface 9 has no altsetting 0 [ 459.392553][ T313] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 459.409950][ T313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.428141][ T313] usb 9-1: Product: syz [ 459.432329][ T313] usb 9-1: Manufacturer: syz [ 459.446588][ T313] usb 9-1: SerialNumber: syz [ 459.464743][ T313] usb 9-1: config 0 descriptor?? [ 459.754272][ T313] ftdi_sio 9-1:0.9: FTDI USB Serial Device converter detected [ 459.766596][ T313] usb 9-1: Detected SIO [ 459.770782][ T313] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 459.811357][ T313] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 459.838564][ T313] usb 9-1: USB disconnect, device number 28 [ 459.850456][T18856] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 4294966769) [ 459.850480][T18856] rust_binder: Error while translating object. [ 459.866601][ T313] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.895659][T18856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 459.895692][T18856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 459.905293][ T313] ftdi_sio 9-1:0.9: device disconnected [ 460.872374][T18882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 460.969226][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 460.984947][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.125612][ T313] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 461.265605][ T313] usb 9-1: device descriptor read/64, error -71 [ 461.376636][T18900] cgroup: fork rejected by pids controller in /syz2 [ 461.515620][ T313] usb 9-1: device descriptor read/64, error -71 [ 461.765606][ T313] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 461.785667][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 461.905602][ T313] usb 9-1: device descriptor read/64, error -71 [ 461.945581][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 461.953647][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.962071][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.970759][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.979787][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.989488][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.999217][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.012243][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 462.021361][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.033454][ T9] usb 2-1: config 0 descriptor?? [ 462.157471][T18950] binder: Bad value for 'stats' [ 462.165609][ T313] usb 9-1: device descriptor read/64, error -71 [ 462.259805][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 462.281266][ T313] usb usb9-port1: attempt power cycle [ 462.355603][ T345] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 462.492140][ T376] usb 2-1: USB disconnect, device number 35 [ 462.499620][ T376] usblp0: removed [ 462.528034][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 462.538969][ T345] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 462.548075][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.557177][ T345] usb 5-1: config 0 descriptor?? [ 462.563362][T18948] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 462.635602][ T313] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 462.656143][ T36] kauditd_printk_skb: 815 callbacks suppressed [ 462.656160][ T36] audit: type=1400 audit(2000000014.560:37043): avc: denied { ioctl } for pid=18881 comm="syz.8.6421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.688968][ T36] audit: type=1400 audit(2000000014.560:37044): avc: denied { ioctl } for pid=18881 comm="syz.8.6421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.691037][ T313] usb 9-1: device descriptor read/8, error -71 [ 462.718587][ T36] audit: type=1400 audit(2000000014.590:37045): avc: denied { ioctl } for pid=18881 comm="syz.8.6421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.745293][ T36] audit: type=1400 audit(2000000014.590:37046): avc: denied { ioctl } for pid=18881 comm="syz.8.6421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.770369][ T36] audit: type=1400 audit(2000000014.590:37047): avc: denied { ioctl } for pid=18881 comm="syz.8.6421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.795455][ T36] audit: type=1400 audit(2000000014.620:37048): avc: denied { ioctl } for pid=18881 comm="syz.8.6421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.801671][ T345] hid-generic 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 462.824962][ T36] audit: type=1400 audit(2000000014.700:37049): avc: denied { ioctl } for pid=18946 comm="syz.4.6432" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.879579][ T345] usb 5-1: USB disconnect, device number 71 [ 462.892805][ T36] audit: type=1400 audit(2000000014.700:37050): avc: denied { ioctl } for pid=18946 comm="syz.4.6432" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.919915][ T313] usb 9-1: device descriptor read/8, error -71 [ 462.938234][ T36] audit: type=1400 audit(2000000014.700:37051): avc: denied { ioctl } for pid=18946 comm="syz.4.6432" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.983264][ T36] audit: type=1400 audit(2000000014.700:37052): avc: denied { ioctl } for pid=18946 comm="syz.4.6432" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.994198][T18979] fido_id[18979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 463.071892][T18983] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6444'. [ 463.082149][T18983] rust_binder: Error while translating object. [ 463.082183][T18983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 463.089088][T18983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 463.165803][ T313] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 463.197239][ T313] usb 9-1: device descriptor read/8, error -71 [ 463.336286][ T313] usb 9-1: device descriptor read/8, error -71 [ 463.455680][ T313] usb usb9-port1: unable to enumerate USB device [ 463.502204][T19000] tmpfs: Bad value for 'nr_inodes' [ 463.509562][T19000] rust_binder: Write failure EFAULT in pid:101 [ 464.302355][T19039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.797515][T19058] rust_binder: Error while translating object. [ 464.805156][T19058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.815216][T19058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 464.846954][T19060] tipc: Started in network mode [ 464.870757][T19060] tipc: Node identity ac14141d, cluster identity 4711 [ 464.891834][T19060] tipc: New replicast peer: 255.255.255.255 [ 464.907898][T19060] tipc: Enabled bearer , priority 10 [ 465.144185][T19069] rust_binder: Failed copying remainder into alloc: EFAULT [ 465.144209][T19069] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 465.177773][T19069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 465.204191][T19069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:120 [ 465.419934][T19084] kvm: kvm [19082]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x100000001 [ 465.530021][T19089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 465.535074][T19090] rust_binder: Error while translating object. [ 465.542705][T19090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 465.549545][T19090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:281 [ 465.613476][T19089] rust_binder: Write failure EFAULT in pid:468 [ 465.915634][ T313] tipc: Node number set to 2886997021 [ 465.955603][T19110] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.6482'. [ 466.810306][T19125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 467.065835][T19127] binder: Unknown parameter 's(a±Þ[©rÄ4' [ 467.065873][T19120] binder: Unknown parameter 's(a±Þ[©rÄ4' [ 467.154023][T19135] random: crng reseeded on system resumption [ 467.246579][T19143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.261065][T19143] rust_binder: Error in use_page_slow: ESRCH [ 467.287023][T19143] rust_binder: use_range failure ESRCH [ 467.309339][T19143] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 467.320801][T19143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 467.329814][T19143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:484 [ 467.460355][T19157] binder: Unknown parameter 'xt' [ 467.496547][T19157] futex_wake_op: syz.4.6496 tries to shift op by -1; fix this program [ 467.666062][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 467.666080][ T36] audit: type=1400 audit(2000000019.560:37663): avc: denied { read } for pid=19167 comm="syz.8.6501" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.712599][T19165] syzkaller0: entered allmulticast mode [ 467.722739][T19170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6502'. [ 467.775585][ T36] audit: type=1400 audit(2000000019.560:37664): avc: denied { read open } for pid=19167 comm="syz.8.6501" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.807844][T19168] binder: Bad value for 'stats' [ 467.815606][ T36] audit: type=1400 audit(2000000019.570:37665): avc: denied { create } for pid=19167 comm="syz.8.6501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.875582][ T36] audit: type=1400 audit(2000000019.600:37666): avc: denied { ioctl } for pid=19167 comm="syz.8.6501" path="socket:[75074]" dev="sockfs" ino=75074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.912124][ T36] audit: type=1400 audit(2000000019.600:37667): avc: denied { create } for pid=19167 comm="syz.8.6501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 467.963497][ T36] audit: type=1400 audit(2000000019.600:37668): avc: denied { setopt } for pid=19167 comm="syz.8.6501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 468.005842][ T36] audit: type=1400 audit(2000000019.610:37669): avc: denied { read } for pid=19169 comm="syz.1.6502" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 468.014870][T19178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.031840][T19179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.054240][T19177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.078079][T19184] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 468.133888][T19184] tipc: Started in network mode [ 468.144538][T19184] tipc: Node identity ac14142f, cluster identity 4711 [ 468.164894][T19184] tipc: New replicast peer: 0.0.0.0 [ 468.174296][T19184] tipc: Enabled bearer , priority 10 [ 468.197000][T19184] netlink: 'syz.1.6505': attribute type 4 has an invalid length. [ 468.210931][T19190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.233221][T19184] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6505'. [ 468.277450][T19184] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 468.471783][T19206] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6510'. [ 468.578436][T19213] rust_binder: Error while translating object. [ 468.578476][T19213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.584655][T19213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150 [ 468.750403][T19219] rust_binder: Error while translating object. [ 468.764548][T19219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.774623][T19219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322 [ 469.155592][ T314] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 469.255608][ T345] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 469.285603][ T313] tipc: Node number set to 2886997039 [ 469.315583][ T314] usb 5-1: Using ep0 maxpacket: 32 [ 469.326445][ T314] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 469.334768][ T314] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 469.348991][ T314] usb 5-1: config 0 has no interface number 0 [ 469.355399][ T314] usb 5-1: config 0 interface 184 has no altsetting 0 [ 469.397241][ T314] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 469.410175][T19276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.410224][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.428703][ T314] usb 5-1: Product: syz [ 469.438826][ T314] usb 5-1: Manufacturer: syz [ 469.451433][ T314] usb 5-1: SerialNumber: syz [ 469.465688][ T314] usb 5-1: config 0 descriptor?? [ 469.477752][ T314] smsc75xx v1.0.0 [ 469.496268][T19276] rust_binder: Write failure EINVAL in pid:517 [ 469.508598][ T345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.553169][T19283] 9pnet_fd: Insufficient options for proto=fd [ 469.561360][ T345] usb 2-1: no configurations [ 469.571096][ T345] usb 2-1: can't read configurations, error -22 [ 469.758882][T19299] overlayfs: failed to clone upperpath [ 469.880236][T19303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 469.880269][T19303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 470.010540][T19315] fuse: Bad value for 'fd' [ 470.038712][T19314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 470.038746][T19314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:167 [ 470.102928][T19318] rust_binder: Write failure EINVAL in pid:169 [ 470.170175][ T314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 470.198359][ T314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 470.220749][ T314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 470.231921][ T314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 470.241664][ T314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 470.251982][ T314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 470.261459][ T314] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 470.275709][ T314] usb 5-1: USB disconnect, device number 72 [ 470.390463][T19332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 470.390499][T19332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:176 [ 470.755253][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6559'. [ 470.854733][T19371] binder: Unknown parameter 'context' [ 471.165638][ T345] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 471.319854][ T345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.329884][ T345] usb 2-1: not running at top speed; connect to a high speed hub [ 471.349810][T19406] overlayfs: failed to clone upperpath [ 471.364447][ T345] usb 2-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 471.382274][ T345] usb 2-1: config 1 interface 0 altsetting 166 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.395969][ T345] usb 2-1: config 1 interface 0 has no altsetting 0 [ 471.406508][ T345] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 471.415920][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.424150][ T345] usb 2-1: Product: syz [ 471.436672][ T345] usb 2-1: Manufacturer: syz [ 471.441629][ T345] usb 2-1: SerialNumber: syz [ 471.659193][ T345] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 471.675655][ T345] usb 2-1: USB disconnect, device number 38 [ 471.695599][ T1249] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 471.845581][ T1249] usb 9-1: Using ep0 maxpacket: 16 [ 471.852467][ T1249] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.862853][ T1249] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.874099][ T1249] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.883206][ T1249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.891201][ T1249] usb 9-1: Product: syz [ 471.895356][ T1249] usb 9-1: Manufacturer: syz [ 471.899956][ T1249] usb 9-1: SerialNumber: syz [ 472.001292][T19433] tmpfs: Bad value for 'size' [ 472.043514][T19440] netlink: 'syz.4.6584': attribute type 4 has an invalid length. [ 472.051293][T19440] netlink: 'syz.4.6584': attribute type 5 has an invalid length. [ 472.059068][T19440] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6584'. [ 472.117486][T19408] exFAT-fs (rnullb0): invalid boot record signature [ 472.124265][T19408] exFAT-fs (rnullb0): failed to read boot sector [ 472.132404][T19408] exFAT-fs (rnullb0): failed to recognize exfat type [ 472.141187][ T314] usb 9-1: USB disconnect, device number 33 [ 472.534659][T19487] overlayfs: failed to clone upperpath [ 472.696732][ T36] kauditd_printk_skb: 1711 callbacks suppressed [ 472.696744][ T36] audit: type=1400 audit(2000000024.600:39375): avc: denied { create } for pid=19496 comm="syz.2.6601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 472.735569][ T36] audit: type=1400 audit(2000000024.600:39376): avc: denied { write } for pid=19496 comm="syz.2.6601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 472.775580][ T36] audit: type=1400 audit(2000000024.600:39377): avc: denied { write } for pid=19496 comm="syz.2.6601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 472.810040][ T36] audit: type=1400 audit(2000000024.610:39378): avc: denied { create } for pid=19496 comm="syz.2.6601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.833776][ T36] audit: type=1400 audit(2000000024.620:39379): avc: denied { create } for pid=19496 comm="syz.2.6601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.856113][ T36] audit: type=1400 audit(2000000024.620:39380): avc: denied { setopt } for pid=19496 comm="syz.2.6601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.878193][ T36] audit: type=1400 audit(2000000024.630:39381): avc: denied { ioctl } for pid=19496 comm="syz.2.6601" path="socket:[77197]" dev="sockfs" ino=77197 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.904089][ T36] audit: type=1400 audit(2000000024.630:39382): avc: denied { map } for pid=19496 comm="syz.2.6601" path="socket:[77197]" dev="sockfs" ino=77197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.928622][ T36] audit: type=1400 audit(2000000024.630:39383): avc: denied { read } for pid=19496 comm="syz.2.6601" path="socket:[77197]" dev="sockfs" ino=77197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.953078][ T36] audit: type=1400 audit(2000000024.630:39384): avc: denied { map } for pid=19496 comm="syz.2.6601" path="socket:[77197]" dev="sockfs" ino=77197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.149394][T19509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6604'. [ 473.160803][T19509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6604'. [ 473.172818][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6604'. [ 473.844671][T19521] /dev/rnullb0: Can't open blockdev [ 474.086583][T19535] futex_wake_op: syz.4.6616 tries to shift op by -1; fix this program [ 474.138279][T19541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.387222][T19559] netlink: 'syz.4.6620': attribute type 4 has an invalid length. [ 474.499771][T19562] overlayfs: failed to clone lowerpath [ 474.898914][T19574] binder: Bad value for 'max' [ 475.179732][ T1249] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 475.195123][ T1249] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.845473][T19625] fuse: Unknown parameter 'fd00000000000000000000' [ 477.928959][ T36] kauditd_printk_skb: 519 callbacks suppressed [ 477.928977][ T36] audit: type=1400 audit(2000000029.830:39904): avc: denied { mounton } for pid=19630 comm="syz.8.6645" path="/186/binderfs2" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 477.929206][T19631] binder: Bad value for 'stats' [ 477.965829][ T36] audit: type=1326 audit(2000000029.870:39905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 477.989551][ T36] audit: type=1326 audit(2000000029.870:39906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 478.013247][ T36] audit: type=1326 audit(2000000029.870:39907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 478.030278][T19635] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.037397][ T36] audit: type=1326 audit(2000000029.870:39908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 478.037428][ T36] audit: type=1326 audit(2000000029.870:39909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 478.037452][ T36] audit: type=1400 audit(2000000029.870:39910): avc: denied { create } for pid=19630 comm="syz.8.6645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 478.037472][ T36] audit: type=1326 audit(2000000029.870:39911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 478.037495][ T36] audit: type=1326 audit(2000000029.870:39912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19630 comm="syz.8.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe472f8e929 code=0x7ffc0000 [ 478.306714][T19646] ªªªªª»: renamed from team_slave_1 [ 478.841621][T19671] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6659'. [ 479.128222][T19690] overlayfs: failed to resolve './file1/file0': -2 [ 479.339878][T19706] overlayfs: failed to clone upperpath [ 479.546688][T19709] netlink: 'syz.8.6670': attribute type 1 has an invalid length. [ 479.563216][T19709] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6670'. [ 479.987895][T19719] overlayfs: failed to clone upperpath [ 480.854922][T19752] 9pnet_fd: Insufficient options for proto=fd [ 481.018998][T19772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 481.019527][T19772] rust_binder: Write failure EINVAL in pid:211 [ 481.100818][T19777] tipc: New replicast peer: 172.20.20.41 [ 481.357250][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 481.527908][T19812] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.535011][T19812] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.542611][T19812] bridge_slave_0: entered allmulticast mode [ 481.558118][T19812] bridge_slave_0: entered promiscuous mode [ 481.566505][ T9] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 481.580028][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.588892][T19812] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.602071][T19812] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.605309][ T9] usb 2-1: Product: syz [ 481.609217][T19812] bridge_slave_1: entered allmulticast mode [ 481.619634][T19812] bridge_slave_1: entered promiscuous mode [ 481.620935][ T9] usb 2-1: Manufacturer: syz [ 481.631037][ T9] usb 2-1: SerialNumber: syz [ 481.645708][ T9] usb 2-1: config 0 descriptor?? [ 481.698219][ T12] bridge_slave_1: left allmulticast mode [ 481.704961][ T12] bridge_slave_1: left promiscuous mode [ 481.711337][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.719410][ T12] bridge_slave_0: left allmulticast mode [ 481.725091][ T12] bridge_slave_0: left promiscuous mode [ 481.731466][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.803574][ T12] tipc: Disabling bearer [ 481.809106][ T12] tipc: Left network mode [ 481.853024][ T12] vcan0 (unregistering): left allmulticast mode [ 481.880991][T19812] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.888083][T19812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.895356][T19812] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.902414][T19812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.976764][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.985307][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.001705][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.008765][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.036692][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.043777][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.129939][T19812] veth0_vlan: entered promiscuous mode [ 482.177795][T19812] veth1_macvtap: entered promiscuous mode [ 482.285300][T19831] fuse: Bad value for 'group_id' [ 482.290336][T19831] fuse: Bad value for 'group_id' [ 482.387814][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6710'. [ 482.648434][T19866] overlayfs: failed to clone upperpath [ 482.686813][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 482.763910][T19869] netlink: 'syz.8.6718': attribute type 3 has an invalid length. [ 482.904543][T19777] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 482.956190][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 482.969035][T19877] fuse: Bad value for 'fd' [ 482.973521][ T36] kauditd_printk_skb: 583 callbacks suppressed [ 482.973539][ T36] audit: type=1400 audit(2000000034.870:40491): avc: denied { mounton } for pid=19876 comm="syz.8.6721" path="/208/file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 483.005323][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 483.014429][ T36] audit: type=1400 audit(2000000034.910:40492): avc: denied { create } for pid=19876 comm="syz.8.6721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 483.031092][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 483.035730][ T36] audit: type=1400 audit(2000000034.930:40493): avc: denied { create } for pid=19880 comm="syz.4.6723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 483.062373][ T9] usb 2-1: USB disconnect, device number 39 [ 483.109145][ T36] audit: type=1400 audit(2000000034.950:40494): avc: denied { setopt } for pid=19880 comm="syz.4.6723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 483.162797][ T36] audit: type=1400 audit(2000000034.970:40495): avc: denied { create } for pid=19876 comm="syz.8.6721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 483.197789][ T36] audit: type=1400 audit(2000000034.980:40496): avc: denied { setopt } for pid=19876 comm="syz.8.6721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 483.218299][ T36] audit: type=1400 audit(2000000035.050:40497): avc: denied { create } for pid=19885 comm="syz.4.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.241874][ T36] audit: type=1400 audit(2000000035.050:40498): avc: denied { create } for pid=19885 comm="syz.4.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.271800][ T36] audit: type=1400 audit(2000000035.050:40499): avc: denied { ioctl } for pid=19885 comm="syz.4.6724" path="socket:[78158]" dev="sockfs" ino=78158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.299778][ T36] audit: type=1400 audit(2000000035.050:40500): avc: denied { create } for pid=19885 comm="syz.4.6724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 483.317564][T19895] netlink: 'syz.4.6726': attribute type 4 has an invalid length. [ 483.345626][T19895] netlink: 'syz.4.6726': attribute type 27 has an invalid length. [ 483.353469][T19895] netlink: 3609 bytes leftover after parsing attributes in process `syz.4.6726'. [ 483.676067][T19903] rust_binder: Error in use_page_slow: ESRCH [ 483.676091][T19903] rust_binder: use_range failure ESRCH [ 483.689613][T19903] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 483.701575][T19903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 483.717746][T19903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:216 [ 484.295771][ T345] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 484.344657][T19935] netlink: 'syz.4.6741': attribute type 4 has an invalid length. [ 484.352536][T19935] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6741'. [ 484.464558][T19946] fuse: Bad value for 'user_id' [ 484.469502][T19946] fuse: Bad value for 'user_id' [ 484.479494][ T345] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.488157][ T345] usb 2-1: not running at top speed; connect to a high speed hub [ 484.498748][ T345] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 484.507412][ T345] usb 2-1: config 0 has no interface number 0 [ 484.513524][ T345] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 484.525318][ T345] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 484.535725][ T345] usb 2-1: config 0 interface 88 has no altsetting 0 [ 484.549035][ T345] usb 2-1: string descriptor 0 read error: -22 [ 484.555588][ T345] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 484.564680][ T345] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 484.575804][ T345] usb 2-1: config 0 descriptor?? [ 484.592187][ T345] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input38 [ 484.770537][T19782] udevd[19782]: Error opening device "/dev/input/event3": Input/output error [ 484.780965][T19782] udevd[19782]: Unable to EVIOCGABS device "/dev/input/event3" [ 484.792314][ T345] usb 2-1: USB disconnect, device number 40 [ 484.795841][T19782] udevd[19782]: Unable to EVIOCGABS device "/dev/input/event3" [ 485.431661][T19977] rust_binder: Error while translating object. [ 485.431705][T19977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 485.442294][T19977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 485.632598][T19995] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 485.632598][T19995] attempt to add with overflow [ 485.679787][T19995] ------------[ cut here ]------------ [ 485.685478][T19995] kernel BUG at rust/helpers/bug.c:7! [ 485.691264][T19995] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 485.698222][T19995] CPU: 1 UID: 0 PID: 19995 Comm: syz.2.6762 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 485.703949][T20001] rust_binder: Got transaction with invalid offset. [ 485.711764][T19995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.711792][T19995] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 485.733701][T19995] Code: 3e 74 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 3f a1 1a 0a 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 75 65 53 86 90 90 90 90 90 90 90 90 90 [ 485.734940][T20001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 485.753317][T19995] RSP: 0018:ffffc900035b73f0 EFLAGS: 00010246 [ 485.753345][T19995] RAX: 000000000000008c RBX: 1ffff920006b6e80 RCX: b6cd41ee2d833c00 [ 485.753361][T19995] RDX: ffffc90007649000 RSI: 0000000000009dd1 RDI: 0000000000009dd2 [ 485.753376][T19995] RBP: ffffc900035b73f0 R08: ffffc900035b70e7 R09: 1ffff920006b6e1c [ 485.753392][T19995] R10: dffffc0000000000 R11: fffff520006b6e1d R12: 0000000000000000 [ 485.753406][T19995] R13: dffffc0000000000 R14: ffffc900035b7420 R15: ffffc900035b7450 [ 485.753422][T19995] FS: 00007f5aadbeb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 485.753440][T19995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.753456][T19995] CR2: 0000001b31a1fffc CR3: 000000014e990000 CR4: 00000000003526b0 [ 485.792091][T20001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 485.792735][T19995] Call Trace: [ 485.844422][T19995] [ 485.847362][T19995] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 485.854838][T19995] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 485.862840][T19995] ? kernel_text_address+0xa9/0xe0 [ 485.867972][T19995] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 485.881538][T19995] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 485.887724][T19995] ? arch_stack_walk+0x10b/0x170 [ 485.892689][T19995] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 485.899915][T19995] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 485.907832][T19995] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 485.917740][T19995] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 485.928318][T19995] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 485.940733][T19995] ? mas_wr_store_type+0x8eb/0x1ad0 [ 485.945927][T19995] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 485.958676][T19995] ? mas_preallocate+0x56e/0xc60 [ 485.963602][T19995] ? __cfi_mas_preallocate+0x10/0x10 [ 485.968869][T19995] ? kasan_save_alloc_info+0x40/0x50 [ 485.974178][T19995] ? __asan_memset+0x39/0x50 [ 485.978759][T19995] mmap_region+0x136b/0x1bc0 [ 485.983340][T19995] ? __cfi_mmap_region+0x10/0x10 [ 485.988281][T19995] ? __kasan_check_read+0x15/0x20 [ 485.993299][T19995] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 485.999527][T19995] ? file_mmap_ok+0x147/0x1a0 [ 486.004186][T19995] do_mmap+0xb6d/0x13c0 [ 486.008325][T19995] ? __cfi_do_mmap+0x10/0x10 [ 486.012893][T19995] ? down_write_killable+0xe9/0x2d0 [ 486.018077][T19995] ? __cfi_down_write_killable+0x10/0x10 [ 486.023693][T19995] vm_mmap_pgoff+0x38f/0x4e0 [ 486.028290][T19995] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 486.033382][T19995] ? __fget_files+0x2c5/0x340 [ 486.038040][T19995] ksys_mmap_pgoff+0x166/0x1e0 [ 486.042785][T19995] __x64_sys_mmap+0x121/0x140 [ 486.047450][T19995] x64_sys_call+0x13bf/0x2ee0 [ 486.052108][T19995] do_syscall_64+0x58/0xf0 [ 486.056506][T19995] ? clear_bhb_loop+0x50/0xa0 [ 486.061162][T19995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 486.067033][T19995] RIP: 0033:0x7f5aadd8e929 [ 486.071444][T19995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.091032][T19995] RSP: 002b:00007f5aadbeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 486.099433][T19995] RAX: ffffffffffffffda RBX: 00007f5aadfb5fa0 RCX: 00007f5aadd8e929 [ 486.107387][T19995] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 486.115434][T19995] RBP: 00007f5aade10b39 R08: 0000000000000003 R09: 0000000000000000 [ 486.123437][T19995] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 486.131396][T19995] R13: 0000000000000000 R14: 00007f5aadfb5fa0 R15: 00007ffea06c0e08 [ 486.139353][T19995] [ 486.142367][T19995] Modules linked in: [ 486.147242][T19995] ---[ end trace 0000000000000000 ]--- [ 486.154733][T19995] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 486.160517][T19995] Code: 3e 74 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 3f a1 1a 0a 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 75 65 53 86 90 90 90 90 90 90 90 90 90 [ 486.180279][T19995] RSP: 0018:ffffc900035b73f0 EFLAGS: 00010246 [ 486.186404][T19995] RAX: 000000000000008c RBX: 1ffff920006b6e80 RCX: b6cd41ee2d833c00 [ 486.194428][T19995] RDX: ffffc90007649000 RSI: 0000000000009dd1 RDI: 0000000000009dd2 [ 486.202450][T19995] RBP: ffffc900035b73f0 R08: ffffc900035b70e7 R09: 1ffff920006b6e1c [ 486.210450][T19995] R10: dffffc0000000000 R11: fffff520006b6e1d R12: 0000000000000000 [ 486.218485][T19995] R13: dffffc0000000000 R14: ffffc900035b7420 R15: ffffc900035b7450 [ 486.226521][T19995] FS: 00007f5aadbeb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 486.235719][T19995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.242324][T19995] CR2: 00007ffd54fbad94 CR3: 000000014e990000 CR4: 00000000003526b0 [ 486.250363][T19995] Kernel panic - not syncing: Fatal exception [ 486.256685][T19995] Kernel Offset: disabled [ 486.260995][T19995] Rebooting in 86400 seconds..