last executing test programs: 12m12.612686886s ago: executing program 32 (id=726): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1503000000ffff39503210f5302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@privport}, {@afid={'afid', 0x3d, 0x8}}]}}) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 8m25.239894026s ago: executing program 3 (id=3820): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) read$usbfs(r0, 0x0, 0x0) (async) read$usbfs(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000000000fffe, 0x40000001}) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@initdev, 0x0}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x8) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x80012, r0, 0xbc776000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x80012, r0, 0xbc776000) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000400)={@private1, 0xb, r7}) (async) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000400)={@private1, 0xb, r7}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80009009478747500a0d82b145e55a754f6e568e8d7a1d07fc1abc123dd67e07c40052b1e60949b8aa91c3090d4347aaaca0e8d65c2f4de4c36dfeb20acf9568c5aab1e064cd320d83e577a2c36880936af87b15f8f4d4aaed4d7aef0df97cc5dfc50569e3a7b4403fb66cdf991a0d2283d32", @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf250f0000003800018008000100", @ANYRES32=r2, @ANYBLOB="08000300030000001400020069703667726530000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="4c000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=r7, @ANYBLOB="08000300030000001400020070696d726567300000000000000000002000018008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f766c616e000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000801}, 0x20048800) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000a80)={0xf, 0x20000000}) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r10, 0x147a5000) getsockopt$WPAN_WANTACK(r9, 0x0, 0x0, 0x0, &(0x7f0000000180)) 8m25.153127563s ago: executing program 3 (id=3822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x6, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5401000010000100000000000000000064010101000000000000000000000000624960bd0000000000000000000000000000fff920000001008000203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000002000000000000000100000000000000bdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000027bd7000000000000a0000010000000000000000480003006465666c61746500"/212], 0x154}, 0x1, 0x0, 0x0, 0xc000}, 0x4810) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a42, 0xcd) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x6, r4, &(0x7f00000004c0)='7', 0x1}]) r6 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r6, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe98, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m24.963624779s ago: executing program 3 (id=3827): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(r0, &(0x7f0000000000)='\x00', 0x10) 8m24.83732512s ago: executing program 3 (id=3831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x73, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff}, {0xfffffffe, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe, 0x4}]}) dup3(r2, r1, 0x80000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chroot(&(0x7f0000000000)='./file0\x00') setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@multicast1, @remote, 0x1, "00f267db61256e7b4ffbffd4f3971c5d0d385ec465eb1a7fc7fb22bc571046e6", 0x29, 0x7, 0x7, 0x3}, 0x3c) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) write$P9_RLOPEN(r3, &(0x7f0000000100)={0x18, 0xd, 0x2, {{0x8, 0x3, 0x4}, 0x3}}, 0x18) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x1100092, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f0000001040), 0x282d) fcntl$lock(r3, 0xc69c0cf7b27b5dab, &(0x7f0000000140)={0x0, 0x2, 0x2, 0xffffffffffff186d, r5}) 8m24.543698695s ago: executing program 3 (id=3838): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45807000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 8m23.799622778s ago: executing program 3 (id=3845): r0 = getpid() syz_open_procfs$userns(r0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r3}, 0x10) syz_open_dev$evdev(0x0, 0x20000, 0x6400) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000080)='.\x00', 0x2) 8m23.768049951s ago: executing program 33 (id=3845): r0 = getpid() syz_open_procfs$userns(r0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r3}, 0x10) syz_open_dev$evdev(0x0, 0x20000, 0x6400) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000080)='.\x00', 0x2) 4m26.940961189s ago: executing program 1 (id=7255): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40a44, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000100)={0x20000007, 0x9, [{0x80000000, 0x0, 0xc2}, {0x4, 0x0, 0xa}, {0xdf, 0x0, 0x4}, {0x7}, {0x7, 0x0, 0x8}, {0x4, 0x0, 0x7}, {0x4f, 0x0, 0x8}, {0x7fffffff, 0x0, 0x724fbef7}, {0xfffffffb, 0x0, 0x9}, {0x8002, 0x0, 0x6}, {0xffff, 0x0, 0x10000000004976}, {0x2, 0x0, 0x8000000000000001}, {0x6, 0x0, 0x3}, {0x7, 0x0, 0x9}, {0x40}, {0x401, 0x0, 0x37d5}]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x810, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m26.727074677s ago: executing program 1 (id=7258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000034d564b00000000afaf11bd2e0813873462fa3ce5f7391f78c251c367111edb446e962377da37e6afb272e3699e92b93ba10b8b77147b68e6b6eaa05540608051"]) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ff9000/0x1000)=nil, r5, 0x1000006, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000480)="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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setfsgid(r7) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x4) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x5, 0xfffffffffffffffe) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8, 0x440, 0x0, 0x0, 0xffffffff}) r9 = syz_open_dev$mouse(&(0x7f00000002c0), 0x3, 0x80) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000240)={0xf8, [0x801, 0x2]}, 0x10) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r11, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r12, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) 4m26.600312468s ago: executing program 1 (id=7259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6414709, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) pipe2$9p(0x0, 0x80080) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, &(0x7f0000000640)={r1, r2+60000000}, &(0x7f0000000680)={[0x5]}, 0x8) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4m26.480900187s ago: executing program 1 (id=7261): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2aa08f2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) chroot(0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendfile(r0, r0, 0x0, 0x8) 4m26.307754112s ago: executing program 1 (id=7263): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x100010, r0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 4m25.639216378s ago: executing program 1 (id=7267): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) 4m25.543099946s ago: executing program 34 (id=7267): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(r0) 4m16.628075774s ago: executing program 2 (id=7397): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000380)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '/,:\\{]'}}]}}) r4 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b942, 0x124) splice(r0, &(0x7f0000000300)=0x101, r3, &(0x7f0000000340)=0x6, 0x9, 0xa) sendfile(r4, r0, 0x0, 0x80000000) 4m16.510747054s ago: executing program 2 (id=7399): r0 = getpid() syz_open_procfs$userns(r0, 0x0) (async) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x6) syz_open_dev$evdev(0x0, 0x20000, 0x6400) (async) r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002000090002000000ffdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) setns(r1, 0x24020000) (async) umount2(&(0x7f0000000080)='.\x00', 0x2) 4m16.487983816s ago: executing program 2 (id=7400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)={0xc0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40004}, 0x4048000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) r1 = openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x2040, 0xa440bbc8e621c4f7}, 0x18) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) (async) r3 = signalfd(r1, &(0x7f0000000a00)={[0x8]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r3) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x11}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x64, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x50) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000bc0)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xfffffe0e, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 4m16.400654333s ago: executing program 2 (id=7404): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x41) mkdir(&(0x7f0000000440)='./file1\x00', 0x149) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002e00fdffffffffffffff7d83a8000200", @ANYRES32], 0x2c}], 0x1}, 0xcc000) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000400000000200000001000000000000000d000000000000009188e9000000000006000000000000000400000005000000f43238875f3172cfea104ba2edd6c3ad60fc4e23043d198213de8b83a7520e4dcf825a4a10a457525885607b4a520b975938c02cc92d92b5abf50ff2170d761109ed1b4599f2e601706c5a6dca29027e5e44113e3dec1bcf673c32c8b2141e52fbb3d36d524c3df9da0907c4bdec5557fdc752eb2d4e2d"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m16.343132628s ago: executing program 2 (id=7405): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f00005e7000/0x2000)=nil, 0x2000, 0xa, 0x20011, r0, 0x858c6000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7, 0x2b9}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010a000000000000001014001200b79faac54100000010202d1c528c29ef22b32a19e5ef88b7a37c3fc8ead3af206e59dd5674b7fe10ebae5b4808b76d61e9215667c4849ce01d626935f1b945af2a7a17aadc2be2136c5be825af8b"], 0x1c}}, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000009f000040"]) truncate(&(0x7f0000000080)='./cgroup/pids.max\x00', 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ustat(0x1, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m16.274927654s ago: executing program 2 (id=7406): ftruncate(0xffffffffffffffff, 0x10000b) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = accept$inet6(r1, 0x0, &(0x7f0000000100)=0x4c) fadvise64(r2, 0x4, 0x8, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r3, 0x3, r0, 0xfffffffa}) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client}, {@afid={'afid', 0x3d, 0x6}}]}}) keyctl$read(0xb, r4, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 4m0.215689112s ago: executing program 35 (id=7406): ftruncate(0xffffffffffffffff, 0x10000b) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = accept$inet6(r1, 0x0, &(0x7f0000000100)=0x4c) fadvise64(r2, 0x4, 0x8, 0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) futex(0x0, 0xb, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r3, 0x3, r0, 0xfffffffa}) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client}, {@afid={'afid', 0x3d, 0x6}}]}}) keyctl$read(0xb, r4, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 3m50.280052746s ago: executing program 4 (id=7790): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xfffffffc, 0xfffffffd, 0x6, 0x6eddb310, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6835446b3"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001280)={0x7, 0xc239, 0x4, 0x3, 0x16, "b920df02aa57b844"}) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000005fc0)={0x2020}, 0x2020) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$poke(0x4, r4, &(0x7f0000000280), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYBLOB="0404"], 0x20}], 0x1}, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}, {0x0}], 0x3, 0xfffffffc, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xfffffffc, 0xfffffffd, 0x6, 0x6eddb310, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6835446b3"}) (async) syz_open_pts(r1, 0x0) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001280)={0x7, 0xc239, 0x4, 0x3, 0x16, "b920df02aa57b844"}) (async) dup3(r2, r1, 0x0) (async) read$FUSE(r3, &(0x7f0000005fc0)={0x2020}, 0x2020) (async) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000000)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) (async) ptrace$poke(0x4, r4, &(0x7f0000000280), 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYBLOB="0404"], 0x20}], 0x1}, 0x0) (async) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/224, 0xe0}, {0x0}, {0x0}], 0x3, 0xfffffffc, 0x4) (async) 3m50.203367822s ago: executing program 4 (id=7791): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x0, 0x1d1, &(0x7f0000000000)=0x10000}) fcntl$getflags(r0, 0x1) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000080)) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x10}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '#-(@(])%'}, {}, {0x20, '\\){'}, {0x20, '!$\'\xa4'}, {}, {0x20, '-]-'}, {0x20, '-/^:+'}], 0xa, "04e52de877e17fb0ae9ff8da669c95712937ec81dbf0a5715973bb7378768d14967ffeb29e7045996fcaf352d6cfbceba287962c97c380aea4893ba04e21fea3c975483c0242d6d7963e901873ba29ab4d9f48c69278ab9790cee4f87f616bb2dab4b07c24f1b10461fba445aa66f1737906d8b9d13907dc56d7f6c207765ba5a01f416c6281e6a86f2ec3646e0a5c3573f471ad46915dd261cd5bac0790e1c31e985b88f7b73bb8f9b41b21743b0023f47c158865b6e0c6579afff13cfdc26a9b150dbd22e8fe881c9ac860"}, 0xf5) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDISABIO(r2, 0x4b37) r3 = dup3(r1, r1, 0x0) r4 = fsmount(r3, 0x1, 0xf7) clock_gettime(0x0, &(0x7f0000003500)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/150, 0x96}, {&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/156, 0x9c}], 0xa, &(0x7f0000000a00)=""/234, 0xea}, 0x1}, {{&(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b80)=""/192, 0xc0}, {&(0x7f0000000c40)=""/253, 0xfd}, {&(0x7f0000000d40)=""/187, 0xbb}, {&(0x7f0000000e00)=""/71, 0x47}, {&(0x7f0000000e80)=""/127, 0x7f}, {&(0x7f0000000f00)=""/190, 0xbe}], 0x6, &(0x7f0000001040)=""/216, 0xd8}, 0x4}, {{&(0x7f0000001140)=@phonet, 0x80, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/84, 0x54}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/228, 0xe4}, {&(0x7f0000002340)=""/133, 0x85}], 0x4, &(0x7f0000002440)=""/4096, 0x1000}, 0xfffffffb}], 0x3, 0x2, &(0x7f0000003540)={r5, r6+60000000}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000003580)='-]-', 0x0, r4) r7 = socket$pptp(0x18, 0x1, 0x2) lseek(r3, 0x101, 0x2) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000003600)={{r7}, 0x3, &(0x7f00000035c0)=[0x0, 0xfffffffffffffff7, 0x928], 0x6, 0x1}) syz_create_resource$binfmt(&(0x7f0000003680)='./file0\x00') ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000036c0)) r8 = getpid() ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000003700)=0x678ced51) r9 = openat$cgroup_ro(r4, &(0x7f0000003740)='freezer.parent_freezing\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003780), 0x302f80, 0x0) ioctl$TIOCGSERIAL(r10, 0x541e, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0)=""/151}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000003900)={0xf, 0x2, 0x7, 0x40, 0x13, "1f86b6f9bae7b816"}) fcntl$setpipe(r1, 0x407, 0x4) read(r1, &(0x7f0000003940)=""/3, 0x3) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000003980)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ptrace(0x10, r8) 3m50.201215252s ago: executing program 4 (id=7792): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) setsockopt(r0, 0x90, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x32) prctl$PR_SET_DUMPABLE(0x4, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$BLKRASET(r3, 0x1262, &(0x7f0000000000)) mmap(&(0x7f0000156000/0x2000)=nil, 0x2000, 0x3000001, 0x26052, r3, 0xfffff000) 3m50.194886103s ago: executing program 4 (id=7793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x64000600) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioprio_get$pid(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, r9, 0x413, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x80000000}}}}, 0x30}}, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) 3m49.27143756s ago: executing program 4 (id=7797): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000012f000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="f30fc7b1004800006666410f38821765f2460f224764f20f2d3e450f01ca66baf80cb897a2ba8cef66bafc0cec660f5c200f01d1f20f70abad000000c1c422f9308501000000", 0x46}], 0x1, 0x4f, &(0x7f00000001c0)=[@cstype3={0x5, 0x8}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async, rerun: 32) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x22048000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000072e000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, &(0x7f00000000c0)="0f01390f3acc8c00009e0fc77f003e0f2019670fc79eef000000baf80c66b8d0d8208166efbafc0c66ed9882adf7f20e66b8cf0366190f23c80f21f866350c00a0000f23f8f20f08", 0x48}], 0x1, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) 3m49.044546009s ago: executing program 4 (id=7798): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x39, 0x0, 0x101}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x10}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 3m49.009519872s ago: executing program 36 (id=7798): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_gfeatures}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x39, 0x0, 0x101}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1001, 0x3}, @fda={0x66646185, 0x7, 0x0, 0x10}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 2m49.551386913s ago: executing program 5 (id=8722): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) unshare(0x22020600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FICLONE(r2, 0x40049409, r1) (async) inotify_init() (async) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) (async) read(r0, 0x0, 0x0) (async) 2m49.425295623s ago: executing program 5 (id=8726): write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) (async) eventfd2(0x8, 0x80001) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r0, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000080)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @local}, 0x1c) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001700), 0x880, 0x0) ppoll(&(0x7f0000001740)=[{r3, 0x1220}], 0x1, &(0x7f0000001780), 0x0, 0x0) listen(r2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x29, 0xd0, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200000000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x14, 0x0, &(0x7f0000000040)) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) (async) close_range(r1, 0xffffffffffffffff, 0x0) 2m49.291034044s ago: executing program 5 (id=8731): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) unshare(0x24020400) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x3) (async) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x3) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@cache_mmap}, {@access_client}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x7ab380, 0x17) sendfile(r5, r0, 0x0, 0x80000000) 2m49.261856497s ago: executing program 5 (id=8733): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f0000000340)="450a5f21c586fa464ccc7195da2f1b0964c62c20e545702840732f8f7a01cc7a67920d6bac1cefd7943718e09211f6bd9431972df71945e7b4e8ef1f6f6515a861f24df01619d0be3aa432e5c01904060edb47829a9877d363f1491cdb0e6b93db23edc4fcc200d79ff514ef40cb5377d9346278911b3d3d7db08cb22c7323acca3d3be5577768c011ece05cd0e6c9134185ab96fd13b5c0888cc8a0270a7b53f7b6422e958d", 0xa6) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2040000000, 0x4, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 2m48.919907896s ago: executing program 5 (id=8739): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBLED(r1, 0x4b65, 0x5) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r2 = dup3(r1, r0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x4) sendfile(r2, r0, &(0x7f00000000c0)=0x4, 0x5) r3 = open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x40800) connect$can_bcm(r3, &(0x7f0000000140), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000200)={0x6, &(0x7f00000001c0)="4c1824396b010e95a082dccc"}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0xb6d, 0x9, 0x9, 0x20b, 0x4}) openat$cgroup_subtree(r3, &(0x7f0000000280), 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000002c0)=0x7, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r1, 0x7ff, 0x2, 0x4}) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, r7) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000380)={0x9, 0x2, 0x5, 0xf6db, 0xb, "f39c4dfd8caca9bc"}) ioctl(r4, 0x8, &(0x7f00000003c0)="fcfdfb5d5bff4763ab87c84ee61673b80a552f4541ad1051be191112aad2d112f125a5bdc837b3cc0bcc00ada318a76f740ba96e0e1ee6d9f533c149d0e6a150e9be4d356909a698be0c7a08d7fa6f0c506194d9510e862520a89ece1ae9c2cfe7681371b84d2e0a9e80180181d4297d74b411cd4744a2b2c35a614d832bcb749040b339acf3855bb1ed7b0b543b57a0d6da556af99c21337fa5473c97108290430ba02037ed7e780280d613171305f4a3dced050a8e92add99f665c4ae0a134f443bf8f52d1dc53a848ed9bd9cf") ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f00000004c0)=0x4) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000500)={0x3, 0x1}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000540)={0x7, 0x3, 0x5d1d, 0x80000000, 0x76, "bbd98aaaa8e8b096b90c2c1496706965face15", 0xe, 0x101}) close_range(r2, r1, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000600)={0x2c, 0x0, r8, 0xb, r2}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000680)={0x2, [0x0, 0x0]}) 2m48.914875076s ago: executing program 5 (id=8742): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) readahead(r0, 0x6, 0x7) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r0, &(0x7f0000000400), 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) readahead(r0, 0x6, 0x7) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) writev(r0, &(0x7f0000000400), 0x0) (async) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 2m48.914230746s ago: executing program 37 (id=8742): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) readahead(r0, 0x6, 0x7) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r0, &(0x7f0000000400), 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) readahead(r0, 0x6, 0x7) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) writev(r0, &(0x7f0000000400), 0x0) (async) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 58.955626204s ago: executing program 6 (id=10096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x40010}) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000180)="3289d25684d5aede5356cf5cee5c9c863524a311e07a88d77bb481f1a178d3494deb29d285ba344809bd2d9dcf7c0a462d234ef6b11f381f84e5", 0x3a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000001c0)="7e2631c7f9c8c082eea1a816e75377960f469551c9bc281a89d17d0bb92f2a83211d6dc37b6aaeb2b73358e5c376f3098de842fc6f2585efd7b33bb5ffc60ab703005a2de46cb89a6250", 0x4a}, {&(0x7f0000001380)="d7645827302030184b7572dae2cc71ad0ef5b6ff28567e14edf363ce58b6dd0c4a6153e41acbc24902bcb7f4b9283716b0d683b2788e49f4f9aaf832fb3f1fa49edc5c0d6b8fb997", 0x48}, {&(0x7f0000001400)="27a4051bde2d8a44ed24baf1af9c15e1c7064bdcf7051a5198c42f848304b9a6e574a06168e31735b8b3b56db8bfa7d7a61af5a4e54a56d52d0f53888d330e6010458b7ca9e25579a9f124fdcb1138abc6a6c65569dd76dcc98f", 0x5a}, {&(0x7f0000001480)="76f981bdd189a7018fa47937dc036602c721e66ed162042bf3b59c0571c50f833df791bf7fe9cde780203caca53174e5e634979c16b5df43c250e553d38a3e6a66b7934b731d0f76984747fefc27d365", 0x50}, {&(0x7f0000000240)}, {&(0x7f0000001500)="a2bd53e590296bb20b86ebce485ae0168ec98f8db2b9514327632383dafe2ffa94f9d1b991c89f5915f294cdf71189b409095db6e04b74eed0ce408157f9c082940b30a09d91256f6b2c4962795680cc3fff4daeabc3b68b0b96ae4cc784f6799c750860cb53da6d2c2d9289c26bfc020f681df2a5e65fa167e4b139db5b23c996148023afa432bebcd0942388379cac35407cc5566672e7bb6cfc4cbff144281dff37f1c4f7425590a524de7b01c8dc97979b703e6a55244ee63b6e1cebfca4ad657ad886f9c32d7c8215ef8e19175a378fb8b8cd849978d2870c9584de4cdffaaf64e7c1403ff3ece0dcae77978e8df9927672b53d", 0xf6}, {&(0x7f0000001600)="e9c4ef81d1b0e44a79139c73303d0223ddcad113e39c90f8b0029e63b75a32abd3476ebcea02f6fee240269cf94fa20ce38c3e0dac7c3ab3c42455dbaf3663d57fa046852b6a6f7780fc6644c88e715ef65330590a3576825a15e8a49eeb5354d7e5e3c4c91fa0141664a6d6dbe4e6a3560b2027a9506727ab6abf5f", 0x7c}], 0x9, &(0x7f0000001740)="1a21f5571a22d90f5aca71d6c0b221eb69a0682e95845be046ea03d628327bb3b57a8c558477bb50d41cd9d3c1f52b7f9d37577364f660064b897bdee9b133052cbb05a5824ca4d39db2ec080399daa7539fe154908c5e0c907caf903aae30e63c29ed95a90ebc4082e58ee6ddd7210605966ca6ca6ac888dd05de90b2643cbffd18", 0x82, 0x40}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 58.880731361s ago: executing program 6 (id=10098): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syslog(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0xffffffffffffff43) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f00000003c0)='0', 0x1) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) fstat(r7, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) setreuid(r8, r8) mount$binder(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x21, &(0x7f0000000240)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x3}}], [{@uid_eq={'uid', 0x3d, r8}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@flag='sync'}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r9, &(0x7f0000004180)={0x2020}, 0x2020) 55.567589779s ago: executing program 6 (id=10136): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x119000, 0x3c) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000200)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000001f00)={'binder0\x00'}) 55.43806736s ago: executing program 6 (id=10139): ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}], 0xfffffdc2, 0x0, &(0x7f0000000880)="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"}) 55.362893276s ago: executing program 6 (id=10141): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_macvtap\x00', {0x2, 0x4e21, @broadcast}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r4 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x36d0af25997da36a, &(0x7f0000000100)={{0x77359400}, {r5, r6+60000000}}, &(0x7f0000000140)) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x7, 0xf4a, 0x0, 0x40, 0x44150044}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000400000000200000001000000000000000d000000000000009188e9000000000006000000000000000400000005000000f43238875f3172cfea104ba2edd6c3ad60fc4e23043d198213de8b83a7520e4dcf825a4a10a457525885607b4a520b975938c02cc92d92b5abf50ff2170d761109ed1b4599f2e601706c5a6dca29027e5e44113e3dec1bcf673c32c8b2141e52fbb3d36d524c3df9da0907c4bdec5557fdc752eb2d4e2d"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 54.95742267s ago: executing program 6 (id=10144): tkill(0x0, 0xa) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async, rerun: 64) socket(0xa, 0x3, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/61, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 36.618638966s ago: executing program 38 (id=10144): tkill(0x0, 0xa) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async, rerun: 64) socket(0xa, 0x3, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/61, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.740551906s ago: executing program 7 (id=10580): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000100)='hfs\x00', 0x7, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./cgroup/file0\x00', 0x801) 3.079689171s ago: executing program 0 (id=10589): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x400, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x11, r0, 0x3a176000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) sendto$inet6(r4, &(0x7f0000003380)="4bc32a49c5fee590838631f81d2d501b780e3376f11cd3e5af0a450233e74156f6bbf53a14d2e74c8e46115c0a4d4a0375317c4d988a690e37262cb48b591bfdb4ff738f0be31f3f33d65ec0256e00d937043394bbc296a55f0ffd3f8ae817bd0629ddb50766c7e739e656e5e24b5a077cb64f8b1b75a3368c7908668352513b274701ff080031e7427c786ca327f124645e97e4b67c7eda72388d008dbecae8227565c52c02500c1953cff47c07baeaa70ccda20f6ad15db93d0225f72ac9f7c32387b0e50de6f698decf584671232331c524c1e775c4b13e0e379e8253b0ff8fc05238f9a7dada66771b3c485d00532858ad4e137742e6adf72eec34b0ba8821c67f9d2726e98a6074617100882dc2711fb2e477cc76a1ff9b47d93ca2fa42e52f483bd2aa530974ff3fd29a170adadb10241abb8ddff7fdbe53765ee6239d7896be7db752b5046cc5b4b36b2a9c0b3c154915d90ccbf46675a81826b348a5c986a4d1c4488f6e24545619c829e7f6c4ae68d1a86bb2e700728086f30659178c7ba222b71f5786d77f12f221cd20b9fbd24801abcd64eaa605ca9da167fb06b11b9e637f6e727253d7090699972818e0e69159e07393634fd13310a648768d17013063d34b2d68a20469891d0f24285a44ea4dc4aaadf3e326c7645fb569ee78dca1ec46d7942a42bd675ed1dbb3b537a24d57b76583df434bb57f38c0b4c2b6414f4511fb0126a3e17e06c65ec6023b8198ddc4b59707132affdb3123a930192d8a1a1d346501958faf24a8090b0454b7fd4fbe7f3afd8e70150edc2d3b6d799b45010dfd621c39d1e32e19f7c1554abf55e4cb0f450d129c4eaef1a1b7431ad30fc0d6ce6b973f2aa0f1dd2599d8284fb79deff298aae73388cd0ae4fccda5cff46b058fac08debb67bb9bc5eea5a6d28cff2d046a5afb09fb608bab362ef021fefc8d05e9619ea57959a884873b3a887a5e08123d564c5349c4c15c2ece77f0e4d0e4c88a516978afe85c014ff344668d4cd97681bae2ab6aecdc6f4a4c705c43d400f691ef6f5c926a8c51d9cd4d0fc15769c5b20662cfbef41d9cc3d62b9d68795907729d33133f3287f2ab5cce83e35fb0e358bb64a60675308f568a25c2327eebaaac30e6e282464d5547daf53eee7190e1e5a40f7d2e327858099bc5a7eff7f79859a074aaad5d6bdd8164c627ea59784fe40f1467bd17ded380e21bca5d7d0bb59aa681740d4e371e632862cdb8868c4d706a228704dd94d8687e07708b8a4742fb0caa260523e515bfd7ddcae9aff8e487aac73232c6a2bf63663c644f4451e209d720b0bd678b27b673443937d80958f94fd747be9f0df02950c2de593ea6978062aba26d12eda852f37cdfc18d3b96b08ac3eaffa2efb619db6ee789446b30fd5915480bc24990c536359d64f06e39f59e8cbafc28451fb95eefa265e038f43af933d288578be9ecf26495e6da011d91d5578c46b4a4bcbcf649eced6ac16f6623e67afd80c35dffe6b6aadd4bfbbfcd2f248455b8b1ce0f10f628999d8f56ae47e2fbb744bfb7962a3548240c286277db000d2b0e403d13fea75c7a789dec2a29e51e20a037a5156cfc547a7688f1926d8476a5d5bb64b4a82132a3bcadd080503f72e04e7d55ece7d5bbf24ee9fae2abace69fddbc3604c04a0a82408a7dc035e2512082397323cbf6ac5a01c07baa604bbd6315ad2592491a5397ef1c736f5fae08426ad14753fa0ea774f0397a77399bc5a7c9529f7a7b48313f426796346f77f7e975f8c2704bc61ce89f8f462ba69b68de5bbfaefae6b749d68af86334552a37f02b18671eb6ebf58cc77fde6d93a2b859c49113634afa77d33d2655675697b3ba142b94a18cda12773ed4391e4f80e7caf1c429eb4bbf2d2c982ea62aba0c94cfa2280d12e411edba880debe919d334d58492ce78ee93fafb0b6ef8202b5cb1d8ca7c6eba88751ddfad35db2ef8089e14cc30fa7e963394cbdfd4a39053c69e94b9bb44bb445d77b7a0965e3428142405ef3aa26426fcb8e26423b5342a1ea0bfd28448605e7c4346916a152839c23f1e3d463078830f55cfee3d719080be97cc6b6acd9effda875b18df23c07e55cd732d25d0c32b04c38b2c4cec8e9b57548cb7c153c2ac2043aaa49267c179f1485acb449823fd3f379953adaba9209ce052ee6470529ef6c044efdb9ec79c0da170e1a986706da2f191f735e8c9c27a433f06ad910b552ec871c20202bf39c13e3601a65facb32fb7ef2a85d12345b67409bd14c1e26c028676cef27d47e51deb5c8b616d7ec0dd837ad4fc4800ce78f83e5075bef6d3ef784519908712d411d6af598dda6ea13f20fb2ba8f4a85d1c8df3cc7dfe0a8e8d5b2d696e2b51d835c255d97873dae579a69cc3c9f8d50f282250142f78b562cd59325b010fdf5e103cc05f09295ecd5ad1bdbd195ba895bd38e5f3f8abe520a442f98c9b0df2e1bf30771be8c0ba86d59579a9ceda056c2b3b6d51ea5cd584750f45ccb7c9adc37ea8750ff035778da2cd9eac640e1121c4afac6f796a2a6d1892ce896f201a08cfa422bdbfabc34dad9e34352856160037d3485c344900ebb6d331d35fcb1c143d0f32e8393a712cb5fe7002561c4bb11051492e65d4291c92c0545a926a798d7a23e806796fed6534d67cdf9857f7123d4dd1ebdb88d545201d75d1c9ba5456b7fb52af56652cb2537c0a5f82ad02f084edcaa66254f9a0a01eb7c5b9606c4c93594f1e636ab15d96f58b11ee9f7a16b6765a146bac6a98da6b47ecc87974a1c732c1194008c5f3514d0c1f42ba7b284b07b23a3b0fe9073dcec4b2d4ea397ef3984753b134d20515ed774118b46f21cd2f2c60b87f54e9335fa30517fe8c360f0803031a91302ba8f44e82d13c58736881ecf4cb643e7bf9585193f4d1e95e08c18c47d460e2edf2a0f1ed39c2e7800cfbffa0d9a09b108d8a5eab9ed409b61458e9d46bceab006e2df77505af41ff7dc0ee67748ec729ee09c11c229ac7ef447712c220ae2ef5612ae45299ca04cc3a26cc09a259c1dbc9a4291bd6589ce6eedc156df97d1bb7eea68ee273bb4c4d8ca0c515299aa53260e58760864b1ec4f386ad0367a08bfa47ffca6af5705097d1657c94d5d7736e7157d8f7137416480933be3f325708f6f947ea08c94cf4489e0f5e40b5e03bebf427f08bf6bea963b6b1338f91384755681044e00fbbff94b8d21a874b12be4294173c65f2f4e56427e840a5703e289f8314f705cf74e1d98ff88105967bd42d62a63a897fbe9a50ff08dd122c3ce1445b21aab0502b6fb47577604a0508249d8422b71eedc58fa678646922050d46d5e69d8612ff7bbb741c19ede0600917b7f84e44e580334db385ef5e5600a73bfdebcb037cea14f50eb7466db1e51d03d61923804ebfef38735452893486cf5a9e6ecc54526a2c998e3b5b41d5d8477c7e9b756876c8748dd10f44f315a5ccc578ec38a6799846ec1fac57bdfe4f9bc65b31d1e7de7cd9fc2f163cb513d790bd1dbb9b5a5cd46efecbbaba6bf504c23ca744ee36704f0b873896da1f9ac7089c28136e19b3c31ea3ac44f0bf8af4bdeb9a917370c78d11ab838282787cdc45b35f604bddf6c65f4079bd7606a40f219bbe940e25e6a54a8b9850ea0decb10013ae99aa920303f35f6283c0211e1b0000008000000000cc53babc28b29c5aee0f626c48d58b092644823fc0b71a57d7125bc35ddf9ec7019d89a3497aa65fb4f34b169c535ce30d695dbb88f278e730d2e4f1394ed4b843885d8fa33b39152398fd2f6bb77520a84e4135e1995e9568bc4d3e60b98e1452ada5893bfc1a7574570a09fa21064ad12aa22af9195fe351cd34a5e3adac29da4669e09a00008d17c4b564f2ed0a7844c840a729fed5c106861f479fedf326d93b39f186c40e4fc59e064c6d090cc9ecf27630ab471817e3bf8acfa1518c6f0f6b2f4c0905e9249af04c8019d3fe12acd69e0a3085e01d673ffa5f2bb6d26717f6e8a4a110ac2b0f11de3a0bdb7b838f0d156c06395bbb9294cb0e293f43baf60df683b35c4ff83bfd71b74fb25762079843d6484fa76a610b8cd6affeaf1930a47aa9aec77fee8b6b6a806527597f769570bb62af13a9da2d81254e102134e256f15126d21a7e5e6865989b1eb5c9752d059bea9eff27f7fed5f0ed40413ac11c20e68aa43baf4fc6a59e049e6bdb3ea3ebc5734b0ad0c6c9be761c5c248d2b50584ddfa2399884b091894f19061f4eb9ffa86097c11ee9fdb04d4ca44f91edded8e541adfab1b71c93305e85a41ca5f4eb9cf15820bf677694325c9c55cb443a7cb5e3d18157bd01bb23c1ede5dd5babc2751bead25b2f18860a085584ebf5211d67f74fd70edbecdbbf435d71db84fa96b9878a4166e2b0cc492f0f9eb82ad4fb4cdd5644e20f296feaa8f147e0e20a7c0f37767bf2a47fee3141447043fd990bb39dd56153eee38d05538b43627891f057a07526bf6848e171247549f53e0ba495a108f99e412a178e12001135e27b0184542ac579e0e22987b6b60fe5fc07954587556a53e1b326888d482f519c2e65f57193cb7f328e865db95b757d370200cb643a4da7596a13391d7b1017d842ecacaac3b0a3f53f388301374ad9033ff34d7d18db497c78a1ec8661c8e78e1d498f5a615649f3ecfe2c8ef3ee616ae455a42a06aacd64f1b2904dd111acd54d349dbb2ea2acf9e8fad483a53eb211018f6f2245c519c50fb3453b956c49a05a140b7270939f4f8216da940564f7facc9a83adae647c9fd43790577ed43dbe77420459a74237593fd5b703c0d4076ab1accd9ba686e621f189071a66df608f7db2dfb1b08137f2f91413e670f3835dd7bca62a078c1cd14683ed4d9ff8d9025477aacffcc38c330c3940ce55ba0742d8ffb4e0a3220177529978390e19167e40dede952fc0cb5e6e8ad6863c6160f517d714bcf18256eb9d0eec8413dbec13a7bd637a77e328d4db8f61493eb0f26eca93137fc4420e0c5bd8d4a1b700bf0608daddec7d40d24751f88f2dc89b8a04ae03d3349511a50f988b02cbfacf2c0455a9c8f034d671972368ceed715f3dfc2e9a143ff5c6275c8b714aee89c48c6b10aaf007e363ae17765dffea8b265a27793f55b86c214bbce2b3745f392109ece5688bdccd6dccf33407932dac4a18783b2d26d6dafeff39146397a4e89d2fb32d27c8b86e02b6ffa8fb91499f51d481ade5aa2e89bf5d24cdb95771574c777df39144316c6d6fcd9d8fb2fcec5823adfea0550014dfd2b5a3f7e23116359d12bee8362b5b96c7816583dabda95117b089f37cb3f682aeafec74dd62ca9ed9f1e56f7789e3b1ea9fcd0e3362ce0819f7b73d5e6b73162452eb69a1625a74926e6f4ee83e443e22f035e28f8bb19cfdc79c4e623356d022866edaf6d75c1938b86aa475670015433496f6455e4178072f05210d023ddb30dbaa5c8549fe893880e9da44d7ef99bc67940e73823962c8cc5e5e2708e22ddf27b863e360b372b57771099ab70fb51538bb0f42684e9b8bee428a9292869ad2bda5c554653e592066acd8e8547987f8e734e9e63ce39aae30439d4a0d7d88c8c5b2ee3727b6e8f22e96b9571ac2290edf3aa74e5cd54f464417773ef295e90d43042ee731d129179bef03fafc424b38118b5bfaa2051da04fbe8c84ddb142b8b80a599e419c09e0946268a52c352e74a8c3ff5b4e554dfcb1ae8b9a7f16ff823022ba5cd25ba70b6d6f620c5b2eff4a318c2c14a8150ab2ffeff7e2ee6e9e7f856496", 0x1000, 0x22000040, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0x0}, &(0x7f0000000c00)=0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@private0}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in=@local}}, {{@in=@local}}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x400) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1000, 0x6c7, &(0x7f0000000680)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2.995943698s ago: executing program 0 (id=10591): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000102000/0x4000)=nil, 0x4000, 0x6) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001f00)={'binder0\x00'}) r1 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private1, 0x5}, 0x1c) 2.823812193s ago: executing program 0 (id=10592): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42041, 0x19a) inotify_init() r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000580)) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x800023, @private0, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0b", 0x19}, {&(0x7f0000002440)="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", 0x228}], 0x2}}], 0x1, 0x4000001) close_range(r0, 0xffffffffffffffff, 0x0) 2.786617456s ago: executing program 0 (id=10593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="89e7ee2c78dad9b4b473fec96558", 0xe}, {&(0x7f0000000600)='\x00'/14, 0xe}], 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}]}, 0x158}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x6, 0x101000000}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x8, 0x1a, '%^$\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40f9}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_IFACE={0x14, 0x17, 'caif0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48041}, 0xe0014) mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_lock', 0x18000, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 2.635779768s ago: executing program 7 (id=10595): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x7, 0x90, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}, 0x20}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904", @ANYRES64], 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 2.555840645s ago: executing program 0 (id=10597): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000001880)="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", 0x801}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x2, 0x4004050) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.553863889s ago: executing program 8 (id=10600): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) pwritev2(r0, &(0x7f00000008c0)=[{&(0x7f0000000580)="f076c45c2561990ef9830d3b4d864ab960775269b65b05a1980035d02b7912d4f24c95992fa9bd31677837941ac474c151b69d7f603062a2b1c75d5084fa3a924ea832f720a4de6f2aa765db8fd71a9ea6df3e1c503d0ea37768922b49fd8fd2f463ea6d64a8e180542d4772f54bde32d505a7d5", 0x74}, {&(0x7f0000000600)="84288d1d319cd6a0f3a3732635ae864dba1e996fd329665cb03fd10b46c5b904902c5abe7da5cc54ff01ca2cd3fc128af9b2a0cf6e41f22e2ed8d3a63918567bb209d2e1a5c98be8a0d53325f3832d8c61e975", 0x53}, {&(0x7f0000000680)="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", 0xff}, {&(0x7f0000000780)="8d3949e54ae0d66d5e3a7225fc951009315c1504edf4789a7bb0c1560f7c2562d603a9fcad335e12c59c18d2dd06f3cfe5f4ffd35f0f2d56c9b3995f8beca66b3e36f5b4d9df7986985369f3439cdb325da10906458c036a908ab71921f8099a8a33f55f089c956955401aaf4f2645db482c73fa0f6e517be4c3aa6be17618fdef775a67bafe18637e9962fdea28a073724accdb164c724366a7a0ed925a649482f5fcbb2502bd499134b19c5e37194cb1546b0b14523af06b4ef08093998a32fb15b09491ab25353baede6c7e39dfffd0b7a5f338f7", 0xd6}, {&(0x7f0000000880)="12ff8aea97457508c1fdf5d2b32de40d01620a46bacd0b", 0x17}], 0x5, 0x5, 0x8, 0x6) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@arp={@loopback, @local, 0x0, 0xffffffff, 0x4, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x3, 0x2, 0xc7, 0xe41, 0x1660, 'vlan0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7c0}}}, {{@arp={@multicast2, @remote, 0xffffffff, 0xffffff00, 0xc, 0x2, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x8, 0xf, 0x7, 0xf37, 0x811, 0xc159, 'pimreg0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x10001}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syslog(0x4, &(0x7f00000001c0), 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x2012, r0, 0x4d757000) 1.367787575s ago: executing program 8 (id=10601): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = open(&(0x7f0000000180)='./bus\x00', 0x16d2fd, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000340)="240000001a005f20f109dfc64d2609e00214f9df0700dd00007f000001fe000258dbef0f", 0x24) fallocate(r7, 0x0, 0x100000400, 0x800000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mmap(&(0x7f00001f4000/0x3000)=nil, 0x3000, 0x3000001, 0x10, r3, 0xa09ab000) 1.151808723s ago: executing program 7 (id=10604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x95, 0x240000000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x95, 0x240000000008b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x0) (async) r2 = timerfd_create(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x29, 0x11, 0x0, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="a7", 0xfffffffffffffcf1, 0x4c8c4, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) fcntl$setlease(r6, 0x400, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x7004}, {r1, 0x2343}, {r4, 0x4}, {r5, 0x210}, {r0}, {r5, 0x90}, {r6, 0xc024}], 0x7, 0x80) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f00000e3000/0x4000)=nil, 0x4000, 0x65) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.151608243s ago: executing program 8 (id=10605): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)=0x6, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x180f, 0x1, 0x8, 0x3, 0x8, 0x4b, 0x5}, 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 1.025761333s ago: executing program 8 (id=10607): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xf4, r0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b000000100003800c"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/118, 0x0, 0x2, 0x20}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x44, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 963.679449ms ago: executing program 9 (id=10608): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201090224000100000000090400001503000000092140ff0000220eed090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x10000, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000140)={0x2, 0x0, 0x2, 0x2, 0xfffffffd, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7fff0000}, {0xaf9f, 0x9, 0x6, 0x2}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xdb, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000086b1d01014000010203010902c90003011820810904000000010100000a24010200ef02010209240504203616863c06240504034d08240702060009a108240504046939d20c2402020202061005000056090401fcff0002000009040101010102000008240201070109030a24020201010800004e090501090004070109072501000704000904020000010200000904020101010200000f24020180030500ccd7881401e2550d240202810006004331fe6bcd072401ff0e02100a240201630201029e7e090582090800070c02072501030a0400"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffc, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) timer_create(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000880)='idU\x88\xfe\xd7\x01y\xc1\v\xfd\x9c1\xa8y\'\xc0\x96\xf5r\xa2\x14v\xf3\xcb\xf5\x98\xba\x00\x1c~\xff\x01\x98Q\x06~\xf5U\tIx\xe9:\xc3\x1f\xff\x97\xc1\x05ZF\xb4\xe8\x84\x82\xcd\xec\xed\xa9\xcb<(\x15\x02l\x95\xa8\xf9z\xd6ZoL\xf1\x04c\xc6GE_}\xe29<\xbc\xab\x06\x1a\a\bH\xb3\x8a\xe4\x8d\xac\xe2\x85\xa8\xb2\xe4\xd6\xeb)\x14D\xae\xec\xfaV^\x9fJ#\xb6eN\xa4?\x13\xd0\xc1y\xac#\xf8=L&d\xcd=\xdaq\xb1\xa7\xf0=v0y\xef\x9cI\xcdm\xebn\xc1E\xbc\xdbLD\xc7\xb8\xde\xea\x9b`\x1am\xc9\xd7\x90\xa1c\x82\xbc\x9e\x92\xfb\x03r\x80}\xb6 \nK\x87\x80\xd5\x92\xcb\xb5T\xc2\xdc\xcb,7\xa7\xfdp\x161\n\xdaoT\xbbv\\\xbb$\x1d/\xa4\xber\\[}\xd2\x81\x93\xa4\t\xa6\xb4#[\x0e\x15DQ\xb7|\\\xb37\x10{\xb0\xa8v\xa19\x16\xbe\x8f\xfe\xd0\xc9\xee\x99Q\\\xce\xf8W(\xbd\xf0\x1bh\xbcyX5\x8a\x8a\x97\x17\xeb\n]\xb2\xec\x96\xec\x9e\v\x9d\xb2\xe2\xef\x98\xf8\xbd\x81\x99`\xe13)Y\xa6C\xaf\x14s\x14py\x16o\xa0\x15\xf5\xb3\rW\xf0\xab\xb5\xe6\xcd9l\rO\x8d\x05\xafm]\x0f\xc4>^U\xda\xb0Dk7D\x0flc9F\x85\x00'/352) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket(0x3, 0x3, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r8, 0x147a5000) r9 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, 0x0, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000007b694a51766fbdb111449c0dd2154a716af8df1c6526fcb9e4af22fa741f4dd3437fcbe607b3fd74f8d4486208dfb7e0da2f029327ddfb7f7f12b48b841150e3b8beceadbb95688db2ea71cb227413bf5f76a0fa291f0f144f4375225574ef0fc8e0b964057f284e1a7164dea0d392ddb8a32fb4be5a813f", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) close_range(r7, r2, 0x28e11066d1724d61) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) 858.047917ms ago: executing program 8 (id=10609): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x11, 0x3, 0xe) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, 0x0) futex(&(0x7f0000000200)=0x1, 0xd, 0x2, &(0x7f0000000240), 0x0, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x1f8, 0x0, 0x108, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000240)=0x3, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 726.769419ms ago: executing program 8 (id=10610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) lstat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @random="a56109da91e9"}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a027000000e4b3"], 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000400000000200000001000000000000000d000000000000009188e9000000000006000000000000000400000005000000f43238875f3172cfea104ba2edd6c3ad60fc4e23043d198213de8b83a7520e4dcf825a4a10a457525885607b4a520b975938c02cc92d92b5abf50ff2170d761109ed1b4599f2e601706c5a6dca29027e5e44113e3dec1bcf673c32c8b2141e52fbb3d36d524c3df9da0907c4bdec5557fdc752eb2d4e2d"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 523.691336ms ago: executing program 7 (id=10611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) lseek(r0, 0x100000001, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0xa}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) lseek(r0, 0x100000001, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0xa}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) 523.462286ms ago: executing program 7 (id=10612): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$incfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20f6ff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 439.305293ms ago: executing program 7 (id=10613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40a44, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x218002) (rerun: 32) ioctl$RTC_AIE_ON(r2, 0x7001) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x90fe919f89aaff37, r4, 0x147a5000) (async) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000100)={0x20000007, 0x9, [{0x80000000, 0x0, 0xc2}, {0x4, 0x0, 0xa}, {0xdf, 0x0, 0x4}, {0x7}, {0x7, 0x0, 0x8}, {0x4, 0x0, 0x7}, {0x4f, 0x0, 0x8}, {0x7fffffff, 0x0, 0x724fbef7}, {0xfffffffb, 0x0, 0x9}, {0x8002, 0x0, 0x6}, {0xffff, 0x0, 0x10000000004976}, {0x2, 0x0, 0x8000000000000001}, {0x6, 0x0, 0x3}, {0x7, 0x0, 0x9}, {0x40}, {0x401, 0x0, 0x37d5}]}) 309.818163ms ago: executing program 9 (id=10614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x2, 0x0, 0xc}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x1, 0x6, 0x1f}}, &(0x7f0000000280)={0x0, 0x30, 0x38}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x2, 0x0, 0xc}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x1, 0x6, 0x1f}}, &(0x7f0000000280)={0x0, 0x30, 0x38}}}], 0x0, 0x0, 0x0}) (async) 235.72221ms ago: executing program 0 (id=10615): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004a00010200000000be182339702faf74c0179a700000009a9d868faf56ccd3e3f81e17e50c5f"], 0x1c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x3, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0xe, 0xbbf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x9, 0xfffffffc, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x40, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd, 0x0, 0xfffd}, 0x4d, [0x400, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2], [0xffffffff, 0x3, 0x7, 0x0, 0x0, 0x6, 0x0, 0xfffffff7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x81, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0xfffffffd, 0x3, 0x10000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x7fffffc, 0x1, 0x0, 0x7fff, 0x0, 0x800003, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x10000], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x22, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 228.67836ms ago: executing program 9 (id=10616): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000001200)={{r1}, "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"}) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') 182.401854ms ago: executing program 9 (id=10617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r3 = socket$nl_audit(0x10, 0x3, 0x9) fstat(r3, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000001c0)=0xe8) setreuid(r5, r4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}], 0x1}, 0x70040000}, {{0x0, 0x0, 0x0}}], 0x3, 0x4048841) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x3, 0x10, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xb3, "488082800b19406699101762562679f53a108268454e7c2990db2ad95fbf10118b3781a30552d80e8eb698d7e525dd3d69e1c23c32dff20c36962a87e92ed3653fa03caeabc6b84f3de09e9938de61dea019cbf087f43d12fb1581c0c9a753fcee0118911ac6d76e42cd921ca87f140e12f9c6943a7c77efa7c113c7bb16e28d7ac38250c22b054d53b6dbb54dd5aac9393666ae650d90ca998529990b4a1c01fc9dafa706cbe8e5c0c6049b7f80bf4d9f26ce"}, &(0x7f0000000180)=0xd7) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 99.729171ms ago: executing program 9 (id=10618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) tee(r0, r1, 0x2, 0xa) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000000)=0xd) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) (async) tee(r0, r1, 0x2, 0xa) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000000)=0xd) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) (async) 0s ago: executing program 9 (id=10619): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) capset(0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) eventfd(0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB]) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000280)) socket$pptp(0x18, 0x1, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000a40)={@fda={0x66646185, 0xa, 0x0, 0x28}, @fda={0x66646185, 0x3, 0x2, 0x26}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/25, 0x19, 0x2, 0x40}}, &(0x7f0000000600)={0x0, 0x20, 0xfffffffffffffff4}}, 0x1440}], 0x0, 0x0, 0x0}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) r7 = dup(r1) ioctl$KDGETMODE(r7, 0x4b3b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0118] netlink: 'syz.8.9628': attribute type 1 has an invalid length. [ 718.422325][T30118] netlink: 'syz.8.9628': attribute type 2 has an invalid length. [ 718.823838][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 718.833700][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 718.855301][ T9] usb 10-1: USB disconnect, device number 15 [ 718.911720][T30138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9630'. [ 720.066942][T30165] rust_binder: Write failure EFAULT in pid:407 [ 720.565556][T30194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.590886][T30194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.733614][ T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 720.805587][T30213] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9655'. [ 720.815267][T30214] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9655'. [ 720.896287][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 720.903486][T30218] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9656'. [ 720.921598][T30218] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.931622][T30218] bridge_slave_1 (unregistering): left allmulticast mode [ 720.939929][T30218] bridge_slave_1 (unregistering): left promiscuous mode [ 720.947269][T30218] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.963433][T30221] tipc: Enabling of bearer rejected, failed to enable media [ 721.075633][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 721.109852][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.122067][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.148138][T30236] input: syz0 as /devices/virtual/input/input81 [ 721.160939][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.193224][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.220240][ T9] usb 10-1: Product: syz [ 721.224553][ T9] usb 10-1: Manufacturer: syz [ 721.232065][ T9] usb 10-1: SerialNumber: syz [ 721.234144][T30242] incfs: Options parsing error. -22 [ 721.263925][T30242] incfs: mount failed -22 [ 721.280408][T30242] input: syz1 as /devices/virtual/input/input82 [ 721.477903][T30196] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 721.477944][T30196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 721.492588][T30196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:420 [ 721.504704][T30196] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 721.514195][T30196] rust_binder: Read failure Err(EFAULT) in pid:420 [ 721.524239][ T9] usb 10-1: skipping empty audio interface (v1) [ 721.564704][ T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 721.578141][ T9] usb 10-1: USB disconnect, device number 16 [ 721.642573][T24169] udevd[24169]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 721.803543][T30269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9672'. [ 722.169374][T30286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 722.429035][T30297] binder: Unknown parameter '59MTf5&' [ 722.515168][T30304] rust_binder: pid 30304 performed invalid decrement on ref [ 722.736779][T30319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.752185][T30319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.770987][T30320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.797177][T30320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.850190][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 723.042184][T30330] rust_binder: Error while translating object. [ 723.042222][T30330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 723.049182][T30330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:425 [ 723.357400][ T36] kauditd_printk_skb: 603 callbacks suppressed [ 723.357436][ T36] audit: type=1400 audit(2000000084.882:94965): avc: denied { read write } for pid=30341 comm="syz.9.9696" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 723.397682][ T36] audit: type=1400 audit(2000000084.919:94966): avc: denied { read write open } for pid=30341 comm="syz.9.9696" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 723.459482][ T36] audit: type=1400 audit(2000000084.966:94967): avc: denied { unmount } for pid=29253 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 723.549329][ T36] audit: type=1400 audit(2000000085.060:94968): avc: denied { read write } for pid=29253 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.601304][ T36] audit: type=1400 audit(2000000085.060:94969): avc: denied { read write open } for pid=29253 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.639708][ T36] audit: type=1400 audit(2000000085.060:94970): avc: denied { ioctl } for pid=29253 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.684544][ T36] audit: type=1400 audit(2000000085.078:94971): avc: denied { create } for pid=30344 comm="syz.8.9699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 723.729471][ T36] audit: type=1400 audit(2000000085.088:94972): avc: denied { write } for pid=30344 comm="syz.8.9699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 723.753905][ T36] audit: type=1400 audit(2000000085.107:94973): avc: denied { create } for pid=30343 comm="syz.7.9698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 723.795457][ T36] audit: type=1400 audit(2000000085.107:94974): avc: denied { create } for pid=30343 comm="syz.7.9698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 724.031593][T30358] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 724.350389][T30373] overlay: Unknown parameter 'pcr' [ 724.747532][T30391] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9715'. [ 724.769486][T30391] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 725.193966][T30405] overlayfs: failed to resolve './file0': -2 [ 725.224798][T30405] overlayfs: failed to resolve './file0': -2 [ 725.558845][T30443] rust_binder: Error while translating object. [ 725.558883][T30443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 725.565103][T30443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:466 [ 725.778775][T30450] fuse: Bad value for 'user_id' [ 725.792958][T30450] fuse: Bad value for 'user_id' [ 725.813378][T30451] fuse: Bad value for 'user_id' [ 725.818278][T30451] fuse: Bad value for 'user_id' [ 726.113890][T30470] tipc: Started in network mode [ 726.118855][T30470] tipc: Node identity f678cac5c8c6, cluster identity 4711 [ 726.128452][T30470] tipc: Enabled bearer , priority 10 [ 726.136220][T30471] No source specified [ 726.265844][T30475] rust_binder: Read failure Err(EAGAIN) in pid:484 [ 726.345128][ T45] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 726.378744][ T45] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 726.480683][T30482] tipc: Enabling of bearer rejected, failed to enable media [ 726.624644][T30490] netlink: 'syz.8.9743': attribute type 12 has an invalid length. [ 726.649913][T30491] netlink: 'syz.8.9743': attribute type 12 has an invalid length. [ 727.054704][T30502] fuse: Bad value for 'user_id' [ 727.059609][T30502] fuse: Bad value for 'user_id' [ 727.318585][ T45] tipc: Node number set to 1052691141 [ 727.324194][T30508] fuse: Unknown parameter 'r]otmode' [ 727.477114][T30518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 727.493755][T30522] overlayfs: failed to resolve './file0': -2 [ 727.534771][T30518] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 727.747454][ T560] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 727.811074][ T560] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 728.708626][ T36] kauditd_printk_skb: 655 callbacks suppressed [ 728.708646][ T36] audit: type=1400 audit(2000000089.887:95630): avc: denied { create } for pid=30572 comm="syz.7.9772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 728.770829][ T36] audit: type=1400 audit(2000000089.924:95631): avc: denied { write } for pid=30572 comm="syz.7.9772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 728.797674][ T36] audit: type=1400 audit(2000000089.933:95632): avc: denied { name_bind } for pid=30572 comm="syz.7.9772" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 728.826340][ T36] audit: type=1400 audit(2000000089.933:95633): avc: denied { name_bind } for pid=30572 comm="syz.7.9772" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 728.866493][ T36] audit: type=1400 audit(2000000089.933:95634): avc: denied { create } for pid=30572 comm="syz.7.9772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 728.890011][ T36] audit: type=1400 audit(2000000089.933:95635): avc: denied { read } for pid=30574 comm="syz.6.9773" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.928849][T30583] rust_binder: Write failure EFAULT in pid:254 [ 728.963323][ T36] audit: type=1400 audit(2000000089.933:95636): avc: denied { read open } for pid=30574 comm="syz.6.9773" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.997747][ T36] audit: type=1400 audit(2000000089.943:95637): avc: denied { ioctl } for pid=30574 comm="syz.6.9773" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.039173][ T36] audit: type=1400 audit(2000000089.943:95638): avc: denied { map } for pid=30574 comm="syz.6.9773" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.051839][T30591] binder: Unknown parameter 'defcontext0x0000000000000000' [ 729.083698][ T36] audit: type=1400 audit(2000000089.943:95639): avc: denied { read } for pid=30574 comm="syz.6.9773" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.332329][ T560] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 729.340971][ T560] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 729.939633][T30628] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.946817][T30628] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.969755][T30628] bridge_slave_0: entered allmulticast mode [ 729.976222][T30628] bridge_slave_0: entered promiscuous mode [ 729.993107][T30628] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.000197][T30628] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.023192][T30628] bridge_slave_1: entered allmulticast mode [ 730.034321][T30628] bridge_slave_1: entered promiscuous mode [ 730.206938][T30628] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.214225][T30628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.221583][T30628] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.228662][T30628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.354614][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.364517][T30667] fuse: Bad value for 'fd' [ 730.369744][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.396342][T30671] 9pnet_fd: Insufficient options for proto=fd [ 730.405112][ T3117] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.412218][ T3117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.444963][ T3119] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.452098][ T3119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.552397][T30675] netlink: 'syz.6.9802': attribute type 4 has an invalid length. [ 730.581427][T30675] rust_binder: Write failure EFAULT in pid:272 [ 730.634303][T30628] veth0_vlan: entered promiscuous mode [ 730.688389][T30628] veth1_macvtap: entered promiscuous mode [ 730.835613][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 730.995953][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 731.006807][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 731.029361][ T9] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 731.040999][ T9] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 731.064639][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.074371][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.090635][ T9] usb 7-1: Manufacturer: ₨ꉪ꫾詁欧䕲넌怎樜怃츞⥇댎褿࿲2쉰殺芙퉃伲ྞ耹䡗괚讞宨ꓽ聱腃籝濋䲮᪵渒읆岣戊ꤦ쐱 [ 731.124247][ T9] usb 7-1: SerialNumber: П [ 731.324422][T30688] rust_binder: Error while translating object. [ 731.324474][T30688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 731.335347][T30688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 731.427482][T30694] __vm_enough_memory: pid: 30694, comm: syz.8.9807, bytes: 18014402804453376 not enough memory for the allocation [ 731.510128][T30698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 731.510192][T30698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:13 [ 731.546250][T30700] 9pnet_fd: Insufficient options for proto=fd [ 731.568372][ T9] cdc_ncm 7-1:1.0: bind() failure [ 731.574820][ T9] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 731.582888][ T9] cdc_ncm 7-1:1.1: bind() failure [ 731.599769][ T9] usb 7-1: USB disconnect, device number 12 [ 732.173517][T30705] syzkaller0: entered allmulticast mode [ 732.506975][T30713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 732.507878][T30713] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 732.610146][T30716] support for cryptoloop has been removed. Use dm-crypt instead. [ 732.964503][T30739] binder: Bad value for 'stats' [ 733.169630][ T45] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 733.200178][ T45] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 733.336093][ T9] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 733.501303][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 733.511820][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 733.531269][ T9] usb 9-1: config 17 has an invalid interface number: 8 but max is 1 [ 733.551714][ T9] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 733.560804][ T9] usb 9-1: config 17 has no interface number 0 [ 733.568462][ T9] usb 9-1: config 17 interface 8 has no altsetting 0 [ 733.595694][ T9] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 733.606472][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.625697][ T9] usb 9-1: Product: syz [ 733.629913][ T9] usb 9-1: Manufacturer: syz [ 733.634524][ T9] usb 9-1: SerialNumber: syz [ 733.883039][ T9] usb 9-1: selecting invalid altsetting 0 [ 733.911727][ T9] usb 9-1: USB disconnect, device number 12 [ 733.986197][T30766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9831'. [ 734.070269][ T36] kauditd_printk_skb: 639 callbacks suppressed [ 734.070288][ T36] audit: type=1400 audit(2000000094.901:96279): avc: denied { read write } for pid=30628 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 734.106474][T24169] udevd[24169]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 734.192259][ T36] audit: type=1400 audit(2000000094.929:96280): avc: denied { read write open } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 734.263573][ T36] audit: type=1400 audit(2000000094.929:96281): avc: denied { ioctl } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 734.299148][ T45] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 734.366707][ T36] audit: type=1400 audit(2000000094.994:96282): avc: denied { ioctl } for pid=30763 comm="syz.6.9831" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 734.452006][ T36] audit: type=1400 audit(2000000094.994:96283): avc: denied { read write } for pid=30768 comm="syz.8.9833" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 734.461987][ T45] usb 7-1: device descriptor read/64, error -71 [ 734.555690][ T36] audit: type=1400 audit(2000000094.994:96284): avc: denied { read write open } for pid=30768 comm="syz.8.9833" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 734.601937][ T36] audit: type=1400 audit(2000000095.004:96285): avc: denied { ioctl } for pid=30768 comm="syz.8.9833" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 734.628350][ T36] audit: type=1400 audit(2000000095.004:96286): avc: denied { ioctl } for pid=30768 comm="syz.8.9833" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 734.694687][ T36] audit: type=1400 audit(2000000095.004:96287): avc: denied { read } for pid=30768 comm="syz.8.9833" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 734.746344][ T36] audit: type=1400 audit(2000000095.004:96288): avc: denied { read open } for pid=30768 comm="syz.8.9833" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 734.822948][ T45] usb 7-1: device descriptor read/64, error -71 [ 735.079528][ T45] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 735.154084][T30797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 735.154124][T30797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:52 [ 735.239879][ T45] usb 7-1: device descriptor read/64, error -71 [ 735.518087][ T45] usb 7-1: device descriptor read/64, error -71 [ 735.638098][ T45] usb usb7-port1: attempt power cycle [ 735.800649][T30839] FAT-fs (rnullb0): bogus number of reserved sectors [ 735.807758][T30839] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 736.009558][ T45] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 736.033627][ T45] usb 7-1: device descriptor read/8, error -71 [ 736.084372][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 736.172159][ T45] usb 7-1: device descriptor read/8, error -71 [ 736.247352][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.258713][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.268480][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.281519][ T10] usb 9-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 736.296298][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.308381][ T10] usb 9-1: config 0 descriptor?? [ 736.426500][ T45] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 736.451192][ T45] usb 7-1: device descriptor read/8, error -71 [ 736.589655][ T45] usb 7-1: device descriptor read/8, error -71 [ 736.704965][ T45] usb usb7-port1: unable to enumerate USB device [ 736.748336][ T10] waltop 0003:172F:0501.002B: item fetching failed at offset 2/5 [ 736.756322][ T10] waltop 0003:172F:0501.002B: probe with driver waltop failed with error -22 [ 736.964074][ T45] usb 9-1: USB disconnect, device number 13 [ 737.089712][T30862] fuse: Bad value for 'fd' [ 737.299527][T30879] 9pnet_fd: Insufficient options for proto=fd [ 737.794242][T30898] rust_binder: Error while translating object. [ 737.794297][T30898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 737.794315][T30897] rust_binder: Error while translating object. [ 737.807625][T30898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 737.810998][T30897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 737.825348][T30897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 738.750938][T30953] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9894'. [ 738.920949][T30961] rust_binder: Error while translating object. [ 738.920987][T30961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 738.927246][T30961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 739.089934][T30965] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9897'. [ 739.278502][T30979] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 739.311047][T30981] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 739.336962][T30981] rust_binder: Write failure EINVAL in pid:82 [ 739.423234][ T36] kauditd_printk_skb: 517 callbacks suppressed [ 739.423255][ T36] audit: type=1400 audit(2000000099.915:96806): avc: denied { read } for pid=30985 comm="syz.8.9903" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.455532][T30988] rust_binder: Write failure EFAULT in pid:323 [ 739.472309][T30984] overlayfs: failed to clone upperpath [ 739.473563][T30986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 739.509811][ T36] audit: type=1400 audit(2000000099.943:96807): avc: denied { read } for pid=30987 comm="syz.6.9904" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.576123][ T36] audit: type=1400 audit(2000000099.943:96808): avc: denied { read open } for pid=30987 comm="syz.6.9904" path="/dev/binderfs/binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.619989][T30989] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9903'. [ 739.645188][ T36] audit: type=1400 audit(2000000099.943:96809): avc: denied { ioctl } for pid=30987 comm="syz.6.9904" path="/dev/binderfs/binder1" dev="binder" ino=25 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.686075][ T36] audit: type=1400 audit(2000000099.943:96810): avc: denied { read open } for pid=30985 comm="syz.8.9903" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.759026][ T36] audit: type=1400 audit(2000000099.952:96811): avc: denied { mounton } for pid=30983 comm="syz.7.9902" path="/505/bus" dev="tmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 739.791900][ T36] audit: type=1400 audit(2000000099.952:96812): avc: denied { ioctl } for pid=30985 comm="syz.8.9903" path="/dev/binderfs/binder0" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.820135][ T36] audit: type=1400 audit(2000000099.952:96813): avc: denied { set_context_mgr } for pid=30985 comm="syz.8.9903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 739.855550][ T36] audit: type=1400 audit(2000000099.952:96814): avc: denied { ioctl } for pid=30985 comm="syz.8.9903" path="/dev/binderfs/binder0" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.889706][ T36] audit: type=1400 audit(2000000099.971:96815): avc: denied { ioctl } for pid=30985 comm="syz.8.9903" path="/dev/binderfs/binder0" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 739.985827][T31010] 9pnet: Could not find request transport: f= [ 740.139638][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9913'. [ 740.196238][T31016] overlayfs: failed to clone upperpath [ 740.398264][T31027] input: syz0 as /devices/virtual/input/input85 [ 740.655219][T31040] netlink: 'syz.9.9922': attribute type 12 has an invalid length. [ 741.227571][T31053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=127 sclass=netlink_route_socket pid=31053 comm=syz.6.9927 [ 741.269353][T31053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=31053 comm=syz.6.9927 [ 741.435447][T31058] random: crng reseeded on system resumption [ 741.856957][ T45] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 742.018133][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 742.025892][ T45] usb 9-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 742.037817][ T45] usb 9-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.049528][ T45] usb 9-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 742.063251][ T45] usb 9-1: config 0 interface 0 has no altsetting 0 [ 742.069889][ T45] usb 9-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 742.079837][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.089723][ T45] usb 9-1: config 0 descriptor?? [ 742.595269][T31071] rust_binder: 31063 RLIMIT_NICE not set [ 742.596260][T31063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 742.602034][T31063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 742.612345][ T45] usbhid 9-1:0.0: can't add hid device: -71 [ 742.627494][ T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 742.636394][ T45] usb 9-1: USB disconnect, device number 14 [ 742.744243][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 742.904589][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 743.006352][T31074] cgroup: fork rejected by pids controller in /syz7 [ 743.043563][ T10] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 743.203872][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 743.209859][ T10] usb usb7-port1: attempt power cycle [ 743.578046][ T10] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 743.600234][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 743.738423][ T10] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 743.760625][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 743.766081][ T10] usb usb7-port1: unable to enumerate USB device [ 745.647231][ T36] kauditd_printk_skb: 340 callbacks suppressed [ 745.647251][ T36] audit: type=1400 audit(2000000105.733:97156): avc: denied { read write } for pid=29253 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.685185][ T36] audit: type=1400 audit(2000000105.733:97157): avc: denied { read write open } for pid=29253 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.732163][ T36] audit: type=1400 audit(2000000105.733:97158): avc: denied { ioctl } for pid=29253 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.841533][ T36] audit: type=1400 audit(2000000117.137:97159): avc: denied { read } for pid=31199 comm="syz.8.9937" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 757.848053][T31204] binder: Bad value for 'stats' [ 757.894335][ T36] audit: type=1400 audit(2000000117.137:97160): avc: denied { read open } for pid=31199 comm="syz.8.9937" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 757.918935][ T36] audit: type=1400 audit(2000000117.137:97161): avc: denied { mounton } for pid=31200 comm="syz.6.9938" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.954868][ T36] audit: type=1400 audit(2000000117.165:97162): avc: denied { create } for pid=31199 comm="syz.8.9937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.996480][ T36] audit: type=1400 audit(2000000117.174:97163): avc: denied { read } for pid=31199 comm="syz.8.9937" dev="nsfs" ino=4026532373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 758.029884][ T36] audit: type=1400 audit(2000000117.174:97164): avc: denied { read open } for pid=31199 comm="syz.8.9937" path="net:[4026532373]" dev="nsfs" ino=4026532373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 758.084021][ T36] audit: type=1400 audit(2000000117.174:97165): avc: denied { create } for pid=31199 comm="syz.8.9937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 758.096240][T31214] overlayfs: missing 'lowerdir' [ 758.122384][T31209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.125620][ T36] audit: type=1400 audit(2000000117.174:97166): avc: denied { write } for pid=31199 comm="syz.8.9937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 758.150385][ T36] audit: type=1400 audit(2000000117.174:97167): avc: denied { ioctl } for pid=31199 comm="syz.8.9937" path="socket:[132221]" dev="sockfs" ino=132221 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 758.469191][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 758.629530][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 758.638482][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.650903][ T45] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 758.661813][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.671423][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 758.679855][ T9] usb 9-1: SerialNumber: syz [ 758.688576][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 758.704355][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 758.832631][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 758.848688][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.870998][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.895435][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.907475][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.915652][ T45] usb 7-1: Product: syz [ 758.939249][ T45] usb 7-1: Manufacturer: syz [ 758.944851][ T45] usb 7-1: SerialNumber: syz [ 759.177949][ T45] usb 7-1: 0:2 : does not exist [ 759.186077][ T45] usb 7-1: unit 9 not found! [ 759.205384][ T45] usb 7-1: 4:0: cannot get min/max values for control 1 (id 4) [ 759.225190][ T45] usb 7-1: 4:0: cannot get min/max values for control 2 (id 4) [ 759.231953][T31264] netlink: 'syz.7.9957': attribute type 4 has an invalid length. [ 759.236463][ T45] usb 7-1: 4:0: cannot get min/max values for control 3 (id 4) [ 759.249037][T31264] netlink: 'syz.7.9957': attribute type 6 has an invalid length. [ 759.260927][ T45] usb 7-1: 4:0: cannot get min/max values for control 4 (id 4) [ 759.270916][T31264] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.9957'. [ 759.273527][ T45] usb 7-1: 4:0: cannot get min/max values for control 5 (id 4) [ 759.294755][ T45] usb 7-1: 4:0: cannot get min/max values for control 6 (id 4) [ 759.303779][ T10] usb 9-1: USB disconnect, device number 15 [ 759.319465][ T45] usb 7-1: USB disconnect, device number 22 [ 759.414992][T31208] udevd[31208]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 759.645051][ T10] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 759.821137][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.840569][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 759.850185][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 759.858260][ T10] usb 9-1: SerialNumber: syz [ 759.870603][ T10] hub 9-1:1.0: bad descriptor, ignoring hub [ 759.882547][ T10] hub 9-1:1.0: probe with driver hub failed with error -5 [ 760.201026][ T9] usb 9-1: USB disconnect, device number 16 [ 760.318523][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 760.495513][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 760.504745][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.512789][ T10] usb 7-1: Product: syz [ 760.516982][ T10] usb 7-1: Manufacturer: syz [ 760.521639][ T10] usb 7-1: SerialNumber: syz [ 760.689071][T31304] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 761.792603][T31328] tipc: Enabling of bearer rejected, failed to enable media [ 761.986211][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 762.157185][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 762.178594][ T10] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 762.193644][ T10] usb 9-1: config 0 has no interface number 0 [ 762.199846][ T10] usb 9-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.213222][ T10] usb 9-1: config 0 interface 196 has no altsetting 0 [ 762.235336][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 762.253392][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.264110][ T10] usb 9-1: Product: syz [ 762.268318][ T10] usb 9-1: Manufacturer: syz [ 762.284020][ T10] usb 9-1: SerialNumber: syz [ 762.297823][ T10] usb 9-1: config 0 descriptor?? [ 762.453183][T31378] overlayfs: failed to clone upperpath [ 762.533175][ T10] ipheth 9-1:0.196: Unable to find alternate settings interface [ 762.557282][ T10] usb 9-1: USB disconnect, device number 17 [ 763.219618][ T36] kauditd_printk_skb: 551 callbacks suppressed [ 763.219637][ T36] audit: type=1400 audit(2000000122.169:97696): avc: denied { read write } for pid=30628 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.265863][ T36] audit: type=1400 audit(2000000122.207:97697): avc: denied { read write open } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.290970][ T992] usb 7-1: USB disconnect, device number 23 [ 763.307798][T31399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.321307][ T36] audit: type=1400 audit(2000000122.207:97698): avc: denied { ioctl } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.354506][ T36] audit: type=1400 audit(2000000122.207:97699): avc: denied { create } for pid=31395 comm="syz.9.10002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 763.362451][T31399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.384079][ T36] audit: type=1400 audit(2000000122.207:97700): avc: denied { create } for pid=31395 comm="syz.9.10002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 763.422645][ T36] audit: type=1400 audit(2000000122.244:97701): avc: denied { read write } for pid=29253 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.469277][ T36] audit: type=1400 audit(2000000122.253:97702): avc: denied { read write open } for pid=29253 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.516220][T31410] netlink: 'syz.9.10006': attribute type 12 has an invalid length. [ 763.566087][ T36] audit: type=1400 audit(2000000122.253:97703): avc: denied { ioctl } for pid=29253 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.591911][ T560] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 763.626350][ T36] audit: type=1400 audit(2000000122.253:97704): avc: denied { read write } for pid=31397 comm="syz.8.10003" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 763.650031][ T36] audit: type=1400 audit(2000000122.253:97705): avc: denied { read write open } for pid=31397 comm="syz.8.10003" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 763.749996][ T560] usb 9-1: device descriptor read/64, error -71 [ 764.000534][T31421] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 764.000557][T31421] rust_binder: Read failure Err(EFAULT) in pid:387 [ 764.006578][ T560] usb 9-1: device descriptor read/64, error -71 [ 764.273834][ T560] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 764.423786][ T560] usb 9-1: device descriptor read/64, error -71 [ 764.461502][T31434] netlink: 84 bytes leftover after parsing attributes in process `syz.9.10013'. [ 764.567176][T31441] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10016'. [ 764.680149][ T560] usb 9-1: device descriptor read/64, error -71 [ 764.771449][ T65] rust_binder: 31420: removing orphan mapping 0:24 [ 764.786921][ T65] rust_binder: 0: removing orphan mapping 24:4096 [ 764.808661][ T560] usb usb9-port1: attempt power cycle [ 765.086258][ T9] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 765.171979][T31457] overlayfs: failed to clone upperpath [ 765.183096][ T560] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 765.227762][ T560] usb 9-1: device descriptor read/8, error -71 [ 765.283477][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 765.292123][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 765.312641][ T9] usb 7-1: config 129 has an invalid interface number: 51 but max is 0 [ 765.320959][ T9] usb 7-1: config 129 has no interface number 0 [ 765.332300][ T9] usb 7-1: config 129 interface 51 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 765.343334][ T9] usb 7-1: config 129 interface 51 has no altsetting 0 [ 765.357895][ T9] usb 7-1: New USB device found, idVendor=c6fc, idProduct=c78f, bcdDevice=5d.62 [ 765.367054][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.375162][ T9] usb 7-1: Product: syz [ 765.379381][ T9] usb 7-1: Manufacturer: syz [ 765.383999][ T9] usb 7-1: SerialNumber: syz [ 765.391849][ T560] usb 9-1: device descriptor read/8, error -71 [ 765.421787][T31466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31466 comm=syz.7.10024 [ 765.513753][T31471] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10026'. [ 765.613059][T31448] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 765.629728][ T9] usb 7-1: USB disconnect, device number 24 [ 765.674206][ T560] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 765.711306][ T560] usb 9-1: device descriptor read/8, error -71 [ 765.868744][ T560] usb 9-1: device descriptor read/8, error -71 [ 765.908154][T31488] fuse: Unknown parameter '01777777777777777777777' [ 765.984606][ T560] usb usb9-port1: unable to enumerate USB device [ 766.956989][ T992] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 767.128211][ T992] usb 7-1: Using ep0 maxpacket: 8 [ 767.138732][ T10] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 767.148311][ T992] usb 7-1: config 162 has an invalid interface number: 79 but max is 1 [ 767.158721][ T992] usb 7-1: config 162 has an invalid interface number: 183 but max is 1 [ 767.173357][ T992] usb 7-1: config 162 has no interface number 0 [ 767.179655][ T992] usb 7-1: config 162 has no interface number 1 [ 767.186864][ T992] usb 7-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 767.201303][ T992] usb 7-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 767.235336][ T992] usb 7-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 767.254007][ T992] usb 7-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 767.269430][ T992] usb 7-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 767.281083][ T992] usb 7-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 767.295806][ T992] usb 7-1: config 162 interface 79 has no altsetting 0 [ 767.303541][ T992] usb 7-1: config 162 interface 183 has no altsetting 0 [ 767.315491][ T992] usb 7-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 767.336131][ T992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.345299][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 767.357295][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 576, setting to 64 [ 767.369279][ T992] usb 7-1: Product: syz [ 767.373590][ T992] usb 7-1: Manufacturer: syz [ 767.379304][ T992] usb 7-1: SerialNumber: syz [ 767.384599][ T10] usb 9-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 767.393963][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.421153][ T10] usb 9-1: config 0 descriptor?? [ 767.439509][T31541] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 767.560525][T31566] syz.7.10056: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 767.575650][T31566] CPU: 1 UID: 0 PID: 31566 Comm: syz.7.10056 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 767.575686][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.575701][T31566] Call Trace: [ 767.575709][T31566] [ 767.575719][T31566] __dump_stack+0x21/0x30 [ 767.575753][T31566] dump_stack_lvl+0x10c/0x190 [ 767.575791][T31566] ? __cfi_dump_stack_lvl+0x10/0x10 [ 767.575821][T31566] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 767.575852][T31566] dump_stack+0x19/0x20 [ 767.575878][T31566] warn_alloc+0x1bc/0x2a0 [ 767.575903][T31566] ? stack_depot_save_flags+0x38/0x800 [ 767.575942][T31566] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 767.575970][T31566] ? __cfi_warn_alloc+0x10/0x10 [ 767.575995][T31566] ? kasan_save_track+0x4f/0x80 [ 767.576028][T31566] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 767.576061][T31566] ? xskq_create+0x68/0x2a0 [ 767.576090][T31566] ? xsk_init_queue+0xb6/0x120 [ 767.576118][T31566] ? xsk_setsockopt+0x43f/0x6f0 [ 767.576145][T31566] ? do_sock_setsockopt+0x26a/0x400 [ 767.576176][T31566] ? __x64_sys_setsockopt+0x1b8/0x250 [ 767.576207][T31566] ? x64_sys_call+0x2adc/0x2ee0 [ 767.576238][T31566] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 767.576271][T31566] __vmalloc_node_range_noprof+0x135/0x1420 [ 767.576306][T31566] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 767.576335][T31566] ? avc_has_perm+0x1f2/0x220 [ 767.576363][T31566] ? kasan_save_alloc_info+0x40/0x50 [ 767.576391][T31566] ? __kasan_kmalloc+0x96/0xb0 [ 767.576427][T31566] vmalloc_user_noprof+0x77/0x90 [ 767.576454][T31566] ? xskq_create+0xdb/0x2a0 [ 767.576486][T31566] xskq_create+0xdb/0x2a0 [ 767.576518][T31566] xsk_init_queue+0xb6/0x120 [ 767.576548][T31566] xsk_setsockopt+0x43f/0x6f0 [ 767.576577][T31566] ? __cfi_xsk_setsockopt+0x10/0x10 [ 767.576607][T31566] ? do_futex+0x356/0x500 [ 767.576643][T31566] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 767.576668][T31566] ? security_socket_setsockopt+0x33/0xd0 [ 767.576700][T31566] ? __cfi_xsk_setsockopt+0x10/0x10 [ 767.576729][T31566] do_sock_setsockopt+0x26a/0x400 [ 767.576760][T31566] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 767.576800][T31566] ? xfd_validate_state+0x68/0x150 [ 767.576828][T31566] ? __kasan_check_read+0x15/0x20 [ 767.576858][T31566] __x64_sys_setsockopt+0x1b8/0x250 [ 767.576890][T31566] x64_sys_call+0x2adc/0x2ee0 [ 767.576922][T31566] do_syscall_64+0x58/0xf0 [ 767.576948][T31566] ? clear_bhb_loop+0x50/0xa0 [ 767.576979][T31566] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 767.577011][T31566] RIP: 0033:0x7f5b61d8e9a9 [ 767.577031][T31566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.577052][T31566] RSP: 002b:00007f5b62b6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 767.577079][T31566] RAX: ffffffffffffffda RBX: 00007f5b61fb5fa0 RCX: 00007f5b61d8e9a9 [ 767.577097][T31566] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 767.577112][T31566] RBP: 00007f5b61e10d69 R08: 0000000000000004 R09: 0000000000000000 [ 767.577127][T31566] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 767.577142][T31566] R13: 0000000000000000 R14: 00007f5b61fb5fa0 R15: 00007ffe9e6d43a8 [ 767.577162][T31566] [ 767.895497][T31533] veth1_macvtap: left promiscuous mode [ 767.901039][T31566] Mem-Info: [ 767.904335][T31566] active_anon:15239 inactive_anon:2987 isolated_anon:0 [ 767.904335][T31566] active_file:6157 inactive_file:23359 isolated_file:0 [ 767.904335][T31566] unevictable:15370 dirty:17 writeback:0 [ 767.904335][T31566] slab_reclaimable:5700 slab_unreclaimable:83460 [ 767.904335][T31566] mapped:35872 shmem:166 pagetables:1599 [ 767.904335][T31566] sec_pagetables:0 bounce:0 [ 767.904335][T31566] kernel_misc_reclaimable:0 [ 767.904335][T31566] free:1449841 free_pcp:6486 free_cma:0 [ 767.916455][ T10] uclogic 0003:28BD:0074.002C: interface is invalid, ignoring [ 767.953603][T31566] Node 0 active_anon:61156kB inactive_anon:11948kB active_file:24628kB inactive_file:93436kB unevictable:61480kB isolated(anon):0kB isolated(file):0kB mapped:143788kB dirty:68kB writeback:0kB shmem:964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7896kB pagetables:6396kB sec_pagetables:0kB all_unreclaimable? no [ 767.997299][T31566] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965984kB mlocked:0kB bounce:0kB free_pcp:5772kB local_pcp:5704kB free_cma:0kB [ 768.028774][T31566] lowmem_reserve[]: 0 3921 3921 [ 768.033709][T31566] Normal free:2839152kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:66856kB inactive_anon:11948kB active_file:24628kB inactive_file:93436kB unevictable:61480kB writepending:68kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:14100kB local_pcp:2164kB free_cma:0kB [ 768.065727][T31566] lowmem_reserve[]: 0 0 0 [ 768.070188][T31566] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 768.085787][T31566] Normal: 1362*4kB (UME) 751*8kB (UME) 1791*16kB (UME) 1319*32kB (UME) 376*64kB (UME) 396*128kB (UME) 218*256kB (UME) 87*512kB (UME) 33*1024kB (UME) 6*2048kB (UM) 619*4096kB (UME) = 2838928kB [ 768.105094][T31566] 50354 total pagecache pages [ 768.109864][T31566] 3031 pages in swap cache [ 768.114406][T31566] Free swap = 112252kB [ 768.118636][T31566] Total swap = 124996kB [ 768.122867][T31566] 2097051 pages RAM [ 768.126707][T31566] 0 pages HighMem/MovableOnly [ 768.131445][T31566] 351525 pages reserved [ 768.135712][T31566] 0 pages cma reserved [ 768.142800][T31566] Memory allocations: [ 768.147067][T31566] 0 B 0 init/main.c:1370 func:do_initcalls [ 768.154342][T31566] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 768.162441][T31566] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 768.170152][T31566] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 768.178106][T31566] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 768.186057][T31566] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 768.194713][T31566] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 768.202683][T31566] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 768.218462][T31566] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 768.226557][T31566] 0 B 0 init/initramfs.c:101 func:find_link [ 768.522796][T31591] 9pnet_fd: Insufficient options for proto=fd [ 768.531604][T31592] 9pnet_fd: Insufficient options for proto=fd [ 768.583812][T31596] netlink: 'syz.9.10065': attribute type 4 has an invalid length. [ 768.591745][T31596] netlink: 3581 bytes leftover after parsing attributes in process `syz.9.10065'. [ 768.626719][ T36] kauditd_printk_skb: 617 callbacks suppressed [ 768.626738][ T36] audit: type=1400 audit(2000000127.230:98323): avc: denied { watch } for pid=31597 comm="syz.7.10066" path="/562/file0" dev="tmpfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 768.659708][ T36] audit: type=1400 audit(2000000127.258:98324): avc: denied { create } for pid=31597 comm="syz.7.10066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.683168][ T36] audit: type=1400 audit(2000000127.258:98325): avc: denied { create } for pid=31597 comm="syz.7.10066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 768.703862][ T36] audit: type=1400 audit(2000000127.277:98326): avc: denied { setopt } for pid=31597 comm="syz.7.10066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 768.733638][ T36] audit: type=1400 audit(2000000127.277:98327): avc: denied { map } for pid=31597 comm="syz.7.10066" path="socket:[133604]" dev="sockfs" ino=133604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 768.758476][ T36] audit: type=1400 audit(2000000127.277:98328): avc: denied { read write } for pid=31597 comm="syz.7.10066" path="socket:[133604]" dev="sockfs" ino=133604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 768.793798][ T36] audit: type=1400 audit(2000000127.277:98329): avc: denied { mount } for pid=31599 comm="syz.9.10067" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 768.817480][ T10] usb 9-1: USB disconnect, device number 22 [ 768.873227][ T36] audit: type=1400 audit(2000000127.277:98330): avc: denied { search } for pid=31599 comm="syz.9.10067" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 768.926462][ T36] audit: type=1400 audit(2000000127.277:98331): avc: denied { search } for pid=31599 comm="syz.9.10067" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 768.949704][ T36] audit: type=1400 audit(2000000127.277:98332): avc: denied { read } for pid=31599 comm="syz.9.10067" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 769.141704][T31620] SELinux: security_context_str_to_sid () failed with errno=-22 [ 769.154119][T31626] fuse: Unknown parameter 'dootmode' [ 769.373762][T31641] overlayfs: workdir and upperdir must reside under the same mount [ 769.582523][T31652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 769.582562][T31652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 769.865455][T31659] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 769.875849][T31659] rust_binder: Read failure Err(EFAULT) in pid:160 [ 769.923464][ T992] pl2303 7-1:162.79: required endpoints missing [ 769.975047][ T992] pl2303 7-1:162.183: pl2303 converter detected [ 769.988194][ T992] pl2303 7-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 770.002688][ T992] pl2303 7-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 770.031515][ T992] pl2303 7-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 770.041830][ T992] pl2303 7-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 770.063521][ T992] pl2303 7-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 770.089083][ T992] pl2303 7-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 770.112709][ T992] pl2303 7-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 770.126058][ T992] pl2303 7-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 770.148146][ T992] pl2303 7-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 770.168961][ T992] pl2303 7-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 770.206762][ T992] pl2303 7-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 770.232278][ T992] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 770.244972][ T992] usb 7-1: USB disconnect, device number 25 [ 770.256796][T31682] binder: Bad value for 'stats' [ 770.281787][ T992] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 770.290007][ T992] pl2303 7-1:162.183: device disconnected [ 770.576395][T31703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 770.635169][T31705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 770.817935][ T992] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 771.000783][ T992] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 771.009595][ T992] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 771.020744][ T992] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 771.030486][ T992] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.042026][ T992] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 771.053240][ T992] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.066829][ T992] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 771.076009][ T992] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 771.084042][ T992] usb 7-1: Product: syz [ 771.088219][ T992] usb 7-1: Manufacturer: syz [ 771.105207][T31700] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 771.113248][ T992] cdc_wdm 7-1:1.0: skipping garbage [ 771.118548][ T992] cdc_wdm 7-1:1.0: skipping garbage [ 771.125255][ T992] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 771.131229][ T992] cdc_wdm 7-1:1.0: Unknown control protocol [ 771.335394][T31729] netlink: 'syz.7.10107': attribute type 16 has an invalid length. [ 771.346216][ T992] usb 7-1: USB disconnect, device number 26 [ 771.533293][T31727] 9pnet_fd: Insufficient options for proto=fd [ 771.566361][T31742] netlink: 1392 bytes leftover after parsing attributes in process `syz.7.10111'. [ 771.582837][T31700] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 771.592826][T31700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 772.811145][T31791] 9pnet_fd: Insufficient options for proto=fd [ 773.601806][T31821] netlink: 57 bytes leftover after parsing attributes in process `syz.7.10132'. [ 773.803515][T31836] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 773.811348][T31836] overlayfs: failed to set xattr on upper [ 773.818394][T31836] overlayfs: ...falling back to redirect_dir=nofollow. [ 773.828767][T31836] overlayfs: ...falling back to uuid=null. [ 773.935735][T31847] rust_binder: Write failure EFAULT in pid:430 [ 773.988679][ T36] kauditd_printk_skb: 552 callbacks suppressed [ 773.988701][ T36] audit: type=1400 audit(2000000132.244:98885): avc: denied { write } for pid=31849 comm="syz.6.10141" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 774.033851][ T36] audit: type=1400 audit(2000000132.244:98886): avc: denied { write open } for pid=31849 comm="syz.6.10141" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 774.077586][ T36] audit: type=1400 audit(2000000132.244:98887): avc: denied { create } for pid=31848 comm="syz.7.10140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 774.124243][ T36] audit: type=1400 audit(2000000132.244:98888): avc: denied { ioctl } for pid=31849 comm="syz.6.10141" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 774.171185][ T36] audit: type=1400 audit(2000000132.310:98889): avc: denied { ioctl } for pid=31848 comm="syz.7.10140" path="socket:[134417]" dev="sockfs" ino=134417 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 774.219019][ T36] audit: type=1400 audit(2000000132.310:98890): avc: denied { setopt } for pid=31848 comm="syz.7.10140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 774.252082][ T36] audit: type=1400 audit(2000000132.356:98891): avc: denied { execmem } for pid=31853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 774.308581][ T36] audit: type=1400 audit(2000000132.543:98892): avc: denied { read } for pid=31856 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 774.337347][ T36] audit: type=1400 audit(2000000132.572:98893): avc: denied { read open } for pid=31856 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 774.367032][ T36] audit: type=1400 audit(2000000132.581:98894): avc: denied { mounton } for pid=31856 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 774.636934][T31866] rust_binder: Write failure EINVAL in pid:189 [ 774.637748][T31856] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.654937][T31856] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.662109][T31856] bridge_slave_0: entered allmulticast mode [ 774.686346][T31856] bridge_slave_0: entered promiscuous mode [ 774.694549][T31856] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.728578][T31856] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.752077][T31856] bridge_slave_1: entered allmulticast mode [ 774.761162][T31856] bridge_slave_1: entered promiscuous mode [ 774.935653][T31883] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42017 sclass=netlink_xfrm_socket pid=31883 comm=syz.8.10152 [ 775.061735][T31856] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.068839][T31856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.076209][T31856] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.083287][T31856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.275856][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.287414][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.305534][ T3119] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.312666][ T3119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.337104][ T3119] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.344241][ T3119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.464644][T31856] veth0_vlan: entered promiscuous mode [ 775.523243][T31856] veth1_macvtap: entered promiscuous mode [ 775.824270][T31899] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 775.842527][T31899] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 775.868526][T31899] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 775.883292][T31899] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 776.239445][T31915] rust_binder: Write failure EINVAL in pid:6 [ 776.246567][T31915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 779.336173][ T36] kauditd_printk_skb: 4834 callbacks suppressed [ 779.336203][ T36] audit: type=1400 audit(2000000137.249:103729): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.375124][ T36] audit: type=1400 audit(2000000137.249:103730): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.399836][ T36] audit: type=1400 audit(2000000137.249:103731): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.415089][T29253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.423857][ T36] audit: type=1400 audit(2000000137.249:103732): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.430088][T29253] audit: audit_lost=227 audit_rate_limit=0 audit_backlog_limit=64 [ 779.455839][ T36] audit: type=1400 audit(2000000137.249:103733): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.464156][T29253] audit: backlog limit exceeded [ 779.486254][ T36] audit: type=1400 audit(2000000137.249:103734): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.494471][T29253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 784.691878][ T36] kauditd_printk_skb: 6893 callbacks suppressed [ 784.691899][ T36] audit: type=1400 audit(2000000142.263:110626): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.721615][ T36] audit: type=1400 audit(2000000142.263:110627): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.745033][ T36] audit: type=1400 audit(2000000142.263:110628): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.769315][ T36] audit: type=1400 audit(2000000142.263:110629): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.773069][T29253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 784.794062][ T36] audit: type=1400 audit(2000000142.263:110630): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.799501][T29253] audit: audit_lost=229 audit_rate_limit=0 audit_backlog_limit=64 [ 784.823919][ T36] audit: type=1400 audit(2000000142.263:110631): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.830506][T29253] audit: backlog limit exceeded [ 784.855158][ T36] audit: type=1400 audit(2000000142.263:110632): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.047584][ T36] kauditd_printk_skb: 7025 callbacks suppressed [ 790.047604][ T36] audit: type=1400 audit(2000000147.268:117604): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.077805][ T36] audit: type=1400 audit(2000000147.268:117605): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.102651][ T36] audit: type=1400 audit(2000000147.268:117606): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.124555][T29253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.127395][ T36] audit: type=1400 audit(2000000147.268:117607): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.132558][T29253] audit: audit_lost=248 audit_rate_limit=0 audit_backlog_limit=64 [ 790.157251][ T36] audit: type=1400 audit(2000000147.268:117608): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.163823][T29253] audit: backlog limit exceeded [ 790.188656][ T36] audit: type=1400 audit(2000000147.268:117609): avc: denied { setattr } for pid=29253 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.198442][T29253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.748551][ T3119] bridge_slave_0: left allmulticast mode [ 791.754222][ T3119] bridge_slave_0: left promiscuous mode [ 791.759906][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.855621][ T3119] tipc: Disabling bearer [ 791.860974][ T3119] tipc: Left network mode [ 791.866764][ T3119] veth0_vlan: left promiscuous mode [ 792.775601][T31930] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.782687][T31930] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.839889][T31930] bridge_slave_0: entered allmulticast mode [ 792.861136][T31930] bridge_slave_0: entered promiscuous mode [ 792.901028][T31930] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.912209][T31930] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.919343][T31930] bridge_slave_1: entered allmulticast mode [ 792.938950][T31930] bridge_slave_1: entered promiscuous mode [ 792.991440][T31957] rust_binder: Write failure EFAULT in pid:14 [ 793.096662][T31962] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 793.114873][T31962] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 793.124663][T31962] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 793.143417][T31962] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 793.236246][T31930] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.243342][T31930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.250703][T31930] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.257784][T31930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.298127][ T3119] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.308628][ T3119] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.380284][T18655] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.387398][T18655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.409529][T18655] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.416623][T18655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.547141][T31930] veth0_vlan: entered promiscuous mode [ 793.588497][T31930] veth1_macvtap: entered promiscuous mode [ 793.649922][ T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 793.754466][T31990] tipc: Enabling of bearer rejected, failed to enable media [ 793.832568][T31996] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 793.860194][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 793.888878][ T9] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 793.899277][ T9] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 793.916403][ T9] usb 9-1: Product: syz [ 793.920711][ T9] usb 9-1: Manufacturer: syz [ 793.927173][ T9] usb 9-1: SerialNumber: syz [ 793.941872][ T9] usb 9-1: config 0 descriptor?? [ 794.093370][T32014] netlink: 276 bytes leftover after parsing attributes in process `syz.0.10188'. [ 794.373803][T32028] binder: Bad value for 'max' [ 794.469661][T32031] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 794.488449][T32031] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 794.505099][T32031] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 794.513220][T32031] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 794.538028][T32031] rust_binder: Write failure EFAULT in pid:27 [ 794.652173][T32035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 794.825109][T32039] binder: Unknown parameter 'rW' [ 794.863164][T32039] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 4248, size: 4294967046) [ 794.863187][T32039] rust_binder: Error while translating object. [ 794.879215][T32039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 794.885576][T32039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 795.189593][T32057] incfs: Options parsing error. -22 [ 795.208325][T32057] incfs: mount failed -22 [ 795.392381][T32070] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 795.392408][T32070] rust_binder: Error while translating object. [ 795.414776][T32070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 795.421066][T32070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 795.446803][ T36] kauditd_printk_skb: 1638 callbacks suppressed [ 795.446825][ T36] audit: type=1400 audit(2000000152.319:119246): avc: denied { mounton } for pid=32074 comm="syz.7.10207" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 795.551004][T32078] rust_binder: Write failure EFAULT in pid:50 [ 795.551451][ T36] audit: type=1400 audit(2000000152.319:119247): avc: denied { mount } for pid=32074 comm="syz.7.10207" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 795.610224][ T36] audit: type=1400 audit(2000000152.319:119248): avc: denied { create } for pid=32074 comm="syz.7.10207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 795.664600][ T992] hid (null): unknown global tag 0xd [ 795.669991][ T992] hid (null): invalid report_size 1489 [ 795.679878][ T36] audit: type=1400 audit(2000000152.319:119249): avc: denied { getopt } for pid=32074 comm="syz.7.10207" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 795.683057][ T992] hid (null): unknown global tag 0xe [ 795.734782][ T36] audit: type=1400 audit(2000000152.338:119250): avc: denied { execmem } for pid=32074 comm="syz.7.10207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 795.746572][ T992] hid-generic FFFF:065B:0005.002D: unknown main item tag 0xd [ 795.771840][ T992] hid-generic FFFF:065B:0005.002D: ignoring exceeding usage max [ 795.783171][ T36] audit: type=1400 audit(2000000152.338:119251): avc: denied { create } for pid=32074 comm="syz.7.10207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 795.783532][ T992] hid-generic FFFF:065B:0005.002D: unknown global tag 0xd [ 795.812651][ T992] hid-generic FFFF:065B:0005.002D: item 0 0 1 13 parsing failed [ 795.821811][ T992] hid-generic FFFF:065B:0005.002D: probe with driver hid-generic failed with error -22 [ 795.823413][ T36] audit: type=1400 audit(2000000152.338:119252): avc: denied { ioctl } for pid=32074 comm="syz.7.10207" path="socket:[135977]" dev="sockfs" ino=135977 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 795.875416][ T36] audit: type=1400 audit(2000000152.338:119253): avc: denied { sys_module } for pid=32074 comm="syz.7.10207" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 795.898018][ T36] audit: type=1400 audit(2000000152.375:119254): avc: denied { read write } for pid=31856 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.958889][ T36] audit: type=1400 audit(2000000152.375:119255): avc: denied { read write open } for pid=31856 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.965682][T32095] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 795.990980][T32095] rust_binder: Error while translating object. [ 796.000399][T32095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 796.006742][T32095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 796.451804][ T9] usb 9-1: USB disconnect, device number 23 [ 796.602642][T32126] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10225'. [ 796.667130][T31929] udevd[31929]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 797.259518][T32151] rust_binder: Write failure EFAULT in pid:237 [ 797.307484][T32155] 9pnet_fd: Insufficient options for proto=fd [ 797.540996][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 797.663043][T32186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10245'. [ 797.690697][ T9] usb 8-1: device descriptor read/64, error -71 [ 797.804316][T32197] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10248'. [ 797.839595][T32199] fuse: Unknown parameter 'deCaul' [ 797.925727][T32205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=32205 comm=syz.0.10251 [ 797.941651][T32205] exFAT-fs (rnullb0): invalid boot record signature [ 797.949364][T32205] exFAT-fs (rnullb0): failed to read boot sector [ 797.955793][T32205] exFAT-fs (rnullb0): failed to recognize exfat type [ 797.958046][ T9] usb 8-1: device descriptor read/64, error -71 [ 798.074407][T32209] rust_binder: 32208 RLIMIT_NICE not set [ 798.075250][T32208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 798.081053][T32208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 798.225203][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 798.385590][ T9] usb 8-1: device descriptor read/64, error -71 [ 798.652771][ T9] usb 8-1: device descriptor read/64, error -71 [ 798.770678][ T9] usb usb8-port1: attempt power cycle [ 798.957614][T32219] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 799.133839][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 799.168875][ T9] usb 8-1: device descriptor read/8, error -71 [ 799.198605][T32223] rust_binder: Write failure EINVAL in pid:243 [ 799.205694][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10256'. [ 799.225300][T32223] netlink: 52 bytes leftover after parsing attributes in process `syz.8.10256'. [ 799.235320][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10256'. [ 799.244502][T32223] tipc: MTU too low for tipc bearer [ 799.321699][ T9] usb 8-1: device descriptor read/8, error -71 [ 799.604173][ T9] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 799.640059][ T9] usb 8-1: device descriptor read/8, error -71 [ 799.777877][ T9] usb 8-1: device descriptor read/8, error -71 [ 799.893336][ T9] usb usb8-port1: unable to enumerate USB device [ 800.434888][ T65] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 800.448949][ T65] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 800.625470][T32324] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 800.801546][ T36] kauditd_printk_skb: 776 callbacks suppressed [ 800.801565][ T36] audit: type=1400 audit(2000000157.333:120032): avc: denied { read } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 800.851365][ T36] audit: type=1400 audit(2000000157.370:120033): avc: denied { create } for pid=32332 comm="syz.9.10288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 800.885022][ T36] audit: type=1400 audit(2000000157.380:120034): avc: denied { map } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 800.923635][ T36] audit: type=1400 audit(2000000157.380:120035): avc: denied { read } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 800.947995][ T36] audit: type=1400 audit(2000000157.399:120036): avc: denied { map } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 800.972199][ T36] audit: type=1400 audit(2000000157.399:120037): avc: denied { read } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 800.997260][ T36] audit: type=1400 audit(2000000157.399:120038): avc: denied { map } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 801.043147][ T36] audit: type=1400 audit(2000000157.399:120039): avc: denied { read } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 801.080135][ T36] audit: type=1400 audit(2000000157.399:120040): avc: denied { map } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 801.116798][ T36] audit: type=1400 audit(2000000157.399:120041): avc: denied { read } for pid=32323 comm="syz.8.10285" path="/dev/binderfs/binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 801.335947][ T560] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 801.477235][T32354] Invalid ELF header len 16 [ 801.509683][ T560] usb 9-1: config 195 has an invalid interface number: 1 but max is 0 [ 801.517981][ T560] usb 9-1: config 195 has no interface number 0 [ 801.524268][ T560] usb 9-1: config 195 interface 1 has no altsetting 0 [ 801.552793][ T560] usb 9-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 801.562015][ T560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.570052][ T560] usb 9-1: Product: syz [ 801.574300][ T560] usb 9-1: Manufacturer: syz [ 801.579218][ T560] usb 9-1: SerialNumber: syz [ 801.831643][T32340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.849276][T32340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.889489][ T560] snd-usb-audio 9-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 801.907719][T32359] netlink: 'syz.7.10296': attribute type 12 has an invalid length. [ 801.918932][ T560] usb 9-1: USB disconnect, device number 24 [ 801.933734][T31929] udevd[31929]: setting mode of /dev/bus/usb/009/024 to 020664 failed: No such file or directory [ 801.949754][T31929] udevd[31929]: setting owner of /dev/bus/usb/009/024 to uid=0, gid=0 failed: No such file or directory [ 802.023117][T31929] udevd[31929]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:195.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 802.154560][ T45] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 802.185908][ T45] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 802.255287][ T560] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 802.431344][ T560] usb 9-1: config 195 has an invalid interface number: 1 but max is 0 [ 802.442473][ T560] usb 9-1: config 195 has no interface number 0 [ 802.453571][ T560] usb 9-1: config 195 interface 1 has no altsetting 0 [ 802.463770][ T560] usb 9-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 802.473001][ T560] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.483958][ T560] usb 9-1: Product: syz [ 802.488157][ T560] usb 9-1: Manufacturer: syz [ 802.492870][ T560] usb 9-1: SerialNumber: syz [ 802.737946][ T560] snd-usb-audio 9-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 802.754727][ T560] usb 9-1: USB disconnect, device number 25 [ 802.792700][T31929] udevd[31929]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:195.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 803.213946][T32383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10303'. [ 803.318555][T32388] netlink: 'syz.8.10306': attribute type 3 has an invalid length. [ 803.326706][T32388] netlink: 944 bytes leftover after parsing attributes in process `syz.8.10306'. [ 803.475640][T32400] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 803.517815][T32402] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 803.585394][ T65] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 803.609395][ T65] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 803.659341][T32408] SELinux: policydb string length 58 does not match expected length 8 [ 803.668884][T32408] SELinux: failed to load policy [ 803.921843][T32421] netlink: 'syz.9.10315': attribute type 1 has an invalid length. [ 803.931794][T32421] netlink: 416 bytes leftover after parsing attributes in process `syz.9.10315'. [ 804.006063][T32423] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 804.606104][T32437] rust_binder: Error while translating object. [ 804.606139][T32437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 804.613294][T32436] rust_binder: Error while translating object. [ 804.623850][T32437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 804.631314][T32436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 804.649040][T32436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 804.670016][T32439] binder: Bad value for 'stats' [ 804.869070][T32450] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10325'. [ 805.056576][T32458] overlayfs: failed to clone upperpath [ 805.195538][T32470] netlink: 'syz.7.10333': attribute type 27 has an invalid length. [ 805.203938][T32470] lo: entered promiscuous mode [ 805.208952][T32470] lo: entered allmulticast mode [ 805.217089][T32470] tunl0: entered promiscuous mode [ 805.223099][T32470] tunl0: entered allmulticast mode [ 805.229504][T32470] gre0: entered promiscuous mode [ 805.234537][T32470] gre0: entered allmulticast mode [ 805.240885][T32470] gretap0: entered promiscuous mode [ 805.246138][T32470] gretap0: entered allmulticast mode [ 805.252308][T32470] erspan0: entered promiscuous mode [ 805.257551][T32470] erspan0: entered allmulticast mode [ 805.263601][T32470] ip_vti0: entered promiscuous mode [ 805.268831][T32470] ip_vti0: entered allmulticast mode [ 805.274510][T32470] ip6_vti0: entered promiscuous mode [ 805.279840][T32470] ip6_vti0: entered allmulticast mode [ 805.286414][T32470] sit0: entered promiscuous mode [ 805.291563][T32470] sit0: entered allmulticast mode [ 805.296862][T32470] ip6tnl0: entered promiscuous mode [ 805.302127][T32470] ip6tnl0: entered allmulticast mode [ 805.307897][T32470] ip6gre0: entered promiscuous mode [ 805.314310][T32470] ip6gre0: entered allmulticast mode [ 805.319863][T32470] syz_tun: entered promiscuous mode [ 805.325119][T32470] syz_tun: entered allmulticast mode [ 805.330943][T32470] ip6gretap0: entered promiscuous mode [ 805.336454][T32470] ip6gretap0: entered allmulticast mode [ 805.342493][T32470] bridge0: entered promiscuous mode [ 805.347785][ T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 805.355424][T32470] bridge0: entered allmulticast mode [ 805.361695][T32470] vcan0: entered promiscuous mode [ 805.366976][T32470] vcan0: entered allmulticast mode [ 805.372302][T32470] dummy0: entered promiscuous mode [ 805.377497][T32470] dummy0: entered allmulticast mode [ 805.383271][T32470] veth0: entered promiscuous mode [ 805.389323][T32470] veth0: entered allmulticast mode [ 805.394968][T32470] veth1: entered promiscuous mode [ 805.400050][T32470] veth1: entered allmulticast mode [ 805.405849][T32470] wg0: entered promiscuous mode [ 805.410771][T32470] wg0: entered allmulticast mode [ 805.416051][T32470] wg1: entered promiscuous mode [ 805.421166][T32470] wg1: entered allmulticast mode [ 805.426409][T32470] wg2: entered promiscuous mode [ 805.431520][T32470] wg2: entered allmulticast mode [ 805.436791][T32470] veth0_to_bridge: entered promiscuous mode [ 805.442838][T32470] veth0_to_bridge: entered allmulticast mode [ 805.449746][T32470] veth1_to_bridge: entered promiscuous mode [ 805.455709][T32470] veth1_to_bridge: entered allmulticast mode [ 805.462809][T32470] veth0_to_bond: entered promiscuous mode [ 805.468549][T32470] veth0_to_bond: entered allmulticast mode [ 805.475330][T32470] bond_slave_0: entered promiscuous mode [ 805.481002][T32470] bond_slave_0: entered allmulticast mode [ 805.487876][T32470] veth1_to_bond: entered promiscuous mode [ 805.493680][T32470] veth1_to_bond: entered allmulticast mode [ 805.500416][T32470] bond_slave_1: entered promiscuous mode [ 805.506192][T32470] bond_slave_1: entered allmulticast mode [ 805.512397][T32470] veth0_to_team: entered promiscuous mode [ 805.519220][T32470] veth0_to_team: entered allmulticast mode [ 805.525577][T32470] team_slave_0: entered promiscuous mode [ 805.531365][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 805.536785][T32470] team_slave_0: entered allmulticast mode [ 805.543622][T32470] veth1_to_team: entered promiscuous mode [ 805.549497][T32470] veth1_to_team: entered allmulticast mode [ 805.556029][ T9] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 805.558823][T32470] team_slave_1: entered promiscuous mode [ 805.566146][ T9] usb 9-1: config 0 has no interface number 0 [ 805.570081][T32470] team_slave_1: entered allmulticast mode [ 805.581258][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 805.582629][T32470] veth0_to_batadv: entered promiscuous mode [ 805.592828][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.597162][T32470] veth0_to_batadv: entered allmulticast mode [ 805.605554][ T9] usb 9-1: Product: syz [ 805.611972][T32470] batadv_slave_0: entered promiscuous mode [ 805.616991][ T9] usb 9-1: Manufacturer: syz [ 805.620952][T32470] batadv_slave_0: entered allmulticast mode [ 805.626821][ T9] usb 9-1: SerialNumber: syz [ 805.632365][T32470] veth1_to_batadv: entered promiscuous mode [ 805.643446][T32470] veth1_to_batadv: entered allmulticast mode [ 805.643735][ T9] usb 9-1: config 0 descriptor?? [ 805.658850][ T9] smsc95xx v2.0.0 [ 805.666166][T32470] batadv_slave_1: entered promiscuous mode [ 805.672077][T32470] batadv_slave_1: entered allmulticast mode [ 805.682872][T32470] xfrm0: entered promiscuous mode [ 805.688200][T32470] xfrm0: entered allmulticast mode [ 805.693760][T32470] veth0_to_hsr: entered promiscuous mode [ 805.699901][T32470] veth0_to_hsr: entered allmulticast mode [ 805.706311][T32470] hsr_slave_0: entered promiscuous mode [ 805.712158][T32470] hsr_slave_0: entered allmulticast mode [ 805.718498][T32470] veth1_to_hsr: entered promiscuous mode [ 805.724238][T32470] veth1_to_hsr: entered allmulticast mode [ 805.731730][T32470] hsr_slave_1: entered promiscuous mode [ 805.737311][T32470] hsr_slave_1: entered allmulticast mode [ 805.743907][T32470] veth1_virt_wifi: entered promiscuous mode [ 805.749840][T32470] veth1_virt_wifi: entered allmulticast mode [ 805.756687][T32470] veth0_virt_wifi: entered promiscuous mode [ 805.762887][T32470] veth0_virt_wifi: entered allmulticast mode [ 805.769540][T32470] veth1_vlan: entered promiscuous mode [ 805.775288][T32470] veth1_vlan: entered allmulticast mode [ 805.781465][T32470] veth0_vlan: entered allmulticast mode [ 805.788339][T32470] vlan0: entered promiscuous mode [ 805.793478][T32470] vlan0: entered allmulticast mode [ 805.799501][T32470] vlan1: entered promiscuous mode [ 805.804882][T32470] vlan1: entered allmulticast mode [ 805.810554][T32470] veth1_macvtap: entered allmulticast mode [ 805.817469][T32470] veth0_macvtap: entered promiscuous mode [ 805.823229][T32470] veth0_macvtap: entered allmulticast mode [ 805.830012][T32470] macsec0: entered promiscuous mode [ 805.835306][T32470] macsec0: entered allmulticast mode [ 805.841524][T32470] syzkaller1: entered promiscuous mode [ 805.847037][T32470] syzkaller1: entered allmulticast mode [ 805.853417][T32470] syzkaller0: entered promiscuous mode [ 805.859252][T32470] syzkaller0: entered allmulticast mode [ 806.081231][ T3113] bridge_slave_1: left allmulticast mode [ 806.087125][ T3113] bridge_slave_1: left promiscuous mode [ 806.092893][ T3113] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.100477][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 806.103969][ T3113] bridge_slave_0: left allmulticast mode [ 806.122698][ T3113] bridge_slave_0: left promiscuous mode [ 806.123740][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 806.128415][ T3113] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.157727][ T36] kauditd_printk_skb: 664 callbacks suppressed [ 806.157748][ T36] audit: type=1400 audit(2000000162.338:120706): avc: denied { ioctl } for pid=32459 comm="syz.8.10330" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 806.204830][ T36] audit: type=1400 audit(2000000162.385:120707): avc: denied { read write } for pid=31856 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.231746][ T36] audit: type=1400 audit(2000000162.385:120708): avc: denied { read write open } for pid=31856 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.265052][ T36] audit: type=1400 audit(2000000162.385:120709): avc: denied { ioctl } for pid=31856 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.317489][ T36] audit: type=1400 audit(2000000162.469:120710): avc: denied { read write } for pid=32484 comm="syz.7.10337" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 806.360755][ T36] audit: type=1400 audit(2000000162.469:120711): avc: denied { read open } for pid=32484 comm="syz.7.10337" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 806.397911][ T3113] tipc: Left network mode [ 806.407471][ T36] audit: type=1400 audit(2000000162.478:120712): avc: denied { read write } for pid=32484 comm="syz.7.10337" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.433320][ T3113] veth1_macvtap: left promiscuous mode [ 806.433349][ T36] audit: type=1400 audit(2000000162.478:120713): avc: denied { read write open } for pid=32484 comm="syz.7.10337" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.447369][ T3113] veth0_vlan: left promiscuous mode [ 806.465666][ T36] audit: type=1400 audit(2000000162.478:120714): avc: denied { ioctl } for pid=32484 comm="syz.7.10337" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.495901][ T36] audit: type=1400 audit(2000000162.506:120715): avc: denied { read write } for pid=32484 comm="syz.7.10337" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 806.560428][T32490] netlink: 3 bytes leftover after parsing attributes in process `syz.9.10338'. [ 806.570937][T32490] netlink: 3 bytes leftover after parsing attributes in process `syz.9.10338'. [ 806.616860][T32490] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 806.980254][ T45] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 807.140638][ T45] usb 8-1: Using ep0 maxpacket: 16 [ 807.152511][ T45] usb 8-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.175824][ T45] usb 8-1: config 1 interface 0 has no altsetting 0 [ 807.201025][ T45] usb 8-1: New USB device found, idVendor=047f, idProduct=c057, bcdDevice= 0.40 [ 807.220776][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.229729][ T45] usb 8-1: Product: ᐇ [ 807.233986][ T45] usb 8-1: Manufacturer: 箜粳䟱ﰇ㱎覣۩ﶣ㲈㍨﮳຅ᶈ娗묈卡렧ꆕ䘫Ḇੱᖟ캊ⶩ籷 [ 807.246503][ T45] usb 8-1: SerialNumber: 么䮦븊뺄៿ [ 807.494106][ T45] usbhid 8-1:1.0: can't add hid device: -71 [ 807.510344][ T45] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 807.530223][ T45] usb 8-1: USB disconnect, device number 30 [ 808.140673][T32522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 808.382011][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 808.414136][ T9] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 808.476302][ T9] usb 9-1: USB disconnect, device number 26 [ 809.235843][ T9] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 809.246687][ T45] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 809.399387][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 809.407463][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 809.408441][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 809.416320][ T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.422925][ T9] usb 8-1: config 7 has an invalid interface number: 177 but max is 0 [ 809.437382][ T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.439557][ T9] usb 8-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config [ 809.449390][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.466308][ T45] usb 9-1: Product: syz [ 809.466490][ T9] usb 8-1: config 7 has no interface number 0 [ 809.470492][ T45] usb 9-1: Manufacturer: syz [ 809.476633][ T9] usb 8-1: config 7 interface 177 has no altsetting 0 [ 809.482987][ T45] usb 9-1: SerialNumber: syz [ 809.492612][ T9] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=6a.2a [ 809.492643][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.492667][ T9] usb 8-1: Product: syz [ 809.492683][ T9] usb 8-1: Manufacturer: syz [ 809.492700][ T9] usb 8-1: SerialNumber: syz [ 809.538228][ T45] cdc_ncm 9-1:1.0: skipping garbage [ 809.543494][ T45] cdc_ncm 9-1:1.0: NCM or ECM functional descriptors missing [ 809.553009][ T45] cdc_ncm 9-1:1.0: bind() failure [ 809.747834][ T9] hub 8-1:7.177: bad descriptor, ignoring hub [ 809.754307][ T9] hub 8-1:7.177: probe with driver hub failed with error -5 [ 809.786732][ T9] usb 8-1: USB disconnect, device number 31 [ 809.796620][ T519] usb 9-1: USB disconnect, device number 27 [ 810.475213][T32641] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 810.483559][T32641] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 160, size: 97) [ 810.483584][T32641] rust_binder: Error while translating object. [ 810.494310][T32641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 810.500904][T32641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 810.501742][T32640] netlink: 'syz.9.10384': attribute type 16 has an invalid length. [ 810.529353][T32640] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.10384'. [ 810.598340][ T560] rust_binder: 32633: removing orphan mapping 0:1048 [ 810.613052][T32648] 9pnet_fd: Insufficient options for proto=fd [ 810.743713][T32653] rust_binder: Error while translating object. [ 810.743752][T32653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 810.749936][T32653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 811.032455][T32668] netlink: 'syz.8.10392': attribute type 40 has an invalid length. [ 811.392971][T32684] input: syz1 as /devices/virtual/input/input88 [ 811.518143][ T36] kauditd_printk_skb: 791 callbacks suppressed [ 811.518162][ T36] audit: type=1400 audit(2000000167.354:121507): avc: denied { write } for pid=32687 comm="syz.8.10399" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 811.549278][ T36] audit: type=1400 audit(2000000167.354:121508): avc: denied { write open } for pid=32687 comm="syz.8.10399" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 811.575087][ T36] audit: type=1400 audit(2000000167.364:121509): avc: denied { create } for pid=32687 comm="syz.8.10399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 811.609035][ T36] audit: type=1400 audit(2000000167.364:121510): avc: denied { read } for pid=32687 comm="syz.8.10399" dev="nsfs" ino=4026532373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 811.636041][ T36] audit: type=1400 audit(2000000167.364:121511): avc: denied { read open } for pid=32687 comm="syz.8.10399" path="net:[4026532373]" dev="nsfs" ino=4026532373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 811.675837][T32692] audit: audit_backlog=65 > audit_backlog_limit=64 [ 811.682558][ T36] audit: type=1400 audit(2000000167.364:121512): avc: denied { create } for pid=32687 comm="syz.8.10399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.684499][T32691] audit: audit_backlog=65 > audit_backlog_limit=64 [ 811.704996][ T36] audit: type=1400 audit(2000000167.364:121513): avc: denied { write } for pid=32687 comm="syz.8.10399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.723362][T30628] audit: audit_backlog=65 > audit_backlog_limit=64 [ 811.802748][T32694] tipc: Enabling of bearer rejected, failed to enable media [ 812.072519][T32711] block device autoloading is deprecated and will be removed. [ 812.270451][T32723] SELinux: Context system_u:object_r:modem_device_t:s0 is not valid (left unmapped). [ 812.383925][T32731] binder: Bad value for 'max' [ 812.531857][T32740] netlink: 'syz.8.10414': attribute type 3 has an invalid length. [ 812.560488][T32740] netlink: 944 bytes leftover after parsing attributes in process `syz.8.10414'. [ 812.571156][T15130] Bluetooth: hci0: command 0x1003 tx timeout [ 812.577263][ T2118] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 812.807246][T32750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 812.914642][T32762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 813.580513][ T45] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 813.601492][ T45] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.978941][ T360] tipc: Enabling of bearer rejected, failed to enable media [ 814.283546][ T560] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 814.292183][ T560] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 815.478632][ T453] fuse: Unknown parameter 'appraise_type' [ 816.625875][ T476] 9p: Unknown access argument 00000000000000000000{: -22 [ 816.669600][ T480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 816.847203][ T492] rust_binder: Error while translating object. [ 816.847242][ T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 816.856956][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:411 [ 816.870792][ T519] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 816.889065][ T36] kauditd_printk_skb: 862 callbacks suppressed [ 816.889084][ T36] audit: type=1400 audit(2000000172.368:122277): avc: denied { read write } for pid=30628 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.920826][ T36] audit: type=1400 audit(2000000172.368:122278): avc: denied { read write open } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.921758][ T494] netlink: 'syz.9.10484': attribute type 10 has an invalid length. [ 816.948967][ T36] audit: type=1400 audit(2000000172.368:122279): avc: denied { ioctl } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.982661][ T36] audit: type=1400 audit(2000000172.406:122280): avc: denied { ioctl } for pid=475 comm="syz.7.10479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 817.009308][ T36] audit: type=1400 audit(2000000172.434:122281): avc: denied { ioctl } for pid=475 comm="syz.7.10479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 817.038441][ T36] audit: type=1400 audit(2000000172.434:122282): avc: denied { ioctl } for pid=475 comm="syz.7.10479" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 817.064472][ T36] audit: type=1400 audit(2000000172.462:122283): avc: denied { read write } for pid=496 comm="syz.8.10485" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 817.066204][ T500] 9pnet_fd: Insufficient options for proto=fd [ 817.096509][ T36] audit: type=1400 audit(2000000172.462:122284): avc: denied { read open } for pid=496 comm="syz.8.10485" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 817.127020][ T36] audit: type=1400 audit(2000000172.462:122285): avc: denied { create } for pid=493 comm="syz.9.10484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 817.148521][ T36] audit: type=1400 audit(2000000172.462:122286): avc: denied { setopt } for pid=493 comm="syz.9.10484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 817.168836][ T519] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.180280][ T519] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 244, changing to 11 [ 817.198362][ T519] usb 8-1: config 0 interface 0 has no altsetting 0 [ 817.205768][ T519] usb 8-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 817.215565][ T519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.231850][ T519] usb 8-1: config 0 descriptor?? [ 817.329596][ T509] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 817.352483][ T509] batadv_slave_1: entered promiscuous mode [ 817.451153][ T509] batadv_slave_1: left promiscuous mode [ 817.477753][ T520] netlink: 76 bytes leftover after parsing attributes in process `syz.9.10492'. [ 817.691522][ T519] waltop 0003:172F:0034.0033: hidraw0: USB HID v4.f9 Device [HID 172f:0034] on usb-dummy_hcd.7-1/input0 [ 817.906205][ T31] usb 8-1: USB disconnect, device number 32 [ 817.924212][ T45] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 817.956692][ T542] fido_id[542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 818.108708][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 818.121213][ T45] usb 9-1: config 4 has an invalid interface number: 51 but max is 0 [ 818.134596][ T45] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 818.145016][ T45] usb 9-1: config 4 has no interface number 0 [ 818.151394][ T45] usb 9-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 818.164497][ T45] usb 9-1: config 4 interface 51 has no altsetting 0 [ 818.175871][ T45] usb 9-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 818.185383][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.193513][ T45] usb 9-1: Product: syz [ 818.197741][ T45] usb 9-1: Manufacturer: syz [ 818.202580][ T45] usb 9-1: SerialNumber: syz [ 818.211417][ T45] cdc_eem 9-1:4.51: probe with driver cdc_eem failed with error -22 [ 818.442422][ T534] rust_binder: Error while translating object. [ 818.442494][ T534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 818.448786][ T534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 818.459974][ T45] usb 9-1: USB disconnect, device number 28 [ 819.148508][ T616] rust_binder: got new transaction with bad transaction stack [ 819.148537][ T616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 820.597908][ T658] overlayfs: failed to clone lowerpath [ 820.735357][ T662] overlayfs: failed to clone upperpath [ 820.804919][ T665] fuse: Unknown parameter 'f' [ 821.412079][ T687] rust_binder: Write failure EINVAL in pid:446 [ 821.582635][ T696] rust_binder: Error in use_page_slow: ESRCH [ 821.582669][ T696] rust_binder: use_range failure ESRCH [ 821.601812][ T696] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 821.623591][ T696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 821.632699][ T696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:223 [ 822.529939][ T36] kauditd_printk_skb: 612 callbacks suppressed [ 822.529968][ T36] audit: type=1400 audit(2000000177.654:122899): avc: denied { create } for pid=655 comm="syz.7.10533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 822.580170][ T36] audit: type=1400 audit(2000000177.700:122900): avc: denied { setopt } for pid=655 comm="syz.7.10533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 822.951398][ T36] audit: type=1400 audit(2000000178.047:122901): avc: denied { read write } for pid=30628 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.032719][ T36] audit: type=1400 audit(2000000178.075:122902): avc: denied { read write open } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.080430][ T36] audit: type=1400 audit(2000000178.075:122903): avc: denied { ioctl } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.138676][ T36] audit: type=1400 audit(2000000178.112:122904): avc: denied { read write } for pid=724 comm="syz.8.10555" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 823.198740][ T36] audit: type=1400 audit(2000000178.112:122905): avc: denied { read write open } for pid=724 comm="syz.8.10555" path="/dev/binderfs/binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 823.259000][ T36] audit: type=1400 audit(2000000178.121:122906): avc: denied { relabelfrom } for pid=724 comm="syz.8.10555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 823.300620][ T36] audit: type=1400 audit(2000000178.121:122907): avc: denied { relabelto } for pid=724 comm="syz.8.10555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 823.329242][ T735] /dev/rnullb0: Can't open blockdev [ 823.342788][ T36] audit: type=1400 audit(2000000178.196:122908): avc: denied { create } for pid=728 comm="syz.9.10556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 823.541345][ T743] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 4096) [ 823.541376][ T743] rust_binder: Error while translating object. [ 823.552151][ T743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 823.558351][ T743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476 [ 823.744908][ T750] x_tables: duplicate entry at hook 1 [ 825.195281][ T781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 825.197947][ T781] rust_binder: Error while translating object. [ 825.204417][ T781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 825.216784][ T775] tipc: Started in network mode [ 825.221473][ T781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:497 [ 825.226524][ T775] tipc: Node identity fe22fdb261d4, cluster identity 4711 [ 825.260230][ T775] tipc: Enabled bearer , priority 0 [ 826.130868][ T825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 826.139866][ T825] rust_binder: Error in use_page_slow: ESRCH [ 826.139893][ T825] rust_binder: use_range failure ESRCH [ 826.147421][ T825] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 826.158075][ T825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 826.166110][ T825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:245 [ 826.457362][ T31] tipc: Node number set to 2683764146 [ 826.634352][ T45] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 826.810111][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 826.819485][ T45] usb 9-1: too many configurations: 97, using maximum allowed: 8 [ 826.838935][ T3113] Bluetooth: hci0: Frame reassembly failed (-84) [ 826.853906][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 826.878884][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 826.896342][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 826.907245][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 826.928561][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 826.939305][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 826.951280][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 826.961927][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 826.970953][ T560] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 826.985733][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 826.997953][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 827.010652][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 827.020938][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 827.032453][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 827.053429][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 827.077577][ T45] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 827.088179][ T45] usb 9-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 827.107585][ T832] rust_binder: Write failure EFAULT in pid:514 [ 827.117558][ T45] usb 9-1: string descriptor 0 read error: -71 [ 827.141875][ T45] usb 9-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 827.151025][ T45] usb 9-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 827.159634][ T560] usb 8-1: Using ep0 maxpacket: 16 [ 827.167950][ T45] usb 9-1: rejected 8 configurations due to insufficient available bus power [ 827.176906][ T45] usb 9-1: no configuration chosen from 8 choices [ 827.188556][ T560] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 827.198261][ T45] usb 9-1: USB disconnect, device number 29 [ 827.205583][ T560] usb 8-1: config 0 has no interface number 0 [ 827.211877][ T560] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 827.225769][ T560] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 827.239982][ T560] usb 8-1: config 0 interface 255 has no altsetting 0 [ 827.250811][ T560] usb 8-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 827.260451][ T560] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.268466][ T560] usb 8-1: Product: syz [ 827.272675][ T560] usb 8-1: Manufacturer: syz [ 827.277453][ T560] usb 8-1: SerialNumber: syz [ 827.284219][ T560] usb 8-1: config 0 descriptor?? [ 827.542363][ T560] hub 8-1:0.255: bad descriptor, ignoring hub [ 827.554364][ T560] hub 8-1:0.255: probe with driver hub failed with error -5 [ 827.580283][ T560] usb 8-1: USB disconnect, device number 33 [ 827.611178][T31929] udevd[31929]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.255/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 827.908508][ T36] kauditd_printk_skb: 608 callbacks suppressed [ 827.908528][ T36] audit: type=1400 audit(2000000182.677:123517): avc: denied { read write } for pid=30628 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 827.954029][ T36] audit: type=1400 audit(2000000182.677:123518): avc: denied { read write open } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 827.987129][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10601'. [ 827.999537][ T36] audit: type=1400 audit(2000000182.677:123519): avc: denied { ioctl } for pid=30628 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.036055][ T36] audit: type=1400 audit(2000000182.714:123520): avc: denied { read } for pid=859 comm="syz.8.10601" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 828.061840][ T36] audit: type=1400 audit(2000000182.714:123521): avc: denied { read open } for pid=859 comm="syz.8.10601" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 828.135850][ T36] audit: type=1400 audit(2000000182.714:123522): avc: denied { ioctl } for pid=859 comm="syz.8.10601" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 828.183197][ T36] audit: type=1400 audit(2000000182.714:123523): avc: denied { read write } for pid=859 comm="syz.8.10601" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 828.242570][ T36] audit: type=1400 audit(2000000182.714:123524): avc: denied { read open } for pid=859 comm="syz.8.10601" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 828.322386][ T36] audit: type=1400 audit(2000000182.714:123525): avc: denied { read write } for pid=859 comm="syz.8.10601" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.363244][ T881] netlink: 'syz.8.10607': attribute type 3 has an invalid length. [ 828.371629][ T36] audit: type=1400 audit(2000000182.714:123526): avc: denied { read write open } for pid=859 comm="syz.8.10601" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.398433][ T881] netlink: 944 bytes leftover after parsing attributes in process `syz.8.10607'. [ 828.411634][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10607'. [ 828.426778][ T881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 828.426852][ T881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:527 [ 828.555189][ T884] binder: Binderfs stats mode cannot be changed during a remount [ 828.694134][ T886] batadv_slave_1: entered promiscuous mode [ 828.969503][ T519] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 828.990878][T15130] Bluetooth: hci0: command 0x1003 tx timeout [ 828.996946][ T2118] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 829.172610][ T519] usb 9-1: Using ep0 maxpacket: 16 [ 829.185112][ T519] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.206731][ T908] input: syz0 as /devices/virtual/input/input89 [ 829.217668][ T519] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.243074][ T519] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 829.291177][ T519] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 829.304923][ T519] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.329636][ T519] usb 9-1: config 0 descriptor?? [ 829.788068][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.797754][ T519] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 829.810146][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.818091][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.834366][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.842372][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.849797][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.857133][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.864398][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.872359][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.879669][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.886913][ T519] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 829.894248][ T519] microsoft 0003:045E:07DA.0034: unsupported Resolution Multiplier 0 [ 829.905864][ T519] ================================================================== [ 829.913973][ T519] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 829.921660][ T519] Read of size 2816 at addr ffff8881152152c1 by task kworker/0:3/519 [ 829.929752][ T519] [ 829.932085][ T519] CPU: 0 UID: 0 PID: 519 Comm: kworker/0:3 Not tainted 6.12.38-syzkaller-gd6ad6516b816 #0 c3d5dfea3b27501c55366ca85841e234aef3b30d [ 829.932128][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.932144][ T519] Workqueue: usb_hub_wq hub_event [ 829.932173][ T519] Call Trace: [ 829.932180][ T519] [ 829.932187][ T519] __dump_stack+0x21/0x30 [ 829.932210][ T519] dump_stack_lvl+0x10c/0x190 [ 829.932230][ T519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 829.932250][ T519] ? __cfi__printk+0x10/0x10 [ 829.932276][ T519] print_address_description+0x71/0x220 [ 829.932293][ T519] print_report+0x4a/0x70 [ 829.932308][ T519] kasan_report+0x163/0x1a0 [ 829.932324][ T519] ? mon_bin_event+0x12c1/0x23e0 [ 829.932346][ T519] ? mon_bin_event+0x12c1/0x23e0 [ 829.932368][ T519] kasan_check_range+0x299/0x2a0 [ 829.932383][ T519] ? mon_bin_event+0x12c1/0x23e0 [ 829.932405][ T519] __asan_memcpy+0x31/0x80 [ 829.932426][ T519] mon_bin_event+0x12c1/0x23e0 [ 829.932450][ T519] ? mon_bin_complete+0x50/0x50 [ 829.932470][ T519] ? __kmalloc_noprof+0x1b1/0x450 [ 829.932499][ T519] ? __hid_request+0x1e5/0x410 [ 829.932531][ T519] ? hid_connect+0x49a/0x1a20 [ 829.932557][ T519] ? hid_hw_start+0xcb/0x160 [ 829.932578][ T519] ? ms_probe+0x194/0x460 [ 829.932599][ T519] ? __cfi_mon_bin_submit+0x10/0x10 [ 829.932621][ T519] mon_bin_submit+0x2b/0x40 [ 829.932642][ T519] mon_submit+0x1b9/0x230 [ 829.932661][ T519] usb_hcd_submit_urb+0x12d/0x1a20 [ 829.932678][ T519] ? bus_probe_device+0x18b/0x270 [ 829.932699][ T519] ? usb_probe_device+0x1d4/0x380 [ 829.932713][ T519] ? really_probe+0x2d6/0x890 [ 829.932728][ T519] ? __driver_probe_device+0x198/0x280 [ 829.932753][ T519] ? driver_probe_device+0x54/0x3f0 [ 829.932768][ T519] ? __device_attach_driver+0x2f1/0x4b0 [ 829.932785][ T519] usb_submit_urb+0x111b/0x1800 [ 829.932806][ T519] usb_start_wait_urb+0x11b/0x2f0 [ 829.932829][ T519] ? usb_api_blocking_completion+0xd0/0xd0 [ 829.932861][ T519] ? __kasan_kmalloc+0x96/0xb0 [ 829.932887][ T519] ? __kasan_check_write+0x18/0x20 [ 829.932908][ T519] ? usb_alloc_urb+0x9b/0x200 [ 829.932927][ T519] usb_control_msg+0x25a/0x490 [ 829.932949][ T519] usbhid_raw_request+0x457/0x590 [ 829.932971][ T519] __hid_request+0x1e5/0x410 [ 829.932994][ T519] hidinput_connect+0x241b/0x3340 [ 829.933014][ T519] hid_connect+0x49a/0x1a20 [ 829.933039][ T519] ? usbhid_start+0x1a67/0x2530 [ 829.933059][ T519] ? __cfi_hid_connect+0x10/0x10 [ 829.933084][ T519] hid_hw_start+0xcb/0x160 [ 829.933119][ T519] ms_probe+0x194/0x460 [ 829.933149][ T519] hid_device_probe+0x2c4/0x5d0 [ 829.933179][ T519] ? __cfi_hid_device_probe+0x10/0x10 [ 829.933204][ T519] really_probe+0x2d6/0x890 [ 829.933220][ T519] __driver_probe_device+0x198/0x280 [ 829.933256][ T519] driver_probe_device+0x54/0x3f0 [ 829.933279][ T519] ? __device_attach_driver+0x2db/0x4b0 [ 829.933297][ T519] __device_attach_driver+0x2f1/0x4b0 [ 829.933313][ T519] bus_for_each_drv+0x260/0x2f0 [ 829.933333][ T519] ? __cfi___device_attach_driver+0x10/0x10 [ 829.933349][ T519] ? __cfi_bus_for_each_drv+0x10/0x10 [ 829.933370][ T519] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 829.933392][ T519] __device_attach+0x2bd/0x3a0 [ 829.933416][ T519] ? device_attach+0x40/0x40 [ 829.933440][ T519] ? _raw_spin_lock+0x8c/0x120 [ 829.933458][ T519] ? __cfi__raw_spin_lock+0x10/0x10 [ 829.933478][ T519] device_initial_probe+0x1e/0x30 [ 829.933503][ T519] bus_probe_device+0x18b/0x270 [ 829.933524][ T519] device_add+0x80c/0xc00 [ 829.933549][ T519] hid_add_device+0x39b/0x560 [ 829.933575][ T519] usbhid_probe+0xde3/0x12b0 [ 829.933596][ T519] usb_probe_interface+0x696/0xc00 [ 829.933613][ T519] ? __cfi_usb_probe_interface+0x10/0x10 [ 829.933629][ T519] really_probe+0x2d6/0x890 [ 829.933644][ T519] __driver_probe_device+0x198/0x280 [ 829.933670][ T519] driver_probe_device+0x54/0x3f0 [ 829.933685][ T519] ? __device_attach_driver+0x2db/0x4b0 [ 829.933701][ T519] __device_attach_driver+0x2f1/0x4b0 [ 829.933717][ T519] bus_for_each_drv+0x260/0x2f0 [ 829.933737][ T519] ? __cfi___device_attach_driver+0x10/0x10 [ 829.933753][ T519] ? __cfi_bus_for_each_drv+0x10/0x10 [ 829.933774][ T519] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 829.933795][ T519] __device_attach+0x2bd/0x3a0 [ 829.933819][ T519] ? device_attach+0x40/0x40 [ 829.933843][ T519] ? _raw_spin_lock+0x8c/0x120 [ 829.933863][ T519] ? __cfi__raw_spin_lock+0x10/0x10 [ 829.933882][ T519] device_initial_probe+0x1e/0x30 [ 829.933907][ T519] bus_probe_device+0x18b/0x270 [ 829.933928][ T519] device_add+0x80c/0xc00 [ 829.933952][ T519] usb_set_configuration+0x1ad4/0x20b0 [ 829.933981][ T519] usb_generic_driver_probe+0x95/0x160 [ 829.934002][ T519] usb_probe_device+0x1d4/0x380 [ 829.934016][ T519] ? __cfi_usb_probe_device+0x10/0x10 [ 829.934031][ T519] really_probe+0x2d6/0x890 [ 829.934047][ T519] __driver_probe_device+0x198/0x280 [ 829.934073][ T519] driver_probe_device+0x54/0x3f0 [ 829.934088][ T519] ? __device_attach_driver+0x2db/0x4b0 [ 829.934110][ T519] __device_attach_driver+0x2f1/0x4b0 [ 829.934126][ T519] bus_for_each_drv+0x260/0x2f0 [ 829.934146][ T519] ? __cfi___device_attach_driver+0x10/0x10 [ 829.934162][ T519] ? __cfi_bus_for_each_drv+0x10/0x10 [ 829.934183][ T519] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 829.934204][ T519] __device_attach+0x2bd/0x3a0 [ 829.934230][ T519] ? device_attach+0x40/0x40 [ 829.934253][ T519] ? _raw_spin_lock+0x8c/0x120 [ 829.934272][ T519] ? __cfi__raw_spin_lock+0x10/0x10 [ 829.934292][ T519] device_initial_probe+0x1e/0x30 [ 829.934323][ T519] bus_probe_device+0x18b/0x270 [ 829.934349][ T519] device_add+0x80c/0xc00 [ 829.934374][ T519] usb_new_device+0x9ed/0x1590 [ 829.934407][ T519] ? __cfi_usb_new_device+0x10/0x10 [ 829.934440][ T519] hub_event+0x2c81/0x4270 [ 829.934473][ T519] ? __cfi_hub_event+0x10/0x10 [ 829.934497][ T519] ? __kasan_check_write+0x18/0x20 [ 829.934518][ T519] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 829.934541][ T519] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 829.934561][ T519] ? kick_pool+0xb9/0x550 [ 829.934577][ T519] process_scheduled_works+0x7d2/0x1020 [ 829.934604][ T519] worker_thread+0xc58/0x1250 [ 829.934630][ T519] kthread+0x2ca/0x370 [ 829.934644][ T519] ? __cfi_worker_thread+0x10/0x10 [ 829.934667][ T519] ? __cfi_kthread+0x10/0x10 [ 829.934682][ T519] ret_from_fork+0x67/0xa0 [ 829.934702][ T519] ? __cfi_kthread+0x10/0x10 [ 829.934716][ T519] ret_from_fork_asm+0x1a/0x30 [ 829.934740][ T519] [ 829.934747][ T519] [ 830.559919][ T519] Allocated by task 519: [ 830.564157][ T519] kasan_save_track+0x3e/0x80 [ 830.568850][ T519] kasan_save_alloc_info+0x40/0x50 [ 830.573981][ T519] __kasan_kmalloc+0x96/0xb0 [ 830.578580][ T519] __kmalloc_noprof+0x1b1/0x450 [ 830.583433][ T519] __hid_request+0xa9/0x410 [ 830.587947][ T519] hidinput_connect+0x241b/0x3340 [ 830.592982][ T519] hid_connect+0x49a/0x1a20 [ 830.597505][ T519] hid_hw_start+0xcb/0x160 [ 830.601936][ T519] ms_probe+0x194/0x460 [ 830.606097][ T519] hid_device_probe+0x2c4/0x5d0 [ 830.610981][ T519] really_probe+0x2d6/0x890 [ 830.615493][ T519] __driver_probe_device+0x198/0x280 [ 830.620789][ T519] driver_probe_device+0x54/0x3f0 [ 830.625830][ T519] __device_attach_driver+0x2f1/0x4b0 [ 830.631210][ T519] bus_for_each_drv+0x260/0x2f0 [ 830.636078][ T519] __device_attach+0x2bd/0x3a0 [ 830.640851][ T519] device_initial_probe+0x1e/0x30 [ 830.645886][ T519] bus_probe_device+0x18b/0x270 [ 830.650747][ T519] device_add+0x80c/0xc00 [ 830.655095][ T519] hid_add_device+0x39b/0x560 [ 830.659800][ T519] usbhid_probe+0xde3/0x12b0 [ 830.664446][ T519] usb_probe_interface+0x696/0xc00 [ 830.669558][ T519] really_probe+0x2d6/0x890 [ 830.674058][ T519] __driver_probe_device+0x198/0x280 [ 830.679361][ T519] driver_probe_device+0x54/0x3f0 [ 830.684381][ T519] __device_attach_driver+0x2f1/0x4b0 [ 830.689752][ T519] bus_for_each_drv+0x260/0x2f0 [ 830.694608][ T519] __device_attach+0x2bd/0x3a0 [ 830.699377][ T519] device_initial_probe+0x1e/0x30 [ 830.704408][ T519] bus_probe_device+0x18b/0x270 [ 830.709261][ T519] device_add+0x80c/0xc00 [ 830.713599][ T519] usb_set_configuration+0x1ad4/0x20b0 [ 830.719081][ T519] usb_generic_driver_probe+0x95/0x160 [ 830.724548][ T519] usb_probe_device+0x1d4/0x380 [ 830.729429][ T519] really_probe+0x2d6/0x890 [ 830.733935][ T519] __driver_probe_device+0x198/0x280 [ 830.739229][ T519] driver_probe_device+0x54/0x3f0 [ 830.744256][ T519] __device_attach_driver+0x2f1/0x4b0 [ 830.749624][ T519] bus_for_each_drv+0x260/0x2f0 [ 830.754481][ T519] __device_attach+0x2bd/0x3a0 [ 830.759250][ T519] device_initial_probe+0x1e/0x30 [ 830.764282][ T519] bus_probe_device+0x18b/0x270 [ 830.769135][ T519] device_add+0x80c/0xc00 [ 830.773470][ T519] usb_new_device+0x9ed/0x1590 [ 830.778236][ T519] hub_event+0x2c81/0x4270 [ 830.782658][ T519] process_scheduled_works+0x7d2/0x1020 [ 830.788208][ T519] worker_thread+0xc58/0x1250 [ 830.792892][ T519] kthread+0x2ca/0x370 [ 830.796980][ T519] ret_from_fork+0x67/0xa0 [ 830.801399][ T519] ret_from_fork_asm+0x1a/0x30 [ 830.806167][ T519] [ 830.808502][ T519] The buggy address belongs to the object at ffff8881152152c0 [ 830.808502][ T519] which belongs to the cache kmalloc-8 of size 8 [ 830.822256][ T519] The buggy address is located 1 bytes inside of [ 830.822256][ T519] allocated 7-byte region [ffff8881152152c0, ffff8881152152c7) [ 830.836059][ T519] [ 830.838393][ T519] The buggy address belongs to the physical page: [ 830.844801][ T519] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115215 [ 830.853658][ T519] flags: 0x4000000000000000(zone=1) [ 830.858881][ T519] page_type: f5(slab) [ 830.862896][ T519] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 830.871508][ T519] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 830.880114][ T519] page dumped because: kasan: bad access detected [ 830.886563][ T519] page_owner tracks the page as allocated [ 830.892306][ T519] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 121, tgid 121 (udevadm), ts 6867920324, free_ts 0 [ 830.910054][ T519] post_alloc_hook+0x3b9/0x3f0 [ 830.914856][ T519] prep_new_page+0x1c/0x120 [ 830.919402][ T519] get_page_from_freelist+0x46bb/0x4750 [ 830.922548][ T938] netlink: 'syz.9.10626': attribute type 4 has an invalid length. [ 830.924982][ T519] __alloc_pages_noprof+0x30d/0x6c0 [ 830.937988][ T519] alloc_slab_page+0x6b/0x1f0 [ 830.942811][ T519] allocate_slab+0x69/0x440 [ 830.947349][ T519] ___slab_alloc+0x59a/0x8b0 [ 830.951980][ T519] __kmalloc_noprof+0x243/0x450 [ 830.956867][ T519] kernfs_fop_write_iter+0x16f/0x4d0 [ 830.962184][ T519] vfs_write+0x694/0xe80 [ 830.966462][ T519] ksys_write+0x141/0x250 [ 830.970832][ T519] __x64_sys_write+0x7f/0x90 [ 830.975457][ T519] x64_sys_call+0x271c/0x2ee0 [ 830.980173][ T519] do_syscall_64+0x58/0xf0 [ 830.984624][ T519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 830.990555][ T519] page_owner free stack trace missing [ 830.995939][ T519] [ 830.998286][ T519] Memory state around the buggy address: [ 831.003938][ T519] ffff888115215180: 06 fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc [ 831.012028][ T519] ffff888115215200: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 831.020116][ T519] >ffff888115215280: fa fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc [ 831.028196][ T519] ^ [ 831.034370][ T519] ffff888115215300: fa fc fc fc 04 fc fc fc fa fc fc fc fa fc fc fc [ 831.042458][ T519] ffff888115215380: fa fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 831.050535][ T519] ================================================================== [ 831.058603][ T519] Disabling lock debugging due to kernel taint [ 831.075977][ T939] netlink: 'syz.9.10626': attribute type 4 has an invalid length. [ 831.106416][ T885] batadv_slave_1: left promiscuous mode [ 831.107065][ T519] microsoft 0003:045E:07DA.0034: No inputs registered, leaving [ 831.147879][ T519] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 831.161544][ T519] microsoft 0003:045E:07DA.0034: no inputs found [ 831.176461][ T519] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 831.190124][ T519] usb 9-1: USB disconnect, device number 30 [ 831.296192][ T943] fido_id[943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory