last executing test programs: 6m43.303615881s ago: executing program 32 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000340)="240000001a005f20f109dfc64d2609e00214f9df0700dd00007f000001fe000258dbef0f", 0x24) setuid(0xee01) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 6m35.146262947s ago: executing program 33 (id=158): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x1a402, 0x0) fchdir(r2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'ip6gretap0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) symlink(0x0, 0x0) r4 = fsopen(0x0, 0x0) unshare(0x40400) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x4a) fsmount(r4, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) shutdown(r6, 0x0) connect$unix(r6, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = accept(r7, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000000)='\x00', 0x1, 0x4895, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$inet6(0xa, 0x80001, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000001080)={'ip6_vti0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01006d836de0f501a62d59fea5cc99fd0da31a00", @ANYRES32=r12, @ANYBLOB="400008803c0000801400040002004e2100000000000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 5m49.574994131s ago: executing program 34 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x3}) 5m32.298293112s ago: executing program 5 (id=1184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x1, 0x6, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r4 = accept(r1, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80) r5 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r5, &(0x7f0000001600)='a`h', 0x3) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r6, &(0x7f0000000040)=""/141, 0x8d) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0010000100033060000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000fffffffd2b000000ac1414aa0000000080000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000002000000073500000a0004000000000000000000df0002006374722863616d656c6c696129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b80400009556d52a841a05d23207045fad745cf1a79469cd9093784fe8377b8049727634b5a98a734885c1a9ba4c2cead789d21ca7abfa7b73f8d61687aa1077528f00d39564514fc09d0c4ff7bbd2342499b7bdecbd7f39a360a378bda7f718b1ad509c59b2d930e4585593c17a73ab181ff0408280993dd8b29b5d4caf137b0d14afa53ed4d433606d49e0889102000000000000"], 0x1d0}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x408cc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) openat$rnullb(0xffffffffffffff9c, 0x0, 0x145342, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x2f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_settime(r8, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000140)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m31.237135713s ago: executing program 5 (id=1199): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20189fbd"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x8001) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) (async) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x16) r2 = syz_open_pts(r0, 0x20800) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/file0\x00') dup3(r2, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 5m31.165205825s ago: executing program 5 (id=1201): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', 0x100) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) flistxattr(r4, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000380)) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190001000000000000000000fc0200000000000000000000000000000000dd4af62d8aae3f5df52ee5806c4d000000000000000000020000000000000040000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000044000500fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff00000000"], 0xfc}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100), &(0x7f0000000140), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x492842, 0x28) close(r8) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000280), &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf254c00000008000300", @ANYRES32=r9, @ANYBLOB="0c0058000f0000007b90ddca606187400000000000000000f43c87a8754f24aa1c70657dd95b"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x40010) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000340), &(0x7f0000000380), 0x0) 5m30.652115854s ago: executing program 5 (id=1207): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000500)=@id, 0x0, 0x0) (async) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000840)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x440101) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000280)) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='binder\x00', 0x2800000, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREADDIR(r2, &(0x7f0000000180)={0x99, 0x29, 0x1, {0x0, [{{0x80, 0x3, 0x7}, 0x2, 0xf8, 0x7, './file0'}, {{0x40, 0x2, 0x2}, 0xfffffffffffffffa, 0x7, 0xd, './file0/file0'}, {{0x2, 0x0, 0x7}, 0xffffffffffffff89, 0x7, 0xd, './file0/file0'}, {{0x20, 0x2, 0x3}, 0x0, 0x0, 0xd, './file0/file0'}]}}, 0x99) 5m30.525169216s ago: executing program 5 (id=1209): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7489086e733d667d2c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=!%()-\\)*,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x113700, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000000000000000000000200000002000000000000000b0000000a0000000600000000000000000000000000000019000080f20dffff010000000c00000003000000040000000200000000000000000000000000e6ff0000000003000000060000004000000000000000060000000e00000000000000000000000000000001000040020000000200000000000000f87f000003000000010000000000000000000000000000000700000080ff9f4981"]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) prctl$PR_SCHED_CORE(0x23, 0x7fc, 0xffffffffffffffff, 0x3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f0000000140)=0x9, 0x4, 0x0) (async, rerun: 32) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r10 = open(&(0x7f0000000240)='./bus\x00', 0x680000, 0xcb91eb1f33e48c4a) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x200, 0x1) (async) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8cc31c38066efbafc0c66ed3ea50f20e06635000002000f22e00fc775000f072e0f0131f3dde90fc739ba4000b80000ef640fc7b70a00", 0x3b}], 0x1, 0x1, &(0x7f0000000240)=[@efer={0x2, 0x8100}], 0x1) (async) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4009040}, 0x0) (async) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x48}}, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 5m30.473782918s ago: executing program 35 (id=1209): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7489086e733d667d2c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=!%()-\\)*,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x113700, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000000000000000000000200000002000000000000000b0000000a0000000600000000000000000000000000000019000080f20dffff010000000c00000003000000040000000200000000000000000000000000e6ff0000000003000000060000004000000000000000060000000e00000000000000000000000000000001000040020000000200000000000000f87f000003000000010000000000000000000000000000000700000080ff9f4981"]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) prctl$PR_SCHED_CORE(0x23, 0x7fc, 0xffffffffffffffff, 0x3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r6, 0x0, r7, &(0x7f0000000140)=0x9, 0x4, 0x0) (async, rerun: 32) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r10 = open(&(0x7f0000000240)='./bus\x00', 0x680000, 0xcb91eb1f33e48c4a) mknodat$loop(r10, &(0x7f0000001600)='./file1\x00', 0x200, 0x1) (async) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b8cc31c38066efbafc0c66ed3ea50f20e06635000002000f22e00fc775000f072e0f0131f3dde90fc739ba4000b80000ef640fc7b70a00", 0x3b}], 0x1, 0x1, &(0x7f0000000240)=[@efer={0x2, 0x8100}], 0x1) (async) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4009040}, 0x0) (async) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x48}}, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 4m33.520613283s ago: executing program 4 (id=1985): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r0, 0x4008700c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000d00)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r6 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r5, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4m33.404614015s ago: executing program 4 (id=1986): r0 = socket$inet(0x2, 0x5, 0x10000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x7ffe, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x20, 0xd0, 0xc7, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x67, 0xfffd, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback}}}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0900, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f00000001c0)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x80) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0xa0) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) fcntl$notify(r5, 0x402, 0x2) socket$inet(0x2, 0x5, 0x10000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x7ffe, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8, 0x20, 0xd0, 0xc7, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x67, 0xfffd, 0xb, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback}}}}) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0900, 0x0) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f00000001c0)) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x80) (async) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0xa0) (async) socket(0x11, 0x3, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, 0x0) (async) fcntl$notify(r5, 0x402, 0x2) (async) 4m33.249343279s ago: executing program 4 (id=1987): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r0, &(0x7f0000000080)='net/llc/socket\x00') 4m33.210356989s ago: executing program 4 (id=1988): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000480)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000004c0)='./file0/../file0/../file0\x00', 0x100000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = userfaultfd(0x80001) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f00007e6000/0x4000)=nil, 0x4000}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) chroot(&(0x7f0000000480)='./file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) truncate(&(0x7f00000004c0)='./file0/../file0/../file0\x00', 0x100000000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f00007e6000/0x4000)=nil, 0x4000}) (async) 4m33.19642445s ago: executing program 4 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x211, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001180)={{r0}, "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"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x28, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) (async) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0xca, 0xffff160d, 0x15, @empty, @mcast1, 0x20, 0x20, 0x401, 0x4}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000ffdbdf25040000005400018008000300000000001400020070696d367265673000000000000000000800030002000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="140002006970766c616e3000000000000000000008000300010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="2800018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020067656e6576000000000000000000006ecb603180080003000100000094beadc46f2bcf0b"], 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x20044000) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) 4m33.085325061s ago: executing program 4 (id=1990): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x110, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 4m33.058638712s ago: executing program 36 (id=1990): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x110, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 4m12.267114081s ago: executing program 8 (id=2211): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[], 0xffb2) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="bb97616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00e56df361aa71d226e2a336ac9b1bfaf34dfda406699c11d53bba598478b26d397f6bca38ef"]) lsetxattr$security_evm(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="71e36607742fe4"], 0x7, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x7}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x80000000e, 0x1, 0x5, 0x0, 0x8, 0x84, 0x2, 0x0, 0x5, 0x200000000000f3e, 0x1, 0xffff, 0x3, 0xfffffffffffffc01, 0x400000a, 0xffffffffffffffff], 0x10000, 0x10400}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0}}, 0x4040) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0x18, 0x7, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x11, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x205}) ioctl$KVM_RUN(r7, 0xae80, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000200)=""/133, 0x85}], 0x2, 0x3, 0x562) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000680)="d1ccdcf5c4e3856e790300c744240000000000c744240207000000c7442406000000000f011c240f5c76eb0f068fe9d001774fc744240008000000c74424028000c0fec7442406000000000f011424362e0fc79ca1e140572d66b850000f00d0", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 4m12.069114755s ago: executing program 8 (id=2212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 4m12.003469626s ago: executing program 8 (id=2214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 4m11.987048666s ago: executing program 8 (id=2216): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) setuid(r0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004640)=ANY=[@ANYBLOB="80010063da1411da6e388b001000010027bd700000000000fc020000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000b9000000480c9d62556405a16139117bb67015371d7ca525bf2312503660c2be31236d000b81de9bc529fbacb7fe4096b217b9d7394d1ad9c5fc7f0dfce7055abd864042b7b6c686938c9841ef25a7bf8202775d8d1551902025db4e271ed46fd71124d09213f25a463e537ec9de2afda307ec74bfbc4e8466969db66639baddd50a16c05ff5fade58768be12b3629821ade84741937774ec904269a08493ec1333a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414400000000000000000000000000000000000000100000000000000000000000000000000003a0d0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000007000000000000000000000000000000010000000000008000000000bc000000000000000000000000000000020001003a00000000000000480001007368613235362d61726d36342d6e656f6e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006c7a7300"/312], 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$getflags(r3, 0x401) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x17, 0x4, @tid=r5}, &(0x7f0000000400)) (async) syz_open_procfs(r5, &(0x7f0000000080)='uid_map\x00') 4m11.085192674s ago: executing program 8 (id=2235): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2000000) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "53c4e8f32a084996d586967a269e20e1"}) 4m11.077723854s ago: executing program 8 (id=2236): r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) (async) finit_module(r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000200)) (async) fchownat(r0, &(0x7f0000000000)='./file1\x00', r2, r3, 0x1000) socket(0xa, 0x3, 0x3a) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x3d0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m11.016003665s ago: executing program 37 (id=2236): r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) (async) finit_module(r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000200)) (async) fchownat(r0, &(0x7f0000000000)='./file1\x00', r2, r3, 0x1000) socket(0xa, 0x3, 0x3a) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x3d0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m43.707067419s ago: executing program 9 (id=2433): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x28) 3m43.64922779s ago: executing program 9 (id=2434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r1, 0x12) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000240)=0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 3m43.486070433s ago: executing program 9 (id=2436): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000180)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0)) (async) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r8) (async) dup(r8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r5, @ANYRES16=r1, @ANYRESOCT, @ANYBLOB="cdfa70f7a9b06650768d36c166f6c757a46f05de4d6fd08b4e9df95732e1b247e2b7cb00000000", @ANYRES64=r2, @ANYRESDEC=r4]) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) (async) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r13, r13, r13) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r14, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r14, &(0x7f0000000740)={0x50, 0x80be22b7671e6587, r15, {0x7, 0x24, 0x0, 0x20000, 0xffff, 0x203, 0xf7, 0x7, 0x0, 0x0, 0x1d6ef038135692fc}}, 0x50) (async) write$FUSE_INIT(r14, &(0x7f0000000740)={0x50, 0x80be22b7671e6587, r15, {0x7, 0x24, 0x0, 0x20000, 0xffff, 0x203, 0xf7, 0x7, 0x0, 0x0, 0x1d6ef038135692fc}}, 0x50) syz_fuse_handle_req(r14, &(0x7f0000008dc0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0xa, 0x0, 0x7, 0x4, 0x2, 0x40, 0x0, 0x8000, 0x0, r16, r5, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r14, &(0x7f0000008dc0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0xa, 0x0, 0x7, 0x4, 0x2, 0x40, 0x0, 0x8000, 0x0, r16, r5, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r14, &(0x7f0000006dc0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x4000, 0x800000000400000, 0x81, 0x0, {0x1, 0x8, 0x80000000000, 0x80000000004, 0x3feffffffffd, 0x800000000008, 0xedc, 0xfffffffd, 0x1, 0x4000, 0x4000000, r16, r12, 0xb, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) read$FUSE(0xffffffffffffffff, &(0x7f0000004a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000580)=[0x0, 0xee01, 0xee01, 0x0, 0x0]) r20 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, 0x0, 0x1000000, 0x0) (async) wait4(r9, 0x0, 0x1000000, 0x0) r21 = syz_pidfd_open(r20, 0x0) ppoll(&(0x7f0000000140)=[{r21, 0x4080}, {r21, 0x4002}], 0x2, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="d0030000daffffff", @ANYRES64=r0, @ANYBLOB="060000000000000002000000000000008000000000000000070000000000000006000000090000000200000000000000070000000000000009000000000000008514000000000000060000000000000007000000000000000700000002000000030000004a1d06cd04000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="3e0c000080000000000000000400000000000000010100000000000001000000000100002500000000000000000000000000000002000000000000000200000000000000030000000000000000020000f4050000020000000000000002000000000000000900000000000000fffffffffeffffff0400000000000000080000000000000009000000170000000000000000600000fbffffff", @ANYRES32, @ANYRES32=r6, @ANYBLOB="08000000090000000000000005000000000000001d0000000000000006000000ffffff7f2c2d235d0f7d0000050000000000000000000000000000000300000000000000ff03000000000000030000000300000001000000000000008d0000000000000078000000000000000800000000000000020000000000000000000000000000000400000004000000020000000080000004000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="790d000009000000000000000500000000000000090000000000000001000000010000005c00000000000000060000000000000002000000000000005b000000000000000e00000000000000c04c00000600000006000000000000000f0000000000000009000000000000000500000000000000050000000000000008000000000000000000008031000000080000000010000007000000", @ANYRES32=r13, @ANYRES32=r17, @ANYBLOB="010001004100000000000000030000000000000002000000000000000700000000fc3fa5b48455d20064000070747300000400000000000000010000000000fcffffffffffffff090007000000000000000f00000000000000000000000000000007000000000000000200000000000000ffffffffffffff7fff00000000000000f8ffffffffffffffbbd7000051ab00000500000000a000", @ANYRESDEC=r16, @ANYRES32=r18, @ANYBLOB="18b0e94905000000000000000400000000000000060000000000000007000000fdffffff6465767074730000010000000000000002000000000000004f00000000000000060000000000000020ef00000900000003000000000000000600000000000000df00000000000000a50f000000000000020000000000000000000000000000ac02000000070000000001000000a0000002000000", @ANYRESDEC=r8, @ANYRESOCT=r19, @ANYBLOB="080000004b2e000000000000040000000000000000b5fa280000000007000000000000006d6f756e74730000"], 0x3d0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') 3m42.706643758s ago: executing program 9 (id=2455): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000200)='./file0/../file0/file0\x00', 0x0, 0x1001000, 0x0) (async) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x6, {0x0, 0x7, 0xfffffffffffffffe, 0xc9, 0x0, 0x8000001, 0x40000000, 0x0, 0x80, 0x1000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xe72c5e8f5e8528e9, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) (async) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x20020, 0x0) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0xd, {0x4, 0x800000000000, 0x9, 0x3, 0xfffffff0, 0xa5, {0x0, 0xffffffffffffffff, 0x3, 0xa, 0x0, 0x9, 0x0, 0x800, 0x9, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0xe5441000) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 3m42.6210559s ago: executing program 9 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) setresuid(0xee01, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f0000001500)=""/198, 0xc6}], 0x3}, 0x12}], 0x1, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) (async) setresuid(0xee01, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) (async) setuid(0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {&(0x7f0000001500)=""/198, 0xc6}], 0x3}, 0x12}], 0x1, 0x2, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async) 3m42.587113221s ago: executing program 9 (id=2460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x8, 0x1, 0x10001) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x0, 0xffffffffffffffbb}, 0x2}], 0x1, 0x2123, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000200)=""/5, &(0x7f0000000480)=""/146, &(0x7f0000000540)=""/162, 0xd000}) r7 = dup(r0) syz_open_dev$mouse(&(0x7f0000000040), 0xbcc, 0x620000) eventfd2(0x3, 0x80001) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) 3m42.542883191s ago: executing program 38 (id=2460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x8, 0x1, 0x10001) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x0, 0xffffffffffffffbb}, 0x2}], 0x1, 0x2123, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000200)=""/5, &(0x7f0000000480)=""/146, &(0x7f0000000540)=""/162, 0xd000}) r7 = dup(r0) syz_open_dev$mouse(&(0x7f0000000040), 0xbcc, 0x620000) eventfd2(0x3, 0x80001) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) 1m39.121064829s ago: executing program 0 (id=4478): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000100)=""/190, &(0x7f0000000040)=0xbe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000100)) removexattr(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x149080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf25260000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000700)="33031600", 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x17, r10, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x43, 0x7, 0x5, 0x23, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @loopback, 0x1, 0x8, 0x4, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x10, 0x20, 0xb58, 0x5, {{0x12, 0x4, 0x2, 0x8, 0x48, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x6a, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x24, 0x1, [{0x0, 0x6, "ea39aa04"}, {0x6, 0x11, "96cae1d44ac4600ac982fe460953b7"}, {0x1, 0x7, "bf1add3d47"}]}]}}}}}) getpeername$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250d000000500001801400020076657468305f746f5f6873720000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000014000200766c616e3100000000000000000000000c0001800800010083149fcabfe3fd5d02b3637775e04fe4a4e45cc9a6dacdf7bf8a4cfd8205295fb91f89135d3526aa9cecfe744df5a9aeb840844a3aa9e0919fa60e20227e5cb50f77bac56fef8e99d1a06345f209ff45ce8fe516db2fc71c6de58d88a5f20a89ab85c24c8c7cddbdcbe1b92dc1225fce69fa217f39f6bf1a2c25d1fa7620bd0595f67eee7a33fa14d4301cda60f0650994ae1b3cf69aacf641f8f59b9696e3b6c79e991c5d331dcd89e973602327fe6c0b8d77f43140211ab01a6ea5c8a429556b15c6c66b669a", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468315f746f5f626174616476006c00018014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000000000001400020076657468305f746f5f626174616476001800018014000200776731000000000000000000000000004c00018014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=r5, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="180001801400020073797a6b616c6c657231000000000000440001800800030002000000140002006261746164765f736c6176655f310000080003000300000008000100", @ANYRES32=r10, @ANYBLOB="1400020067656e657665310000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080003000200000008000100", @ANYRES32=r12, @ANYBLOB="140002007767300000000000000000000000000020000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r13, @ANYBLOB], 0x20c}, 0x1, 0x0, 0x0, 0x8054}, 0x50) r14 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r14, 0x8080aea1, &(0x7f0000000140)) r15 = syz_open_procfs(0xffffffffffffffff, 0x0) clock_getres(0x4531edd1b3b0c2f9, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r15) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000080), 0x1020080, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES8=r14, @ANYBLOB="2c5766646e6f92", @ANYRESHEX=r4, @ANYBLOB=',\x00']) 1m39.06152977s ago: executing program 0 (id=4479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8080, 0x136bff4ec0cf449a, 0x2e}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, &(0x7f0000000300)) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.963099652s ago: executing program 0 (id=4480): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000000180)) (async, rerun: 64) close(r1) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0xb0, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x86, 0x80, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "a2f0b889637c033f02ea82730d520b7c", "c2be15535ab7fea1330d7852d0f1517a00b6edc7bdef6b52598be755a7254e8d", "45c6d9a2e095fb5011856d3acefe9f1fcab00ab0de223c8a9c12140822b64532"}}, @dsss={0x3, 0x1, 0x5}, @supported_rates={0x1, 0x2, [{0xc, 0x1}, {0xc, 0x1}]}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@random='N4@4ED', @device_b, @broadcast}}, @mesh_id={0x72, 0xfffffd7e}, @sec_chan_ofs={0x3e, 0x1}]}]]}, 0xb0}}, 0x0) (async) r7 = dup(r4) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbd) ioctl$BLKGETZONESZ(r7, 0x80041284, &(0x7f0000000100)=0x5) (async) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m38.869260714s ago: executing program 0 (id=4481): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) pipe2$watch_queue(&(0x7f0000000200), 0x80) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300190e0000002cbd7000fcdbdf2505000600000000000a000000030000000000000000000000000000000000000102000000000000a802000100000000000000070c0000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @private2, 0x3}, 0x1c) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000000)='autogroup\x00') ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000100)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r7, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 1m38.782658105s ago: executing program 0 (id=4482): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000980)={{0xffff1000, 0x4000, 0xa, 0x9, 0xf9, 0x5, 0x7f, 0xb, 0x0, 0x5, 0xa0, 0x9}, {0x0, 0x8080000, 0xc, 0xff, 0x9, 0xb7, 0xfc, 0x2, 0x5, 0x6, 0x3, 0xff}, {0xffff1000, 0xeeee8000, 0x0, 0x4, 0xdb, 0x7f, 0xb, 0x5, 0x2, 0x7, 0x5, 0x1}, {0xeeee8002, 0x1, 0xf, 0x7, 0x7, 0x0, 0x6, 0x1, 0x9a, 0xc, 0x8}, {0xd000, 0xeeef0000, 0x8, 0x21, 0x8, 0x7, 0x6, 0x5, 0x9, 0x4, 0x1f, 0x5}, {0x8080000, 0x10000, 0xf, 0x0, 0x52, 0x9, 0x4, 0x9, 0x8, 0x1, 0xc, 0xff}, {0x1000, 0xffff1000, 0xf, 0x54, 0xff, 0x0, 0x4b, 0x3, 0x1, 0x7, 0x9, 0x2}, {0xdddd1000, 0x6000, 0xc, 0xde, 0xff, 0xab, 0xe, 0x8, 0xe, 0x9, 0xbe, 0x1}, {0x1000, 0x2}, {0x4, 0x6}, 0x40006, 0x0, 0xeeef0000, 0x150228, 0x8, 0x2800, 0x100900, [0x5, 0x9, 0x8000000000000001, 0x7ff]}) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000600)=""/161, 0xa1, 0x40) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000400)="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", 0x1f000) 1m38.52583633s ago: executing program 0 (id=4483): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000014008100) r4 = dup3(r3, r0, 0x0) recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18ca02a0, 0x0) 1m38.484554211s ago: executing program 39 (id=4483): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000014008100) r4 = dup3(r3, r0, 0x0) recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18ca02a0, 0x0) 1m37.686070596s ago: executing program 2 (id=4499): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000280)={0x1, 0x2, 0x7f, 0x0, 0x6, "3d11ad18fa0ce2c290d7631fd6f18c0e4f93d3"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd26, 0x25dfdbdd, 0xe8a, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x43}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[], 0x4fc}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103fcffffff000000002b0000000c0006", @ANYRESOCT=r5], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt(r4, 0x90, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)="381b0b28cd3f5b150245525385296417a8e3ada7554d3381ae5f44727b637520a74aa3f28c8976ed95f54b308851de225fe21760ed78a654291a0a078611497e0feeb3bd06ba74ef0f3def486f2af4906b99cb253b8be0c521ea2cb4c70e10060bab0f06fd887b8adffd651fda6a5b6422ffdc15a000a25bf26dbdb1e2d029d166e8cc392f0e5e442af6d611ef5f0ad8141a", 0x92}], 0x1, 0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 1m36.653310006s ago: executing program 2 (id=4525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, r6, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) close_range(r4, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r9, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f32b880018ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m36.474503319s ago: executing program 2 (id=4528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4d, 0x0, 0x1}, {}, {0x16}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000001300)={0x2, &(0x7f00000012c0)=[{0x4e6a, 0x8, 0xde, 0x6}, {0x3, 0x8, 0x74, 0x8001}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) r1 = syz_clone(0x248980, &(0x7f00000000c0)="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", 0x1000, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="3727c0f3c6652c01a947b7775e6c9ff5023a31135d0d2889ca8e1041c207397afd7dd217d1f88635d88a0cc585b5e57e671a57c2444dca429373348e4dc4b77132b067e82dabe2d3cf0445e18594eca7ac771c747ebf127c23af3cd2abafeeb2c35c80af77b76da6861c90da4a0f4a8fb772c8b47b0cad9180704d48e913d94c") r2 = socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) finit_module(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001280)={0x5, &(0x7f0000001240)=[{0x103f, 0x5, 0x7, 0x9}, {0x4, 0x7f, 0x6, 0x4}, {0x1, 0x80, 0x96, 0x1}, {0xff, 0x9, 0x9, 0x7fffffff}, {0x80, 0xb, 0x75, 0x3}]}) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) syz_genetlink_get_family_id$team(&(0x7f0000000000), r5) shutdown(r4, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) ptrace$setsig(0x4203, r1, 0x0, &(0x7f00000011c0)={0x38, 0x10, 0x7}) 1m35.654215515s ago: executing program 2 (id=4545): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m35.481136508s ago: executing program 2 (id=4547): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001000034700bb5be1c3e4feff06000000012778010000190004000400ad003e34d61c00000000313200"/57, 0x39}], 0x1) setpriority(0x1, 0x0, 0xb0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x20010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r2 = socket$inet_udplite(0x2, 0x2, 0x88) writev(r2, &(0x7f00000018c0)=[{&(0x7f0000000180)="14713524332235d02397407d84c5c080d5d09506c0463c99005b80cb302518352ba3b0622213062eee62c4f7e61ac8fa2d68c36e03fa69112244d0390494bf98be2ddbdba181f36f7cd53ca988a6bcb29c528baa87db239d453f3f9d2f439f92c80483e4d77444602ba923c35756d8fa72e80513c6523d0009b04c376ec564cd04e0e4b8585e1e367ceab329596fe42139be9124905ef42028ba00e60f0114fdc41b6c1a8cdb2b", 0xa7}, {&(0x7f0000000240)="ca645e54251184c64524c74b678b25207ac4422ae2381da53b73baf4d97b653e1c727aa2a2ab99dec7a2ddfd377965c241b6b4f4902d6f7d0e7dcdcb7bf8fc816eba346e0130ed385c71af0693840d71201a12714b2fe86f62a52290409399", 0x5f}, {&(0x7f00000013c0)="dd82b15b4377aabfee98864c63e6de61669da890d83fddb6748e69ab9c1303a8caa0117912698755457585cfe36ff493c6560150486cc56099d15d974a85b2c44126202f8a859153b9a59f376e085553b2a99cb9a22b0b8c6d268752f77ca0d16b24d903ed7c26d2d63a3c1a825321cdc61ddc9c38946d268d06f4d68d", 0x7d}, {&(0x7f0000001440)="ba7cb2d5fe9d49312121eafa66429539361a013561cf39da592f75a9ede9fdb6ee65a93eacaa6be896cae74308a54ab82dd46abe8c3a508395112d01432a40ad70915d93f68095451511c8e2b02b9dd630aeb68fee3484aad452c4a729d17f1ea5fea98eedfa390ebd4a330d77634a9a6711", 0x72}, {&(0x7f00000014c0)="7e9ffb898ecd70020153274891bc4c1269100438e3fa569189f09b7a94293765dee123e45f9096d23e42c2b2df072b21827a783337fc391253b6264fd7c327a06db615e61d99d639bd16cff8c38416d1884bb0116af770dcc881eeb8dacd", 0x5e}, {&(0x7f0000001540)="a9c576ee75c3ceaf86da18722a72893731ccd3a9bf87ad7747d1f7845a04a79ddf49e6dc692a7c464a07e88f170905fc037121f718171a5daf7e0779157103d979ebb2159166cfa3eb1de0f2cc9e87ec79c1b67ccdbae82c862dfa8df87243308f435cdb2b12ec2b68a10f06cedda6924e17d6d31237b29061af73d55f6273db39eea4334744cc6455f74515d0f04d7f581509c872ec6129b88f1fb9fc6ea95915c6e9e824ea6c41c8a8ee8d230f7fa4a26746f11af3907dc595512bc9d9f2", 0xbf}, {&(0x7f0000001600)="f8125f5f94aefb6a3d1d40c3152c81be211cd8f65813f5f7b6430d77a92f004844af2ff8bb800dea945108b05ffcdf651c79a2a7475ad8284144f26d86332e6d4051fe905f1b455e71693611ad4a7e985dfc3ad8a9ad11ed78c00202b166eea55b3c545c9ab11f127109fd6c6e2ef225be6bac4c9970da105deadf6076cb5c9c427e8f629ccd21f0a428a89ff7952c3390524cff6f25f69dc77cab6fc99379e7e73dcec43789fef251d391e6ef6903657e98f6ae650ef92fbfeba2077113b8dc1ecaaa9fae2d031b2c26", 0xca}, {&(0x7f0000001700)="bd0c5a0f8e2eae86619e8b11474b31bf865ab2447e7260d55ee0a7f5c9f8a9181442ab90d12c2c8fb7f9f67d594bb04ad027387874f35e1dd12b3627afbec05a8793f2dbc1f40f8b32842c19f4ac2ef79ad65511e5c302c8d8319af660d1fa71e33dbd9277bca65c061b75fc1f09662efff869f4e9e9a4a89a8121bafd9005d6963867503ba88f1a4fb6c0f39aa19cef8e6e63f7ee930c17eb6fc3cc7fec23852cdf22dd577667af50d76fea34309dda2444d9435842e60ab040d2d4e201b1e9c17c6e073aee6b2b1dbbdacb725d495ea05aa32105151baef5ff0e10f1ee35a7fb604c91a7c47c3b7f5bf676acd83883ceb3e942e7c273f5af15e2bfd6f5a8", 0xff}, {&(0x7f0000001800)="d9d336e1c5fd5dab0a954298ae3779a8bf6fa0f4fd51727f7e7ddee6d31e3947102f11395b8d5c8bdb34ee3b3cd9a8589e87bce31858f85909fc4b36f24298e8fe0c8baba5ee7e819e0c8711329c937537262305c174e029c942e9e4f9ae50afdf1e83d2252c80685154f2cf7a5486a927a6b76128e825ae0902202e890ad1663e5a0edc", 0x84}], 0x9) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x100, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x1a3a, 0x4) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\\', 0x1}], 0x1}}], 0x1, 0x40001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000440)='.\x00', &(0x7f0000000500)='./file0\x00') linkat(r4, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00', 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x10001}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001980)=""/4096, 0x1000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$inet6(0xa, 0x1, 0x2000) socket(0xb, 0x3, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) 1m35.41749381s ago: executing program 2 (id=4550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000710000"]) 1m20.225405281s ago: executing program 40 (id=4550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000710000"]) 5.177195021s ago: executing program 1 (id=5664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 5.105935002s ago: executing program 1 (id=5665): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0x34d, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40383, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="66470f01b926ffffffc744240268000000c7442406000000000f011424450f2286c0f9c9660f217466baf80cb8f44d7d86ef66bafc0cedc4021947c966baf80cb8776c048def66bafc0cec460f01d634950000001c56400f06", 0x59}], 0x1, 0x31, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) 4.18303954s ago: executing program 1 (id=5671): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.524001252s ago: executing program 3 (id=5681): r0 = socket(0x3, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r5, &(0x7f0000000080)={0x20000040264, 0xfff}, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000040)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xb007}, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.472185734s ago: executing program 3 (id=5683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000004c0)="170000000a0001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) epoll_create(0x8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x528, &(0x7f0000000200)=""/108, 0x6c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xb0}}, 0x0}}], 0x0, 0x0, 0x0}) 3.292980317s ago: executing program 3 (id=5685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1000}) (async, rerun: 32) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000401733197efd705bdc3e000080000000ce0000"]) (async) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0xa, 0x0, 0x2, 0x0, 0x1000, 0x302a7ac17700ec17, 0x0, '\x00', 0xfffe}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000002bbbbbbbbbbbbaaaaaaaaaa0a0806000600000604", @ANYRES16=r4, @ANYRES16=r3, @ANYRESDEC=r5], 0x2e) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) mkdir(&(0x7f0000000240)='./cgroup/../file0\x00', 0x101) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) pwritev(r7, &(0x7f0000000400), 0x0, 0x9, 0x2fbb) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @remote}) (rerun: 32) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xa) (async) ioctl$TCGETS(r10, 0x8910, &(0x7f00000002c0)) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000000000)=0x6) (async) close_range(r0, r4, 0x0) 3.13683925s ago: executing program 3 (id=5687): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7f) 2.982802563s ago: executing program 3 (id=5688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000080)) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46}) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10, 0x80800) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "0539cbf26e9d6f9f6082efc05742c26e"}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r6, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x1, 'dummy0\x00', {}, 0x500}) 2.509203692s ago: executing program 3 (id=5692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6"], 0xfdef) 2.449577253s ago: executing program 41 (id=5692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6"], 0xfdef) 1.200563837s ago: executing program 7 (id=5705): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r1}, 0x2, &(0x7f0000000040)=[0x3ff, 0x63], 0x2, 0x6}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'veth0_macvtap\x00', {0x4}, 0xa}) (async) write(r1, &(0x7f0000000140)="64e9c7b745d25ac9aa58277275ad2f4fe1480c0a23da9d0ba75bf2b891e232f044365f5153a75d1bb51e2b1d2d93ce6c64019e30547466f8881d5484d50d98a73c8837255bdae4e5f64b4a2ca491f41e45a4e34972e22842a8ede6f068da4d4688a30b269d18751ebc5e53925b0271dd332eb862ed9b2da86b172fedb878c07c44983ba14c696cd919b5c51a18ebe03f1a79216912c8a919321a80b882f993acd0c43a99", 0xa4) (async) write$snapshot(r0, &(0x7f0000000200)="e00c082053c72adb8c003889b4bbd65c1bbdeb55e41050b7874557ace34f3e36cd74", 0x22) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) fcntl$lock(r1, 0x25, &(0x7f0000000280)={0x0, 0x1, 0x5e1, 0x3b, r2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000002c0)) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x933340ef64d16757) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)=""/202, &(0x7f0000000440)=0xca) (async) r3 = socket$inet6(0xa, 0x2, 0x6) r4 = dup2(r3, r3) ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000480)="08618e908db74750a8d1cc92db6a77eddddf1ea40851c1840e9aa23ebd3c4f5976d0ae10b680baf1f85f761c7d7aed08e3b5043fd48e2bc429a81dc07bda7268bcceb9157d7583878ccb1859293d6fd2b11541b1327cb574a9b4be2596f1df7fb54bc59a8387c52185d3ceebde09657646c9ec37768c065969d9638f0df8f6c432e327c2bc5d1215f07d80624b63ff99d11ec42a46d2c3fbc212c8dda126") ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000580)="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", 0x1000, 0x1, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001780)={0x0, @multicast2, @multicast1}, &(0x7f00000017c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000018c0)={'syztnl0\x00', &(0x7f0000001840)={'ip6gre0\x00', 0x0, 0x2f, 0x10, 0x9, 0x5, 0x6, @empty, @local, 0x0, 0x7800, 0x0, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001980)={'syztnl2\x00', &(0x7f0000001900)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0x24000, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x40, 0x80, 0xa0b5, 0xfff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001a40)={'ip_vti0\x00', &(0x7f00000019c0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x9, 0x0, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@end, @rr={0x7, 0x1b, 0xdf, [@dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @multicast2, @local, @empty]}, @lsrr={0x83, 0x7, 0x8c, [@remote]}, @end, @timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x1, [{@loopback, 0x3}]}, @rr={0x7, 0xf, 0x4e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001cc0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a80)={0x1f0, r8, 0x83ee4be7caa2a84a, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000c080) (async) getsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) 1.172460518s ago: executing program 7 (id=5706): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x8000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(0x0, 0x1a1342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) read(r2, &(0x7f0000000340)=""/4096, 0x1000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0xdc) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001c00)=[{{&(0x7f00000001c0)={0x2, 0x4e28, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1401004bf1f8870000000000070065c607041a28c8b17ad28cef342f26796dab456f4555fa0782800ff8959abb1d363ff116fead01b99be61fdd0482e04a26f01469c1e5d59150aa01dc2fc42206a48944a8b63800002a7c"], 0x18}}], 0x1, 0xf00) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000005c0)=0x1b) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x2e2, 0x7ff, 0x9, 0x0, 0x7, 0x800, 0x2, 0x8, 0x1, 0xfffffffffffffffa, 0x7, 0x9e, 0x7, 0x5, 0x80000001, 0x1], 0xeeef0000}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r4, 0x5451) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000040), 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r4}}) 1.150924758s ago: executing program 5 (id=5693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) sendmsg$inet6(r3, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, 0x0}, 0x80090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000829bd7000fedbdf2505000000080004000300000006000b001e00000007000100282900001400050000000000000000000000000000000001080001006e66630008000c000000000008000c0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x1c, r7, 0xb1f7e769831e1ff, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd119a8b8e309842f}, 0x88c0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, ')-.%*]$\\'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004804) syz_usb_disconnect(r1) r11 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 1.04120415s ago: executing program 1 (id=5707): setuid(0xee01) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0xffff}) r2 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) close_range(r3, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xc0020, 0x0) 1.02956891s ago: executing program 7 (id=5709): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, 0x12, 0x613, 0x70bd26, 0x25dfdbfd, {0x6, 0xff, 0x1, 0xfd, {0x4e22, 0x4e22, [0x8000, 0x7ffbfffa, 0x6, 0x1], [0x7, 0x8, 0x2, 0x7], 0x0, [0x4, 0x4]}, 0xffffffbe, 0x8001}}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$can_raw(r4, &(0x7f00000002c0), 0x10) (async, rerun: 32) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) (rerun: 32) mount(0x0, 0x0, 0x0, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) (async) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x80, 0x0) (async) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={&(0x7f00000001c0), &(0x7f00000005c0)=""/4096, 0x1000}) (async, rerun: 32) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000200), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, 0x0) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) (async, rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (rerun: 32) 996.859311ms ago: executing program 1 (id=5710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4000000) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @empty, 0x1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x1, 0x30}, @fda={0x66646185, 0x2, 0x2, 0x3d}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x7b, 0xa, 0x2, 0x80000000, 0x47, @dev={0xfe, 0x80, '\x00', 0xc}, @loopback, 0x700, 0x8, 0x6, 0x9}}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0xc8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@empty, @in=@local, 0x4e20, 0x3, 0x4e22, 0xf, 0xa, 0x10, 0x80, 0x8, r2, r3}, {0x4, 0xbb45, 0x2, 0xb9e9, 0x7fff, 0x8, 0x1000, 0x7}, {0x5, 0xe, 0x24}, 0x5de1, 0x6e6bbc, 0x1, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3501, 0x1, 0x2, 0xa, 0xd9, 0x1, 0x10}}, 0xe8) 873.245074ms ago: executing program 7 (id=5712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 870.621213ms ago: executing program 7 (id=5713): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x7, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x70}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x4, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x0, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x440005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x140, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x6, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf5b, 0x1, 0x2000003, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) futex(&(0x7f000000cffc), 0x80000000000b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 689.284217ms ago: executing program 6 (id=5715): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) shutdown(r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000004e40)) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x13, r3, 0xca639000) 539.925209ms ago: executing program 6 (id=5716): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={@any, 0x4, 0x80a7, 0x3, 0x9, 0x1838, "22203290eb31f558c3065232383f690e37c96412236e36ef906d787fb317be38ed6395ead5c5a7be1e84c8dad13f275853f6fe4d248f7d51c397c371939a02408ee638d14c937fd35633ea40740de6d165f3c71e24e869b4625c926bb622189f825770b2f9e07e9d2ae875012b4882bd5b67af4c2502ca82a4e59dd74d1dc4ae"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x190a, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 441.778872ms ago: executing program 6 (id=5717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x10, 0x7800, 0x80000000, 0x1, {{0x4b, 0x4, 0x2, 0x3, 0x12c, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x29, [@local, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x26, 0x3, 0x3, [{@remote, 0x200}, {@multicast1, 0x80}, {@private=0xa010100, 0x2}]}, @cipso={0x86, 0x3c, 0x1, [{0x2, 0xa, "39ab6f0de5f68b45"}, {0x7, 0x6, "39ef9aef"}, {0x2, 0x5, "f1adb6"}, {0x5, 0x5, 'Sz\"'}, {0x7, 0xd, "12979fca5588450ace419d"}, {0x7, 0xf, "60d44749f071fc06befcba91f4"}]}, @lsrr={0x83, 0x1f, 0x23, [@empty, @local, @local, @multicast1, @broadcast, @private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x3, [{@local, 0x8}, {@local, 0x8}, {@private=0xa010101, 0x6}]}, @lsrr={0x83, 0x17, 0xa9, [@rand_addr=0x64010100, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101]}, @cipso={0x86, 0x2f, 0x1, [{0x2, 0xe, "a833dfabcedd9c328d09088e"}, {0x5, 0x10, "a3cfd5b759f43f05ec4d6bc69c6b"}, {0x1, 0x7, "b7affe00ff"}, {0x0, 0x4, "efe2"}]}, @timestamp_addr={0x44, 0x34, 0x52, 0x1, 0x9, [{@multicast1, 0xfb8d}, {@remote, 0x7}, {@private=0xa010100, 0xa0}, {@broadcast, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x40d0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 252.299195ms ago: executing program 6 (id=5718): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x80) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) pread64(r1, &(0x7f0000000100)=""/125, 0x7d, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) getsockname$tipc(r5, 0x0, &(0x7f0000000100)) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x20100000000004}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$notify(r3, 0x402, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r6, &(0x7f0000001e80)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000019c0)=""/139, 0x8b}], 0x6}, 0x9}], 0x3, 0x12040, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 61.203999ms ago: executing program 6 (id=5719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) close(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 59.919969ms ago: executing program 1 (id=5720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x803, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r1, &(0x7f00000003c0), 0x100000000000022d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 43.524259ms ago: executing program 6 (id=5721): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') (async) r2 = timerfd_create(0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) (async) close(r2) (async) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x214180) pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) 0s ago: executing program 7 (id=5722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) rt_sigaction(0x3e, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000001c0)) (async, rerun: 32) fcntl$setlease(r1, 0x400, 0x1) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000001600000705a3f6d2fb5b09040000014106cf0008240201000000000905f102", @ANYRESOCT], 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6000, 0x0) (async) r2 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG(r2, 0x40081271, 0x3) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141641) (async, rerun: 32) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000540)={{0xdddd0000, 0x5000, 0xe, 0xee, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x2, 0x7, 0x6}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x13, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xdddd0000, 0xf000, 0x9, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x7, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x3, 0x46, 0x2, 0xd, 0x3, 0x3, 0xfc, 0x1}, {0x4, 0x100000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x8}, {0x2, 0xd000, 0xc, 0x7, 0x4, 0x6e, 0x1, 0xff, 0x8, 0x80, 0x0, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0xd6, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x3, 0x5, 0x3, 0x3, 0xa, 0x49, 0x54, 0x0, 0x2, 0x8}, {0x80a0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x1, 0x0, 0xeeee0000, [0x2, 0x401, 0x7, 0x4]}) (async, rerun: 32) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x80031, r0, 0xd6a58000) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) kernel console output (not intermixed with test programs): d8ebe9 code=0x7ffc0000 [ 302.849105][ T46] usb 3-1: Product: syz [ 302.877184][ T46] usb 3-1: Manufacturer: syz [ 302.888275][ T46] usb 3-1: SerialNumber: syz [ 302.893622][ T36] audit: type=1326 audit(1790990753.154:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f659ed8d550 code=0x7ffc0000 [ 302.957188][ T36] audit: type=1326 audit(1790990753.154:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f659ed8d550 code=0x7ffc0000 [ 302.981109][ T36] audit: type=1326 audit(1790990753.154:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659ed8ebe9 code=0x7ffc0000 [ 303.005328][ T36] audit: type=1326 audit(1790990753.154:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f659ed8ebe9 code=0x7ffc0000 [ 303.029622][ T36] audit: type=1326 audit(1790990753.154:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659ed8ebe9 code=0x7ffc0000 [ 303.053568][ T36] audit: type=1326 audit(1790990753.154:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.4073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f659ed8ebe9 code=0x7ffc0000 [ 303.199983][ T46] usb 3-1: USB disconnect, device number 26 [ 303.203415][T10290] udevd[10290]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.357171][ T346] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 303.365958][ T346] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.388448][T12255] fido_id[12255]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 303.664157][T12270] fuse: Unknown parameter '@' [ 303.669636][T12270] /dev/loop0: Can't lookup blockdev [ 303.788150][T12277] rust_binder: Failed copying into alloc: EFAULT [ 303.788184][T12277] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 303.794995][T12277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 303.803486][T12277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70 [ 303.830182][ T601] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 303.835141][ T36] audit: type=1400 audit(1790990754.144:11640): avc: denied { setattr } for pid=12278 comm="syz.2.4083" name="NETLINK" dev="sockfs" ino=64504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.991795][ T601] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.002158][ T601] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.015148][ T601] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.024619][ T601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.032699][ T601] usb 7-1: Product: syz [ 304.036940][ T601] usb 7-1: Manufacturer: syz [ 304.041768][ T601] usb 7-1: SerialNumber: syz [ 304.110525][ T346] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 304.260171][ T346] usb 3-1: Using ep0 maxpacket: 32 [ 304.266727][ T346] usb 3-1: config 0 has an invalid interface number: 134 but max is 0 [ 304.275162][ T346] usb 3-1: config 0 has no interface number 0 [ 304.281548][ T346] usb 3-1: config 0 interface 134 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 304.292618][ T346] usb 3-1: config 0 interface 134 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 304.296742][T12286] overlayfs: failed to clone lowerpath [ 304.305630][ T346] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=90.5a [ 304.318421][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.326534][ T346] usb 3-1: Product: syz [ 304.330807][ T346] usb 3-1: Manufacturer: syz [ 304.335711][ T346] usb 3-1: SerialNumber: syz [ 304.341331][ T346] usb 3-1: config 0 descriptor?? [ 305.057207][ T601] cdc_ncm 7-1:1.0: bind() failure [ 305.063572][ T601] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 305.070866][ T601] cdc_ncm 7-1:1.1: bind() failure [ 305.077319][ T601] usb 7-1: USB disconnect, device number 51 [ 305.730129][T12336] netlink: 'syz.0.4102': attribute type 4 has an invalid length. [ 305.738344][T12336] netlink: 'syz.0.4102': attribute type 4 has an invalid length. [ 306.696424][T12356] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4109'. [ 306.931998][ T7294] usb 3-1: USB disconnect, device number 27 [ 306.964127][T12360] 9pnet_fd: Insufficient options for proto=fd [ 307.053886][T12362] TCP: TCP_TX_DELAY enabled [ 307.059747][T12362] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4112'. [ 307.069290][T12362] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4112'. [ 307.078838][T12362] netlink: 'syz.6.4112': attribute type 5 has an invalid length. [ 307.086917][T12362] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4112'. [ 307.096550][T12363] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4112'. [ 307.106112][T12363] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4112'. [ 307.116382][T12363] netlink: 'syz.6.4112': attribute type 5 has an invalid length. [ 307.124419][T12363] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4112'. [ 307.151768][T12366] __vm_enough_memory: pid: 12366, comm: syz.6.4113, bytes: 18014402804453376 not enough memory for the allocation [ 307.196465][T12371] /dev/rnullb0: Can't open blockdev [ 308.029561][T12399] overlayfs: failed to clone upperpath [ 308.174305][T12405] rust_binder: Error while translating object. [ 308.174340][T12405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 308.180738][T12405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:368 [ 308.201998][T12407] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 308.619632][T12419] rust_binder: Error while translating object. [ 308.619682][T12419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 308.626312][T12419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:380 [ 309.342255][T12435] binder: Bad value for 'max' [ 309.491418][T12446] incfs: Options parsing error. -22 [ 309.511743][T12446] incfs: mount failed -22 [ 309.727093][T12454] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4145'. [ 309.817470][T12452] x_tables: unsorted underflow at hook 4 [ 309.989810][T12469] binder: Unknown parameter 'rotcontext' [ 310.039207][ T601] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 310.058578][T12458] x_tables: unsorted underflow at hook 4 [ 310.067315][ T601] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.204745][T12482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 310.343283][T12485] x_tables: unsorted underflow at hook 4 [ 310.491409][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 310.491432][ T36] audit: type=1400 audit(1790990760.804:11642): avc: denied { checkpoint_restore } for pid=12497 comm="syz.7.4162" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.718099][T12503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.770192][T12505] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 310.770203][T12504] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 310.770232][T12505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 310.777519][T12504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 310.786751][T12505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1272 [ 310.794776][T12504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1272 [ 311.157440][T12522] syzkaller0: entered promiscuous mode [ 311.172604][T12522] syzkaller0: entered allmulticast mode [ 311.184790][T12518] x_tables: unsorted underflow at hook 4 [ 311.366194][T12534] rust_binder: Error while translating object. [ 311.366263][T12534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 311.373211][T12534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:123 [ 311.497864][T12546] x_tables: unsorted underflow at hook 4 [ 311.631646][T12566] overlayfs: failed to resolve './file1': -2 [ 312.722083][T12590] SELinux: ebitmap: truncated map [ 312.728731][T12590] SELinux: failed to load policy [ 312.770142][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 312.775362][ T475] Bluetooth: hci0: command 0x1003 tx timeout [ 312.970195][ T601] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 313.100153][ T601] usb 3-1: device descriptor read/64, error -71 [ 313.340179][ T601] usb 3-1: device descriptor read/64, error -71 [ 313.580175][ T601] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 313.710198][ T601] usb 3-1: device descriptor read/64, error -71 [ 313.950195][ T601] usb 3-1: device descriptor read/64, error -71 [ 314.060249][ T601] usb usb3-port1: attempt power cycle [ 314.215808][T12607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.216582][T12606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:410 [ 314.251144][T12612] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 314.271031][ T36] audit: type=1400 audit(1790990764.584:11643): avc: denied { relabelto } for pid=12611 comm="syz.6.4203" name="file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 314.298503][ T36] audit: type=1400 audit(1790990764.584:11644): avc: denied { associate } for pid=12611 comm="syz.6.4203" name="file0" dev="tmpfs" ino=786 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 314.410204][ T601] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 314.431481][ T601] usb 3-1: device descriptor read/8, error -71 [ 314.510255][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 314.524351][ T36] audit: type=1326 audit(1790990764.834:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12621 comm="syz.0.4207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f659ed8ebe9 code=0x0 [ 314.561823][ T601] usb 3-1: device descriptor read/8, error -71 [ 314.603970][T12624] SELinux: security_context_str_to_sid () failed with errno=-22 [ 314.628190][ T36] audit: type=1400 audit(1790990764.934:11646): avc: denied { connect } for pid=12621 comm="syz.0.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.670336][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 314.677427][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 314.686367][ T9] usb 7-1: config 6 has an invalid interface number: 248 but max is 0 [ 314.695903][ T9] usb 7-1: config 6 has no interface number 0 [ 314.702638][ T9] usb 7-1: config 6 interface 248 has no altsetting 0 [ 314.712335][ T9] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 314.715151][T12629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.722015][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.737417][ T9] usb 7-1: Product: syz [ 314.742426][ T9] usb 7-1: Manufacturer: syz [ 314.747178][ T9] usb 7-1: SerialNumber: syz [ 314.800272][ T601] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 314.821412][ T601] usb 3-1: device descriptor read/8, error -71 [ 314.840314][T12632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.951336][ T601] usb 3-1: device descriptor read/8, error -71 [ 314.970138][ T9] ums-karma 7-1:6.248: USB Mass Storage device detected [ 315.003455][ T9] usb 7-1: USB disconnect, device number 52 [ 315.070395][ T601] usb usb3-port1: unable to enumerate USB device [ 315.369958][T12639] incfs: Error accessing: ./file0. [ 315.375331][T12639] incfs: mount failed -20 [ 315.432967][T12640] fuseblk: Bad value for 'group_id' [ 315.438227][T12640] fuseblk: Bad value for 'group_id' [ 315.481347][ T36] audit: type=1400 audit(1790990765.794:11647): avc: denied { unlink } for pid=10449 comm="syz-executor" name="file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 315.730433][ T46] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 315.775297][T12652] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.827057][T12653] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 315.835053][T12653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 315.843695][T12653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1293 [ 315.860247][ T46] usb 7-1: device descriptor read/64, error -71 [ 316.100165][ T601] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 316.110205][ T46] usb 7-1: device descriptor read/64, error -71 [ 316.261087][ T601] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 316.275998][ T601] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 316.286235][ T601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.296914][T12664] netlink: 772 bytes leftover after parsing attributes in process `syz.0.4220'. [ 316.307977][ T601] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 316.335170][T12667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12667 comm=syz.0.4221 [ 316.350139][ T46] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 316.420120][T12679] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.429697][T12679] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.441816][T12679] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.451016][T12679] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.500151][ T46] usb 7-1: device descriptor read/64, error -71 [ 316.518485][ T346] usb 3-1: USB disconnect, device number 32 [ 316.764428][ T46] usb 7-1: device descriptor read/64, error -71 [ 316.776149][T12707] support for the xor transformation has been removed. [ 316.818120][T12709] wireguard: wg2: Could not create IPv4 socket [ 316.825053][T12709] binder: Unknown parameter 'rsyn' [ 316.880583][ T46] usb usb7-port1: attempt power cycle [ 317.122145][ T36] audit: type=1400 audit(1790990767.434:11648): avc: denied { nlmsg_tty_audit } for pid=12718 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 317.230207][ T46] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 317.251442][ T46] usb 7-1: device descriptor read/8, error -71 [ 317.389938][ T46] usb 7-1: device descriptor read/8, error -71 [ 317.407305][ T36] audit: type=1326 audit(1790990767.714:11649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.441291][T12728] binder: Bad value for 'stats' [ 317.455636][ T36] audit: type=1326 audit(1790990767.714:11650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.481174][ T36] audit: type=1326 audit(1790990767.724:11651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.507152][ T36] audit: type=1326 audit(1790990767.724:11652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.556091][ T36] audit: type=1326 audit(1790990767.724:11653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.566908][T12729] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.598712][ T36] audit: type=1326 audit(1790990767.744:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.623339][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.630917][T12729] bridge_slave_0: entered allmulticast mode [ 317.635838][ T36] audit: type=1326 audit(1790990767.744:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.638152][T12729] bridge_slave_0: entered promiscuous mode [ 317.660969][ T36] audit: type=1326 audit(1790990767.744:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.680171][ T46] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 317.692042][ T36] audit: type=1326 audit(1790990767.744:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x7ffc0000 [ 317.709621][T12729] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.731129][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.738455][T12729] bridge_slave_1: entered allmulticast mode [ 317.751433][ T46] usb 7-1: device descriptor read/8, error -71 [ 317.758242][T12729] bridge_slave_1: entered promiscuous mode [ 317.791890][T12744] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4248'. [ 317.852603][T12729] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.859809][T12729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.867201][T12729] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.874751][T12729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.892271][ T46] usb 7-1: device descriptor read/8, error -71 [ 317.908197][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.916133][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.926845][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.934059][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.944023][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.951226][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.984202][T12729] veth0_vlan: entered promiscuous mode [ 317.998594][T12729] veth1_macvtap: entered promiscuous mode [ 318.004730][ T46] usb usb7-port1: unable to enumerate USB device [ 318.120253][ T346] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 318.250211][ T346] usb 3-1: device descriptor read/64, error -71 [ 318.300235][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 318.450276][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 318.456897][ T10] usb 1-1: config 2 has an invalid interface number: 208 but max is 2 [ 318.465289][ T10] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 318.474522][ T10] usb 1-1: config 2 has an invalid interface number: 47 but max is 2 [ 318.482700][ T10] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 318.491747][ T10] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 318.500684][ T10] usb 1-1: config 2 has no interface number 0 [ 318.506900][ T10] usb 1-1: config 2 has no interface number 2 [ 318.512543][ T346] usb 3-1: device descriptor read/64, error -71 [ 318.513492][ T10] usb 1-1: config 2 interface 208 altsetting 5 bulk endpoint 0xE has invalid maxpacket 16 [ 318.529878][ T10] usb 1-1: config 2 interface 208 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 318.540928][ T10] usb 1-1: config 2 interface 208 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 318.552179][ T10] usb 1-1: config 2 interface 47 altsetting 8 endpoint 0x3 has an invalid bInterval 127, changing to 7 [ 318.563458][ T10] usb 1-1: config 2 interface 47 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 318.574967][ T10] usb 1-1: config 2 interface 47 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 318.586172][ T10] usb 1-1: config 2 interface 47 altsetting 8 bulk endpoint 0xC has invalid maxpacket 32 [ 318.596093][ T10] usb 1-1: config 2 interface 47 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 318.606828][ T10] usb 1-1: config 2 interface 47 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 318.618195][ T10] usb 1-1: config 2 interface 47 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 318.629670][ T10] usb 1-1: config 2 interface 47 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 318.640961][ T10] usb 1-1: config 2 interface 47 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 318.651768][ T10] usb 1-1: config 2 interface 47 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 318.662484][ T10] usb 1-1: config 2 interface 47 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 318.673372][ T10] usb 1-1: config 2 interface 47 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 318.687060][ T10] usb 1-1: config 2 interface 1 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 318.698006][ T10] usb 1-1: config 2 interface 1 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 318.708917][ T10] usb 1-1: config 2 interface 1 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 318.719622][ T10] usb 1-1: config 2 interface 208 has no altsetting 0 [ 318.726759][ T10] usb 1-1: config 2 interface 47 has no altsetting 0 [ 318.734061][ T10] usb 1-1: config 2 interface 1 has no altsetting 0 [ 318.743238][ T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=4413, bcdDevice=99.79 [ 318.755975][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.764333][ T346] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 318.764606][ T10] usb 1-1: Product: М [ 318.777065][ T10] usb 1-1: Manufacturer: П [ 318.782238][ T10] usb 1-1: SerialNumber: 䀊 [ 318.792902][T12756] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 318.850190][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.900134][ T346] usb 3-1: device descriptor read/64, error -71 [ 319.140220][ T346] usb 3-1: device descriptor read/64, error -71 [ 319.253577][ T346] usb usb3-port1: attempt power cycle [ 319.320165][ T7294] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 319.470155][ T7294] usb 7-1: Using ep0 maxpacket: 8 [ 319.477019][ T7294] usb 7-1: unable to get BOS descriptor or descriptor too short [ 319.485635][ T7294] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 319.493869][ T7294] usb 7-1: config 0 has no interface number 0 [ 319.500194][ T7294] usb 7-1: config 0 interface 93 altsetting 4 endpoint 0xA has invalid maxpacket 1104, setting to 64 [ 319.511412][ T7294] usb 7-1: config 0 interface 93 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 319.522657][ T7294] usb 7-1: config 0 interface 93 has no altsetting 0 [ 319.531106][ T7294] usb 7-1: New USB device found, idVendor=3285, idProduct=06b3, bcdDevice=64.3f [ 319.540436][ T7294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.549081][ T7294] usb 7-1: Product: 跫鹿∼⥒볛僖ƛ⇿᪖儥먕픜湓㬌◰穣≩羚ԫ欣귤昰᳒꽕쁓꼯ט䧟ό㶋ʠ许姊䕫䜝蔪ퟐ싰ᗕ侈ᆤ똜桟鱹褒텟櫦uᶆꇝ햮폃脮꺨་㝽某䃣꫍炻沾짨럂붝눣觴૛얔쇙✋닣弛긞嚰共 [ 319.577495][ T7294] usb 7-1: Manufacturer: Р [ 319.582441][ T7294] usb 7-1: SerialNumber: 㩐ళ䕇⋫퍘㞑쉄⋂✄ꧽ㧵ꨪ䂵픐䌎뛨䄬礒墨Ⱦ脷缵䞾쨩⽛ㄒᅔ⛿坛Ѡ鏞즑ᣀ鄡獦湝헾㫧∲醬낿䒈㘱⏖愫鈜΅눷护遍㺃⍫깣 [ 319.602880][ T346] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 319.611688][ T7294] usb 7-1: config 0 descriptor?? [ 319.631681][ T346] usb 3-1: device descriptor read/8, error -71 [ 319.761332][ T346] usb 3-1: device descriptor read/8, error -71 [ 319.820633][T12777] /dev/rnullb0: Can't open blockdev [ 319.831894][ T7294] usb 7-1: USB disconnect, device number 57 [ 320.000340][ T346] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 320.021558][ T346] usb 3-1: device descriptor read/8, error -71 [ 320.151514][ T346] usb 3-1: device descriptor read/8, error -71 [ 320.260301][ T346] usb usb3-port1: unable to enumerate USB device [ 320.430846][T12782] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 320.441225][T12782] rust_binder: 12780 RLIMIT_NICE not set [ 320.527085][ T9] rust_binder: 12779: removing orphan mapping 0:24 [ 320.539855][T12784] overlayfs: failed to resolve './file0': -2 [ 320.561833][T12786] netlink: 'syz.6.4259': attribute type 16 has an invalid length. [ 320.570022][T12786] netlink: 'syz.6.4259': attribute type 3 has an invalid length. [ 320.578621][T12786] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.4259'. [ 321.086350][ T10] usb 1-1: USB disconnect, device number 5 [ 321.115326][T12813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 321.271284][ T406] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 321.430263][ T406] usb 3-1: Using ep0 maxpacket: 32 [ 321.437165][ T406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.444349][ T328] bridge_slave_1: left allmulticast mode [ 321.450381][ T328] bridge_slave_1: left promiscuous mode [ 321.456498][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.464623][ T328] bridge_slave_0: left allmulticast mode [ 321.465082][ T406] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 321.471302][ T328] bridge_slave_0: left promiscuous mode [ 321.480779][ T406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.487218][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.495048][ T406] usb 3-1: Product: syz [ 321.506478][ T406] usb 3-1: Manufacturer: syz [ 321.512111][ T406] usb 3-1: SerialNumber: syz [ 321.520620][ T406] usb 3-1: config 0 descriptor?? [ 321.647784][ T328] veth1_macvtap: left promiscuous mode [ 321.653805][ T328] veth0_vlan: left promiscuous mode [ 321.721451][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.728776][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.736222][T12822] bridge_slave_0: entered allmulticast mode [ 321.742974][T12822] bridge_slave_0: entered promiscuous mode [ 321.750017][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.757332][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.764750][T12822] bridge_slave_1: entered allmulticast mode [ 321.771754][T12822] bridge_slave_1: entered promiscuous mode [ 321.836286][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.843890][T12822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.851576][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.859230][T12822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.890019][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.900424][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.911497][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.919185][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.928780][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.935906][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.943636][ T406] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 321.970976][T12822] veth0_vlan: entered promiscuous mode [ 321.985107][T12822] veth1_macvtap: entered promiscuous mode [ 322.071488][T12847] netlink: 'syz.0.4273': attribute type 12 has an invalid length. [ 322.081605][ T406] usb 7-1: device descriptor read/64, error -71 [ 322.162131][T12851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.162343][T12851] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 322.170155][T12851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 322.178716][T12851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1321 [ 322.205290][T12853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.315393][T12861] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 322.331852][ T406] usb 7-1: device descriptor read/64, error -71 [ 322.447012][T12867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=12867 comm=syz.7.4287 [ 322.484736][T12870] overlay: ./file0 is not a directory [ 322.501917][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 322.501938][ T36] audit: type=1400 audit(1790990772.811:11684): avc: denied { setattr } for pid=12864 comm="syz.0.4286" name="SCO" dev="sockfs" ino=68116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.525283][T12873] 9pnet: Could not find request transport: rdma [ 322.536432][ T36] audit: type=1400 audit(1790990772.811:11685): avc: denied { mounton } for pid=12872 comm="syz.7.4289" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 322.590213][ T406] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 322.720258][ T406] usb 7-1: device descriptor read/64, error -71 [ 322.960163][ T406] usb 7-1: device descriptor read/64, error -71 [ 323.070348][ T406] usb usb7-port1: attempt power cycle [ 323.420438][ T406] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 323.441676][ T406] usb 7-1: device descriptor read/8, error -71 [ 323.503643][ T36] audit: type=1400 audit(1790990773.811:11686): avc: denied { relabelfrom } for pid=12884 comm="syz.0.4293" name="NETLINK" dev="sockfs" ino=68823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 323.531440][ T36] audit: type=1400 audit(1790990773.811:11687): avc: denied { relabelto } for pid=12884 comm="syz.0.4293" name="NETLINK" dev="sockfs" ino=68823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 323.571553][ T406] usb 7-1: device descriptor read/8, error -71 [ 323.817925][ T406] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 323.825905][T12895] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 323.842157][ T406] usb 7-1: device descriptor read/8, error -71 [ 323.983036][ T406] usb 7-1: device descriptor read/8, error -71 [ 324.041607][ T346] usb 3-1: USB disconnect, device number 37 [ 324.100121][T12905] kvm: kvm [12904]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 324.110444][ T406] usb usb7-port1: unable to enumerate USB device [ 324.114685][T12905] kvm: kvm [12904]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 324.136044][T12905] kvm: kvm [12904]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 324.149285][T12905] kvm: kvm [12904]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 324.159478][T12905] kvm: kvm [12904]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 324.171264][T12905] kvm_intel: kvm [12904]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 324.327370][ T346] rust_binder: 12904: removing orphan mapping 0:4216 [ 324.548689][T12913] rust_binder: Error while translating object. [ 324.548725][T12913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.556285][T12913] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 324.567249][T12913] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:199 [ 324.586255][ T406] rust_binder: 12912: removing orphan mapping 0:24 [ 324.606785][T12916] binder: Unknown parameter 'ext' [ 324.774036][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4308'. [ 324.784309][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4308'. [ 324.818327][T12935] rust_binder: Error while translating object. [ 324.818395][T12935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.825030][T12935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 324.836207][T12935] rust_binder: 217: no such ref 1 [ 324.851076][T12935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 324.911793][T12943] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 324.911823][T12942] rust_binder: Error while translating object. [ 324.911859][T12942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.921336][T12943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 324.929748][T12942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 324.937588][T12943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:36 [ 325.666520][T12965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.676525][T12965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1353 [ 325.738063][ T36] audit: type=1400 audit(1790990776.041:11688): avc: denied { create } for pid=12970 comm="syz.6.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 325.884763][T12976] rust_binder: 484: no such ref 0 [ 325.889907][T12976] rust_binder: 484: no such ref 3 [ 325.896702][T12976] rust_binder: Write failure EINVAL in pid:484 [ 325.943196][ T9] rust_binder: 12973: removing orphan mapping 0:8 [ 326.074838][T12990] kvm: kvm [12988]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 326.083912][T12990] kvm: kvm [12988]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 326.094837][T12990] kvm: kvm [12988]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 326.107414][T12990] kvm: kvm [12988]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 326.116833][T12990] kvm: kvm [12988]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 326.129121][T12990] kvm_intel: kvm [12988]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 326.277870][ T346] rust_binder: 12988: removing orphan mapping 0:4216 [ 326.292678][T13000] PM: Enabling pm_trace changes system date and time during resume. [ 326.292678][T13000] PM: Correct system time has to be restored manually after resume. [ 326.320175][ T360] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 326.480130][ T360] usb 3-1: Using ep0 maxpacket: 16 [ 326.487606][ T360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.498300][ T360] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.509598][ T360] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.519576][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.528372][ T360] usb 3-1: Product: syz [ 326.532829][ T360] usb 3-1: Manufacturer: syz [ 326.537740][ T360] usb 3-1: SerialNumber: syz [ 326.597122][T13014] syzkaller0: entered promiscuous mode [ 326.602820][T13014] syzkaller0: entered allmulticast mode [ 326.792132][ T360] usb 3-1: 0:2 : does not exist [ 326.799861][ T360] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 326.820280][ T360] usb 3-1: USB disconnect, device number 38 [ 326.833745][T13021] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 326.840480][T10290] udevd[10290]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 326.875778][T13025] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 326.886734][ T36] audit: type=1400 audit(1790990777.201:11689): avc: denied { relabelto } for pid=13024 comm="syz.7.4338" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 326.915284][ T36] audit: type=1400 audit(1790990777.201:11690): avc: denied { associate } for pid=13024 comm="syz.7.4338" name="ashmem" dev="devtmpfs" ino=201 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mtrr_device_t:s0" [ 326.968436][T13028] rust_binder: 13027 RLIMIT_NICE not set [ 326.974074][ T46] rust_binder: 13026: removing orphan mapping 0:4216 [ 327.030126][ T406] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 327.180182][ T406] usb 7-1: Using ep0 maxpacket: 8 [ 327.187163][ T406] usb 7-1: unable to get BOS descriptor or descriptor too short [ 327.196370][ T406] usb 7-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 327.206811][ T406] usb 7-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 327.217281][ T406] usb 7-1: config 1 interface 0 has no altsetting 0 [ 327.226858][ T406] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.236312][ T406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.244754][ T406] usb 7-1: Product: syz [ 327.249131][ T406] usb 7-1: Manufacturer: syz [ 327.255425][ T406] usb 7-1: SerialNumber: syz [ 327.261754][T13019] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 327.269490][T13019] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 327.479516][ T36] audit: type=1400 audit(1790990777.781:11691): avc: denied { read } for pid=13018 comm="syz.6.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 327.581140][ T36] audit: type=1400 audit(1790990777.891:11692): avc: denied { read write } for pid=13040 comm="syz.0.4344" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 327.610018][ T36] audit: type=1400 audit(1790990777.891:11693): avc: denied { open } for pid=13040 comm="syz.0.4344" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 327.634753][T13043] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4345'. [ 327.643063][ T36] audit: type=1400 audit(1790990777.921:11694): avc: denied { map } for pid=13040 comm="syz.0.4344" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 327.650937][T13043] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 327.711656][T13043] rust_binder: Write failure EFAULT in pid:69 [ 327.856697][T13051] rust_binder: Error while translating object. [ 327.863748][T13051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 327.870251][T13051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:76 [ 328.255978][ T36] audit: type=1400 audit(1790990778.561:11695): avc: denied { ioctl } for pid=13054 comm="syz.2.4350" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 328.256093][T13055] __vm_enough_memory: pid: 13055, comm: syz.2.4350, bytes: 18014402804453376 not enough memory for the allocation [ 328.655653][T13063] cannot load conntrack support for proto=3 [ 328.678733][T13065] rust_binder: 13065 RLIMIT_NICE not set [ 328.718434][ T10] rust_binder: 13064: removing orphan mapping 0:1168 [ 328.879084][T13080] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 328.957845][T13083] rust_binder: Error while translating object. [ 328.957896][T13083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 328.964181][T13083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:98 [ 329.396120][ T36] audit: type=1400 audit(1790990779.701:11696): avc: denied { append } for pid=13084 comm="syz.2.4362" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 329.429997][T13090] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 329.444385][ T36] audit: type=1400 audit(1790990779.761:11697): avc: denied { relabelto } for pid=13089 comm="syz.2.4363" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 329.472988][ T36] audit: type=1400 audit(1790990779.761:11698): avc: denied { associate } for pid=13089 comm="syz.2.4363" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 329.799498][ T406] usb 7-1: bad CDC descriptors [ 329.806348][ T406] usb 7-1: USB disconnect, device number 62 [ 329.830500][T13102] binder: Unknown parameter 'fscontext?}' [ 329.840224][T13102] erofs: dax options not supported [ 329.944300][T13113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 330.174478][T13123] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4375'. [ 330.245592][T13125] input: syz1 as /devices/virtual/input/input25 [ 330.260221][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 330.296692][T13130] 9pnet_fd: Insufficient options for proto=fd [ 330.377635][ T36] audit: type=1400 audit(1790990780.681:11699): avc: denied { create } for pid=13133 comm="syz.7.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.410116][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 330.417257][ T9] usb 1-1: config 0 has no interfaces? [ 330.422977][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 330.432682][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.442677][T13136] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4380'. [ 330.453779][ T9] usb 1-1: config 0 descriptor?? [ 330.770601][T13141] netlink: 'syz.6.4382': attribute type 4 has an invalid length. [ 330.789336][T13141] netlink: 'syz.6.4382': attribute type 4 has an invalid length. [ 330.966961][T13150] binder: Unknown parameter 'defcontext01777777777777777777777' [ 331.051757][T13156] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 331.220161][ T9] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 331.371198][ T360] usb 1-1: USB disconnect, device number 6 [ 331.381229][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 331.390454][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 331.399496][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 331.408851][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 331.419470][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.429905][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 331.440142][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.453535][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 331.462860][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.480833][ T9] usb 7-1: config 0 descriptor?? [ 331.540515][ T36] audit: type=1400 audit(1790990781.851:11700): avc: denied { read } for pid=13164 comm="syz.0.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.650125][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 331.650154][ T475] Bluetooth: hci0: command 0x1003 tx timeout [ 331.709070][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 331.722240][ T9] usb 7-1: USB disconnect, device number 63 [ 331.729322][ T9] usblp0: removed [ 332.150178][ T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 332.279821][T13183] rust_binder: 270: no such ref 0 [ 332.280158][ T9] usb 7-1: device descriptor read/64, error -71 [ 332.286730][T13184] rust_binder: 270: no such ref 2 [ 332.532261][ T9] usb 7-1: device descriptor read/64, error -71 [ 332.571068][ T601] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 332.730141][ T601] usb 3-1: Using ep0 maxpacket: 32 [ 332.736999][ T601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.748673][ T601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.758991][ T601] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 332.768692][ T601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.780138][ T9] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 332.788930][ T601] usb 3-1: config 0 descriptor?? [ 332.867890][T13209] overlayfs: failed to clone upperpath [ 332.920157][ T9] usb 7-1: device descriptor read/64, error -71 [ 332.946244][T13213] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4408'. [ 333.160208][ T9] usb 7-1: device descriptor read/64, error -71 [ 333.192033][T13240] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 333.203101][ T601] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 333.211733][ T601] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 333.219303][ T601] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 333.229602][ T601] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 333.236801][ T601] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 333.245588][ T601] kone 0003:1E7D:2CED.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 333.287697][ T9] usb usb7-port1: attempt power cycle [ 333.309281][T13247] rust_binder: Write failure EFAULT in pid:129 [ 333.402876][T13189] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 333.570293][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 333.630220][ T9] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 333.651417][ T9] usb 7-1: device descriptor read/8, error -71 [ 333.720106][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 333.726526][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.737035][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.746386][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 333.757999][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 333.769518][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 333.778787][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.788106][ T9] usb 7-1: device descriptor read/8, error -71 [ 333.799079][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 333.805498][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 333.813852][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 333.819247][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 333.825677][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 333.831994][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 333.925925][ T601] kone 0003:1E7D:2CED.001D: couldn't init struct kone_device [ 333.934173][ T601] kone 0003:1E7D:2CED.001D: couldn't install mouse [ 333.944024][ T601] kone 0003:1E7D:2CED.001D: probe with driver kone failed with error -5 [ 333.959389][ T601] usb 3-1: USB disconnect, device number 39 [ 333.987749][T13270] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 334.040117][ T9] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 334.087459][T13276] kvm: kvm [13275]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 334.096619][T13276] kvm: kvm [13275]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 334.190244][ T46] usb 1-1: USB disconnect, device number 7 [ 334.291779][T13293] kvm: MONITOR instruction emulated as NOP! [ 334.299324][T13293] usb usb9: usbfs: process 13293 (syz.2.4438) did not claim interface 8 before use [ 334.430923][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4442'. [ 334.489311][T13316] overlayfs: missing 'lowerdir' [ 334.494378][ T9] usb 7-1: device not accepting address 67, error -71 [ 334.501513][ T9] usb usb7-port1: unable to enumerate USB device [ 334.523022][T13321] __vm_enough_memory: pid: 13321, comm: syz.2.4448, bytes: 18014402804453376 not enough memory for the allocation [ 334.590088][T13325] rust_binder: Write failure EFAULT in pid:309 [ 334.653675][T13331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.716571][T13343] rust_binder: Write failure EFAULT in pid:315 [ 334.817962][T13360] can0: slcan on ttyS3. [ 334.868434][T13354] syzkaller0: entered promiscuous mode [ 334.874451][T13354] syzkaller0: entered allmulticast mode [ 335.011137][ T360] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 335.029497][ T360] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.167211][T13391] rust_binder: 524: no such ref 2 [ 335.172562][T13391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:524 [ 336.172951][T13409] __vm_enough_memory: pid: 13409, comm: syz.0.4471, bytes: 18014402804453376 not enough memory for the allocation [ 336.230380][ T360] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 336.232301][T13412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4472'. [ 336.249137][T13412] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 336.257205][T13412] SELinux: failed to load policy [ 336.263457][T13412] tipc: Trying to set illegal importance in message [ 336.270875][T13412] /dev/rnullb0: Can't open blockdev [ 336.291729][T13414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.291762][T13414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 336.392797][ T360] usb 7-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 336.411910][ T360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.420704][ T360] usb 7-1: Product: syz [ 336.425490][ T360] usb 7-1: Manufacturer: syz [ 336.430567][ T360] usb 7-1: SerialNumber: syz [ 336.444879][ T360] usb 7-1: config 0 descriptor?? [ 336.798859][T13432] pim6reg1: entered promiscuous mode [ 336.804591][T13432] pim6reg1: entered allmulticast mode [ 336.853956][ T360] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 336.864661][ T360] asix 7-1:0.0: probe with driver asix failed with error -71 [ 336.873569][ T360] usb 7-1: USB disconnect, device number 68 [ 337.373977][T13442] veth0_vlan: left promiscuous mode [ 337.439628][T13444] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 337.439663][T13444] rust_binder: Read failure Err(EFAULT) in pid:534 [ 337.487676][T13454] rust_binder: 543: no such ref 0 [ 337.500356][T13454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:543 [ 337.562574][ T36] audit: type=1326 audit(1790990787.871:11701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz.7.4492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162978ebe9 code=0x0 [ 337.565918][T13461] cgroup: release_agent respecified [ 337.603204][T13461] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 337.684310][ T6135] bridge_slave_1: left allmulticast mode [ 337.698782][ T6135] bridge_slave_1: left promiscuous mode [ 337.705644][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.714073][ T6135] bridge_slave_0: left allmulticast mode [ 337.719997][ T6135] bridge_slave_0: left promiscuous mode [ 337.726684][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.833143][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.840645][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.847902][T13446] bridge_slave_0: entered allmulticast mode [ 337.854664][T13446] bridge_slave_0: entered promiscuous mode [ 337.861422][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.868819][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.876182][T13446] bridge_slave_1: entered allmulticast mode [ 337.882915][T13446] bridge_slave_1: entered promiscuous mode [ 337.904389][ T6135] veth1_macvtap: left promiscuous mode [ 337.910278][ T6135] veth0_vlan: left promiscuous mode [ 337.982870][T13476] netlink: 344 bytes leftover after parsing attributes in process `syz.6.4496'. [ 338.019939][T13482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:562 [ 338.113373][T13358] can0 (unregistered): slcan off ttyS3. [ 338.147567][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.155272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.169911][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.178983][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.212460][T13503] can0: slcan on ttyS3. [ 338.284402][T13446] veth0_vlan: entered promiscuous mode [ 338.301074][T13446] veth1_macvtap: entered promiscuous mode [ 338.649563][T13558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 339.121532][T13502] can0 (unregistered): slcan off ttyS3. [ 339.205097][T13621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 339.341844][ T36] audit: type=1326 audit(1790990789.651:11702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13646 comm="syz.2.4528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9352d8ebe9 code=0x0 [ 339.444379][T13655] /dev/rnullb0: Can't open blockdev [ 339.479687][T13657] overlayfs: failed to resolve './file1': -2 [ 339.610023][ T36] audit: type=1400 audit(1790990789.911:11703): avc: denied { lock } for pid=13668 comm="syz.6.4534" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 339.705968][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 339.723469][ T9] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.339525][T13712] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4547'. [ 340.529604][T13732] fuse: Bad value for 'user_id' [ 340.534918][T13732] fuse: Bad value for 'user_id' [ 340.902844][T13751] tc_dump_action: action bad kind [ 341.047033][T13760] GUP no longer grows the stack in syz.3.4561 (13760): 200000001000-200000c01000 (200000000000) [ 341.082138][T13760] CPU: 0 UID: 0 PID: 13760 Comm: syz.3.4561 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 341.082186][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.082204][T13760] Call Trace: [ 341.082212][T13760] [ 341.082224][T13760] __dump_stack+0x21/0x30 [ 341.082283][T13760] dump_stack_lvl+0x10c/0x190 [ 341.082316][T13760] ? __cfi_dump_stack_lvl+0x10/0x10 [ 341.082348][T13760] ? find_vma+0xcd/0x110 [ 341.082370][T13760] ? detach_entity_load_avg+0x7b0/0x7b0 [ 341.082395][T13760] dump_stack+0x19/0x20 [ 341.082426][T13760] __get_user_pages+0x1e34/0x22d0 [ 341.082455][T13760] ? __kasan_check_write+0x18/0x20 [ 341.082495][T13760] ? down_read_killable+0x79/0xf0 [ 341.082526][T13760] ? populate_vma_page_range+0x230/0x230 [ 341.082557][T13760] ? kernel_text_address+0xa9/0xe0 [ 341.082588][T13760] ? __kernel_text_address+0x11/0x40 [ 341.082619][T13760] __gup_longterm_locked+0xcb1/0x1580 [ 341.082648][T13760] ? arch_stack_walk+0x10b/0x170 [ 341.082673][T13760] gup_fast_fallback+0x12ae/0x14a0 [ 341.082701][T13760] ? kasan_save_track+0x4f/0x80 [ 341.082724][T13760] ? kasan_save_track+0x3e/0x80 [ 341.082746][T13760] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 341.082781][T13760] ? __se_sys_futex+0x28f/0x300 [ 341.082805][T13760] ? __x64_sys_futex+0xe9/0x110 [ 341.082827][T13760] ? x64_sys_call+0x227f/0x2ee0 [ 341.082857][T13760] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 341.082899][T13760] ? get_user_pages_fast_only+0xc0/0xc0 [ 341.082929][T13760] get_user_pages_fast+0x73/0xb0 [ 341.082957][T13760] get_futex_key+0x24d/0x930 [ 341.082979][T13760] ? __cfi_get_futex_key+0x10/0x10 [ 341.082999][T13760] ? futex_setup_timer+0xb4/0xd0 [ 341.083018][T13760] futex_lock_pi+0x1c0/0xa10 [ 341.083042][T13760] ? futex_unqueue+0x136/0x160 [ 341.083063][T13760] ? __cfi_futex_lock_pi+0x10/0x10 [ 341.083088][T13760] ? __cfi_futex_wake_mark+0x10/0x10 [ 341.083117][T13760] ? futex_setup_timer+0xb4/0xd0 [ 341.083137][T13760] ? __cfi_futex_wake_mark+0x10/0x10 [ 341.083166][T13760] ? __kasan_check_write+0x18/0x20 [ 341.083198][T13760] ? up_read+0x26/0x1d0 [ 341.083226][T13760] do_futex+0x2de/0x500 [ 341.083248][T13760] ? __cfi_do_futex+0x10/0x10 [ 341.083270][T13760] ? vm_mmap_pgoff+0x145/0x4e0 [ 341.083305][T13760] __se_sys_futex+0x28f/0x300 [ 341.083330][T13760] ? __x64_sys_futex+0x110/0x110 [ 341.083354][T13760] ? __kasan_check_write+0x18/0x20 [ 341.083411][T13760] __x64_sys_futex+0xe9/0x110 [ 341.083437][T13760] x64_sys_call+0x227f/0x2ee0 [ 341.083475][T13760] do_syscall_64+0x58/0xf0 [ 341.083510][T13760] ? clear_bhb_loop+0x50/0xa0 [ 341.083541][T13760] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 341.083570][T13760] RIP: 0033:0x7fc20f38ebe9 [ 341.083592][T13760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.083613][T13760] RSP: 002b:00007fc20dde3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.083641][T13760] RAX: ffffffffffffffda RBX: 00007fc20f5c5fa0 RCX: 00007fc20f38ebe9 [ 341.083659][T13760] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000200000000b00 [ 341.083676][T13760] RBP: 00007fc20f411e19 R08: 0000000000000000 R09: 0000000000000002 [ 341.083693][T13760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.083709][T13760] R13: 00007fc20f5c6038 R14: 00007fc20f5c5fa0 R15: 00007ffce8c5ef58 [ 341.083729][T13760] [ 341.087769][T13764] overlay: ./file0 is not a directory [ 341.464368][T13776] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 341.493988][T13776] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 341.970178][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.040143][ T601] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 342.131746][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.141837][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.155112][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.164600][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.178318][ T9] usb 4-1: config 0 descriptor?? [ 342.190163][ T601] usb 7-1: Using ep0 maxpacket: 16 [ 342.196900][ T601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 342.208351][ T601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.221900][ T601] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 342.231334][ T601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.245821][ T601] usb 7-1: config 0 descriptor?? [ 342.674417][ T601] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 342.791129][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 342.797229][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 342.798255][T13850] fuse: Bad value for 'fd' [ 342.835325][ T9] usb 4-1: USB disconnect, device number 7 [ 342.866560][ T601] playstation 0003:054C:0DF2.0020: Invalid reportID received, expected 9 got 53 [ 342.877494][T13851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.887054][ T601] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 342.896832][T13851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.905772][ T601] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 342.917138][ T601] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 342.927924][ T601] playstation 0003:054C:0DF2.0020: probe with driver playstation failed with error -22 [ 342.942156][ T601] usb 7-1: USB disconnect, device number 69 [ 342.981890][ T36] audit: type=1400 audit(1790990793.291:11704): avc: denied { mount } for pid=13855 comm="syz.6.4595" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.006085][T13856] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 343.006134][T13856] rust_binder: Read failure Err(EFAULT) in pid:672 [ 343.031312][T13858] binder: Unknown parameter 'defcontext01777777777777777777777' [ 343.340593][ T36] audit: type=1326 audit(1790990793.641:11705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.7.4600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162978ebe9 code=0x0 [ 343.420855][T13882] overlayfs: failed to resolve './file1': -2 [ 343.487212][T13886] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 343.496551][T13886] SELinux: security_context_str_to_sid () failed with errno=-22 [ 343.760123][ T360] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 343.911280][ T360] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 343.919886][ T360] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 343.929409][ T360] usb 4-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 343.940355][ T360] usb 4-1: config 220 has no interface number 2 [ 343.947098][ T360] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.960936][ T360] usb 4-1: config 220 interface 0 has no altsetting 0 [ 343.968369][ T360] usb 4-1: config 220 interface 76 has no altsetting 0 [ 343.976421][ T360] usb 4-1: config 220 interface 1 has no altsetting 0 [ 343.985156][ T360] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 343.995079][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.003584][ T360] usb 4-1: Product: syz [ 344.007923][ T360] usb 4-1: Manufacturer: syz [ 344.013067][ T360] usb 4-1: SerialNumber: syz [ 344.228944][ T360] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 344.243246][ T360] usb 4-1: No valid video chain found. [ 344.254309][ T360] usb 4-1: selecting invalid altsetting 0 [ 344.266622][ T360] usb 4-1: USB disconnect, device number 8 [ 344.291811][T13900] overlayfs: failed to clone lowerpath [ 344.316981][T13903] overlayfs: failed to resolve './file0': -2 [ 344.360938][T13907] incfs: Error accessing: ./file0. [ 344.366523][T13907] incfs: mount failed -20 [ 344.377338][T13908] overlayfs: failed to clone upperpath [ 344.421171][T13912] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4615'. [ 344.758444][T13928] overlayfs: failed to resolve './file0': -2 [ 344.807198][T13936] rust_binder: 72: no such ref 0 [ 344.821927][T13936] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 344.834282][T13936] rust_binder: 72: no such ref 0 [ 344.932231][T13945] __vm_enough_memory: pid: 13945, comm: syz.3.4627, bytes: 18014402804453376 not enough memory for the allocation [ 345.002195][T13947] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 345.330148][ T360] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 345.448289][T13960] overlayfs: failed to resolve './file0': -2 [ 345.470125][ T360] usb 4-1: device descriptor read/64, error -71 [ 345.482458][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4634'. [ 345.680786][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4640'. [ 345.744518][ T360] usb 4-1: device descriptor read/64, error -71 [ 345.772134][T13981] tipc: Enabling of bearer rejected, media not registered [ 345.887250][T13982] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.912589][T13987] overlayfs: failed to resolve './file0': -2 [ 345.926337][T13982] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.944715][T13982] bridge_slave_0: entered allmulticast mode [ 345.951406][T13982] bridge_slave_0: entered promiscuous mode [ 345.958578][T13982] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.965693][T13982] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.973259][T13982] bridge_slave_1: entered allmulticast mode [ 345.979759][T13982] bridge_slave_1: entered promiscuous mode [ 345.990107][ T360] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 346.103178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.110437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.130512][ T360] usb 4-1: device descriptor read/64, error -71 [ 346.146332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.153590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.184426][T13982] veth0_vlan: entered promiscuous mode [ 346.203283][T13982] veth1_macvtap: entered promiscuous mode [ 346.329762][T14005] overlayfs: missing 'lowerdir' [ 346.380173][ T360] usb 4-1: device descriptor read/64, error -71 [ 346.500182][ T360] usb usb4-port1: attempt power cycle [ 346.842008][ T360] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 346.871419][ T360] usb 4-1: device descriptor read/8, error -71 [ 347.001398][ T360] usb 4-1: device descriptor read/8, error -71 [ 347.240189][ T360] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 347.261311][ T360] usb 4-1: device descriptor read/8, error -71 [ 347.391374][ T360] usb 4-1: device descriptor read/8, error -71 [ 347.500271][ T360] usb usb4-port1: unable to enumerate USB device [ 348.470253][ T346] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 348.621682][ T346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.630528][ T346] usb 4-1: config 1 interface 1 has no altsetting 0 [ 348.651603][ T346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.664454][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.672979][ T346] usb 4-1: Product: syz [ 348.677555][ T346] usb 4-1: Manufacturer: syz [ 348.682492][ T346] usb 4-1: SerialNumber: syz [ 348.897755][ T346] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 348.906301][ T346] usb 4-1: found format II with max.bitrate = 2418, frame size=7 [ 348.915051][ T346] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 348.923437][ T346] usb 4-1: found format II with max.bitrate = 2418, frame size=7 [ 348.947382][ T346] usb 4-1: USB disconnect, device number 13 [ 349.367706][T14023] rust_binder: Write failure EFAULT in pid:11 [ 349.377054][T14023] pim6reg1: entered promiscuous mode [ 349.389414][T14023] pim6reg1: entered allmulticast mode [ 349.477610][T14028] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 349.530202][T14032] overlayfs: failed to resolve './file0': -2 [ 349.680167][ T601] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 349.830102][ T601] usb 4-1: device descriptor read/64, error -71 [ 350.070189][ T601] usb 4-1: device descriptor read/64, error -71 [ 350.310146][ T902] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 350.330148][ T601] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 350.460201][ T601] usb 4-1: device descriptor read/64, error -71 [ 350.480121][ T902] usb 7-1: Using ep0 maxpacket: 8 [ 350.486914][ T902] usb 7-1: unable to get BOS descriptor or descriptor too short [ 350.496676][ T902] usb 7-1: config 6 has an invalid interface number: 248 but max is 0 [ 350.505286][ T902] usb 7-1: config 6 has no interface number 0 [ 350.511828][ T902] usb 7-1: config 6 interface 248 has no altsetting 0 [ 350.521010][ T902] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 350.530393][ T902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.538724][ T902] usb 7-1: Product: syz [ 350.543612][ T902] usb 7-1: Manufacturer: syz [ 350.548358][ T902] usb 7-1: SerialNumber: syz [ 350.700109][ T601] usb 4-1: device descriptor read/64, error -71 [ 350.810269][ T601] usb usb4-port1: attempt power cycle [ 351.150137][ T601] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 351.171567][ T601] usb 4-1: device descriptor read/8, error -71 [ 351.311278][ T601] usb 4-1: device descriptor read/8, error -71 [ 351.560142][ T601] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 351.581213][ T601] usb 4-1: device descriptor read/8, error -71 [ 351.721275][ T601] usb 4-1: device descriptor read/8, error -71 [ 351.830307][ T601] usb usb4-port1: unable to enumerate USB device [ 352.478832][T14052] syzkaller0: entered promiscuous mode [ 352.484659][T14052] syzkaller0: entered allmulticast mode [ 352.655829][T14058] overlayfs: failed to resolve './file1': -2 [ 352.742187][T14063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14063 comm=syz.7.4666 [ 352.758080][ T36] audit: type=1400 audit(1790990803.061:11706): avc: denied { read write } for pid=14062 comm="syz.7.4666" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 352.795810][ T36] audit: type=1400 audit(1790990803.061:11707): avc: denied { open } for pid=14062 comm="syz.7.4666" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 352.896380][T14072] rust_binder: Write failure EINVAL in pid:100 [ 352.900555][T14072] veth0: entered promiscuous mode [ 352.943901][T14077] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14077 comm=syz.7.4670 [ 352.978467][T14080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.002690][ T902] ums-karma 7-1:6.248: USB Mass Storage device detected [ 353.120782][ T902] usb 7-1: USB disconnect, device number 70 [ 353.172733][T14088] overlayfs: failed to resolve './file1': -2 [ 353.210147][ T9] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 353.370138][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 353.489438][T14108] netlink: 'syz.6.4679': attribute type 30 has an invalid length. [ 353.510154][ T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 353.690096][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 353.700225][ T9] usb usb4-port1: attempt power cycle [ 354.050117][ T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 354.085665][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 354.110988][T14119] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 354.220133][ T9] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 354.270478][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 354.278447][ T9] usb usb4-port1: unable to enumerate USB device [ 354.418855][T14131] rust_binder: 751: no such ref 5 [ 354.424322][ T36] audit: type=1326 audit(1790990804.721:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14132 comm="syz.7.4687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e1b8ebe9 code=0x0 [ 354.448361][T14131] rust_binder: Write failure EINVAL in pid:751 [ 354.537703][T14136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 354.544783][T14136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:753 [ 354.572446][T14139] rust_binder: Write failure EFAULT in pid:756 [ 354.583008][T14139] rust_binder: Write failure EFAULT in pid:756 [ 354.608372][T14143] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 355.162445][T14147] fuse: Bad value for 'fd' [ 355.922400][ T12] bridge_slave_1: left allmulticast mode [ 355.928114][ T12] bridge_slave_1: left promiscuous mode [ 355.933933][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.941877][ T12] bridge_slave_0: left allmulticast mode [ 355.947670][ T12] bridge_slave_0: left promiscuous mode [ 355.953488][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.006144][T14072] veth0: left promiscuous mode [ 356.031317][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.038925][T14153] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.046690][T14153] bridge_slave_0: entered allmulticast mode [ 356.054619][T14153] bridge_slave_0: entered promiscuous mode [ 356.062391][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.075166][T14153] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.077841][T14164] rust_binder: Error while translating object. [ 356.082616][T14153] bridge_slave_1: entered allmulticast mode [ 356.086613][T14164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 356.089519][T14153] bridge_slave_1: entered promiscuous mode [ 356.104777][T14164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:775 [ 356.129041][ T12] veth1_macvtap: left promiscuous mode [ 356.145223][ T12] veth0_vlan: left promiscuous mode [ 356.219114][T14178] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14178 comm=syz.6.4701 [ 356.271651][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.278779][T14153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.286245][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.293523][T14153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.323015][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.330731][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.341467][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.348689][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.358482][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.365642][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.396730][T14153] veth0_vlan: entered promiscuous mode [ 356.409366][T14153] veth1_macvtap: entered promiscuous mode [ 356.923356][T14202] overlayfs: failed to resolve './file0': -2 [ 356.940655][T14205] __vm_enough_memory: pid: 14205, comm: syz.1.4708, bytes: 18014402804453376 not enough memory for the allocation [ 356.998914][T14212] sit0: entered promiscuous mode [ 357.005712][T14212] netlink: 'syz.3.4711': attribute type 1 has an invalid length. [ 357.014193][T14212] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4711'. [ 357.099338][T14214] __vm_enough_memory: pid: 14214, comm: syz.1.4712, bytes: 18014402804453376 not enough memory for the allocation [ 357.440280][T14229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 357.440324][T14229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:31 [ 357.917090][T14246] binder: Unknown parameter '' [ 358.250213][ T902] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 358.283044][T14250] netlink: 'syz.6.4727': attribute type 46 has an invalid length. [ 358.292183][T14250] rust_binder: Error while translating object. [ 358.292228][T14250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 358.298708][T14250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:797 [ 358.322601][T14252] overlayfs: failed to resolve './file1': -2 [ 358.401559][ T902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.411794][ T902] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 358.421023][ T902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.430553][ T902] usb 4-1: config 0 descriptor?? [ 358.490187][ T36] audit: type=1400 audit(1790990808.791:11709): avc: denied { lock } for pid=14258 comm="syz.1.4731" path="/dev/binderfs/binder1" dev="binder" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.838654][ T902] itetech 0003:258A:6A88.0021: unbalanced delimiter at end of report description [ 358.848212][ T902] itetech 0003:258A:6A88.0021: probe with driver itetech failed with error -22 [ 359.040426][ T406] usb 4-1: USB disconnect, device number 22 [ 359.490549][ T346] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 359.631304][ T36] audit: type=1400 audit(1790990809.941:11710): avc: denied { execute } for pid=14277 comm="syz.3.4739" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 359.660320][ T346] usb 7-1: Using ep0 maxpacket: 8 [ 359.667413][ T346] usb 7-1: unable to get BOS descriptor or descriptor too short [ 359.677816][ T346] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 359.682686][T14279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14279 comm=syz.3.4739 [ 359.686457][ T346] usb 7-1: can't read configurations, error -22 [ 359.735612][T14281] FAULT_INJECTION: forcing a failure. [ 359.735612][T14281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.749289][T14281] CPU: 1 UID: 0 PID: 14281 Comm: syz.3.4740 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 359.749328][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.749340][T14281] Call Trace: [ 359.749347][T14281] [ 359.749355][T14281] __dump_stack+0x21/0x30 [ 359.749384][T14281] dump_stack_lvl+0x10c/0x190 [ 359.749406][T14281] ? __cfi_dump_stack_lvl+0x10/0x10 [ 359.749429][T14281] dump_stack+0x19/0x20 [ 359.749449][T14281] should_fail_ex+0x3d9/0x530 [ 359.749467][T14281] should_fail+0xf/0x20 [ 359.749481][T14281] should_fail_usercopy+0x1e/0x30 [ 359.749497][T14281] _copy_from_user+0x22/0xb0 [ 359.749517][T14281] pending_reads_dispatch_ioctl+0x289/0x1fa0 [ 359.749542][T14281] ? proc_fail_nth_write+0x17e/0x210 [ 359.749564][T14281] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 359.749585][T14281] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 359.749608][T14281] ? selinux_file_ioctl+0x6e0/0x1360 [ 359.749628][T14281] ? vfs_write+0x8ba/0xe80 [ 359.749643][T14281] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 359.749662][T14281] ? __cfi_vfs_write+0x10/0x10 [ 359.749676][T14281] ? __kasan_check_write+0x18/0x20 [ 359.749700][T14281] ? mutex_unlock+0x8b/0x240 [ 359.749719][T14281] ? __cfi_mutex_unlock+0x10/0x10 [ 359.749744][T14281] ? __fget_files+0x2c5/0x340 [ 359.749762][T14281] ? __fget_files+0x2c5/0x340 [ 359.749779][T14281] ? bpf_lsm_file_ioctl+0xd/0x20 [ 359.749803][T14281] ? security_file_ioctl+0x34/0xd0 [ 359.749821][T14281] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 359.749843][T14281] __se_sys_ioctl+0x132/0x1b0 [ 359.749861][T14281] __x64_sys_ioctl+0x7f/0xa0 [ 359.749878][T14281] x64_sys_call+0x1878/0x2ee0 [ 359.749902][T14281] do_syscall_64+0x58/0xf0 [ 359.749926][T14281] ? clear_bhb_loop+0x50/0xa0 [ 359.749948][T14281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 359.749968][T14281] RIP: 0033:0x7fc20f38ebe9 [ 359.749982][T14281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.749996][T14281] RSP: 002b:00007fc20dde3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.750021][T14281] RAX: ffffffffffffffda RBX: 00007fc20f5c5fa0 RCX: 00007fc20f38ebe9 [ 359.750044][T14281] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 359.750060][T14281] RBP: 00007fc20dde3090 R08: 0000000000000000 R09: 0000000000000000 [ 359.750076][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.750091][T14281] R13: 00007fc20f5c6038 R14: 00007fc20f5c5fa0 R15: 00007ffce8c5ef58 [ 359.750106][T14281] [ 360.070178][ T346] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 360.222751][ T346] usb 7-1: Using ep0 maxpacket: 8 [ 360.229590][ T346] usb 7-1: unable to get BOS descriptor or descriptor too short [ 360.239498][ T346] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 360.248341][ T346] usb 7-1: can't read configurations, error -22 [ 360.255424][ T346] usb usb7-port1: attempt power cycle [ 360.346813][T14297] rust_binder: Error while translating object. [ 360.346867][T14297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 360.353401][T14297] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 360.363066][T14297] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:50 [ 360.384004][ T902] rust_binder: 14296: removing orphan mapping 0:24 [ 360.600157][ T346] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 360.620588][ T346] usb 7-1: Using ep0 maxpacket: 8 [ 360.627234][ T346] usb 7-1: unable to get BOS descriptor or descriptor too short [ 360.641175][ T346] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 360.650190][ T346] usb 7-1: can't read configurations, error -22 [ 360.780216][ T346] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 360.800657][ T346] usb 7-1: Using ep0 maxpacket: 8 [ 360.810486][ T346] usb 7-1: unable to get BOS descriptor or descriptor too short [ 360.819476][ T346] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 360.828403][ T346] usb 7-1: can't read configurations, error -22 [ 360.834902][ T346] usb usb7-port1: unable to enumerate USB device [ 361.351474][ T360] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 361.381037][ T360] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.501093][ T36] audit: type=1400 audit(1790990811.811:11711): avc: denied { ioctl } for pid=14330 comm="syz.3.4756" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 361.501093][T14335] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 361.603631][T14335] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 361.620100][T14335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 361.628344][T14335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:62 [ 361.693261][T14341] rust_binder: 152: no such ref 0 [ 361.707842][T14341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 361.806794][T14347] rust_binder: Error while translating object. [ 361.816662][T14347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 361.823282][T14347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:158 [ 361.848032][ T36] audit: type=1400 audit(1790990812.151:11712): avc: denied { ioctl } for pid=14348 comm="syz.3.4763" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 361.894522][T14351] syz.7.4764: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 361.914163][T14356] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4765'. [ 361.918821][T14351] CPU: 0 UID: 0 PID: 14351 Comm: syz.7.4764 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 361.918871][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.918887][T14351] Call Trace: [ 361.918897][T14351] [ 361.918907][T14351] __dump_stack+0x21/0x30 [ 361.918952][T14351] dump_stack_lvl+0x10c/0x190 [ 361.918985][T14351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 361.919020][T14351] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 361.919063][T14351] dump_stack+0x19/0x20 [ 361.919093][T14351] warn_alloc+0x1bc/0x2a0 [ 361.919128][T14351] ? kasan_save_free_info+0x4a/0x60 [ 361.919172][T14351] ? __cfi_warn_alloc+0x10/0x10 [ 361.919202][T14351] ? __get_vm_area_node+0x1dc/0x3a0 [ 361.919234][T14351] ? __vcalloc_noprof+0x3a/0x50 [ 361.919278][T14351] __vmalloc_node_range_noprof+0x68e/0x1420 [ 361.919345][T14351] ? __se_sys_ioctl+0x132/0x1b0 [ 361.919373][T14351] ? __x64_sys_ioctl+0x7f/0xa0 [ 361.919397][T14351] ? x64_sys_call+0x1878/0x2ee0 [ 361.919434][T14351] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 361.919471][T14351] ? __vcalloc_noprof+0x3a/0x50 [ 361.919516][T14351] __vmalloc_noprof+0xfe/0x1d0 [ 361.919549][T14351] ? __vcalloc_noprof+0x3a/0x50 [ 361.919585][T14351] ? __cfi___vmalloc_noprof+0x10/0x10 [ 361.919616][T14351] ? mutex_lock+0x92/0x1c0 [ 361.919642][T14351] ? __cfi_mutex_lock+0x10/0x10 [ 361.919670][T14351] __vcalloc_noprof+0x3a/0x50 [ 361.919705][T14351] kvm_set_memslot+0x4c6/0x13f0 [ 361.919743][T14351] ? __kasan_kmalloc+0x96/0xb0 [ 361.919771][T14351] __kvm_set_memory_region+0x87c/0xb80 [ 361.919809][T14351] kvm_set_memory_region+0x2f/0x50 [ 361.919844][T14351] kvm_vm_ioctl+0x9ad/0xb80 [ 361.919879][T14351] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 361.919923][T14351] ? ioctl_has_perm+0x1aa/0x4d0 [ 361.919956][T14351] ? __asan_memcpy+0x5a/0x80 [ 361.919994][T14351] ? ioctl_has_perm+0x3e0/0x4d0 [ 361.920024][T14351] ? __cfi_futex_wake+0x10/0x10 [ 361.920056][T14351] ? selinux_file_ioctl+0x6e0/0x1360 [ 361.920086][T14351] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 361.920114][T14351] ? kfree+0x15c/0x460 [ 361.920148][T14351] ? do_futex+0x356/0x500 [ 361.920181][T14351] ? __cfi_do_futex+0x10/0x10 [ 361.920205][T14351] ? anon_inode_getfile+0xfb/0x190 [ 361.920239][T14351] ? __fget_files+0x2c5/0x340 [ 361.920266][T14351] ? bpf_lsm_file_ioctl+0xd/0x20 [ 361.920300][T14351] ? security_file_ioctl+0x34/0xd0 [ 361.920328][T14351] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 361.920359][T14351] __se_sys_ioctl+0x132/0x1b0 [ 361.920387][T14351] __x64_sys_ioctl+0x7f/0xa0 [ 361.920413][T14351] x64_sys_call+0x1878/0x2ee0 [ 361.920448][T14351] do_syscall_64+0x58/0xf0 [ 361.920484][T14351] ? clear_bhb_loop+0x50/0xa0 [ 361.920516][T14351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 361.920546][T14351] RIP: 0033:0x7f50e1b8ebe9 [ 361.920570][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.920590][T14351] RSP: 002b:00007f50e2a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.920619][T14351] RAX: ffffffffffffffda RBX: 00007f50e1dc5fa0 RCX: 00007f50e1b8ebe9 [ 361.920639][T14351] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000007 [ 361.920657][T14351] RBP: 00007f50e1c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 361.920674][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.920691][T14351] R13: 00007f50e1dc6038 R14: 00007f50e1dc5fa0 R15: 00007ffd8264e868 [ 361.920714][T14351] [ 361.920917][T14351] Mem-Info: [ 362.284561][T14351] active_anon:38749 inactive_anon:800 isolated_anon:0 [ 362.284561][T14351] active_file:19602 inactive_file:23156 isolated_file:0 [ 362.284561][T14351] unevictable:15439 dirty:11 writeback:0 [ 362.284561][T14351] slab_reclaimable:5434 slab_unreclaimable:89405 [ 362.284561][T14351] mapped:25189 shmem:32900 pagetables:859 [ 362.284561][T14351] sec_pagetables:0 bounce:0 [ 362.284561][T14351] kernel_misc_reclaimable:0 [ 362.284561][T14351] free:1434424 free_pcp:1834 free_cma:0 [ 362.289250][T14360] rust_binder: Write failure EFAULT in pid:66 [ 362.338231][T14351] Node 0 active_anon:154996kB inactive_anon:3200kB active_file:78408kB inactive_file:92624kB unevictable:61756kB isolated(anon):0kB isolated(file):0kB mapped:100756kB dirty:44kB writeback:0kB shmem:131600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7456kB pagetables:3536kB sec_pagetables:0kB all_unreclaimable? no [ 362.379071][T14351] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5672kB free_cma:0kB [ 362.410543][T14351] lowmem_reserve[]: 0 3921 3921 [ 362.415717][T14351] Normal free:2775128kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:155048kB inactive_anon:3200kB active_file:78408kB inactive_file:92624kB unevictable:61756kB writepending:68kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4100kB local_pcp:884kB free_cma:0kB [ 362.448242][T14351] lowmem_reserve[]: 0 0 0 [ 362.454381][T14351] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 362.475119][T14351] Normal: 7*4kB (UM) 83*8kB (UME) 605*16kB (UME) 645*32kB (UME) 530*64kB (UME) 113*128kB (UME) 158*256kB (UME) 95*512kB (UME) 41*1024kB (ME) 23*2048kB (UME) 615*4096kB (UM) = 2776612kB [ 362.493975][T14351] 92001 total pagecache pages [ 362.498709][T14351] 858 pages in swap cache [ 362.503217][T14351] Free swap = 121040kB [ 362.507492][T14351] Total swap = 124996kB [ 362.512012][T14351] 2097051 pages RAM [ 362.515949][T14351] 0 pages HighMem/MovableOnly [ 362.520728][T14351] 351533 pages reserved [ 362.526676][T14351] 0 pages cma reserved [ 362.533806][T14351] Memory allocations: [ 362.537934][T14351] 0 B 0 init/main.c:1370 func:do_initcalls [ 362.545977][T14351] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 362.554551][T14351] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 362.562601][T14351] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 362.576559][T14351] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 362.589008][T14351] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 362.598960][T14351] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 362.607643][T14351] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 362.616138][T14351] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 362.624664][T14351] 0 B 0 init/initramfs.c:101 func:find_link [ 362.780167][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 362.848210][T14381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 362.848254][T14381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:168 [ 362.912178][T14385] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 362.938790][ T36] audit: type=1400 audit(1790990813.241:11713): avc: denied { relabelfrom } for pid=14386 comm="syz.7.4778" name="NETLINK" dev="sockfs" ino=78150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.938796][T14387] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 362.942035][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 362.948340][ T36] audit: type=1400 audit(1790990813.251:11714): avc: denied { relabelto } for pid=14386 comm="syz.7.4778" name="NETLINK" dev="sockfs" ino=78150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_xfrm_socket permissive=1 trawcon="system_u:object_r:lost_found_t:s0" [ 363.020134][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 363.029238][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 363.039605][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.048332][T14389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 363.050779][ T9] usb 2-1: config 0 has no interface number 0 [ 363.066461][ T9] usb 2-1: config 0 interface 88 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.082917][ T9] usb 2-1: config 0 interface 88 has no altsetting 0 [ 363.097533][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 363.108411][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 363.118802][ T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 363.127044][ T9] usb 2-1: Product: syz [ 363.131544][ T9] usb 2-1: Manufacturer: syz [ 363.136223][ T9] usb 2-1: SerialNumber: syz [ 363.141942][ T9] usb 2-1: config 0 descriptor?? [ 363.352705][ T9] usb 2-1: USB disconnect, device number 26 [ 363.470130][ T360] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 363.620122][ T360] usb 4-1: Using ep0 maxpacket: 32 [ 363.626940][ T360] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 363.635416][ T360] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 363.644204][ T360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 363.653509][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.663939][ T360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.674385][ T360] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 363.687643][ T360] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 363.696969][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.705970][ T360] usb 4-1: config 0 descriptor?? [ 363.861248][ T36] audit: type=1400 audit(1790990814.171:11715): avc: denied { unmount } for pid=14153 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 363.908989][T14408] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 363.925009][ T360] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 363.951235][ T360] usb 4-1: USB disconnect, device number 23 [ 363.961820][ T360] usblp0: removed [ 363.989940][ T36] audit: type=1400 audit(1790990814.291:11716): avc: denied { mount } for pid=14415 comm="syz.7.4789" name="/" dev="pstore" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 364.047121][T14423] rust_binder: Write failure EFAULT in pid:828 [ 364.059461][ T36] audit: type=1400 audit(1790990814.361:11717): avc: denied { mount } for pid=14424 comm="syz.6.4792" name="/" dev="incremental-fs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 364.059920][T14425] netlink: 'syz.6.4792': attribute type 1 has an invalid length. [ 364.186618][T14430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.240863][T14431] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 364.247581][T14431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 364.255856][T14431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:81 [ 364.360168][ T46] usb 7-1: new low-speed USB device number 75 using dummy_hcd [ 364.430159][ T360] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 364.522147][ T46] usb 7-1: config 9 has an invalid interface number: 51 but max is 0 [ 364.531432][ T46] usb 7-1: config 9 has no interface number 0 [ 364.539974][ T46] usb 7-1: string descriptor 0 read error: -22 [ 364.546463][ T46] usb 7-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 364.555850][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.580110][ T360] usb 4-1: Using ep0 maxpacket: 32 [ 364.586655][ T360] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 364.595707][ T360] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 364.604828][ T360] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 364.614002][ T360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.623716][ T360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.633811][ T360] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.647206][ T360] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 364.656530][ T360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.665566][ T360] usb 4-1: config 0 descriptor?? [ 364.768989][ T902] usb 7-1: USB disconnect, device number 75 [ 365.074157][ T360] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 365.085782][T14433] SELinux: security_context_str_to_sid (syste :) failed with errno=-22 [ 365.094960][ T36] audit: type=1400 audit(1790990815.391:11718): avc: denied { remount } for pid=14432 comm="syz.1.4795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 365.096130][ T360] usb 4-1: USB disconnect, device number 24 [ 365.124140][ T360] usblp0: removed [ 365.282707][T14439] rust_binder: 834: no such ref 3 [ 365.288223][T14439] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 365.296933][T14439] rust_binder: Write failure EINVAL in pid:834 [ 365.327177][T14443] can0: slcan on ttyS3. [ 365.443283][T14444] can0 (unregistered): slcan off ttyS3. [ 365.691529][T14484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.270191][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 366.362220][T14499] syzkaller0: entered promiscuous mode [ 366.367939][T14499] syzkaller0: entered allmulticast mode [ 366.431367][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.442379][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 366.456390][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.460675][T14503] binder: Bad value for 'stats' [ 366.465866][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.480082][ T9] usb 2-1: config 0 descriptor?? [ 366.488570][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 366.501097][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 366.503432][ T36] audit: type=1326 audit(1790990816.811:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.4812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc20f38ebe9 code=0x0 [ 366.950146][ T406] usb 2-1: reset high-speed USB device number 27 using dummy_hcd [ 366.958665][ T406] usb 2-1: device reset changed ep0 maxpacket size! [ 366.965700][ T406] usb 2-1: USB disconnect, device number 27 [ 367.074602][T14512] loop2: detected capacity change from 0 to 7 [ 367.202214][T14526] overlayfs: missing 'workdir' [ 367.270224][ T406] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 367.375158][ T36] audit: type=1400 audit(1790990817.681:11720): avc: denied { watch } for pid=14529 comm="syz.3.4821" path="/77/file0" dev="tmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 367.420102][ T406] usb 2-1: Using ep0 maxpacket: 16 [ 367.428556][ T406] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.440500][ T406] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 367.448190][ T406] usb 2-1: can't read configurations, error -71 [ 367.470590][T14530] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4821'. [ 367.480623][T14530] fuse: Unknown parameter 'fdґ' [ 367.548362][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 367.558362][T14536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 367.575243][T14538] overlayfs: missing 'workdir' [ 367.850117][ T902] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 368.008576][ T902] usb 4-1: device descriptor read/64, error -71 [ 368.074480][T14554] can0: slcan on ttyS3. [ 368.095946][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4830'. [ 368.155256][T14569] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 368.155292][T14569] rust_binder: Read failure Err(EFAULT) in pid:107 [ 368.195527][T14576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.250124][ T902] usb 4-1: device descriptor read/64, error -71 [ 368.272996][T14556] can0 (unregistered): slcan off ttyS3. [ 368.510194][ T902] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 368.640229][ T902] usb 4-1: device descriptor read/64, error -71 [ 368.890224][ T902] usb 4-1: device descriptor read/64, error -71 [ 369.000263][ T902] usb usb4-port1: attempt power cycle [ 369.074350][ T46] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 369.090345][ T46] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.185346][T14608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=14608 comm=syz.1.4838 [ 369.340192][ T902] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 369.361544][ T902] usb 4-1: device descriptor read/8, error -71 [ 369.484316][T14615] pim6reg1: entered promiscuous mode [ 369.489862][T14615] pim6reg1: entered allmulticast mode [ 369.491338][ T902] usb 4-1: device descriptor read/8, error -71 [ 369.614448][T14617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.614484][T14617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:847 [ 369.741012][ T902] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 369.781301][ T902] usb 4-1: device descriptor read/8, error -71 [ 369.892358][T14626] 9pnet_fd: Insufficient options for proto=fd [ 369.911360][ T902] usb 4-1: device descriptor read/8, error -71 [ 370.020314][ T902] usb usb4-port1: unable to enumerate USB device [ 370.778827][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4847'. [ 370.791175][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.803416][T14633] bridge_slave_0 (unregistering): left allmulticast mode [ 370.811940][T14633] bridge_slave_0 (unregistering): left promiscuous mode [ 370.820508][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.829764][T14644] rust_binder: Error in use_page_slow: ESRCH [ 370.829792][T14644] rust_binder: use_range failure ESRCH [ 370.836030][T14644] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 370.837417][T14643] FAULT_INJECTION: forcing a failure. [ 370.837417][T14643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.841704][T14644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 370.851059][T14643] CPU: 0 UID: 0 PID: 14643 Comm: syz.6.4850 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 370.851099][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.851117][T14643] Call Trace: [ 370.851126][T14643] [ 370.851137][T14643] __dump_stack+0x21/0x30 [ 370.851181][T14643] dump_stack_lvl+0x10c/0x190 [ 370.851214][T14643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 370.851248][T14643] ? __kasan_check_write+0x18/0x20 [ 370.851286][T14643] ? kvm_arch_vcpu_load+0x650/0x8c0 [ 370.851326][T14643] dump_stack+0x19/0x20 [ 370.851357][T14643] should_fail_ex+0x3d9/0x530 [ 370.851381][T14643] should_fail+0xf/0x20 [ 370.851403][T14643] should_fail_usercopy+0x1e/0x30 [ 370.851430][T14643] _copy_from_user+0x22/0xb0 [ 370.851464][T14643] kvm_arch_vcpu_ioctl+0x3d8/0x2e50 [ 370.851487][T14643] ? avc_has_perm+0x144/0x220 [ 370.851521][T14643] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 370.851548][T14643] ? selinux_file_open+0x457/0x610 [ 370.851580][T14643] ? __cfi_selinux_file_open+0x10/0x10 [ 370.851613][T14643] ? is_bpf_text_address+0x17b/0x1a0 [ 370.851644][T14643] ? kernel_text_address+0xa9/0xe0 [ 370.851675][T14643] ? __kernel_text_address+0x11/0x40 [ 370.851706][T14643] ? do_vfs_ioctl+0xeda/0x1e30 [ 370.851734][T14643] ? arch_stack_walk+0x10b/0x170 [ 370.851757][T14643] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 370.851787][T14643] ? _parse_integer_limit+0x195/0x1e0 [ 370.851822][T14643] ? _parse_integer+0x2e/0x40 [ 370.851857][T14643] ? kstrtoull+0x13b/0x1e0 [ 370.851892][T14643] ? kstrtouint+0x78/0xf0 [ 370.851926][T14643] ? ioctl_has_perm+0x1aa/0x4d0 [ 370.851955][T14643] ? __asan_memcpy+0x5a/0x80 [ 370.851989][T14643] ? ioctl_has_perm+0x3e0/0x4d0 [ 370.852027][T14643] ? has_cap_mac_admin+0xd0/0xd0 [ 370.852058][T14643] ? __kasan_check_write+0x18/0x20 [ 370.852092][T14643] ? mutex_lock_killable+0x92/0x1c0 [ 370.852124][T14643] ? __cfi_mutex_lock_killable+0x10/0x10 [ 370.852153][T14643] ? proc_fail_nth_write+0x17e/0x210 [ 370.852189][T14643] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 370.852223][T14643] kvm_vcpu_ioctl+0x77c/0xee0 [ 370.852262][T14643] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 370.852297][T14643] ? __cfi_vfs_write+0x10/0x10 [ 370.852320][T14643] ? __kasan_check_write+0x18/0x20 [ 370.852355][T14643] ? mutex_unlock+0x8b/0x240 [ 370.852382][T14643] ? __cfi_mutex_unlock+0x10/0x10 [ 370.852409][T14643] ? __fget_files+0x2c5/0x340 [ 370.852438][T14643] ? __fget_files+0x2c5/0x340 [ 370.852464][T14643] ? bpf_lsm_file_ioctl+0xd/0x20 [ 370.852498][T14643] ? security_file_ioctl+0x34/0xd0 [ 370.852527][T14643] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 370.852563][T14643] __se_sys_ioctl+0x132/0x1b0 [ 370.852590][T14643] __x64_sys_ioctl+0x7f/0xa0 [ 370.852615][T14643] x64_sys_call+0x1878/0x2ee0 [ 370.852651][T14643] do_syscall_64+0x58/0xf0 [ 370.852687][T14643] ? clear_bhb_loop+0x50/0xa0 [ 370.852717][T14643] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 370.852747][T14643] RIP: 0033:0x7f606f78ebe9 [ 370.852770][T14643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.852791][T14643] RSP: 002b:00007f60706ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.852819][T14643] RAX: ffffffffffffffda RBX: 00007f606f9c5fa0 RCX: 00007f606f78ebe9 [ 370.852839][T14643] RDX: 00002000000001c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 370.852857][T14643] RBP: 00007f60706ad090 R08: 0000000000000000 R09: 0000000000000000 [ 370.852874][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.852891][T14643] R13: 00007f606f9c6038 R14: 00007f606f9c5fa0 R15: 00007ffcbe2571e8 [ 370.852914][T14643] [ 371.216336][T14646] rust_binder: 154: no such ref 2 [ 371.219691][T14644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:224 [ 371.228061][T14646] rust_binder: 154: no such ref 2 [ 371.261117][T14646] rust_binder: 154: no such ref 3 [ 371.266546][T14646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 371.330107][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.345913][ T475] Bluetooth: hci0: command 0x1003 tx timeout [ 371.365777][T14655] overlay: filesystem on ./bus not supported as upperdir [ 371.393255][T14659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.434740][T14664] rust_binder: 14664 RLIMIT_NICE not set [ 371.460775][T14666] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 371.466577][T14666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 371.474778][T14666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:130 [ 371.536007][ T46] rust_binder: 14663: removing orphan mapping 0:1168 [ 371.555325][ T36] audit: type=1400 audit(1790990821.861:11721): avc: denied { create } for pid=14667 comm="syz.3.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 371.652646][T14674] SELinux: security_context_str_to_sid () failed with errno=-22 [ 371.723727][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4862'. [ 372.241001][T14689] overlayfs: workdir and upperdir must be separate subtrees [ 372.400161][ T902] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 372.500169][ T360] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 372.550115][ T902] usb 7-1: Using ep0 maxpacket: 32 [ 372.556711][ T902] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 372.565689][ T902] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 372.574587][ T902] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 372.583690][ T902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.593643][ T902] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.603492][ T902] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.616762][ T902] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 372.625986][ T902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.635265][ T902] usb 7-1: config 0 descriptor?? [ 372.651685][ T360] usb 2-1: device descriptor read/64, error -71 [ 372.678724][T14698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 372.713172][T14703] overlayfs: missing 'workdir' [ 372.848867][ T902] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 372.861575][ T902] usb 7-1: USB disconnect, device number 76 [ 372.868682][ T902] usblp0: removed [ 372.900242][ T360] usb 2-1: device descriptor read/64, error -71 [ 372.954703][T14710] SELinux: security_context_str_to_sid () failed with errno=-22 [ 373.140262][ T360] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 373.190144][ T406] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 373.270225][ T360] usb 2-1: device descriptor read/64, error -71 [ 373.290124][ T902] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 373.340170][ T406] usb 4-1: Invalid ep0 maxpacket: 32 [ 373.420213][ T902] usb 7-1: device descriptor read/64, error -71 [ 373.470252][ T406] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 373.510215][ T360] usb 2-1: device descriptor read/64, error -71 [ 373.620231][ T406] usb 4-1: Invalid ep0 maxpacket: 32 [ 373.620377][ T360] usb usb2-port1: attempt power cycle [ 373.626639][ T406] usb usb4-port1: attempt power cycle [ 373.660193][ T902] usb 7-1: device descriptor read/64, error -71 [ 373.900157][ T902] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 373.970133][ T406] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 373.980109][ T360] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 373.990610][ T406] usb 4-1: Invalid ep0 maxpacket: 32 [ 374.001292][ T360] usb 2-1: device descriptor read/8, error -71 [ 374.030120][ T902] usb 7-1: device descriptor read/64, error -71 [ 374.120197][ T406] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 374.131307][ T360] usb 2-1: device descriptor read/8, error -71 [ 374.140714][ T406] usb 4-1: Invalid ep0 maxpacket: 32 [ 374.146296][ T406] usb usb4-port1: unable to enumerate USB device [ 374.280162][ T902] usb 7-1: device descriptor read/64, error -71 [ 374.370245][ T360] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 374.391193][ T360] usb 2-1: device descriptor read/8, error -71 [ 374.400243][ T902] usb usb7-port1: attempt power cycle [ 374.416331][ T36] audit: type=1400 audit(1790990824.721:11722): avc: denied { setattr } for pid=14718 comm="syz.7.4878" name="secretmem" dev="secretmem" ino=81111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 374.449038][T14724] rust_binder: 170: no such ref 0 [ 374.521282][ T360] usb 2-1: device descriptor read/8, error -71 [ 374.630228][ T360] usb usb2-port1: unable to enumerate USB device [ 374.740193][ T902] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 374.761514][ T902] usb 7-1: device descriptor read/8, error -71 [ 374.891521][ T902] usb 7-1: device descriptor read/8, error -71 [ 375.130132][ T902] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 375.151349][ T902] usb 7-1: device descriptor read/8, error -71 [ 375.188365][T14733] sit0: entered promiscuous mode [ 375.195055][T14733] netlink: 'syz.6.4883': attribute type 1 has an invalid length. [ 375.202988][T14733] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4883'. [ 375.239910][T14735] syzkaller0: entered promiscuous mode [ 375.245508][T14735] syzkaller0: entered allmulticast mode [ 375.285701][ T902] usb 7-1: device descriptor read/8, error -71 [ 375.398873][T14752] binder: Bad value for 'max' [ 375.411658][ T902] usb usb7-port1: unable to enumerate USB device [ 375.454041][T14760] pim6reg1: entered promiscuous mode [ 375.459844][T14760] pim6reg1: entered allmulticast mode [ 375.661289][ T406] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 375.831808][ T406] usb 2-1: not running at top speed; connect to a high speed hub [ 375.841142][ T406] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 375.852347][ T406] usb 2-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.865680][ T406] usb 2-1: config 1 interface 0 has no altsetting 0 [ 375.876139][ T406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.885350][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.893462][ T406] usb 2-1: Product: ⋂傸遑袢텿⛤ᷱ㯸啘냕물䐃辡↢ꎸ뭹졽辗捆뺣☏޺鏪纱਼䟏鬈Ⓕ䝑꿇Ⴚ둵醎Ꙉ㨎ꛤ૟踶₟몑ꗘ唞塅鋾绔핣홦겄긙鶝馴圝Ⓗ뤳柣뀾픚弩➱䣽Ϡ駲蓿읫ᅤꆸ苩ﹳ쉜瓚䜗ﯷ跬皁햛㲋ᜐ皼붲櫫अ츧勥璃㻮郤䱍㾔㙞㬭৆枤髊碹㉀꟧ꕬ [ 375.926243][ T406] usb 2-1: SerialNumber: 䊬੻芳⽵㚜C頀鳕怇讲抿鮇 [ 375.933896][ T902] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 375.943225][T14745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 376.012138][T14782] netlink: 'syz.3.4898': attribute type 11 has an invalid length. [ 376.023009][T14782] rust_binder: inc_ref_done called when no active inc_refs [ 376.037508][T14784] binder: Unknown parameter '0x00000000000000000000000000000000000000000000000000000000000000' [ 376.100120][ T902] usb 7-1: Using ep0 maxpacket: 8 [ 376.106988][ T902] usb 7-1: unable to get BOS descriptor or descriptor too short [ 376.115714][ T902] usb 7-1: config 6 has an invalid interface number: 248 but max is 0 [ 376.125271][ T902] usb 7-1: config 6 has no interface number 0 [ 376.131773][ T902] usb 7-1: config 6 interface 248 has no altsetting 0 [ 376.142461][T14791] devtmpfs: Unknown parameter '+' [ 376.143300][ T902] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 376.163092][ T406] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 376.171742][ T902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.179880][ T902] usb 7-1: Product: ည [ 376.187160][ T406] usb 2-1: USB disconnect, device number 34 [ 376.202080][ T902] usb 7-1: Manufacturer: Ђ [ 376.204526][ T36] audit: type=1400 audit(1790990826.511:11723): avc: denied { setattr } for pid=14794 comm="syz.3.4902" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 376.207002][ T902] usb 7-1: SerialNumber: Ч [ 376.444685][ T902] ums-karma 7-1:6.248: USB Mass Storage device detected [ 376.474246][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4904'. [ 376.513532][ T902] usb 7-1: USB disconnect, device number 81 [ 376.601431][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'. [ 376.612416][T14813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 376.612454][T14813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295 [ 376.622928][T14813] rust_binder: Error while translating object. [ 376.632342][T14813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 376.638574][T14813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295 [ 376.981237][ T360] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 377.011223][ T360] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.512511][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4913'. [ 377.576794][T14835] binder: Unknown parameter 'seclVbel' [ 377.642543][ T36] audit: type=1326 audit(1790990827.951:11724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.666926][ T36] audit: type=1326 audit(1790990827.951:11725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.691324][ T36] audit: type=1326 audit(1790990827.951:11726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.715351][ T36] audit: type=1326 audit(1790990827.951:11727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.739908][ T36] audit: type=1326 audit(1790990827.951:11728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.742513][T14847] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 377.764238][ T36] audit: type=1326 audit(1790990827.951:11729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.806509][ T36] audit: type=1326 audit(1790990827.951:11730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.830859][ T36] audit: type=1326 audit(1790990827.951:11731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.835066][T14852] /dev/rnullb0: Can't open blockdev [ 377.854875][ T36] audit: type=1326 audit(1790990827.951:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 377.854921][ T36] audit: type=1326 audit(1790990827.951:11733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.1.4909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a898ebe9 code=0x7fc00000 [ 378.040121][ T360] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 378.139200][T14868] overlayfs: failed to clone upperpath [ 378.190176][ T360] usb 4-1: Using ep0 maxpacket: 16 [ 378.196807][ T360] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 378.205090][ T360] usb 4-1: config 0 has no interface number 0 [ 378.211409][ T360] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 378.221537][ T360] usb 4-1: config 0 interface 41 has no altsetting 0 [ 378.229807][ T360] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 378.238964][ T329] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 378.246804][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.255024][ T360] usb 4-1: Product: syz [ 378.259273][ T360] usb 4-1: Manufacturer: syz [ 378.264154][ T360] usb 4-1: SerialNumber: syz [ 378.271886][ T360] usb 4-1: config 0 descriptor?? [ 378.279467][T14849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.288079][ T360] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 378.370118][ T475] Bluetooth: hci0: command 0x1003 tx timeout [ 378.376213][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 378.410189][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 378.417065][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 378.426043][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 378.433986][ T329] usb 2-1: can't read configurations, error -61 [ 378.475372][T14878] overlayfs: failed to clone upperpath [ 378.491675][ T360] usb 4-1: USB disconnect, device number 33 [ 378.576823][T14885] overlayfs: missing 'lowerdir' [ 378.581820][ T329] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 378.740123][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 378.746856][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 378.755874][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 378.763603][ T329] usb 2-1: can't read configurations, error -61 [ 378.770783][ T329] usb usb2-port1: attempt power cycle [ 378.904799][T14890] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 378.928457][ T13] syzkaller0: tun_net_xmit 76 [ 378.932224][T14890] syzkaller0: create flow: hash 3484353853 index 1 [ 378.933737][ T13] syzkaller0: tun_net_xmit 48 [ 378.946130][T14890] syzkaller0: delete flow: hash 3484353853 index 1 [ 379.036827][T14894] netlink: 'syz.3.4937': attribute type 4 has an invalid length. [ 379.110204][ T329] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 379.112025][T14908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.118384][T14908] rust_binder: Failed copying into alloc: EFAULT [ 379.124953][T14908] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 379.131667][T14908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 379.132126][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 379.140235][T14908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:327 [ 379.151553][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.176922][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 379.184986][ T329] usb 2-1: can't read configurations, error -61 [ 379.259064][T14915] binder: Unknown parameter 'fscontext?}' [ 379.320126][ T329] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 379.340613][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 379.347273][ T329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.356502][ T329] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 379.364274][ T329] usb 2-1: can't read configurations, error -61 [ 379.371122][ T329] usb usb2-port1: unable to enumerate USB device [ 379.437460][T14924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.437520][T14924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.445583][T14924] rust_binder: inc_ref_done called when no active inc_refs [ 379.627999][T14945] rust_binder: Write failure EINVAL in pid:351 [ 379.650136][T14945] syzkaller0: entered promiscuous mode [ 379.662245][T14945] syzkaller0: entered allmulticast mode [ 380.469879][T14955] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4957'. [ 380.479003][T14955] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4957'. [ 380.488375][T14955] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4957'. [ 380.497879][T14955] netlink: 'syz.3.4957': attribute type 3 has an invalid length. [ 380.505723][T14955] netlink: 'syz.3.4957': attribute type 2 has an invalid length. [ 380.513693][T14955] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4957'. [ 380.760110][ T360] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 380.910120][ T360] usb 4-1: Using ep0 maxpacket: 16 [ 380.916867][ T360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.925642][ T360] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping [ 380.935093][ T360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.945328][ T360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.954272][ T360] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 380.968913][ T360] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.978344][ T360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.986401][ T360] usb 4-1: Product: syz [ 380.990628][ T360] usb 4-1: Manufacturer: syz [ 380.995555][ T360] usb 4-1: SerialNumber: syz [ 381.025963][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4958'. [ 381.036266][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4958'. [ 381.053998][T14963] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 381.062479][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4959'. [ 381.137556][T14983] netlink: 'syz.6.4964': attribute type 4 has an invalid length. [ 381.209111][ T360] usb 4-1: 0:2 : does not exist [ 381.218310][ T360] usb 4-1: USB disconnect, device number 34 [ 381.229948][T10290] udevd[10290]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 381.289864][T15003] overlayfs: failed to resolve './file1': -2 [ 381.466396][T15012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.466793][T15012] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 381.473750][T15012] rust_binder: Read failure Err(EFAULT) in pid:187 [ 381.564535][ T9] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 381.600962][ T9] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.825624][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4978'. [ 381.837983][T15030] x_tables: duplicate underflow at hook 1 [ 381.926878][T15038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.071339][T15057] binder: Bad value for 'max' [ 382.460230][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 382.492555][T15092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.493895][T15092] tmpfs: Unknown parameter 'nr_ino* 3bşh}+' [ 382.511529][T15092] rust_binder: Error while translating object. [ 382.511590][T15092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 382.517806][T15092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:234 [ 382.637799][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 382.661993][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.680298][ T9] usb 4-1: config 0 descriptor?? [ 382.689380][ T9] usb 4-1: selecting invalid altsetting 1 [ 382.700409][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 382.709920][T10290] udevd[10290]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 382.775596][T15107] rust_binder: 245: no such ref 0 [ 382.870143][ T360] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 382.955655][T15113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 382.955692][T15113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:379 [ 383.020082][ T360] usb 2-1: Using ep0 maxpacket: 8 [ 383.035963][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.044607][ T360] usb 2-1: config 6 has an invalid descriptor of length 147, skipping remainder of the config [ 383.055139][ T360] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 383.065891][ T360] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 383.075051][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.083565][ T360] usb 2-1: Product: syz [ 383.087960][ T360] usb 2-1: Manufacturer: syz [ 383.092652][ T360] usb 2-1: SerialNumber: syz [ 383.304371][ T360] usb 2-1: USB disconnect, device number 39 [ 383.659871][T15122] fuse: Unknown parameter '0x0000000000000004' [ 383.924886][T15139] SELinux: failed to load policy [ 383.924926][T15136] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 384.051745][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 384.051768][ T36] audit: type=1400 audit(1790990834.368:11743): avc: denied { name_bind } for pid=15167 comm="syz.6.5024" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 384.121089][T15179] __vm_enough_memory: pid: 15179, comm: syz.1.5028, bytes: 18014402804453376 not enough memory for the allocation [ 384.158408][T15187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 384.285696][T15196] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5035'. [ 384.323224][T15197] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 384.353716][T15204] overlayfs: failed to clone upperpath [ 384.403719][ T36] audit: type=1400 audit(1790990834.718:11744): avc: denied { read } for pid=15169 comm="syz.7.5025" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.432108][ T36] audit: type=1400 audit(1790990834.718:11745): avc: denied { open } for pid=15169 comm="syz.7.5025" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.571117][T15228] overlayfs: failed to clone upperpath [ 384.616488][T15234] netlink: 'syz.1.5049': attribute type 58 has an invalid length. [ 384.638295][T15235] netlink: 'syz.1.5049': attribute type 58 has an invalid length. [ 384.657052][ T36] audit: type=1400 audit(1790990834.968:11746): avc: denied { mounton } for pid=15233 comm="syz.1.5049" path="/dev/binderfs/binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.311960][ T406] usb 4-1: USB disconnect, device number 35 [ 385.328984][T15276] overlayfs: conflicting lowerdir path [ 385.350240][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 385.396719][T15279] rust_binder: Failed copying into alloc: EFAULT [ 385.396747][T15279] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 385.403516][T15279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 385.412354][T15279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:286 [ 385.495442][T15287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 385.504749][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 385.522200][ T9] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 385.533236][ T9] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 385.537298][ T36] audit: type=1400 audit(1790990835.848:11747): avc: denied { setattr } for pid=15289 comm="syz.7.5067" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 385.543717][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.582819][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 385.589607][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 385.599027][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.610813][ T9] usb 2-1: config 0 descriptor?? [ 385.622341][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 385.705685][T15312] incfs_lookup_dentry err:-13 [ 385.710772][T15312] incfs: Can't find or create .index dir in ./bus [ 385.717490][T15312] incfs: mount failed -13 [ 385.726860][T15314] can0: slcan on ttyS3. [ 385.762214][T15314] can0 (unregistered): slcan off ttyS3. [ 386.251132][ T9] usb 2-1: USB disconnect, device number 40 [ 386.270702][ T329] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 386.279006][ T329] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 386.587187][T15388] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5092'. [ 386.611221][ T36] audit: type=1400 audit(1790990836.928:11748): avc: granted { setsecparam } for pid=15392 comm="syz.1.5093" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 386.900158][ T329] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 387.051306][ T329] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 387.061764][ T329] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 387.071126][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.082604][ T329] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 387.283056][T15397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 387.284042][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5094'. [ 387.300320][T15397] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 387.300351][T15397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 387.308495][T15397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:271 [ 387.318692][ T9] usb 2-1: USB disconnect, device number 41 [ 387.406876][ T36] audit: type=1326 audit(1790990837.718:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.6.5096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606f78ebe9 code=0x0 [ 387.509469][ T36] audit: type=1326 audit(1790990837.818:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.6.5096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606f78ebe9 code=0x0 [ 387.543108][T15410] overlayfs: failed to clone upperpath [ 387.603546][T15424] netlink: 460 bytes leftover after parsing attributes in process `syz.6.5102'. [ 387.626320][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5103'. [ 387.655677][T15436] SELinux: security_context_str_to_sid () failed with errno=-22 [ 387.679055][T15440] __vm_enough_memory: pid: 15440, comm: syz.3.5108, bytes: 18014402804453376 not enough memory for the allocation [ 387.725197][T15446] netlink: 'syz.6.5107': attribute type 1 has an invalid length. [ 387.728494][T15444] rust_binder: Write failure EFAULT in pid:418 [ 387.735362][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5107'. [ 388.151490][T15461] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5114'. [ 388.360329][T15469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5117'. [ 388.369962][T15469] tipc: Invalid UDP bearer configuration [ 388.369999][T15469] tipc: Enabling of bearer rejected, failed to enable media [ 388.429203][ T36] audit: type=1400 audit(1790990838.658:11751): avc: denied { write } for pid=15462 comm="syz.1.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 388.506786][T15477] rust_binder: Write failure EFAULT in pid:435 [ 388.557762][T15484] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5122'. [ 388.710105][ T346] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 388.861275][ T346] usb 2-1: config 1 interface 0 altsetting 224 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.874515][ T346] usb 2-1: config 1 interface 0 has no altsetting 0 [ 388.882729][ T346] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.40 [ 388.892083][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.900234][ T346] usb 2-1: Product: ﶜ놤鱁㦐ݦ귪ᕷ묣䁲ꦍ튌鰮玪㲯㹄흘돡ዥ僗ﳽߨሃ㭮樹뚆ᵓ겋䪄㎳䫋冴ꄵ딬覧锜紝ᾦ돇愺鈝긁헉뛽獁䔶἞俰Ḧ䘞カ鰑쩺㿯㣼塏셩ᎍἒ튮粈ംঢ匘발툞㇖鉮䍻忿앒겺ꭐ楖៸晁 [ 388.924992][ T346] usb 2-1: Manufacturer: К [ 388.929630][ T346] usb 2-1: SerialNumber: 整ꑸଌ㮂䛌枺蕻绒袱ꖭ靿鱭읐扥蝘嶡摗孁૭썟欵꼧派駾㽰큥䃭傈㖆᷿༅끆굔ै囑鐫驗⊹Ʉ饇␗ঔㄫ긬떩댱拝꧿⾊鏍ꂧ㳮Ᵽ拏䉅ⷝ㒎꿱ழ䧾⋫ᖑ✐桫嶈ꂭ㹎靝옉謯뒐覾㔢ၪ䈖獜ᾊ쵨鰋粨䑀䛚騶벝ﶯ栱㶞꾭փ飆怚䕅 [ 388.979343][ T36] audit: type=1400 audit(1790990839.288:11752): avc: denied { mounton } for pid=15495 comm="syz.7.5126" path="/syzcgroup/unified/syz7" dev="pstore" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 388.979414][T15496] /dev/rnullb0: Can't open blockdev [ 389.017240][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5126'. [ 389.026705][T15496] erspan0: entered promiscuous mode [ 389.078479][ T36] audit: type=1400 audit(1790990839.388:11753): avc: denied { read write } for pid=13982 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.094466][T15498] /dev/rnullb0: Can't open blockdev [ 389.103215][ T36] audit: type=1400 audit(1790990839.388:11754): avc: denied { open } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.133311][ T36] audit: type=1400 audit(1790990839.388:11755): avc: denied { ioctl } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.143390][T15500] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 389.176856][ T346] usbhid 2-1:1.0: can't add hid device: -71 [ 389.186937][ T346] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 389.202492][T15505] netlink: 'syz.6.5130': attribute type 4 has an invalid length. [ 389.207705][ T346] usb 2-1: USB disconnect, device number 42 [ 389.211279][T15505] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5130'. [ 389.227255][ T36] audit: type=1400 audit(1790990839.538:11756): avc: denied { create } for pid=15506 comm="syz.7.5131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.228593][T15505] overlayfs: failed to clone upperpath [ 389.276590][ T36] audit: type=1400 audit(1790990839.558:11757): avc: denied { setopt } for pid=15506 comm="syz.7.5131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.416167][ T36] audit: type=1400 audit(1790990839.728:11758): avc: denied { append } for pid=15517 comm="syz.7.5135" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.465951][ T36] audit: type=1400 audit(1790990839.778:11759): avc: denied { read } for pid=15523 comm="syz.3.5137" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.489198][ T36] audit: type=1400 audit(1790990839.778:11760): avc: denied { open } for pid=15523 comm="syz.3.5137" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.517641][ T36] audit: type=1400 audit(1790990839.778:11761): avc: denied { ioctl } for pid=15523 comm="syz.3.5137" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.545278][ T36] audit: type=1400 audit(1790990839.778:11762): avc: denied { set_context_mgr } for pid=15523 comm="syz.3.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 389.753911][T15531] rust_binder: 332: no such ref 3 [ 389.814222][T15531] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 389.829567][T15531] rust_binder: Write failure EINVAL in pid:332 [ 390.003704][T15543] /dev/rnullb0: Can't open blockdev [ 390.087158][T15549] netlink: 'syz.6.5145': attribute type 16 has an invalid length. [ 390.108175][T15555] rust_binder: Write failure EFAULT in pid:297 [ 390.219799][T15564] rust_binder: Write failure EFAULT in pid:302 [ 390.291026][T15567] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 390.320137][T15567] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 390.352066][T15567] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 390.452441][T15572] syzkaller0: entered promiscuous mode [ 390.458175][T15572] syzkaller0: entered allmulticast mode [ 390.622980][ T406] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 390.783209][ T406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.788974][T15588] overlayfs: failed to clone upperpath [ 390.793781][ T406] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 390.809783][ T406] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 390.867047][ T406] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 390.881573][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.889990][ T406] usb 4-1: Product: syz [ 390.913874][ T406] usb 4-1: Manufacturer: syz [ 390.918799][ T406] usb 4-1: SerialNumber: syz [ 390.953211][ T406] usb 4-1: config 0 descriptor?? [ 391.264561][ T902] usb 4-1: USB disconnect, device number 37 [ 391.363244][T15629] netlink: 'syz.6.5171': attribute type 4 has an invalid length. [ 391.372940][T15629] netlink: 'syz.6.5171': attribute type 4 has an invalid length. [ 391.419130][T15631] cgroup: Bad value for 'name' [ 391.626081][T15640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15640 comm=syz.1.5175 [ 391.647362][T15643] rust_binder: Read failure Err(EAGAIN) in pid:366 [ 391.662935][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.690272][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.834080][T15645] SELinux: security_context_str_to_sid () failed with errno=-22 [ 391.900114][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 392.060086][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 392.077614][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 392.105182][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 392.125078][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 392.148794][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.170965][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.190084][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.217892][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 392.242522][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.263188][ T9] usb 2-1: config 0 descriptor?? [ 392.366015][ T346] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 392.500259][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 392.521565][ T9] usb 2-1: USB disconnect, device number 43 [ 392.528597][ T346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.552936][ T346] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.553132][ T9] usblp0: removed [ 392.563421][ T346] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.577258][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.602443][ T346] usb 4-1: config 0 descriptor?? [ 392.696064][T15657] rust_binder: Write failure EFAULT in pid:370 [ 392.801264][T15659] __nla_validate_parse: 1 callbacks suppressed [ 392.801288][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5180'. [ 393.010254][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 393.016750][T15667] binder: Bad value for 'stats' [ 393.171750][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 393.183023][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 393.192269][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 393.201046][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 393.210198][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 393.222123][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 393.232021][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 393.245237][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 393.255356][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.275639][ T9] usb 2-1: config 0 descriptor?? [ 393.302656][T15675] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5188'. [ 393.421725][T15682] /dev/rnullb0: Can't open blockdev [ 393.452869][T15682] 9pnet_fd: Insufficient options for proto=fd [ 393.543596][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 393.600228][ T9] usb 2-1: USB disconnect, device number 44 [ 393.640354][ T9] usblp0: removed [ 393.682352][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.720255][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.758946][T15692] fuse: Unknown parameter '0x0000000000000004' [ 393.788161][T15694] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5195'. [ 393.801494][T15694] rust_binder: 396: no such ref 1 [ 393.806698][T15694] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 393.815365][T15694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 393.816686][T15694] rust_binder: Error while translating object. [ 393.826699][T15694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 393.834168][T15694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 394.081611][ T36] kauditd_printk_skb: 717 callbacks suppressed [ 394.081634][ T36] audit: type=1400 audit(1790990844.398:12480): avc: denied { create } for pid=15712 comm="syz.6.5201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.133236][ T36] audit: type=1400 audit(1790990844.398:12481): avc: denied { read write } for pid=13982 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.158240][ T36] audit: type=1400 audit(1790990844.398:12482): avc: denied { read write open } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.205625][ T36] audit: type=1400 audit(1790990844.398:12483): avc: denied { ioctl } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.233612][ T36] audit: type=1400 audit(1790990844.438:12484): avc: denied { read write } for pid=15714 comm="syz.1.5202" name="binder1" dev="binder" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 394.261094][ T36] audit: type=1400 audit(1790990844.438:12485): avc: denied { write } for pid=15712 comm="syz.6.5201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.283424][ T36] audit: type=1400 audit(1790990844.438:12486): avc: denied { read write open } for pid=15714 comm="syz.1.5202" path="/dev/binderfs/binder1" dev="binder" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 394.306098][T15718] input: syz1 as /devices/virtual/input/input34 [ 394.310951][ T36] audit: type=1400 audit(1790990844.438:12487): avc: denied { read } for pid=15714 comm="syz.1.5202" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.339395][ T36] audit: type=1400 audit(1790990844.438:12488): avc: denied { read open } for pid=15714 comm="syz.1.5202" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.360007][T15718] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5203'. [ 394.374052][ T36] audit: type=1400 audit(1790990844.438:12489): avc: denied { write } for pid=15712 comm="syz.6.5201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.402851][T15725] tipc: Started in network mode [ 394.409048][T15725] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 394.419626][T15725] tipc: Enabling of bearer rejected, failed to enable media [ 394.484145][T15731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.505321][T15731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.529360][T15736] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5209'. [ 394.549797][T15736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 394.549840][T15736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:411 [ 394.560261][T15737] SELinux: policydb version -290336080 does not match my version range 15-33 [ 394.613682][T15737] SELinux: failed to load policy [ 394.684568][T15746] rust_binder: Read failure Err(EFAULT) in pid:417 [ 395.000142][ T406] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 395.160304][ T406] usb 2-1: Using ep0 maxpacket: 8 [ 395.187877][ T406] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.208238][ T406] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 395.241389][ T406] usb 2-1: config 6 has no interface number 0 [ 395.242887][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5218'. [ 395.278077][ T406] usb 2-1: config 6 interface 248 has no altsetting 0 [ 395.308911][ T406] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 395.330065][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.349823][ T406] usb 2-1: Product: syz [ 395.358948][ T406] usb 2-1: Manufacturer: syz [ 395.372732][ T406] usb 2-1: SerialNumber: syz [ 395.381699][T15771] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5220'. [ 395.436793][T15773] tipc: Started in network mode [ 395.447274][T15773] tipc: Node identity fffeffff, cluster identity 4711 [ 395.462257][T15773] tipc: Node number set to 4294901759 [ 395.475943][T15773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:421 [ 395.644949][ T406] ums-karma 2-1:6.248: USB Mass Storage device detected [ 395.740558][ T406] usb 2-1: USB disconnect, device number 45 [ 395.955423][T15811] rust_binder: Failed copying into alloc: EFAULT [ 395.955455][T15811] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 395.962156][T15811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 395.970890][T15811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:437 [ 395.985686][T15813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 396.179943][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.188755][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.608924][T15835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 396.841559][T15846] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 396.880170][ T902] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 397.030191][ T902] usb 2-1: Using ep0 maxpacket: 8 [ 397.038756][ T902] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 397.047360][ T902] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.055472][ T902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.065784][ T902] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 397.074873][ T902] usb 2-1: config 0 has no interface number 0 [ 397.081178][ T902] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.094614][ T902] usb 2-1: config 0 interface 150 has no altsetting 0 [ 397.102291][ T902] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 397.111490][ T902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.122854][ T902] usb 2-1: config 0 descriptor?? [ 397.255427][T15854] loop2: detected capacity change from 0 to 7 [ 397.262535][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.271978][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.280093][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.289457][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.297538][T15854] loop2: unable to read partition table [ 397.303558][T15854] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 397.322997][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.332352][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.344754][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.354427][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.363815][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.373186][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.383820][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.387737][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.393307][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.404155][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.414342][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 397.423070][T15858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.427276][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 397.438127][T15858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.588888][ T346] usb 2-1: USB disconnect, device number 46 [ 398.182968][T15865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 398.530145][ T346] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 398.700115][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 398.708189][ T346] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 398.716847][ T346] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 398.725809][ T346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 398.735108][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.744853][ T346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 398.754780][ T346] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 398.767919][ T346] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 398.777238][ T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.787316][ T346] usb 2-1: config 0 descriptor?? [ 398.982687][T15884] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.006111][ T346] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 399.037524][ T346] usb 2-1: USB disconnect, device number 47 [ 399.046837][ T346] usblp0: removed [ 399.064368][T15886] overlayfs: failed to clone upperpath [ 399.143840][ T36] kauditd_printk_skb: 647 callbacks suppressed [ 399.143864][ T36] audit: type=1400 audit(1790990849.458:13137): avc: denied { mounton } for pid=15887 comm="syz.6.5259" path="/437/file0" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 399.208435][ T36] audit: type=1400 audit(1790990849.518:13138): avc: denied { mounton } for pid=15887 comm="syz.6.5259" path="/437/file0" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 399.227983][T15889] bpf: Bad value for 'uid' [ 399.242523][T15889] fuseblk: Bad value for 'user_id' [ 399.247809][T15889] fuseblk: Bad value for 'user_id' [ 399.250324][ T36] audit: type=1400 audit(1790990849.518:13139): avc: denied { create } for pid=15887 comm="syz.6.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 399.280536][ T36] audit: type=1400 audit(1790990849.518:13140): avc: denied { setopt } for pid=15887 comm="syz.6.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 399.302245][ T36] audit: type=1400 audit(1790990849.518:13141): avc: denied { read write } for pid=15875 comm="syz.1.5253" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.327251][ T36] audit: type=1400 audit(1790990849.518:13142): avc: denied { read write open } for pid=15875 comm="syz.1.5253" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.368766][ T36] audit: type=1400 audit(1790990849.518:13143): avc: denied { ioctl } for pid=15875 comm="syz.1.5253" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.395499][ T36] audit: type=1400 audit(1790990849.518:13144): avc: denied { ioctl } for pid=15875 comm="syz.1.5253" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.428189][ T36] audit: type=1400 audit(1790990849.538:13145): avc: denied { setopt } for pid=15887 comm="syz.6.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 399.448739][ T36] audit: type=1400 audit(1790990849.538:13146): avc: denied { create } for pid=15887 comm="syz.6.5259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.550112][ T346] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 399.588223][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5262'. [ 399.679873][T15902] rust_binder: Error while translating object. [ 399.679909][T15902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 399.686313][T15902] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 399.696467][T15902] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:512 [ 399.720152][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 399.736652][ T346] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 399.745291][ T346] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 399.754077][ T346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 399.763355][ T346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.773145][ T346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 399.782997][ T346] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 399.796369][ T346] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 399.805725][ T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.815800][ T346] usb 2-1: config 0 descriptor?? [ 400.223179][ T360] rust_binder: 0: removing orphan mapping 0:24 [ 400.248411][ T346] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 400.288452][T15916] fuse: Unknown parameter '0x0000000000000004' [ 400.288518][ T346] usb 2-1: USB disconnect, device number 48 [ 400.309309][T10290] udevd[10290]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 400.313653][ T346] usblp0: removed [ 400.321596][T10290] udevd[10290]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 400.387340][T15921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 400.395578][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.430258][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.454582][T15921] rust_binder: inc_ref_done called when no active inc_refs [ 400.483855][T15931] 9pnet_fd: Insufficient options for proto=fd [ 400.648409][T15945] fuse: Unknown parameter '0x0000000000000004' [ 400.786887][T15953] input: syz1 as /devices/virtual/input/input35 [ 401.046704][T15974] netlink: 'syz.6.5288': attribute type 27 has an invalid length. [ 401.191892][T15989] debugfs: Bad value for 'uid' [ 401.200901][T15989] debugfs: Bad value for 'uid' [ 401.307652][T15998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.307699][T15998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:535 [ 401.311170][T16000] fuse: Unknown parameter '0x00000000000000000x0000000000000005' [ 401.322390][T15998] rust_binder: Read failure Err(EFAULT) in pid:535 [ 401.330922][T16000] fuseblk: Bad value for 'group_id' [ 401.346631][T16000] fuseblk: Bad value for 'group_id' [ 401.468816][T16008] tipc: Enabling of bearer rejected, failed to enable media [ 401.636003][T16020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.640139][T16020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.646820][T16020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 402.067735][T16031] overlayfs: failed to clone upperpath [ 402.656564][T16048] rust_binder: Error while translating object. [ 402.656622][T16048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 402.663009][T16048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:452 [ 402.837427][T16054] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5316'. [ 402.910442][T16061] 9pnet_fd: Insufficient options for proto=fd [ 403.086861][T16070] netlink: 596 bytes leftover after parsing attributes in process `syz.6.5322'. [ 403.105503][T16067] rust_binder: Failed to allocate buffer. len:18446744073709551352, is_oneway:false [ 403.105541][T16067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 403.116848][T16067] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 403.127558][T16067] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:458 [ 403.183189][ T346] rust_binder: 16066: removing orphan mapping 0:24 [ 403.236978][T16081] rust_binder: 559: no such ref 3 [ 403.272317][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.301501][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.313084][T16081] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 403.330334][T16081] rust_binder: Write failure EINVAL in pid:559 [ 403.382177][T16087] syzkaller0: entered promiscuous mode [ 403.394727][T16087] syzkaller0: entered allmulticast mode [ 403.916168][T16102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.925975][T16102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.936973][T16103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 403.937018][T16102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 403.944438][T16103] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 403.951102][T16103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 403.959231][T16103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:563 [ 403.969342][T16102] rust_binder: Write failure EINVAL in pid:563 [ 404.200539][ T36] kauditd_printk_skb: 875 callbacks suppressed [ 404.200562][ T36] audit: type=1400 audit(1790990854.518:14010): avc: denied { create } for pid=16104 comm="syz.6.5334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.235839][ T36] audit: type=1400 audit(1790990854.518:14011): avc: denied { write } for pid=16104 comm="syz.6.5334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.267299][ T36] audit: type=1400 audit(1790990854.578:14012): avc: denied { create } for pid=16106 comm="syz.6.5335" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.289289][ T36] audit: type=1400 audit(1790990854.578:14013): avc: denied { map } for pid=16106 comm="syz.6.5335" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.315314][ T36] audit: type=1400 audit(1790990854.578:14014): avc: denied { read write } for pid=16106 comm="syz.6.5335" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.341379][ T36] audit: type=1400 audit(1790990854.578:14015): avc: denied { map } for pid=16106 comm="syz.6.5335" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.366488][ T36] audit: type=1400 audit(1790990854.578:14016): avc: denied { read write } for pid=16106 comm="syz.6.5335" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.506371][ T36] audit: type=1400 audit(1790990854.818:14017): avc: denied { read write } for pid=13446 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.533034][ T36] audit: type=1400 audit(1790990854.818:14018): avc: denied { read write open } for pid=13446 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.561551][ T36] audit: type=1400 audit(1790990854.818:14019): avc: denied { ioctl } for pid=13446 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.592440][T16113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.601902][T16113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.638910][T16113] /dev/rnullb0: Can't open blockdev [ 404.747518][T16116] /dev/rnullb0: Can't open blockdev [ 405.547440][T16141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.556286][T16141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.514584][T16197] fuse: Bad value for 'fd' [ 406.590650][T16203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5369'. [ 406.752864][T16214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 406.806201][T16215] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 406.812804][T16215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 406.821052][T16215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:601 [ 407.329984][T16238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.391633][ T406] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 407.420351][ T406] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 407.496749][T16244] fido_id[16244]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 407.614673][T16249] rust_binder: 604: no such ref 0 [ 407.620192][T16250] rust_binder: 604: no such ref 0 [ 407.628161][T16249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.637638][T16249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.649720][T16249] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 407.657363][T16249] rust_binder: 604: no such ref 0 [ 407.800758][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 407.871738][T16265] overlayfs: failed to clone upperpath [ 407.962848][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.973978][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.983815][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.996887][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.006123][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.016294][ T10] usb 2-1: config 0 descriptor?? [ 408.198395][T16271] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 408.207261][T16271] rust_binder: Write failure EINVAL in pid:607 [ 408.331942][T16275] overlayfs: missing 'lowerdir' [ 408.393962][T16277] binder: Unknown parameter 'di2sync' [ 408.432669][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.450588][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.470705][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.478413][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.488967][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.498183][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.507045][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.515512][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.547580][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.559290][T16279] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.559301][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.559333][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.571521][T16279] loop0: detected capacity change from 0 to 7 [ 408.583477][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.599489][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.608808][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.619369][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.626951][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.627000][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.630083][T16279] loop0: unable to read partition table [ 408.640286][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.649423][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.651968][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.666007][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.679712][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.681883][T16279] loop_reread_partitions: partition scan of loop0 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 408.690676][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.714778][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.724208][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.735882][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.746875][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.755216][T16279] Invalid logical block size (7) [ 408.755245][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.771167][T16288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 408.773227][T16288] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 408.782921][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.800454][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.809800][T16282] loop0: unable to read partition table [ 408.817230][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.825533][T16288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 408.825583][T16288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:615 [ 408.835406][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.857612][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.858140][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.866830][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.874670][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.882219][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.897510][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.910064][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.913290][T16293] fuse: Bad value for 'fd' [ 408.919668][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.924326][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 408.935637][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.949351][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.960050][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.969358][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.980043][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.989648][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 408.997909][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.056154][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.073899][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.120684][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.149150][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.178892][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.187775][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.202686][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.215463][ T36] kauditd_printk_skb: 1022 callbacks suppressed [ 409.215487][ T36] audit: type=1400 audit(1790990860.524:15042): avc: denied { create } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.255582][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.272744][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.280634][ T36] audit: type=1400 audit(1790990860.554:15043): avc: denied { write } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.320453][ T10] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 409.358813][ T10] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 409.367816][ T36] audit: type=1400 audit(1790990860.554:15044): avc: denied { nlmsg_write } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.400830][ T10] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 409.490871][ T36] audit: type=1400 audit(1790990860.554:15045): avc: denied { create } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 409.521974][T16305] rust_binder: Write failure EFAULT in pid:438 [ 409.530310][ T10] usb 2-1: USB disconnect, device number 49 [ 409.618190][ T36] audit: type=1400 audit(1790990860.554:15046): avc: denied { write } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 409.687681][ T36] audit: type=1400 audit(1790990860.554:15047): avc: denied { read } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 409.740001][ T36] audit: type=1400 audit(1790990860.564:15048): avc: denied { remount } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 409.766642][T16308] fido_id[16308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 409.779612][ T36] audit: type=1400 audit(1790990860.564:15049): avc: denied { create } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.818404][T16318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 409.820954][T16318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 409.835330][ T36] audit: type=1400 audit(1790990860.564:15050): avc: denied { write } for pid=16295 comm="syz.3.5398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.874067][T16318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 410.034903][ T406] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 410.076947][ T406] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.024943][T16349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.086354][T16350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 412.120122][ T346] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 412.282876][ T346] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 412.291083][ T346] usb 2-1: config 0 has no interface number 0 [ 412.301013][ T346] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 412.310415][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.318622][ T346] usb 2-1: Product: syz [ 412.322831][ T346] usb 2-1: Manufacturer: syz [ 412.327562][ T346] usb 2-1: SerialNumber: syz [ 412.334041][ T346] usb 2-1: config 0 descriptor?? [ 412.591336][ T346] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 412.597909][ T346] usb 2-1: No valid video chain found. [ 412.616450][ T346] usb 2-1: USB disconnect, device number 50 [ 412.626891][T15686] udevd[15686]: setting owner of /dev/bus/usb/002/050 to uid=0, gid=0 failed: No such file or directory [ 412.650476][T16360] __vm_enough_memory: pid: 16360, comm: syz.3.5417, bytes: 18014402804453376 not enough memory for the allocation [ 412.852448][T16365] binder: Bad value for 'stats' [ 412.903738][T16369] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5420'. [ 412.913078][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5420'. [ 413.008052][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.008356][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.015763][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.017170][T16376] rust_binder: Error while translating object. [ 413.022854][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.031182][T16376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 413.042867][T16376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:644 [ 413.045598][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.089549][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.109685][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.127049][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.136338][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.144494][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.151531][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.158618][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.165649][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.186140][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.203750][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.220607][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.236874][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.250799][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.263298][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.264941][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.272102][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.278946][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.286403][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.293350][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.308780][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.318148][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.327005][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.334946][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.342897][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.359337][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.375983][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.398772][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.406943][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.422083][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.436460][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.451876][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.466451][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.474527][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.482499][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.489449][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.497788][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.505823][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.513780][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.520964][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.527871][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.534808][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.541778][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.548648][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.555762][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.562802][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.569636][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.577768][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.586600][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.594487][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.602258][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.609742][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.617259][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.624790][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.632467][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.639353][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.647351][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.656579][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.664431][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.672169][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.679432][T16375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.757082][T16400] netlink: 'syz.3.5430': attribute type 4 has an invalid length. [ 413.773079][T16400] netlink: 'syz.3.5430': attribute type 4 has an invalid length. [ 413.849646][T16406] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5432'. [ 413.862817][T16407] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5432'. [ 413.880183][T16404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.894482][T16406] overlayfs: failed to clone upperpath [ 413.900998][T16404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.125053][T16404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.147689][T16404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.161517][T16404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.171370][ T44] bridge_slave_1: left allmulticast mode [ 414.172787][T16404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.180718][ T44] bridge_slave_1: left promiscuous mode [ 414.193620][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.201677][ T44] bridge_slave_0: left allmulticast mode [ 414.207414][ T44] bridge_slave_0: left promiscuous mode [ 414.213225][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.307172][ T36] kauditd_printk_skb: 719 callbacks suppressed [ 414.307196][ T36] audit: type=1400 audit(1790990865.614:15753): avc: denied { read write } for pid=13982 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.343732][ T36] audit: type=1400 audit(1790990865.614:15754): avc: denied { read write open } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.370722][ T36] audit: type=1400 audit(1790990865.614:15755): avc: denied { ioctl } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.401168][ T36] audit: type=1400 audit(1790990865.644:15756): avc: denied { read write } for pid=16408 comm="syz.7.5433" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 414.425792][ T36] audit: type=1400 audit(1790990865.644:15757): avc: denied { read write open } for pid=16408 comm="syz.7.5433" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 414.476150][ T36] audit: type=1400 audit(1790990865.654:15758): avc: denied { append } for pid=16408 comm="syz.7.5433" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 414.524122][ T36] audit: type=1400 audit(1790990865.654:15759): avc: denied { append } for pid=16408 comm="syz.7.5433" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 414.570115][ T36] audit: type=1400 audit(1790990865.654:15760): avc: denied { create } for pid=16408 comm="syz.7.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.596358][ T44] veth1_macvtap: left promiscuous mode [ 414.603378][ T44] veth0_vlan: left promiscuous mode [ 414.609097][ T36] audit: type=1400 audit(1790990865.654:15761): avc: denied { setopt } for pid=16408 comm="syz.7.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.668343][ T36] audit: type=1400 audit(1790990865.654:15762): avc: denied { setopt } for pid=16408 comm="syz.7.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.778585][T16424] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 415.038549][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.048194][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.056247][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.064831][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.072466][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.079606][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.088300][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.098296][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.105867][T16435] rust_binder: 509: no such ref 3 [ 415.119196][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.119535][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.139436][T16437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.156359][T16440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 415.326611][T16451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 415.333553][T16451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656 [ 415.629340][T16473] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 415.639404][T16473] rust_binder: Error while translating object. [ 415.650260][T16473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 415.656946][T16473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:543 [ 415.698281][T16475] netlink: 'syz.6.5447': attribute type 13 has an invalid length. [ 415.762416][T16482] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 416.141746][T16489] rust_binder: Write failure EFAULT in pid:662 [ 416.217123][T16499] binder: Unknown parameter '' [ 416.273404][T16503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.283078][T16503] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 416.289786][T16503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 416.304320][T16503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:670 [ 416.445953][T16528] /dev/rnullb0: Can't open blockdev [ 416.581643][T16545] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5467'. [ 417.396927][T16554] 9pnet_fd: p9_fd_create_tcp (16554): problem connecting socket to 127.0.0.1 [ 417.409725][T16562] /dev/rnullb0: Can't open blockdev [ 417.489596][T16573] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 417.515652][T16574] rust_binder: Write failure EINVAL in pid:494 [ 417.718672][T16588] overlayfs: failed to clone upperpath [ 417.984645][T16597] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 418.126281][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5487'. [ 418.140072][T16606] overlayfs: failed to clone lowerpath [ 418.211314][T16611] 9pnet: Could not find request transport: 3qe?٭fd [ 418.245712][T16614] fuse: Bad value for 'fd' [ 418.409727][T16630] 9pnet_fd: Insufficient options for proto=fd [ 418.565955][T16639] SELinux: security_context_str_to_sid (!S.ռcyдUʕa[j$!~PVٚ]=[5&ǪY # ) failed with errno=-22 [ 418.650384][T16641] veth1: entered allmulticast mode [ 418.668710][T16641] veth1: left allmulticast mode [ 418.815225][T16645] loop2: detected capacity change from 0 to 7 [ 418.821907][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.831229][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 418.839550][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 418.849018][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 418.857486][T16645] loop2: unable to read partition table [ 418.864051][T16645] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 419.038105][T16654] rust_binder: Error while translating object. [ 419.038188][T16654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 419.044620][T16654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:554 [ 419.294316][T16667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5507'. [ 419.312753][ T36] kauditd_printk_skb: 650 callbacks suppressed [ 419.312776][ T36] audit: type=1400 audit(1790990870.604:16413): avc: denied { write } for pid=16666 comm="syz.6.5507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 419.316411][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5508'. [ 419.319409][ T36] audit: type=1400 audit(1790990870.604:16414): avc: denied { nlmsg_write } for pid=16666 comm="syz.6.5507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 419.319445][ T36] audit: type=1400 audit(1790990870.624:16415): avc: denied { read } for pid=16668 comm="syz.7.5508" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.347244][T16669] rust_binder: Write failure EFAULT in pid:560 [ 419.395676][ T36] audit: type=1400 audit(1790990870.624:16416): avc: denied { read open } for pid=16668 comm="syz.7.5508" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.462015][ T36] audit: type=1400 audit(1790990870.624:16417): avc: denied { ioctl } for pid=16668 comm="syz.7.5508" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.491869][ T36] audit: type=1400 audit(1790990870.624:16418): avc: denied { create } for pid=16668 comm="syz.7.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.517058][T16676] fuse: Unknown parameter '0xffffffffffffffff' [ 419.537934][ T36] audit: type=1400 audit(1790990870.654:16419): avc: denied { ioctl } for pid=16668 comm="syz.7.5508" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.597598][ T36] audit: type=1400 audit(1790990870.734:16420): avc: denied { read write } for pid=13982 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.669592][ T36] audit: type=1400 audit(1790990870.734:16421): avc: denied { read write open } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.695492][ T36] audit: type=1400 audit(1790990870.734:16422): avc: denied { ioctl } for pid=13982 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.778905][T16693] 9pnet_fd: Insufficient options for proto=fd [ 419.877648][T16703] fuse: Unknown parameter '0xffffffffffffffff' [ 420.119878][T16721] can0: slcan on ttyS3. [ 420.153792][T16724] rust_binder: Write failure EFAULT in pid:503 [ 420.227429][T16726] fuse: Unknown parameter '0xffffffffffffffff' [ 420.241672][T16721] can0 (unregistered): slcan off ttyS3. [ 420.435204][T16750] SELinux: failed to load policy [ 420.455565][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5536'. [ 420.476258][T16753] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 420.523034][T16760] binder: Binderfs stats mode cannot be changed during a remount [ 420.534224][T16760] binder: Binderfs stats mode cannot be changed during a remount [ 420.595971][T16768] fuse: Unknown parameter '0xffffffffffffffff' [ 420.704450][T16772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:744 [ 420.739348][T16776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 421.570804][T16820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 421.664505][T16825] overlayfs: failed to clone upperpath [ 422.992652][T16873] pim6reg1: entered promiscuous mode [ 422.998097][T16873] pim6reg1: entered allmulticast mode [ 423.081966][T16878] __vm_enough_memory: pid: 16878, comm: syz.1.5574, bytes: 18014402804453376 not enough memory for the allocation [ 423.422425][T16895] netlink: 'syz.1.5581': attribute type 4 has an invalid length. [ 423.537211][T16900] 9pnet_fd: Insufficient options for proto=fd [ 423.729931][T16914] rust_binder: Write failure EFAULT in pid:576 [ 423.902906][T16924] tc_dump_action: action bad kind [ 424.434310][ T36] kauditd_printk_skb: 657 callbacks suppressed [ 424.434333][ T36] audit: type=1400 audit(1790990875.744:17080): avc: denied { read write } for pid=14153 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.485014][ T36] audit: type=1400 audit(1790990875.774:17081): avc: denied { read write open } for pid=14153 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.512983][ T36] audit: type=1400 audit(1790990875.774:17082): avc: denied { ioctl } for pid=14153 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.542132][ T36] audit: type=1400 audit(1790990875.824:17083): avc: denied { write } for pid=16930 comm="syz.1.5596" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 424.605312][ T36] audit: type=1400 audit(1790990875.824:17084): avc: denied { write } for pid=16930 comm="syz.1.5596" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 424.632548][ T36] audit: type=1400 audit(1790990875.854:17085): avc: denied { read write } for pid=16930 comm="syz.1.5596" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.656384][ T36] audit: type=1400 audit(1790990875.854:17086): avc: denied { read write open } for pid=16930 comm="syz.1.5596" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.683459][ T36] audit: type=1400 audit(1790990875.884:17087): avc: denied { read write } for pid=16930 comm="syz.1.5596" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 424.706937][T16936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.708425][T16936] rust_binder: 781: no such ref 0 [ 424.709968][ T36] audit: type=1400 audit(1790990875.884:17088): avc: denied { read write open } for pid=16930 comm="syz.1.5596" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 424.715587][T16936] rust_binder: inc_ref_done called when no active inc_refs [ 424.721097][ T36] audit: type=1400 audit(1790990875.884:17089): avc: denied { mounton } for pid=16930 comm="syz.1.5596" path="/proc/588/task" dev="proc" ino=92136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 424.762979][T16937] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 424.775439][T16937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 424.783529][T16937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:781 [ 424.830161][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 424.990100][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 424.998090][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.006566][ T10] usb 2-1: config 179 has no interface number 0 [ 425.012905][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.024111][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 425.035391][ T10] usb 2-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.046377][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.059788][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 425.068981][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.080886][T16931] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 425.298735][ T360] usb 2-1: USB disconnect, device number 51 [ 425.673293][T16972] SELinux: security_context_str_to_sid () failed with errno=-22 [ 425.714239][T16974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.724237][T16974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.733245][T16974] netlink: 428 bytes leftover after parsing attributes in process `syz.3.5608'. [ 426.086552][T16986] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5613'. [ 426.100084][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 426.251819][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 426.269994][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.295490][ T10] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 426.330136][ T10] usb 2-1: config 6 has no interface number 0 [ 426.333830][T17004] incfs: Options parsing error. -22 [ 426.336266][ T10] usb 2-1: too many endpoints for config 6 interface 248 altsetting 8: 223, using maximum allowed: 30 [ 426.343391][T17004] incfs: mount failed -22 [ 426.367135][ T10] usb 2-1: config 6 interface 248 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 426.388194][ T10] usb 2-1: config 6 interface 248 has no altsetting 0 [ 426.407108][ T10] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 426.426601][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.434902][ T10] usb 2-1: Product: syz [ 426.440413][ T10] usb 2-1: Manufacturer: syz [ 426.445130][ T10] usb 2-1: SerialNumber: syz [ 426.690401][ T10] ums-karma 2-1:6.248: USB Mass Storage device detected [ 426.746368][ T10] usb 2-1: USB disconnect, device number 52 [ 426.874866][T17025] 9pnet_fd: Insufficient options for proto=fd [ 426.953619][T17043] netlink: 'syz.6.5631': attribute type 4 has an invalid length. [Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.