last executing test programs: 1m35.336699543s ago: executing program 3 (id=519): syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f000064a000/0x2000)=nil, 0x2000, 0x19) (async) madvise(&(0x7f000064a000/0x2000)=nil, 0x2000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) (async) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = signalfd4(r2, &(0x7f0000000100), 0x8, 0x100800) fchdir(r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) (async) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 1m35.309544033s ago: executing program 3 (id=521): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000002010040"]) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r5) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r6, 0x0, r7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) (async) recvmmsg(r8, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) (async) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r9, &(0x7f0000000180)='./file0/file1\x00', 0x1e) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async, rerun: 32) r10 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) close(r10) 1m35.298532353s ago: executing program 3 (id=522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) rt_sigpending(0x0, 0xfffffffffffffe03) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x4, 0x2}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) rt_sigpending(0x0, 0xfffffffffffffe03) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$P9_RATTACH(r2, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x4, 0x2}}, 0x14) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) (async) 1m35.236638145s ago: executing program 3 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1c388a, 0x0) unshare(0x22020600) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001640), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000dbdf250d00000006000a0003000000"], 0x1c}}, 0x2800) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300001600000003000000000000000400030007000000b9080000000000ffeb0cac00000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000010000000000004000400000000000700000000000000000000000000000000000020000000000200010000000000000000070000000005000500008000000a"], 0xb0}}, 0x40) socket$inet6(0xa, 0xa, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000400)={0x2, {{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}}, {{0xa, 0x4e20, 0xffff, @mcast2}}}, 0x108) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) 1m35.193064426s ago: executing program 3 (id=524): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) r1 = socket$netlink(0x10, 0x3, 0xf) (async) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async, rerun: 64) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000100001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0xa0031718561b10dc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) (async) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) (async) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) (async, rerun: 64) ioctl$BLKRRPART(r0, 0x125f, 0x0) (rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m35.072723408s ago: executing program 3 (id=526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "0a55b0ca9cce75f5c91c906cf8542b42"}}]}, 0x194}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 1m35.062261238s ago: executing program 32 (id=526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x194, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "0a55b0ca9cce75f5c91c906cf8542b42"}}]}, 0x194}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 1m6.881096301s ago: executing program 4 (id=1124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') getdents64(r1, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x21c600, 0x0) close_range(r5, r4, 0x0) 1m6.366189351s ago: executing program 4 (id=1137): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000080)=@attr_pmu_init) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x10000007, 0x80, 0x20000, 0x0, 0x10000, 0x26}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg$unix(r2, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) faccessat(0xffffffffffffffff, 0x0, 0x3) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61d0007315793d3030303030303030303030303137373dbaf19b37373737373737372c0071d82f057b72a29b39f8c3d2984ffa0a38d7c28f5f79f516344eab7ea05dee634bec"]) 1m6.300714603s ago: executing program 4 (id=1138): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x80}, 0xe) r3 = fsopen(&(0x7f0000000180)='anon_inodefs\x00', 0x1) fsmount(r3, 0x0, 0x74) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000280)=""/163, 0xbb) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid}, {@nodevmap}, {@access_uid}, {@afid}]}}) r7 = memfd_secret(0x80000) ftruncate(r7, 0x3) ftruncate(r7, 0x3) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0x3e) read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) 1m5.970463549s ago: executing program 4 (id=1143): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f00000003c0)=0x43df, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @loopback, 0x9}, 0x1c) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) 1m5.795560403s ago: executing program 4 (id=1147): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6178020030303030304e30303030873031373737373737373737372c00"]) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6168}) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x3, 0x80, 0x7}) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) 1m5.695696435s ago: executing program 4 (id=1148): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5dc03a735595b942723fad49b453e90db459982c38", 0x58}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[]) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001d80)) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m5.650772046s ago: executing program 33 (id=1148): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5dc03a735595b942723fad49b453e90db459982c38", 0x58}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[]) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001d80)) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 36.863401231s ago: executing program 5 (id=1752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r3, &(0x7f00000046c0)=""/4096, 0x1000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0x2020) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x3, &(0x7f0000000340)=[{0x6, 0x20, 0xff, 0x5}, {0x6, 0x1, 0x8, 0x1}, {0x7b22, 0xfe, 0x40, 0x7}]}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r10 = dup2(r8, r7) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000040002000c0010000800014004000000", 0x58}], 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x45a5c1, 0x0) close(r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) setpriority(0x2, 0xff, 0x0) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[], 0xffdd) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000180)=""/248, &(0x7f0000000280)=0xf8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 35.93972758s ago: executing program 5 (id=1763): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/202, 0xf5}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f0000000480)=""/190, 0xc2}], 0x5, &(0x7f0000000040)=""/32, 0x20}, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x22, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 35.082931157s ago: executing program 5 (id=1775): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xf24d, 0x4) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x6c, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25060000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500001800800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000040003a14400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002007767320000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d72656700"/20], 0xc0}, 0x1, 0x0, 0x0, 0x4a270737c3d31334}, 0x20000811) r12 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000)=0x60) close_range(r12, 0xffffffffffffffff, 0x0) 35.004938359s ago: executing program 5 (id=1778): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r3, 0x0, 0x0) write$input_event(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b35, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='\x00', &(0x7f0000000140)='./file0\x00', r4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) 34.92069823s ago: executing program 5 (id=1779): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ppoll(&(0x7f0000000080), 0x1fffffffffffff7b, 0x0, 0x0, 0x62) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xdb1, 0x3, 0x801, 0x7, 0xfffffffeffffffff, 0x6, 0x8000000030000, 0x0, 0x0, 0x80000000, 0x10000000000008, 0x100000000, 0x5, 0xcf, 0x401, 0xc], 0x4000, 0x80100}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1101}, @fda={0x66646185, 0xfffffffffffffffe, 0x1, 0xf}, @fda={0x66646185, 0xc, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 34.904195841s ago: executing program 5 (id=1780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x81c}, 0x20000004) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x81c}, 0x20000004) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x7e, &(0x7f0000002080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "a35c5b81c49d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x185}, [@mdlm={0x13, 0x24, 0x12, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000040)={0x4000, 0x18000}) listen(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="07030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4004080}, 0x24008056) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="07030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4004080}, 0x24008056) 34.872437292s ago: executing program 34 (id=1780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x81c}, 0x20000004) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x81c}, 0x20000004) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x7e, &(0x7f0000002080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "a35c5b81c49d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x185}, [@mdlm={0x13, 0x24, 0x12, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000040)={0x4000, 0x18000}) listen(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="07030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4004080}, 0x24008056) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="07030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4004080}, 0x24008056) 7.993556638s ago: executing program 1 (id=2308): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0xa) ppoll(&(0x7f0000000000)=[{r0, 0x2020}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c0100001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000c8000800c40008000000bc"], 0x19c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) 7.990393728s ago: executing program 1 (id=2309): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4000010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 7.989898978s ago: executing program 1 (id=2310): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xd4, 0x9, 0x27c8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f00000001c0)={0xd5, 0x0, 0x12}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000840)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c8e6698"}) 7.080643747s ago: executing program 1 (id=2321): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) write$binfmt_script(r0, 0x0, 0x0) 7.079806386s ago: executing program 1 (id=2323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x9000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x3, r3, 'id1\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) 6.9128449s ago: executing program 1 (id=2324): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) 6.874252761s ago: executing program 35 (id=2324): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) 3.906511971s ago: executing program 7 (id=2380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002", @ANYBLOB="7fc24b54d84db42029be2e519a4e382708d4485c49a15c38a979e38e605286a9e65a489a8f99df021d0136e9e5c4b430bd2d3b19453a77fba60096e1c06a63cc168b697ee998", @ANYRESHEX=r0, @ANYBLOB="3ceafd172029e38bf1f0044e4cc287111f16f99407fce04e721f0979db9fabaebf4227a077bece6bdb8a324a1fd2aa1a2c8204912048a1709557ef79ea1fcc4018b63d43ab630f050a58f56758ad855572e461f6ffc46f4d68219ac1dd8a5ce991b6c697d43ecb6ab14ee8985e9449696e2e6d7556f1", @ANYBLOB="b9982e2394bdb5505b682fcb91c387319ff1739663d93c32a71ed8e9f7f4647f533a104be0894a6254989d81d90718d928e1c24391d58a924e7138d6d033a113d946cc22552a45bdae0480e3eeb3923a03a7123f1f3b4a", @ANYRES8=r0], 0x0) syz_usb_disconnect(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(r7, 0x29, 0x3e, 0x0, 0x0) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1bb30100000002000000010000000c00060002"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x48c4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@local, 0x16, r9}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r9}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffd}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3.107263957s ago: executing program 7 (id=2395): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) unshare(0x24020400) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$inet6(0xa, 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x5075, 0x6595, 0x2, 0xffffff9e, 0x3, [0x8, 0x701, 0xec, 0x14b]}) 2.372727382s ago: executing program 6 (id=2404): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xeeee8000, 0x6000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x100000, 0x107000, 0x1}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) 2.372208482s ago: executing program 6 (id=2405): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8403, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r1, 0x3ed04000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000140), 0x0, 0x4) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) 2.365936312s ago: executing program 6 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$RTC_ALM_SET(r2, 0x40187014, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x968029, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000002400)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x484000, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) epoll_pwait2(r3, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100279c7000fddbdf251f0000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) write$P9_RWSTAT(r3, &(0x7f0000000200)={0x7, 0x7f, 0x2}, 0x7) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) ioctl$BLKRESETZONE(r7, 0x40101283, &(0x7f0000000040)={0x7, 0x9}) 2.348139733s ago: executing program 6 (id=2407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in6=@remote, {0x4, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0xa, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x4, r2}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x30000000000000, 0x3}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) dup(0xffffffffffffffff) (async, rerun: 64) mkdir(0x0, 0x21) (async, rerun: 64) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000002c0)={0x100, r2}) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 2.328957823s ago: executing program 6 (id=2408): sync() sync() sync() sync() sync() sync() sync() sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x93, 0x7, 0xffff, 0x0, 0x7fffffffffffffff, 0x7]}, &(0x7f0000000140)=0x78) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getresuid(0x0, &(0x7f0000000600), &(0x7f0000000640)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getpid() fstat(0xffffffffffffffff, &(0x7f0000002d00)) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, &(0x7f0000000100)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40a", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) 2.256693474s ago: executing program 7 (id=2409): execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={[&(0x7f00000000c0)='\x00']}, &(0x7f0000000240)={[&(0x7f0000000180)='-\x00', &(0x7f0000000200)='rfdno']}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 2.036657509s ago: executing program 6 (id=2413): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) setpgid(0x0, r2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) 1.453516981s ago: executing program 7 (id=2419): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3, 0x80000001, 0xda6, 0x1ff, 0x4}}, 0x118) (async) fallocate(r0, 0x0, 0x5, 0x5) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 1.372170943s ago: executing program 7 (id=2422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x200}) creat(&(0x7f00000002c0)='./file0\x00', 0x60) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = open$dir(&(0x7f0000000300)='./file0\x00', 0x900, 0x3) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x1812c09}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000180)) syz_fuse_handle_req(r3, &(0x7f0000006380)="4d17138753468ea8e26621075d578ec01691676b21a8d6f73d648ca79b630bbb2be89ffddb3a5a4968ce2bd771c3eb7928dcd611a60a8dd823838e621b28f9002fdf373aa88063110d933cdf7067d1c891926e58f7f6ece150a471a2e3aee29c69cefb18df6995dace0fd173058b18d7d27cd9c4f9f9f1cf92a311cd8f16f52a4475895b6cbfa9f864c84ad524c2e60f9563849654534e4dd6ba9dfd581d704bbd01b8ccc7fecd60a56c2b0915866c39f10f0f3520e4c6d20ac074071a7249b2cdabf4bbe60799f3cbd48341280f8440d2595436128f55353b189629a58040cccf6f213934cf8d9ff972324e03d3f019659f2039b183604f365b730c3fb768146ce992b1ef40962a0de5a799479be0cb2acaa4daf2b01842563c68102f116c38fe8bbdca61f7590259caff5d068627fa1d0094af96643402639a4825fc6ce72c46f4445076193fe59655d4cafaab7e9566853cc27f20a6609c4b17f7d07694db432fd811aad658833145b2d70440e1ef9da005d740ec9acd6eaa1620a3a6eaeb6f77ecf770328a2eafe549a433f8817778ab1e8f03b09dc1798521000da58a9c0e362f5a0c76c3fd9bd23b9ad7d4ec7774118dbb3683f3d80445148a6bc0d4facd615ae7538c7ab9e461bfed44d81360e5df239068e0ced0c977f7d48f58f1cb1fc5910d80b250c29fa044ec5fec412ab12fe18305eef300ec185b4b98fc38cbcd0932b686c59b254f1124c1ad4b13e007a1cd75bef4fbbe9da35855feac7381f4d45a029ba8ccfd4bbc605119b4eef8ab8dc4a49c15212b3d0f16d1fad845ba0745cce890f9b8d31dd77fa37b277089bdf2291cff7762f776647e1250f8e4cbad7a0c90080ec988c7be53744f5e37aa6caa9afab980ce96e8beec4e3a0ffc0cd83c9de1129b36039c9a8288e48f2012c845889301fe0aadb23e4765cd2df8b057afe6c71066c2ab54b6649167df6d1b2f7c8f2750f85813a10d741e48ba70564570296c24cb5dc1e7d6b91a158398a676a72653e0455c0c5df62f4e033a0358d66f3b905012d93398144c1c977668862ea35ce561cfff267d3c9d9c09cf38fe2c6afba881d24e996d182271d205362adbdc3e539b4d98a5e6c3183f34f7fee08cfc5db47d58e8c69320e5806582ed45da490b6d92f0dd0716e1e605d25980bd67ccc6f87429b41b9d705d19a5eaf1ab59277e7d6cf048ef2f91e4bf5ae43cdc734fa4195d96a16fdd1efdc6ae30c40f955255fe4120511fc52fce8286bb9635352974fbf112832860e71cf3d4610a1a0d6dec3346469e999de4c07ef4cbbb66060d96fead40e3a103860842104bc35f36937166e8b6c65ef66cae3508fbbab14a078e39fda97c895854e5785f2aaa0ef64b476959bf99cc6bfdf65dc1006f081e639e96856b730cf1a79b624785b17b03f4fe3e41eed353b8ba155ac1211276bd5efd695b24cc9bf8b8d67571f646ac10b925312c75aa53df82a38e32a6ff038c35c492e015067d06a5b15d174757e4bfb08dc6944c28b23d8bf475d9564d0c0b6b578c1fe2b37da75ace45f2138432ec4950cce7682aa134f9bcf616ddb6beb48cdd0443071698005352910a6dc5447e40c5630e58553e133573fb7221b1b9e3f055f0a60e1d9cdc2581e83674b442c2face1011133ec13777b916cb1a1b115fda557c2dfe1abb711d873ca664557859302996760f385a058198583bf51770da42247974b13f8d1c49e1fd933fa6265be50248bacc3f654845a21f885b36824b942d5a058fc23567ed85daece113374ea7f6a0949018254a390c688f3f36082beabb0ea50399280a1d4c7c392f3d42f34c854e62b4386da96dd71f2fe24c8c1c39264afd8a36922a989cb811cb4d76abb288a5d83d21637435f4b4971aa02e53fb41ded96e7fc1c78aa88ceb41dd7caf6751b85b1f0930b945f6d7142a12b09de8f2d29f360197b9576b8ffc4c08919bf3e07851dbadfc5b18928689094e5240dcf543bbf71fe95ff9b6d97e5f678c02ef5de7e08415337ec22a5341b7321c0f89f2423ac52fdb3195905e01bdc57538dd57c16d75ed494c55dce220e341c8c8fe49872d177f157802484789ff04adc22f41659ac5d105bdebcb67b82a74dc50d0e1f45b3ef4a04c64387781927644ef37c873a0a3296019276c7aa6a7481a45e4a6a3e078311cab527b1cb4529f6c9c9c50a4c56b628f94b8525478f4e08749818683f7de3d90c28ee63649d9f143d764a37f099657a18f20f55db981d36bd949480e104c49130a10983b3a4996a422523982ccadc1387bdce569adfeb89bdaadd1addd27bb01e990ba68cd5bd72269c2191e47498ae0195de59d36fb5094c65f86c08e5859b3a10c76aacee0ed0e02cea38990e4a95c75546f8f2fcc6b72f85a7b7cca9301bd8d4c081d67c6e91e655f55daaa656664d5ee8ba73cb77c790216e29ac8830ded9c9ee7e750e627bf098e6158e08256934aecfeba683bb8e79d181fe773b761ad2a3fd301dc6d6c37d61ee1f20799ff2c17067b03919da4d51e44b4f571ba5e9a7da16313defb20a14a6e7b1cb318d3379e44abb712ccc379afc016c45505f97fd976b6e5931f1a3c6d4cca414f364386d564ad6e92805b3cd704bea80ecccbbe8f15fbe13eccb92113d0e9dd9e2871944c1679287a7052c18ede61de8565d5cb55c7591f99eb40abe85ffb33611595646fc0b0e94a1ae7f45c8f0d17a97ddcb479b515f7688372fb474f045efdafbbcde995c10dc46e0e410943ac7cf810a670e71de05bd10d481bda4913d79cd3c4bb0284231c487a7687065731f410acfc20bb407d87f34549176de28f3476757f69062f2570f09e38689cfed21d4fff6cb58c00c57c19cfc8bbd7faffff6c89ebdf70559315b90e897bc0c9601cb7377531c1a8657cc15713dcb37506226b5f04abef598384f620c4e99f94f6a834322e4b39e68b34b6167a86a8f026b089260ab76aa4de6f1008fb6a0d4e40257f44d790ea0ddc2f0108c44b749f785f4b372de5e5fb8fa18987e6fe06b973ca56d0451de6c8332d7b1addef5dde82264ae8f56a84a71cd2137a738a2d6ee3f3119fa657f255f7fac23b5dbf59ff0f17ad001f6bd56e13cf783cef4b458f5e14aa47c2c6dd82d0fb575a12319343c57829ba48214ccc878e5a89a923c8abf6f0ff57d5ae4cbcecf178209ce0492076783e9a8d167da1deb38344da1076f3a31d8ccf2921757cdaf350deac3a363f886201f95ce109fc90f5488541c0155377ca936e46792c7872fadba32deedb16a30b811e9b4a1f4d4fa2343dd116f39610cfa5794da04ad641d36a1edfcd7701edd62b8ac5793837a0f4706ffe179ec7d89968ebd435f73ea6badc7d40d189ee4048be7f70ee9765116dcca5dee3902895e91aaad1aa87490f6d9daa28316d82d527e22907e362927f45fa3f938caf74a3d82c4467cee13a8db0f12eb7e0d7f7b0322a55257cbca0c3897a1e7734c417a71de379beaf80d050529b315d021b2e6dfc3d1cdb0fdd56ab4b6ca91ba110f4224bdeff869ee9a6eb20799b359183c3de570695bb446ffca5370b6014f87057371ff61a4e06cc93984637f63f21607a52a1cc489c13b7368a9f615f1fb67ee3bb8072a86943fee957610390a01c09292a139d582948fd5095bb75522a34450c0ab4b87e3f578b9dd542e77e543ef982ca874525e253d06f473172a2877bcc491e3cd597405279feb4bac3382ad5129ec7442253cb448a8a5360c965f9019be90bf87f33b03296fce2d2c5e0829159964b00481e55c1040ace058d6193c8c6632a0959117541c9edc6355c74c53b7dd6242cfe37fcd273bfa99eb9ec99c42f171d307601e60f8a98cfc5913f69ecd43c77f355115ea4ab0f72dad9822f64bc8ff8c3cd823ac2d7118427654998797f921b6d33d36a0a460678ff9bec26630066b6f0f6acecad9966f66872681f6ef87f6ee51f16862474df631183274184b1be8ffce88f0f7a968832e1f97491b2f9445be53bbbcab6108578b1ebacb468c7001a2a6a72067505ea410ddb11327455bc85494e4595bdf869515987c18ecb329c9f57566e4758d0ab6298101eddbdbb54ac20353279494e0af3fc4005f840288a685ab369cdf7bcfd852f03f753d4173ef58c171b7ed080e69f161096f675286965f17995bfa09845de38246d2f0bc9b33956941f8aad796ae136a55a8b6403556f8c18d26cf3101a79851bf9be22b26f5fdbafe7ef7d759b069c6b6f22f9156926919d27bce5eeba7d0f8401b39ce691b6dbedd5659c5456577e66f9d648ee226a47b19ba24b45d3b7692d52cdfd5bb198e0461c29a94d5def7186ea9de486a09d525eddc507f4c531fe43e12a5db31ebbcc19c39eecd041d39e8b1516a1a61b9039e4c159b45dfca6f14d203e372ca65720bf25b77572ab214c6eef0aa2cb8cdb7c639d4b615191b0884fc6e3ee46843d6c9ff382fe8e5b4ac4f72fd45ca076d51ec89f757733a66bf78de021026a539d05b3dcb2cb4752b8fa812d2b99e021f2ad0b5672096e5529879565d4eff8f2f1aa165be9900fdf7750dbabe9fb55e8ef0eedd47104ac2d25a56fcf2f9e02ca9a92e0e417f67e647a43eb14fa590cbd68de0f6019867a576ecb7cee017b8f60696eb0f3e9c1f0bcc00b7118ca7a00119b10ed62162f8a1b8cb3f22c34531e124f697fae6e150aef717056c616fc1478e10fe22c2bb3411c2381b0efd67120fd93f263bd827017669f0b817245e6edace2884f538676fe546839e7248f9534c289c30d4fcc9fbad5fb41de73843f9de3964ecdacd350db681394b48e5e02223a71fa92eac1c041b4a233af914b94acd58025fcae6d1886c13d443989e2cea0fc5c10da925686fdac5856a44149e902847e0878b952b7b5895f930cb3a28055666a41f3a1146b72bfafb0492330068b984948195eb3ba3b7277876eb969a44f01082541671ec00ea02a65aa671058286a254dfbaddcd4f303937d3a3ee81198024a7ff98d31996d196e7f6173642ae5f551e2046f938107cef5e479a123942d39672f2f771090996b52310d7e9037a88e9f683ceba17e2f84748d6a14e9c96c735491f6d2a9a14f47b98ef1d3e9ebdb468f311a20a3702b9476240d350f2c78a388cf5db4efdacd55d2ce32bd6c7db89f0a3b5faf9a1173713e2994ab70dff036c3dc6af65520aecbda997e5172e4a2bf8cd0d858f1b68573b3e514daeeffb267a299e99b9b3e595a5fc85a4f2a89ea303641d13346b383a39da577e279768f5aa53e2e2f2ec463d7d5ce8316566d0d31e2cedf3e0265fc2247fe772c12778ac904e93b9b5c421585366fb743150a1b2520d1c5b6de52677997b746cc697aacc570d82aae782426acfe15ab66d8c9338baf56d66c979fef96a003e436625c1cd79f683eedffa3617e1fd090629c797c1d485504a17bbcbebf11c1013d1c92024220804c53e21fe3a9c75fa1646ef587d45263f2105823f9bd13357df34f784c45b53f2504e1932ceba0e83cd7af0f3d13b4753274e379f55909c5fa67118b90080889e9cdc4a400e5e195f0aaa88558d246a50896a9973dd14d8b8954c393e135b2f08d5ac8081d257e34585ac0dbab95f0f1ed6f119a93c29347ece9e55e4b73f443909ed301887ee57c19fb22175925a872ea01800a2d766b895ce11878a87f2b75b8a1fe441a9f56f78fc2c0be4d0bef0198a9b3e20352c96ff89911b5067735fa631b3ddcfebfd03bf990b56cfe2bcee8917c662ead863f0ac94de72d2f9ecca2f7ead7095e9e46ea27153deef4661fb8c6f1a83a15d9068e89f907ec7b844289bc2262895ce825bc29129645fd27901c2e2827d6237726019e897607f7d1544cf123aac63d673c75a9e11d356e9d28b9aeb985e86222d01989606bdc49a543e4ec42057de5478b16438b9fb919307144758b4cf32875724caad97314f8ac633d77b238f8dff6603f5f72409ed97067cc1030caf49d94498b696886397f33654ea6dc4adeef6690c60559679efd55ae53f32ab04672c7a8792889db124e1d02136940212ed60710e9dbcec5ba38344f04cdaa5784b8cd856ad17ec27326f0a5d99c34e80d3c621b23bf2322fce53db8072eaacfc0809c65481e720644c6a369fc17c041c9058254c2201fbaf45f126dace1fa50d42ca69dbd16398cc7b8f94f5b542234bebf4c48bdd19f0323119b5507409b74ca03f4a06c88938d430b6dffbacaa74c4d82218cd1677653aa92a7272ab888c39a5cde6b21ab0b3e3a0c0d0666a7ad5ce76682f3607c25d9e7f991fb478567ffc33df6088d54601da1fc3ab0bd9857ab2f9df0d514b018cefae84a10554dd0d631b6f22cdd32aeeb8ce38fb08cd1f1c4f7df3d7c86631878c44c33a997c38a563f38f82b8b2e16e4f8a706df9821b7cfb12c545d9824d00e34e494c20baa12d75fff2393993e9f61a7f0ea25dd5e96b274aa3702dec492596d0917e19249aece7bcfd0aa070da4816d6fda8148a501ab573f65187e44418a5f6a6f1653fd98ca6f3f710cb0a4399862748a87254de03f6b73829e2c80d7f8dad3a7fae7050805371189bc4156e3540a9a4696b9237e777289d33099fc3eff8b6ed955913630d5fad4c22b551e4ea483495f4a1f1590912238a2c89336e8fa32a02cc6cd584fe872c06d107d5a8412546c3c1bb86ae8f15bab62b331a0eba51bc88c57dee6bf2ecea7c4f1749e2720c6cc3c970179f8961499f367d5be50e4592a0b485e4657da2719af5705e6cef5c16a901795dac8083c87c40f6f16cdcffe28184b54236dabf8269fa0077198e407e048d13abde20bb7566062f20c7f3d3b1858b7350e298a5009f3c26b464bcbd9a16e65886f938cbde16097af6174427fc31e2e747355481e1fe7df40081f53d87c6d837f941fc6a1774f5ae77f69f4d197c48f55d0a464f739f8ed6fab424a1eca7980971ced15429a2cac7b6478df3a47534ec564f23ef70eef1b4e0c0383c62fd7d56d5178f9db7c28844c75d9430395b60b2b196664bec9d660dfccc3b0b22cf0871bef8c0ea7be092ae21c5da723f0c2445b53deb2f44f4cce3bc52d2eb088c8462285330db1f0339559ebf1d1b26ef4674f893d92f3f2051513e1fc8af1673172f00ca23e41a90c10d42bbfb6ee5365d89dfdd98b4532905264cf346fcc39d8d6e3acce9d49e8fcb351204092cd52f09e1f0b9414c2a9823d95a1f70b21cac8e58827d2206a8d85792684bf10180c4a062812c6d3c5b60decc5c5456ce986a2b64f2c420675737c8003101753386c3f782d926c7fc6c40ae99986e010e4bbbca1eeeb82190e2e3bd7b20105b05335ab0cc945ea69e5124534b920e6e64f14c99cf3c70f4a7e5d276e5f909763ed35462bd3051ce7394c88d928850e3cb88e1ddc580b58d1d8416703e1b6c49d845927d88c23f5c41f307b4b81c67068426a867b67d9ca513cc77fe6cb7ac4b99c89de597d525b2de1731c89b4a790741b12b8137de01b60ca96bb984bfbdb2f2b1d2efeca40f415ffaeba896a583e13222a6e1d4285ee3537a7e5c2f24f744f385890b7bda3da9d440dd971517940075f0ae9f21817a2a8adb61158fbe58551362d13272bdf01fa3a19e58b5ff479817aa823e0e1f01a025a89c67c029395449502d1f7d9bdd83b2d141484f29bf51e34813e7a36109e23d52627fcf518c41c293d73f2b01776d22202f1a71efdcdde52c29b347c5cd2a84a45aaf4952e6266a96d423d0f490f2e6a663c68767fe36fe05ab8c6bff3ccbd5e89a770589279dfd47c1e72acfd704f0bd12ed7ae2400e367fddabff47a39375f4bddf6affaa5abb095b84bdf5918c2602be3cef3cefd8ae8745f4caaf54c36aa0af868fe8eeb940ad11de42de344da29a1f69a640eac8e5c1ba549ed574e9cd308d99ca6c8ff6203e46fca712138e285837621871f7e25d8009eb23df0b08c8e78a3325c434bf2755371397c55a9959bb2cb243af87077b8679f0433cd1e42a4472ab9b61fab68d4df81c1debb7b5f35eadb2a4b3703617d6ed8b4a3a85a21232ac865a4332ec271251f5e86ca2461cd5763bd9ded24e6e6f122fc1a8238e060a87c172cdd0de5ea9cc9c3464230975e58316fbadb9b4cec4c239269524f85a1e6e640788dd31cdc1fd3e6592c729382687340f739a35e9b911e0c5e2e177e7e46a8e0d9b3d45418130aa304dee31e4aa47f971796e1f5bf7932ac13efa4961f889a435e8a31eac02f9f3252c7dc868333e321ee0ccba32328ad76ef86b51d1b91a4d85029ac30e783f3326ce31c6dcd4f545b62163041cc8a60d6a33c7275aa056a419b4bd81aaeb6591b05991e92ffaa0157daedb866042e67ee1997b6742b564a162015279b95e7656a4428e31df15ed19512f532cd9343fdc347ccf0b3071aadce7ac0873bb90e2695577e469f2efc9b1adee43a8ecc5a1737752873d217deb05fa2233f5a13fa184ddc1c7d73fa4633db0ca55e888e0e7daab361448a2124d434034f1f314ebd43fd4f428d7d99b56bd9dc6eac079d1b9a09f6f74f47b9aa656958bc55cc9b0f84ce23d40139816feec6dea6912616b3478600d6862e63f49914c679fd8a6202b642f5221d0efd5cf010c242f9114578f55f251e843a102aa43cb367ec9f20419b597360d5c0ee4a6852fc510c132dc242e7aca51a7cb9aa45035508c1e1d785d64030bcfed3a18dd35d1098d6c18f0d03041052cfc89df71300e6c581c337221295d25e72e01522f1af25cda483b63a3053c293c4b626cafa775d115736b2020d6ee57faf76377d3c34edf8e55f3c58c06385080ad417d12ff85d2ad6b0e23e94938d1fbd0f84e203ea57139af7c2b3fe4c1bfa5f21ba2400eafab70e33680fd05b652fc07975fd4f206c07b19d9f2772e7a5a963b0a7621b0f0c0a301d2dbd7920d41b581d9f1d6702567ca23cbebe0b9e515cb462e1fd871aa3ec8b7cc3e0778dc8306ee586956453f061c6e9d78694209445a7bff5e39c699e955fd631185f4e8c97b207a3836a9b7557c688313e4df9888bde5407962b4205d1a62526386647c690c4642138425c9a36fd815a0932e92fd4531e5b3bd032e7418396f02e4055cbedd952fb8118010cb269a4ebe498011b877b8d71b9fa42d9d1fd8c07a96d9d36df0092067a255c8d8e5324c013d8b1aa58f4597ba1bfd880c61394169674c6fca49a097e19290ae51690dbde492cad2b4394e966cff824007fae2fdf271e4375fe18507f8bb912df2d85a17665d3172856e3c89422cbc9e1f3426aacc5bcc966eb4991ad437cfaf34798fc7844f4ef4848ed6ffb4f7d0a2695d7b637d70be7bacecfafa815d994c00274198b418a2bee0dbb8f0a5bc967a30f9315a71b83e46222c3417560bc78d74b9dfcf1cc215646dbdf6cb108ecc258cb246297b50d71ce8ac560c4f55d09e897f8bdd96dbe661d4cbf2758ba4d08d697c16084114b280c4de3507a4b4b9375e153c90fe68e65745027e97d9fbdcc69f95189e6863e0c62f1486ad7da0cf794e5e52b4e4a911a43515bb93d4c7e7b654f702baa9753096ea92b95e64ffecf715787a2a11a9a8519cc6c3801921910cf66d9c7fdf0defe0c9e23aa0b577f1ef1a403656a0f7be1d639b53e1a7a021724366338a484d4b897d7cd1a46d157b9c1c6537ec36d2942d170bf6063dd3bda24caf77b3a0cd8820f06577251ff3ad51dc08d996a352426e219ef89d3a9ffd44cce36dd295b9cf05baf87308c597c356e54ad323c1902288dc6d36aa3906fc9830769caba6aecf6719ef87e89190a433ffb07e220a2545ecd83eda65d4c0f01f67413bb9d51fb87978b3245bdbc0e3d6a9d8198e61932e06db40dd83317b4ea28d4b785e16e351afd2657ca6ce73b32232f8183c73380c79740454f01021c12c83a0b0c63b49157aa07b57cf27fa819b263d1ca35dc8083ddc1c787d1b782e510f4ed78d1e26f6672f21f68b9199326c2380bc5ac96f2f986882b9564059a58f0ee300b0ed7adb1c0d6ccbbb940d790a6775a244b7c367f108b3048bb05a9d87fd45b6a14383326e66c7a3e798de720f0b4a6d5c467ba04c5a3efbd424a233a55ccef6dc189789925fa6a6f158dbbde01d170ac43fc72c4473e781c5357225d29b1bf59f7f9e26814d65881ae208a63101c04e10fae59353e5f0ef4ce072330d917b23eba2b8a0f2d9d3296bc36e0d0036b8e9efd277cea94521b3ca18624b14dfdb328b46afd940330f58238f08f8b35c6d1a85103c57bf6dd9209d259aa93fd47911938d5a54e525ca109455e0c05a9c0f7e57a211bafa4692f0e373f877fb073c356db81048dd1c01142d21c4af7c764befd5e5f48e4b79adb9c0776e5fc1f14c2f14beba354ebcef3036f70fc2e3ed51a7f55a0f1f1021c90090738bc3ce016a305bc9f86a4283c211798bad41b2f0676fc84afbd4cf253a47cd0939db787ca7ca4c6a366c7a2e94efa15c16915df58315a7c3c6a4ed3da3985e918a5df15650a143117b5099b1458beeeab11e4247d3082c6203bb4d9d337bb5ee9faaf2d07973feee830693b96d260f409dd41f166b01c74de526c281d27063fbb0a2c9e3948b7fa9918d79a1c83a7951dbc9305fa2fef42b6938b5bd69b9912a8ba13939e908b133efa371aef5b1c22dd9ce98f052ab2bc8c3373d13f03fe555560037abd7c943675a8b23bd6afecca457df11d320caa6f0e627241de994559870773cc7eea9f6c947a450b0e64488443a9092ca1978a25cbb23b95301ef4068c82c5684ae17d33e7f79cf8b8988288b0516e9fb2e1d8e13d236465efc3f2ce1a9fe5101d7f47dff416303e12bb5d9564b95ff0938f293ab89dec4fce7eb300af1a5903106440312aee2b259f95f3c5c0a94c56708a55916796c595cc5d14c3988390b87fe744bafa4622205412b148460aeb63d4dd5ca6a9ecf60c2b5314ab1744320de1d372a6ed777767938c3c94fa9a0cfe0ee68bb46c5e5f151239d7ffb87ae644c55427e9251fa762b3574aba9d0bca2f97809f3a6d73389629e32a24450e75004144e4dd469b611004d5c0353625646e085c79bcb2603d0556125073eff6caeed05ac0146ca265a33760d135e9133c399d273ba3310f70229d1737a12ed7a651bebad05fca1a0598363a645312912c865f2f5b9f4f979b0628c6cfc20f3002e16308bd59e6caf4257632960f19116749ce1adea727d9cdca1aafc3d37b60d873b284da14de0c88bb42d1ee23fddd582f1e8fb9e0231bf047b6a89d2b81fc8962fa7546f5170cbf02b7e3f5ce97b3b3972f7b6cf478473976c5d0e344e5fe92b5e078a3000c708fe05b2569d5142d238b3f3b50ae113b4a51a018755439d9af72082218a36976fa746ed12782109c9e6375471b4824d9f97b9a6fb633b44c39d2c7d76f886bd6aece6889d733018700dcb15eb8c22fb3c47e370a147b3f62c39db7c05613d58afb5a89fea86d3082fcc51ec09d77a8f8fe3b3ed1737af0fca7dbca293b799d682a5f7eba3a153d1866ac7b70765d933dec449b3490b9b3160be903f466d14802d271b51491143f014d34ee0d77cbbb580bd3bebc8b1e178cdde6336e8672", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000280), 0x4) write$FUSE_STATX(r3, &(0x7f0000000340)={0x130, 0x2d884b3f39def6b4, r4, {0x3, 0x8, 0x0, '\x00', {0x1000, 0x7, 0x2e19, 0x0, r5, r6, 0x8000, '\x00', 0x9, 0x61, 0x8, 0x80, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0x5}, 0x2, 0x2, 0x3ff}}}, 0x130) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000001c0)={0xcd45, {0x15, 0x4, 0x6, 0x8, 0xb7}}) r9 = fsopen(&(0x7f0000000200)='qnx4\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000240)='syzkaller0\x00', 0x0, r2) close_range(r0, 0xffffffffffffffff, 0x0) 995.24948ms ago: executing program 2 (id=2431): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x180) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x3b, 0x0, 0x0}) (async) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@private1, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x80000001, 0xa, 0x0, 0x100, 0x6, 0x110022}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r2}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r3}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000005dc0), 0x0, 0x0, 0x1) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x840, &(0x7f0000000000)=ANY=[@ANYRES8=r5]) 939.937151ms ago: executing program 2 (id=2433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) sendmmsg$sock(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000011c0)={0x5c, 0x0, &(0x7f0000003200)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1462, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 571.063379ms ago: executing program 7 (id=2438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ipv6_route\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000180)=@x86={0xc, 0x4, 0x7f, 0x0, 0x7f, 0x80, 0x5, 0x6d, 0xf9, 0x8, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x0, 0x7f, 0x9a, 0xc, '\x00', 0x4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 71.553089ms ago: executing program 2 (id=2453): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@nfs_export_on}, {@nfs_export_on}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) 70.873669ms ago: executing program 2 (id=2454): r0 = socket$inet(0x2, 0x13, 0x4) r1 = accept4(r0, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f00000014c0)=""/214, 0xd6}, 0x2042) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x44, r5, 0x20, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff00}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x44}}, 0xd1) setxattr$incfs_size(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), &(0x7f0000001800)=0x100, 0x8, 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408a0}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6cb, 0x57}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4028040}, 0xc091) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000001ac0)=0x1, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x38, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'bridge_slave_1\x00'}}}}, [""]}, 0x38}}, 0x40081) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001c40)=[{{}, {0x2, 0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x4b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0xc0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x64, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000041}, 0x880) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r0, &(0x7f0000001ec0)=0x3, r9, 0x0, 0x8001, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000001f00)='./file0\x00', 0x0, 0x24) fspick(r10, &(0x7f0000001f40)='./file0\x00', 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000004300)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000042c0)={&(0x7f0000001fc0)={0x22e4, 0xe, 0x4, 0x801, 0x70bd2c, 0x25dfdbfe, {0x7}, [@nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0xc5}]}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x9ea8}, @typed={0xc, 0xf6, 0x0, 0x0, @u64=0x400}, @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@private0}, @nested={0x9f, 0x7, 0x0, 0x1, [@generic="fe78a1210976bb761fb6fa652075993c9c88678c17345ba692714cd4f2b57fe1aeecb6b46ab4e847ec19c0b07c6124d5c403422be05848da064f091ce11b63e4aec794b1a9f504188bb9de07e0cc6caaf85ccb385020fd89ae6ef39a441be43ba57d25de158a3870e1b157b56b072340e4c8e9385051cff0860274beaf17e6b60d5f656722fc28dda2206f05317131443ac006e8e3925b007d1c8e"]}, @generic="cd7c8c8014afc6423f40954ec4a61f7b5243fcfa1702d191e2cf76d2d5dce546ca6b60cfec74320d23ca8cd341741f810b1362666d5bc37f0724aa4da737522a41e5243a69a86efd91b9", @nested={0x10ba, 0x141, 0x0, 0x1, [@generic="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", @generic="8ffba76ab3fcf4c47cb76f76f3751ea6ba858b6880b0b6a0a043e01e9d4683ea0b180068ec6c4905a244cfc7bc3cc650034fda2c9afc9d519ebc2ffd00481f4eb46e16c8ece39d5f9ecb341c6f0df63a4afc91780805622dff8210a44071262172e58b53a6653ca2ce494e7f0abb6f21cac894ae48235d63a2fd3712550089476eebedab949e893be8c6581dda5c542ebd8c3f0be596de181b392251c1ba6079f57e122abbf01122a7a07fb445832f7666020cc062d8"]}, @nested={0x1092, 0x51, 0x0, 0x1, [@generic="bc1e5747f3a38cc20db0f551d024cf129b9dee36b3c577ee0ffc8af5d3ec2f0a95ee135107fdd2dba0a824590467789d45ef1bb04e02bf3333876630244c1eee14ca5f630c98ec1d4bec590fb9e946ee82ae4ce4380723b99a72d6ce788e7e0e6c8811ba72194d0a4c4b5bcd368401410cef2f67751bb8f4c217aae0fc8d7003278bab12911170e5eee4d976eb8c", @generic="d901f29663b9c3db32b1e4c3d4ab8d27a2554f2fe09cc8e2f0ddae53e139d4e62853bb9c9e7b328d3ddb271f9321bf3115a770b908809602602ab8f67b41f80b615545023da95af3a342415e676b65fa33ddb0d91b4f5dc873839a77aeea458981ccebc621e92cb97f90507790acad492989e2ba645f53187e8d7af0ad8a31817b662bd9e423f2512ee27ae920b4046283a6ab7659fb4655fa0de222a83215fb7fa7c9082b1fee2543afc1fa15de5868ebbc43504c0c81125630eedd3c46919fa782ce123cec60a2391e174d08f73951b383442aa8ebda93233dfb9905d98640beecb520c99827c56b025d69ec0db2fc64877476dbfeadc40f91f1e3e2c836468aff7ff655412a60929a687193f7d346a39e7daa05daad38fad86b694e3d2b3dde43f5920ffe390f66dae9c7534a25402f2ef5006c66386e538edf76fac0bbbbce66462ce90580de21aedf270c442edca8c0f31137591968e9dd8d3eefdf746a5d60dd33eabf8fceee95f580020291aac5249a3515a1f4e828a15b190c3ef5d0a78c2cdff276b454a2c6fc66de581ecf0bb64ef13202fe4ea55c9f07282b9a9a419cc2e499aabd01b573026035d2ed060ca24f6987e0657155ba15c306d64031aaaa453226b5ce2a62764ebed2cb02b0f6ef76719efefa11988bee3b1c1b92d740e9370aa196fbd61d1811e8c80f6e745310f3b3f3a439cfeac407c5e18a53a11814d576360f31342b40b63d02d0dc01a5ed0b17e2728d17baa25352b88179829288d685cebf741f0fc951f9e75da9b44f98b50fdf1a4b856a33116dc99556157097a311b860284f19348b6ce7fde84766e0f8589dcef464b8989a6c4656f307de9b5657cafa354c19cda062e97c0716bfac90becfb3a280ac9de8d7bad7e8b9fe81c139b1482f31c34fc0ee3bcb6f0b78174634608978157e5abc78a8d6637f2551b98c9b8df6a191e7bb06728d26ce78f276dd34f672308450ebb14a7a5c6fd2f8687053b499e402a632a570b31f6abb8d65aa9179ce4cb8dd67fb48044d7e1621c95a95915029f412740ff0217d167deb609006e7ebf6e3ff3bb91bde0aee1c1d181fd2e1ca7d7eacbe1da33af23e5e5b652182b7218865191df283946f8483740047044315c636d1ef5c49f2d32d05d7b27f70a852975c0a6256d26e9d68a005b87fa706e0b688c89dfd7b7b91bb9ce40d7f0f662538e10a186d341e437246e5d74e99c82f87ff210a2d631a9d97a55c465c3177322f248437ef9f14bae559b53f9fbd09c2085b95653c21e01718e8f4822da0e9b682c0a3c6bbaff7863e71be44303ae1689ac35d81c9bcd6b20c3f1962f0e5b4f6df7e1f25abe6e6f8842f5625609cc4c461c67ad1eeb4dc2521936d2e7e11479cc2855dc03ee46584c6f7e76d582045cd7113b444455467d458356513fc5d93dff58693199c3a8bbcbfb33fd0fa3ac4e9a16ae560708c09e417906b86a0ff37521f37936fc5f3e46b9de9a48d8bd751e184feb3d8f0be86446674fae69f46ff55ae52240d0c77dcc913173ce253156c7e70b06df32b6641e3f17894b8ac24e0d6ca7b8f8d7f88ce1da9cf725b438f419b507897481a3e111fe96052fdbac127dfe92a5274c2afdd9c30207ce1141ba59642f8767e1f4c49c9097d0fc41eba088e2d3c6c022ed178f687af8b053b8dc939d0b74b10adb9973eed1f6a17e1fe2f4621335dc9c820b0de90a796702cea1a010fad1f820f28edfdb830bf14f5133f4471feaf518bc59c9623a354a7dfc640796012464bfb0a5470fdde3e1bcde1995a4ccccf2cec1bb8e7f9a9eef1ae8a533471dc419a8c2a605935b2291c04f0acf56df15597abebe878b70ff9dcda55991c54c66a39e078134f262a4e4e1e04a69e996265ae21f40b045a873e557b30962849c0c633fe2df5f246fe78cde93b0162616feb260e0a7030ff0e91b38b8eee5d547739ad30b97b0d7c053494ddfbb1c9006a968accaeae95a35d609a01fed6ee15bb1aafbeb4820ba207d2fb52bc6d3cf24c5bcd508deab1690f368e6c259abe17f5d96a7eaa6334926cbc0b14a2b3011bdbcfb945cbfd0985d3f7b8b0aa2db745433d8b2de3bd4784ecedf2a1a31d4a2594e50e2224e2d2566d6f5fd1fed6479f0663eb736cddb47e17258247c97dc33903d801faf29092e2bc226e56ae49341ea94d99e9c3cec426120bdfd7638033b39102ec817322e4888bd789b9c8b50dbbe7c2434b87100a0b243e78ed21f25ca2b186a81d45fdda460d97a66f64d217b14ea6aa0388c8643ac09a3ab20f108caeddda636e89eab5a686ce7207ad25a2cc47d05cb317ef88c06b9532b3c3e00e95e8e6fea0152418f62092bf6c2fdd35c8b443874952f2140a9d4300e0005384403ac926269a7d9622dfea2611be3added604087339270db2afdc7e3b34dfc6539a78258f24dc70c0405c7009a563d047ab323e9f756ebe669d7d0b279d88a17e197b7003a0a7fee6700ce020d463a5f439c12045b6bedec5066328e19da8d03830b0992bcec6265630a1d611010024d7b851386bb92317eb24cd3046d86f46b687c7316b999a15f6cbd8238caf2648fe1d31311156e71db1547a0cc9df80c260c6a394e09e71d34ad60cc1d3e2e9a526ee9fd82b271b6fab88529658809bf1fe3817a93c6bb6fc20d28b249c506448168ef78678ecfe21f67cfa3d362b4a2929422de7b479b90a697ba486f874cdf35d4ff21c677b4644b42456eb1c412cd76972d63647c54574d9c48f2bf3177299d45076ec7541b8dc4949bacd36212219c4dd8874f91a4c270eabcb05271a1ab50dc7354b3116d5a43123899a5fb4b1f3e6e113def98a5ec8f44ca71d2b050c6a0d3fb4775b5bd1522f63afc20be7a832dac9e696392451d57fb87f59eb4b498a4f85c75873c1f20f5d120153103c3121e284a3e5852b89bb751aa0584ae9b3d3aaea507a1fa77e1254c5aaf24dce73d8a24c7e13536f741c74885a672cb7440ac2c7056adbae69c9c4cd3e213e7bcf2d45647ebf875430499b6dbf48014d23dddc9311a6456957f96d5190889ad453af7136adcf9dbb1b46aaa3f595c9b18c25d7a5665290358a69ccbd632369079a981e75ba83e0c758eab59daecde16972a7fc53ed866ec45b8910e3783a5ce4103d77a206bdc513ed0334a630eb38087b5eee31d343a67812c83dc7fee631652b04038c372f5c836855064a4f806d4d881e7f2b29986428ab9f62d88cb52d304d406da9c226d0f32533801e0610edef958708ded269df503214754c36aa8ebb019d24b7bb568d4042c24fa9821af8840c78dd14c3435af3e9e058f225c7f5c39b31fd265a642ab796649261a5cbd6b1647802736cc3da124e4922e7b14c04c5877c4b7350312991c4b00a66935f224ea0a6d596acea68aa7c1b6e68adf6106093da5593c48d4fdf8f4eb535752d27c12d51cca267cf1684c8ccab24b0cf755a73ecec8b4a56f11208d54fc98f371642bcc176be5dd5bb0c3704630824074e7d5b60d0040d19f215c07c6bac08048ac12c36cc6f287f9ac345e3802ed367068231a4910c2987cd6f728c43e24ee75b0f58885405a8aeaa92d82c896d356bd19a24f1915561615db9ad8553e1f47fccafca11a0e496477899df7e8d4adb3c4210095a549143cb741b8740b040516db4a9601f6459f2fc7d52f483e5d943e1dfba87f369f0f3cccda9bcde3d000f40ccf22d9861a19da5bffc19b5c83233a1b38ef43f41f90995e83be7be019231ac874e5fc70202dbd3f32ba111c21bb9b38b6370832b898c3205e265e1361eb0e8efd4343eb4b61dd424cde1d4045037c2ebab99df9e3ac5bb3e9aa14d54f59bdd76b95536b3f1e615f55aebdd927dfabda2e57ff225f56de529eb45c27222402544725b27f3f1ba42734a0f2dce0c24a2e8ee60ad6d7a3ec62ab609f09775b4ad2892a8095a076ec9bd47c93f49a715a7fef59776fe0e999965f37d8dba382b16c5543211557eebc025a932ce78cc1c5163dced31b3a7926b5b65ad0414be261344cd6ee79c27e4ea3386d3b518bf2692c2dfad73ab9b895f8fe5b80ace3569a12f67c9072e838967e579492fa6b9b53c811a429b3223d86ea8e53fa9d3ce53119149060d0e1452e8f62a406cfa383cb05798db748ecd69591435fde0cb5426b23797ec4d97feccd725efd2ced35bd6a6ac7b0621551f1a489bcb227445ba2c1e7440139c430b0eafdd7cd3c425064190a2fe2590ba04231fb7ca1ae63435dd2cfc438c4598d2dfc68f9606b42b10286085d84ca0cbc87f0a11f288c46343295c6406303d5fc549555ae382a515483529f79c7f9494a45e5fdbc61d0908c8ee3bfabbb71e255be44495acf7e085ee3f698420c502255288ddd5f625ae6a70d0a7128013a9a0ec173d2ea1492d32f8253ca576620fe3b5bfa249b61327a767a681922b57f189444a23e258024167f3a14b4b54595a5c8ff4e71192fead01ab2981dc4b2be37fd87b40f88853bcf4bf0a95319aa35a9e41efd6f48d6b00ad5b95f159c7a84fde71b9d6ac08c9e3ba1f46067ccf8b564e8bbb8a80e2ce0fcee29ca3a8ca1367d2e2c4da34b580eab6895bdf9d687f65854ca0f6dbb52ad56666a2c8def2c527a395d8264b58ebed01fde958806cd6b7df2504e5a8f5873cc2dbf90834ca070166e9ac93c803d69d24ab0604f7fdd5de78158077effc20d7aaa125abe35cd323868aba53aac7a3bf86f37691116abded1383311e3fdb6f7a12d60373dbdf58c903df950c17e513f3aa9f13b985832d7123efb241f32891d092f7954dcf4d8fcc07427f7cfa12e55ccebd0f95873992560012ddb0276fd5bc79831a769f7d65bed948402a80545167792e0c8d6eb98cef8b1233d6a6a58c786b1ad24f6290723f82833c136dd84283bfd3ee58d1074b53eb57c139bc6403882923c0756e45c6a9d9c7f390f3da0264b9841f2dbdeb65459bab517dbf646f54a919aafd1893658d79e825a7112c22251da3170a61ba7743e51ceefc6c4939a74138b020e07cba7ea69c0c3ad58bb45a98a98295834afb6c108122485efa882c4740b98a551b9a18e976b55df4c3c055edec31c89a08fd9d37b9aa721dc5ade7e5542072e49db046cfe359c0b4469f8a8a3b46995c2880148172e9b70ea0b98746c3fb87cfc5c07d466d350d2575ddb728c8119cea4ee2146065925b43171bee15ace90a413e57c7b1e467635d2f506b9ab8fc9e97548f8b0152162610b5f2cbe859d52f1d72633ddba25f5277ffc2bf60805777c5d49065e5423585d970ffe9eb565580843908d498258bb381bea56b8bca6f0bc9c7a02329deaf0533f287141fe315fb78d9cee52e06fc59f603115413b3bedc97bbee03df69bf2a248c2ccf70a39470d219fa45b5aee39b05262cf3b6873f3ce07bc3090a52268d2d938b734d354d2b6f96a2ce4ee55b670ddfe54ea5a32046f2c4711f658a6d91131fa926bc90b510cb6f30a1230fdfe5caf9a2bfe5deaca0efbb459f6bc4d8f2b63b83526673338b636339f70e3e16b1cae53dde225cd8e375a5a43892d6e52509564d78585e73f4f9cd7278af2ac94d12e6c692e18c4dfa74ff2b6b5ae302974ebc996341ae3cd87de01d836a966e2e0b34a9ad6b0c135aa24af3871d8de4528b19d055a6f5de16c54590a7a864bf2f98becdce96fafbecca169f08e765d5a323677b2efe96410e792f76796b79f93f598569f0421c7074b4f5b95a0751eda2ff727b8c7ee5f3116d09fb70970b8d1cf2670feca36f0c75782d6dd5ad86d8afff18ae46277"]}, @generic="cc0fdf32a673ff845076c530b06c4ec4e7990530adb6d349e58409048ea6851faf79b217ebd3534c6c9c3ab16cb32a325be120c4c2f04a0e3e8960f9d2daa29ec2b680fae8e6a961c0bf908c6c65ecf4a78207665ac4301752ee", @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@broadcast}]}, 0x22e4}, 0x1, 0x0, 0x0, 0x40}, 0x40081) unlinkat(r10, &(0x7f0000004340)='./file0\x00', 0x0) shutdown(r0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f00000043c0)=@arm64_fp={0x6040000000100064, &(0x7f0000004380)=0x9}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004440), r9) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000004680)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004640)={&(0x7f0000004480)={0x1a8, r12, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40020}, 0x400c000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x40000) 67.613699ms ago: executing program 2 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) capset(0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ppoll(&(0x7f0000000440)=[{r4, 0x500}], 0x1, &(0x7f0000000480), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180)={0x80, 0x24, 0xa}, 0x18) r5 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x200004, 0x40) openat(r5, 0x0, 0xa0000, 0x128) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) 66.686159ms ago: executing program 0 (id=2457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e3) sendfile(r1, r1, 0x0, 0x1200000000000) (async) futex(&(0x7f0000000040), 0x800000000008, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) remap_file_pages(&(0x7f00007ec000/0x3000)=nil, 0x3000, 0x0, 0x5, 0x100000) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 48.92106ms ago: executing program 0 (id=2458): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)}}], 0x1, 0x4008000) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.43018ms ago: executing program 0 (id=2459): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0xff, 0x7, &(0x7f0000000080)="f2a0cdcf27ea3711af0ca3f8c361ffeb8a7fcc48212dc213086fec37c1ad552298a0f34b90609a474d6faed6611b1a0ff12f16b076726e77105bc1394b00ad9dfc207cb99c", 0x45) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x0) (async) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000001c0)="a7f526") (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff000000000200"], 0x2a) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) (async) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000180)=0x60, 0x4) (async) r6 = syz_open_dev$loop(&(0x7f0000000480), 0x926139, 0x101200) ioctl$BLKSECDISCARD(r6, 0x127d, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x2, 0x0, 0x17}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1003, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.96803ms ago: executing program 0 (id=2460): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000002c0)={{0x2, 0x0, 0x1080, {0xdddd1000, 0x1000, 0x3}}, "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", "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"}) close(0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044004}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_eeprom={0xc, 0x0, 0x4, 0x51, "7e23194c3e7cc7c29953c245be8b3b28f71f199312639feac962262c24f6a46babbe51ef11d86e79b7305b17d1d940f74d99742d33878e7a1863a4f00bb5cd1d43dca27d717c977b3a37df57d611f303f8"}}) (async) r5 = getpgrp(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd03, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) r6 = socket(0x1, 0x3, 0x0) bind$unix(r6, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, 0x0) (async) close(0x4) syz_pidfd_open(r5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x164) mkdirat(0xffffffffffffffff, &(0x7f00000022c0)='./file0\x00', 0xfe) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8801, &(0x7f0000002300)={[{@nfs_export_off}, {@redirect_dir_nofollow}, {@verity_require}, {@workdir={'workdir', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}]}) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000001c0)=0x3) (async) chdir(&(0x7f00000000c0)='./bus\x00') 3.33624ms ago: executing program 0 (id=2461): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x78c}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x40000080) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 833.741µs ago: executing program 2 (id=2462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES16=r2, @ANYRES32=r0]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000df0b000000000800ffffff7f030000000b00000027bd7000fc3f00000a0004004400000000000000480003"], 0x180}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$netlink(0x10, 0x3, 0xf) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001400e04600000a60c6eec00be004411fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x60840, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 0s ago: executing program 0 (id=2463): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000286a0594000000000000010902240001000020000904f3800303000000092105000201220500090581030002000300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x169001, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T209] tipc: Node number set to 2886997039 [ 66.835913][ T2066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.016715][ T329] bridge_slave_1: left allmulticast mode [ 67.022419][ T329] bridge_slave_1: left promiscuous mode [ 67.028447][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.036316][ T329] bridge_slave_0: left allmulticast mode [ 67.042082][ T329] bridge_slave_0: left promiscuous mode [ 67.048196][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.196786][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.203910][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.211398][ T2076] bridge_slave_0: entered allmulticast mode [ 67.217831][ T2076] bridge_slave_0: entered promiscuous mode [ 67.224102][ T329] tipc: Left network mode [ 67.224461][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.235623][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.243176][ T2076] bridge_slave_1: entered allmulticast mode [ 67.249738][ T2076] bridge_slave_1: entered promiscuous mode [ 67.256599][ T329] veth1_macvtap: left promiscuous mode [ 67.262219][ T329] veth0_vlan: left promiscuous mode [ 67.386845][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.393967][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.401349][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.408432][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.419403][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 67.428666][ T2115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2115 comm=syz.0.536 [ 67.441111][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.448742][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.460747][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.467856][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.477851][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.485209][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.512034][ T2076] veth0_vlan: entered promiscuous mode [ 67.532153][ T2076] veth1_macvtap: entered promiscuous mode [ 67.665854][ T2135] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 68.045314][ T2151] overlayfs: failed to clone upperpath [ 68.051382][ T2151] netlink: 57 bytes leftover after parsing attributes in process `syz.2.546'. [ 68.084258][ T2155] incfs: Options parsing error. -22 [ 68.089593][ T2155] incfs: mount failed -22 [ 68.105620][ T2157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.549'. [ 68.356082][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 68.669158][ T2223] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 68.669187][ T2223] rust_binder: Error while translating object. [ 68.676428][ T2227] bpf: Bad value for 'gid' [ 68.678578][ T2223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.689899][ T2223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 68.700210][ T2229] netlink: 1 bytes leftover after parsing attributes in process `syz.2.577'. [ 68.724844][ T2229] x_tables: duplicate underflow at hook 1 [ 68.998116][ T2239] /dev/loop0: Can't lookup blockdev [ 69.031994][ T2245] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 69.039862][ T2245] netlink: 'syz.0.583': attribute type 5 has an invalid length. [ 69.047850][ T2245] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.583'. [ 69.057462][ T2246] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 69.065183][ T2246] netlink: 'syz.0.583': attribute type 5 has an invalid length. [ 69.073748][ T2246] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.583'. [ 69.075926][ T2250] overlayfs: failed to clone upperpath [ 69.095719][ T773] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 69.157730][ T2266] overlayfs: failed to clone upperpath [ 69.266232][ T773] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 69.268416][ T2280] fuse: Unknown parameter 'f$êì¸ÔÆŽfPc”ß%bî' [ 69.280836][ T773] usb 5-1: config 0 has no interface number 0 [ 69.295825][ T773] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=d3.17 [ 69.305855][ T773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.314635][ T773] usb 5-1: Product: syz [ 69.319579][ T773] usb 5-1: Manufacturer: syz [ 69.324494][ T773] usb 5-1: SerialNumber: syz [ 69.332924][ T773] usb 5-1: config 0 descriptor?? [ 69.540412][ T773] usb 5-1: USB disconnect, device number 2 [ 70.059458][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 70.059479][ T36] audit: type=1400 audit(1757216873.895:363): avc: denied { accept } for pid=2327 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 70.084843][ T2326] fuse: Unknown parameter 'groupWid' [ 70.091391][ T2326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 70.234097][ T36] audit: type=1400 audit(1757216874.075:364): avc: denied { ioctl } for pid=2347 comm="syz.1.619" path="socket:[12616]" dev="sockfs" ino=12616 ioctlcmd=0x8b35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.251587][ T2350] fuseblk: Unknown parameter 'ÿ' [ 70.332544][ T773] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.482535][ T773] usb 5-1: Using ep0 maxpacket: 32 [ 70.489056][ T773] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.497512][ T773] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.506182][ T773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.515233][ T773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.524941][ T773] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.534719][ T773] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.547844][ T773] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.556942][ T773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.565585][ T773] usb 5-1: config 0 descriptor?? [ 70.774130][ T773] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.789709][ T773] usb 5-1: USB disconnect, device number 3 [ 70.796467][ T773] usblp0: removed [ 70.834416][ T36] audit: type=1400 audit(1757216874.675:365): avc: denied { accept } for pid=2376 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.045879][ T36] audit: type=1400 audit(1757216874.885:366): avc: denied { bind } for pid=2390 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.087119][ T2394] mmap: syz.2.635 (2394): VmData 29339648 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 71.292122][ T36] audit: type=1400 audit(1757216875.126:367): avc: denied { wake_alarm } for pid=2434 comm="syz.2.647" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.363931][ T2441] netlink: 679 bytes leftover after parsing attributes in process `syz.2.649'. [ 72.504718][ T2462] /dev/loop0: Can't lookup blockdev [ 72.624251][ T2466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 73.332288][ T773] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.473125][ T2508] Zero length message leads to an empty skb [ 73.482274][ T773] usb 5-1: Using ep0 maxpacket: 32 [ 73.489363][ T773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.500796][ T773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.510799][ T773] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 73.517353][ T2513] netlink: 68 bytes leftover after parsing attributes in process `syz.1.670'. [ 73.520160][ T773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.541270][ T773] usb 5-1: config 0 descriptor?? [ 73.669788][ T2521] overlayfs: failed to clone upperpath [ 73.675958][ T36] audit: type=1400 audit(1757216877.516:368): avc: denied { map } for pid=2523 comm="syz.1.674" path="socket:[12870]" dev="sockfs" ino=12870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 73.752366][ T773] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 73.759280][ T773] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 73.766569][ T773] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 73.773879][ T773] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 73.780997][ T773] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 73.789779][ T773] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 73.815974][ T773] usb 5-1: USB disconnect, device number 4 [ 73.886219][ T2544] 2N: renamed from vcan0 (while UP) [ 73.950541][ T2547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 73.951144][ T2547] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 73.967521][ T2547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 74.141569][ T2552] rust_binder: Error while translating object. [ 74.151518][ T2552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.157861][ T2552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 74.182853][ T36] audit: type=1400 audit(1757216878.026:369): avc: denied { append } for pid=2556 comm="syz.4.682" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.003220][ T36] audit: type=1400 audit(1757216878.846:370): avc: denied { setattr } for pid=2584 comm="syz.4.693" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 75.025925][ T36] audit: type=1400 audit(1757216878.846:371): avc: denied { create } for pid=2584 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 75.176893][ T2600] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 75.292007][ T539] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 75.442975][ T539] usb 5-1: config 1 has an invalid interface number: 102 but max is 0 [ 75.451276][ T539] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.461510][ T539] usb 5-1: config 1 has no interface number 0 [ 75.467659][ T539] usb 5-1: config 1 interface 102 has no altsetting 0 [ 75.476036][ T539] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 75.485296][ T539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.493674][ T539] usb 5-1: Product: syz [ 75.498003][ T539] usb 5-1: Manufacturer: syz [ 75.502704][ T539] usb 5-1: SerialNumber: syz [ 75.509876][ T539] usbserial_generic 5-1:1.102: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 75.521491][ T539] usbserial_generic 5-1:1.102: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 75.532426][ T539] usbserial_generic 5-1:1.102: device has no bulk endpoints [ 75.711492][ T2595] rust_binder: Error while translating object. [ 75.711532][ T2595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.717872][ T2595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:79 [ 75.728105][ T209] usb 5-1: USB disconnect, device number 5 [ 76.026248][ T2661] tipc: Can't bind to reserved service type 0 [ 76.086884][ T36] audit: type=1400 audit(1757216879.916:372): avc: denied { create } for pid=2677 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.180039][ T2698] 9pnet_fd: Insufficient options for proto=fd [ 76.277144][ T2705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 76.706633][ T36] audit: type=1400 audit(1757216880.546:373): avc: denied { sqpoll } for pid=2707 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.820608][ T2723] 9pnet_fd: Insufficient options for proto=fd [ 76.828448][ T2723] tipc: Enabling of bearer rejected, failed to enable media [ 77.167502][ T2739] rust_binder: Write failure EFAULT in pid:88 [ 77.611654][ T209] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.696714][ T2784] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 77.706639][ T2785] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 77.726766][ T36] audit: type=1400 audit(1757216881.566:374): avc: denied { read } for pid=2786 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.772006][ T209] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 77.781117][ T209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.789040][ T209] usb 5-1: can't read configurations, error -61 [ 77.799133][ T2793] netlink: 'syz.1.767': attribute type 15 has an invalid length. [ 77.806983][ T2793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 77.919005][ T2816] netlink: 72 bytes leftover after parsing attributes in process `syz.1.776'. [ 77.921674][ T209] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.082071][ T209] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 78.091660][ T209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 78.099284][ T209] usb 5-1: can't read configurations, error -61 [ 78.105753][ T209] usb usb5-port1: attempt power cycle [ 78.115656][ T36] audit: type=1326 audit(1757216881.956:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2825 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b78ebe9 code=0x7fc00000 [ 78.183839][ T2845] overlayfs: failed to clone upperpath [ 78.191766][ T2847] 9pnet_fd: Insufficient options for proto=fd [ 78.225174][ T2853] fuse: Bad value for 'group_id' [ 78.230323][ T2853] fuse: Bad value for 'group_id' [ 78.441730][ T209] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.462324][ T209] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 78.471787][ T209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 78.479451][ T209] usb 5-1: can't read configurations, error -61 [ 78.611581][ T209] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 78.632328][ T209] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 78.641199][ T209] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 78.648852][ T209] usb 5-1: can't read configurations, error -61 [ 78.655258][ T209] usb usb5-port1: unable to enumerate USB device [ 78.774678][ T36] audit: type=1400 audit(1757216882.616:376): avc: denied { getopt } for pid=2877 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.400791][ T36] audit: type=1400 audit(1757216883.237:377): avc: denied { write } for pid=2916 comm="syz.1.814" name="/" dev="configfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.731386][ T36] audit: type=1400 audit(1757216883.567:378): avc: denied { mount } for pid=2925 comm="syz.2.817" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.777274][ T2937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.821'. [ 79.854141][ T36] audit: type=1400 audit(1757216883.697:379): avc: denied { connect } for pid=2947 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.911975][ T2949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.824'. [ 80.411750][ T2966] overlay: ./bus is not a directory [ 80.417257][ T2966] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 80.445649][ T36] audit: type=1326 audit(1757216884.287:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.0.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f053b78ebe9 code=0x0 [ 80.498002][ T2970] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 80.506937][ T2970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.506964][ T2970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 80.533103][ T2977] /dev/loop0: Can't lookup blockdev [ 80.596545][ T2981] ptm ptm34: ldisc open failed (-12), clearing slot 34 [ 80.667528][ T36] audit: type=1400 audit(1757216884.507:381): avc: denied { getopt } for pid=3009 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.687449][ T3010] incfs: Error accessing: ./file0. [ 80.693615][ T3010] incfs: mount failed -20 [ 81.148441][ T3028] overlayfs: failed to clone upperpath [ 81.167044][ T36] audit: type=1326 audit(1757216885.007:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3029 comm="syz.1.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8c838ebe9 code=0x0 [ 81.268282][ T3031] 9pnet_fd: Insufficient options for proto=fd [ 81.289345][ T36] audit: type=1400 audit(1757216885.127:383): avc: denied { create } for pid=3034 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 81.322632][ T36] audit: type=1400 audit(1757216885.167:384): avc: denied { getopt } for pid=3041 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.409502][ T3068] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9vî [ 81.434117][ T36] audit: type=1400 audit(1757216885.277:385): avc: denied { ioctl } for pid=3070 comm="syz.4.866" path="socket:[14078]" dev="sockfs" ino=14078 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.446826][ T3072] /dev/loop0: Can't lookup blockdev [ 81.605603][ T3103] netlink: 'syz.2.875': attribute type 4 has an invalid length. [ 81.627327][ T36] audit: type=1400 audit(1757216885.467:386): avc: denied { bind } for pid=3104 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.681185][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 81.760627][ T3117] fuse: Bad value for 'group_id' [ 81.765679][ T3117] fuse: Bad value for 'group_id' [ 81.808276][ T3127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 81.817363][ T9] usb 5-1: device descriptor read/64, error -71 [ 82.061173][ T9] usb 5-1: device descriptor read/64, error -71 [ 82.301109][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 82.426902][ T3157] netlink: 'syz.1.889': attribute type 16 has an invalid length. [ 82.434738][ T3157] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.889'. [ 82.441101][ T9] usb 5-1: device descriptor read/64, error -71 [ 82.681025][ T9] usb 5-1: device descriptor read/64, error -71 [ 82.791445][ T9] usb usb5-port1: attempt power cycle [ 83.130994][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 83.152239][ T9] usb 5-1: device descriptor read/8, error -71 [ 83.282287][ T9] usb 5-1: device descriptor read/8, error -71 [ 83.542704][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 83.562646][ T9] usb 5-1: device descriptor read/8, error -71 [ 83.701918][ T9] usb 5-1: device descriptor read/8, error -71 [ 83.811027][ T9] usb usb5-port1: unable to enumerate USB device [ 83.952708][ T36] audit: type=1400 audit(1757216887.797:387): avc: denied { create } for pid=3215 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.973097][ T36] audit: type=1400 audit(1757216887.817:388): avc: denied { watch watch_reads } for pid=3215 comm="syz.2.909" path="/dev/rnullb0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.015780][ T36] audit: type=1326 audit(1757216887.857:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3226 comm="syz.2.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334fd8ebe9 code=0x0 [ 84.378875][ T36] audit: type=1400 audit(1757216888.217:390): avc: denied { setopt } for pid=3240 comm="syz.0.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.507542][ T3250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 84.515867][ T9] rust_binder: 3247: removing orphan mapping 0:24 [ 84.664033][ T3260] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 84.840814][ T773] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 84.980840][ T773] usb 5-1: device descriptor read/64, error -71 [ 85.220772][ T773] usb 5-1: device descriptor read/64, error -71 [ 85.284321][ T36] audit: type=1326 audit(1757216889.127:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3288 comm="syz.0.934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f053b78ebe9 code=0x0 [ 85.460719][ T773] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 85.590676][ T773] usb 5-1: device descriptor read/64, error -71 [ 85.610874][ T3305] 2N: renamed from vcan0 (while UP) [ 85.771766][ T3331] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 85.850651][ T773] usb 5-1: device descriptor read/64, error -71 [ 85.960798][ T773] usb usb5-port1: attempt power cycle [ 86.191337][ T3351] fuse: Bad value for 'fd' [ 86.191337][ T3352] fuse: Bad value for 'fd' [ 86.200523][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 86.206604][ T36] audit: type=1400 audit(1757216890.037:396): avc: denied { mounton } for pid=3350 comm="syz.0.955" path="/325/file0" dev="tmpfs" ino=1778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.229225][ T36] audit: type=1400 audit(1757216890.037:395): avc: denied { mounton } for pid=3350 comm="syz.0.955" path="/325/file0" dev="tmpfs" ino=1778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.283324][ T36] audit: type=1326 audit(1757216890.127:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3360 comm="syz.0.958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f053b78ebe9 code=0x0 [ 86.320605][ T773] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 86.341541][ T773] usb 5-1: device descriptor read/8, error -71 [ 86.384264][ T3362] overlayfs: failed to resolve './file1': -2 [ 86.471585][ T773] usb 5-1: device descriptor read/8, error -71 [ 86.720666][ T773] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 86.741638][ T773] usb 5-1: device descriptor read/8, error -71 [ 86.871660][ T773] usb 5-1: device descriptor read/8, error -71 [ 86.980659][ T773] usb usb5-port1: unable to enumerate USB device [ 87.128274][ T3366] tipc: Enabling of bearer rejected, failed to enable media [ 87.179567][ T3371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.961'. [ 87.556565][ T3389] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 87.556589][ T3389] rust_binder: Read failure Err(EFAULT) in pid:125 [ 87.840761][ T3408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 87.856343][ T3408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 87.940550][ T539] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 88.091419][ T539] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.103249][ T539] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.113126][ T539] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.126310][ T539] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.135573][ T539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.144249][ T539] usb 5-1: config 0 descriptor?? [ 88.221147][ T3412] overlayfs: failed to clone upperpath [ 88.351713][ T539] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 88.360571][ T539] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 88.371995][ T539] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 88.924030][ T3442] overlayfs: failed to clone upperpath [ 90.365657][ T3452] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 90.373256][ T3452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 90.570550][ T9] usb 5-1: USB disconnect, device number 18 [ 90.663282][ T36] audit: type=1400 audit(1757216894.508:398): avc: denied { setattr } for pid=3453 comm="syz.1.989" name="CAN_RAW" dev="sockfs" ino=15647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.693337][ T3456] overlayfs: failed to clone upperpath [ 90.858034][ T36] audit: type=1400 audit(1757216894.698:399): avc: denied { execute } for pid=3462 comm="syz.2.993" name="file0" dev="tmpfs" ino=1470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.887132][ T36] audit: type=1400 audit(1757216894.698:400): avc: denied { execute_no_trans } for pid=3462 comm="syz.2.993" path="/266/file0" dev="tmpfs" ino=1470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.920172][ T36] audit: type=1400 audit(1757216894.768:401): avc: denied { read write } for pid=3467 comm="syz.2.994" name="rnullb0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 90.947139][ T36] audit: type=1400 audit(1757216894.768:402): avc: denied { open } for pid=3467 comm="syz.2.994" path="/dev/rnullb0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 91.082916][ T36] audit: type=1400 audit(1757216894.928:403): avc: denied { map } for pid=3477 comm="syz.2.999" path="/dev/rnullb0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 91.116592][ T36] audit: type=1400 audit(1757216894.928:404): avc: denied { execute } for pid=3477 comm="syz.2.999" path="/dev/rnullb0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 91.230656][ T3496] netlink: 'syz.2.1005': attribute type 28 has an invalid length. [ 91.373816][ T3501] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 91.449077][ T3511] /dev/loop0: Can't lookup blockdev [ 91.700732][ T3520] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 91.765115][ T3520] fuse: Bad value for 'user_id' [ 91.770117][ T3520] fuse: Bad value for 'user_id' [ 92.247553][ T3534] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 92.256129][ T3535] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 92.494565][ T3561] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 241) [ 92.494596][ T3561] rust_binder: Error while translating object. [ 92.506179][ T3561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.512690][ T3561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 92.551702][ T3571] rust_binder: 3571 RLIMIT_NICE not set [ 92.568422][ T539] rust_binder: 3570: removing orphan mapping 0:1192 [ 92.802906][ T3596] overlayfs: failed to clone upperpath [ 92.989775][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 93.141052][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.152680][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.167015][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.176875][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.194904][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.204077][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.218579][ T9] usb 5-1: config 0 descriptor?? [ 93.377761][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 93.377780][ T36] audit: type=1400 audit(1757216897.218:406): avc: denied { setopt } for pid=3640 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.480230][ T3659] 2N: renamed from vcan0 (while UP) [ 93.559695][ T3670] fuse: Bad value for 'fd' [ 93.624306][ T3673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 93.629085][ T9] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 93.650929][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.658540][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.666046][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.675368][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.684641][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 93.687069][ T36] audit: type=1400 audit(1757216897.528:407): avc: denied { execstack } for pid=3679 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.693297][ T9] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 93.729040][ T9] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 94.234943][ T36] audit: type=1400 audit(1757216898.071:408): avc: denied { read } for pid=3734 comm="syz.1.1092" name="/" dev="configfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.257141][ T36] audit: type=1400 audit(1757216898.071:409): avc: denied { open } for pid=3734 comm="syz.1.1092" path="/" dev="configfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.499321][ T3750] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.507420][ T3750] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 94.515977][ T3750] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.523936][ T3750] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 94.545382][ T3752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.554017][ T3752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.562798][ T3752] rust_binder: Error while translating object. [ 94.562831][ T3752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.569096][ T3752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 95.051851][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 95.079714][ T539] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 95.110744][ T3806] SELinux: failed to load policy [ 95.111630][ T36] audit: type=1400 audit(1757216898.951:410): avc: denied { load_policy } for pid=3805 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.163786][ T3810] 9pnet_fd: Insufficient options for proto=fd [ 95.229964][ T3818] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.229989][ T3818] rust_binder: Read failure Err(EFAULT) in pid:186 [ 95.436592][ T3826] 9pnet_fd: Insufficient options for proto=fd [ 95.474718][ T3830] 9pnet_fd: Insufficient options for proto=fd [ 95.653283][ T36] audit: type=1400 audit(1757216899.491:411): avc: denied { create } for pid=3857 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.674060][ T36] audit: type=1400 audit(1757216899.491:412): avc: denied { read } for pid=3857 comm="syz.2.1136" path="socket:[16671]" dev="sockfs" ino=16671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.769590][ T3861] binder: Unknown parameter 'maÐ' [ 96.143520][ T3878] syz.1.1142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.177194][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.183975][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.190593][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.197113][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.203727][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.210339][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.216674][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.223229][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.230063][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 96.423090][ T60] bridge_slave_1: left allmulticast mode [ 96.429160][ T60] bridge_slave_1: left promiscuous mode [ 96.434898][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.442890][ T60] bridge_slave_0: left allmulticast mode [ 96.448630][ T60] bridge_slave_0: left promiscuous mode [ 96.454432][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.575829][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.583158][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.590399][ T3894] bridge_slave_0: entered allmulticast mode [ 96.597034][ T3894] bridge_slave_0: entered promiscuous mode [ 96.604127][ T60] veth1_macvtap: left promiscuous mode [ 96.609730][ T60] veth0_vlan: left promiscuous mode [ 96.657180][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.664345][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.671511][ T3894] bridge_slave_1: entered allmulticast mode [ 96.677743][ T3894] bridge_slave_1: entered promiscuous mode [ 96.738577][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.745702][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.753403][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.760602][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.788591][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.796576][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.807254][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.814630][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.827769][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.834971][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.864688][ T3914] overlayfs: failed to resolve './file1': -2 [ 96.896739][ T3894] veth0_vlan: entered promiscuous mode [ 96.922806][ T3894] veth1_macvtap: entered promiscuous mode [ 96.934642][ T3930] overlayfs: failed to clone upperpath [ 97.200123][ T773] usb 5-1: USB disconnect, device number 19 [ 97.209823][ T3151] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 97.359711][ T3151] usb 6-1: Using ep0 maxpacket: 16 [ 97.366238][ T3151] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.376331][ T3151] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.386166][ T3151] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 97.396722][ T3151] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.405897][ T3151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.413970][ T3151] usb 6-1: SerialNumber: syz [ 97.420902][ T3935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 97.474409][ T36] audit: type=1400 audit(1757216901.311:413): avc: denied { getopt } for pid=3938 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.516774][ T36] audit: type=1400 audit(1757216901.351:414): avc: denied { ioctl } for pid=3942 comm="syz.2.1162" path="/dev/rnullb0" dev="tmpfs" ino=465 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 97.585406][ T3960] overlayfs: failed to resolve './file1': -2 [ 97.612553][ T3962] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1170'. [ 97.625259][ T3962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 97.654971][ T3969] erspan0: mtu less than device minimum [ 97.662898][ T3969] erspan0: mtu less than device minimum [ 97.688292][ T36] audit: type=1400 audit(1757216901.521:415): avc: denied { watch watch_reads } for pid=3933 comm="syz.5.1149" path="/0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 97.688633][ T3975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 97.806170][ T3151] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 97.824018][ T3151] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 97.836488][ T3151] usb 6-1: USB disconnect, device number 2 [ 97.894942][ T3996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1178'. [ 98.415212][ T4028] rust_binder: 14: no such ref 1 [ 98.420365][ T4028] rust_binder: 14: no such ref 1 [ 98.425423][ T4028] rust_binder: 14: no such ref 0 [ 98.430792][ T4028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 98.514689][ T4033] rust_binder: 4032 RLIMIT_NICE not set [ 98.524193][ T4032] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 98.536983][ T4032] rust_binder: Error while translating object. [ 98.537016][ T4032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.543375][ T4032] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 98.552852][ T4032] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:19 [ 98.570660][ T539] rust_binder: 4031: removing orphan mapping 0:4248 [ 98.585697][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 98.585718][ T36] audit: type=1400 audit(1757216902.421:417): avc: denied { ioctl } for pid=4034 comm="syz.5.1191" path="/dev/input/event2" dev="devtmpfs" ino=207 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.649792][ T4039] rust_binder: Write failure EFAULT in pid:24 [ 98.712069][ T4060] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 98.727665][ T4060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.878466][ T36] audit: type=1326 audit(1757216902.711:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f334fd458e7 code=0x7ffc0000 [ 98.904178][ T36] audit: type=1326 audit(1757216902.711:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334fd8ebe9 code=0x7ffc0000 [ 98.927950][ T36] audit: type=1326 audit(1757216902.711:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f334fd45946 code=0x7ffc0000 [ 98.955973][ T36] audit: type=1326 audit(1757216902.711:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334fd8ebe9 code=0x7ffc0000 [ 98.986892][ T36] audit: type=1326 audit(1757216902.711:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334fd8ebe9 code=0x7ffc0000 [ 99.010402][ T36] audit: type=1326 audit(1757216902.721:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f334fd8ebe9 code=0x7ffc0000 [ 99.033917][ T36] audit: type=1326 audit(1757216902.721:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334fd8ebe9 code=0x7ffc0000 [ 99.057547][ T36] audit: type=1326 audit(1757216902.721:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334fd8ebe9 code=0x7ffc0000 [ 99.081308][ T36] audit: type=1326 audit(1757216902.721:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4087 comm="syz.2.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f334fd461d7 code=0x7ffc0000 [ 99.233691][ T4122] syz.5.1220 (4122): /proc/4120/oom_adj is deprecated, please use /proc/4120/oom_score_adj instead. [ 99.294483][ T4130] random: crng reseeded on system resumption [ 99.323292][ T4130] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 241) [ 99.323313][ T4130] rust_binder: Error while translating object. [ 99.334040][ T4130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.340371][ T4130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 99.388276][ T4134] overlayfs: failed to clone upperpath [ 99.422112][ T4136] tipc: Enabling of bearer rejected, failed to enable media [ 99.519414][ T4145] netlink: 4208 bytes leftover after parsing attributes in process `syz.2.1230'. [ 99.576629][ T4154] tipc: Started in network mode [ 99.581798][ T4154] tipc: Node identity ac14140f, cluster identity 4 [ 99.588507][ T4154] tipc: New replicast peer: 255.255.255.255 [ 99.594842][ T4154] tipc: Enabled bearer , priority 10 [ 99.669737][ T773] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.799706][ T773] usb 6-1: device descriptor read/64, error -71 [ 100.039677][ T773] usb 6-1: device descriptor read/64, error -71 [ 100.204705][ T4183] 9pnet_fd: Insufficient options for proto=fd [ 100.252187][ T4191] overlayfs: failed to clone lowerpath [ 100.289684][ T773] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.419712][ T773] usb 6-1: device descriptor read/64, error -71 [ 100.659907][ T773] usb 6-1: device descriptor read/64, error -71 [ 100.709678][ T3151] tipc: Node number set to 2886997007 [ 100.773546][ T773] usb usb6-port1: attempt power cycle [ 100.821842][ T4208] tipc: Enabling of bearer rejected, failed to enable media [ 100.910822][ T4214] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 101.039946][ T4227] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 101.056503][ T4227] netlink: 'syz.2.1258': attribute type 17 has an invalid length. [ 101.109653][ T773] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.140911][ T773] usb 6-1: device descriptor read/8, error -71 [ 101.270665][ T773] usb 6-1: device descriptor read/8, error -71 [ 101.509665][ T773] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.530712][ T773] usb 6-1: device descriptor read/8, error -71 [ 101.660709][ T773] usb 6-1: device descriptor read/8, error -71 [ 101.769771][ T773] usb usb6-port1: unable to enumerate USB device [ 101.932125][ T4240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4240 comm=syz.1.1263 [ 101.945249][ T4240] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 101.953336][ T4240] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 102.083028][ T4258] netlink: 'syz.1.1269': attribute type 4 has an invalid length. [ 102.517852][ T4267] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1273'. [ 102.540857][ T4269] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 102.564370][ T4271] pim6reg1: entered promiscuous mode [ 102.569769][ T4271] pim6reg1: entered allmulticast mode [ 102.634430][ T4282] fuseblk: Bad value for 'source' [ 102.683304][ T4296] netlink: 'syz.1.1282': attribute type 16 has an invalid length. [ 102.694715][ T4296] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1282'. [ 102.740477][ T4316] overlayfs: failed to clone lowerpath [ 102.974581][ T4344] tipc: Enabling of bearer rejected, failed to enable media [ 103.074512][ T4357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.593734][ T4373] incfs: Options parsing error. -22 [ 103.606359][ T4373] incfs: mount failed -22 [ 103.676867][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 103.688145][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 103.752136][ T4403] overlayfs: missing 'lowerdir' [ 103.911175][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 103.911193][ T36] audit: type=1400 audit(2000000001.373:443): avc: denied { execute } for pid=4419 comm="syz.5.1325" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.937512][ T4422] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 103.940738][ T4422] rust_binder: Error while translating object. [ 103.949613][ T4422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.955848][ T4422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 104.000593][ T4424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484950563 (55759209008 ns) > initial count (50642361344 ns). Using initial count to start timer. [ 104.199388][ T4433] rust_binder: 123: no such ref 1 [ 104.242219][ T4444] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1335'. [ 104.246573][ T36] audit: type=1400 audit(2000000001.703:444): avc: denied { nlmsg_read } for pid=4445 comm="syz.5.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.251738][ T4444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1335'. [ 104.272405][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1334'. [ 104.320301][ T4450] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 104.437076][ T4481] veth1_macvtap: left promiscuous mode [ 104.442637][ T4481] macsec0: entered promiscuous mode [ 104.449213][ T4481] veth1_macvtap: entered promiscuous mode [ 104.455134][ T4481] macsec0: left promiscuous mode [ 104.485158][ T4485] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 104.894388][ T36] audit: type=1400 audit(2000000002.353:445): avc: denied { create } for pid=4490 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 104.928072][ T4489] kvm: pic: non byte write [ 104.933257][ T4489] cgroup: Unknown subsys name 'measure' [ 104.939096][ T4489] __vm_enough_memory: pid: 4489, comm: syz.5.1351, bytes: 18014402804453376 not enough memory for the allocation [ 105.050768][ T4502] can0: slcan on ttyS3. [ 105.100604][ T4502] can0 (unregistered): slcan off ttyS3. [ 105.161995][ T4511] tipc: Started in network mode [ 105.166946][ T36] audit: type=1400 audit(2000000002.623:446): avc: denied { write } for pid=4510 comm="syz.5.1358" name="/" dev="incremental-fs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.175808][ T4511] tipc: Node identity 5e51c7ad6524, cluster identity 4711 [ 105.196738][ T36] audit: type=1400 audit(2000000002.623:447): avc: denied { add_name } for pid=4510 comm="syz.5.1358" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.212450][ T4511] tipc: Enabled bearer , priority 0 [ 105.225761][ T36] audit: type=1400 audit(2000000002.623:448): avc: denied { create } for pid=4510 comm="syz.5.1358" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.246260][ T36] audit: type=1400 audit(2000000002.623:449): avc: denied { associate } for pid=4510 comm="syz.5.1358" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.509511][ T773] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 105.638767][ T4558] overlayfs: failed to clone upperpath [ 105.660631][ T773] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.669175][ T773] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 105.675032][ T4562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1368'. [ 105.678622][ T773] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.687736][ T4562] netlink: 'syz.0.1368': attribute type 6 has an invalid length. [ 105.698647][ T773] usb 6-1: config 220 has no interface number 2 [ 105.705970][ T4562] netlink: 'syz.0.1368': attribute type 5 has an invalid length. [ 105.712462][ T773] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.720283][ T4562] netlink: 'syz.0.1368': attribute type 4 has an invalid length. [ 105.733693][ T773] usb 6-1: config 220 interface 0 has no altsetting 0 [ 105.748015][ T773] usb 6-1: config 220 interface 76 has no altsetting 0 [ 105.754989][ T773] usb 6-1: config 220 interface 1 has no altsetting 0 [ 105.768461][ T773] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 105.777982][ T773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.786754][ T773] usb 6-1: Product: syz [ 105.791042][ T773] usb 6-1: Manufacturer: syz [ 105.795656][ T773] usb 6-1: SerialNumber: syz [ 105.956468][ T36] audit: type=1400 audit(2000000003.418:450): avc: denied { create } for pid=4574 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 106.028666][ T4511] syzkaller0: entered promiscuous mode [ 106.034312][ T4511] syzkaller0: entered allmulticast mode [ 106.040522][ T4511] tipc: Resetting bearer [ 106.047224][ T4578] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 106.066420][ T4578] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 106.076104][ T773] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 106.083763][ T4510] tipc: Resetting bearer [ 106.089464][ T773] usb 6-1: No valid video chain found. [ 106.099466][ T773] usb 6-1: selecting invalid altsetting 0 [ 106.113217][ T4510] tipc: Disabling bearer [ 106.122174][ T773] usb 6-1: USB disconnect, device number 7 [ 106.363124][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.370488][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.377976][ T4601] bridge0: entered promiscuous mode [ 106.383277][ T4601] bridge0: entered allmulticast mode [ 106.747202][ T4612] rust_binder: Write failure EFAULT in pid:151 [ 106.768546][ T4616] rust_binder: Write failure EFAULT in pid:153 [ 107.009411][ T773] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 107.089893][ T4627] netlink: 'syz.2.1388': attribute type 4 has an invalid length. [ 107.098427][ T4627] netlink: 'syz.2.1388': attribute type 4 has an invalid length. [ 107.108798][ T4627] overlayfs: failed to clone upperpath [ 107.149425][ T773] usb 6-1: device descriptor read/64, error -71 [ 107.266343][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 107.305230][ T4645] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54723 sclass=netlink_xfrm_socket pid=4645 comm=syz.1.1395 [ 107.332845][ T36] audit: type=1400 audit(2000000004.798:451): avc: denied { bind } for pid=4651 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.389406][ T773] usb 6-1: device descriptor read/64, error -71 [ 107.629376][ T773] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 107.759378][ T773] usb 6-1: device descriptor read/64, error -71 [ 107.999363][ T773] usb 6-1: device descriptor read/64, error -71 [ 108.109591][ T773] usb usb6-port1: attempt power cycle [ 108.290569][ T4691] /dev/loop0: Can't lookup blockdev [ 108.459959][ T773] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 108.480291][ T773] usb 6-1: device descriptor read/8, error -71 [ 108.629117][ T773] usb 6-1: device descriptor read/8, error -71 [ 108.750288][ T4731] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 108.869333][ T773] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 108.890422][ T773] usb 6-1: device descriptor read/8, error -71 [ 109.020342][ T773] usb 6-1: device descriptor read/8, error -71 [ 109.129455][ T773] usb usb6-port1: unable to enumerate USB device [ 109.457153][ T36] audit: type=1326 audit(2000000006.919:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.1.1440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8c838ebe9 code=0x0 [ 109.559037][ T36] audit: type=1400 audit(2000000007.019:453): avc: denied { ioctl } for pid=4769 comm="syz.1.1440" path="socket:[19764]" dev="sockfs" ino=19764 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.854182][ T36] audit: type=1400 audit(2000000007.319:454): avc: denied { mounton } for pid=4775 comm="syz.5.1442" path="/proc/160/cgroup" dev="proc" ino=19441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 109.962539][ T4788] fuse: Bad value for 'fd' [ 110.867603][ T4856] overlayfs: failed to clone upperpath [ 110.894597][ T36] audit: type=1400 audit(2000000008.359:455): avc: denied { read } for pid=4857 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.062603][ T36] audit: type=1400 audit(2000000008.529:456): avc: denied { map } for pid=4860 comm="syz.1.1470" path="pipe:[2704]" dev="pipefs" ino=2704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 111.714110][ T36] audit: type=1326 audit(2000000009.179:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.1489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f053b78ebe9 code=0x0 [ 112.299931][ T4920] overlayfs: failed to clone upperpath [ 112.356998][ T4934] 9p: Unknown Cache mode or invalid value fscac{e [ 112.429244][ T4942] overlayfs: failed to resolve './file0': -2 [ 112.450932][ T4944] 9pnet_fd: Insufficient options for proto=fd [ 112.571334][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 113.249072][ T3151] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 113.399206][ T3151] usb 6-1: Using ep0 maxpacket: 32 [ 113.405658][ T3151] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 113.407308][ T36] audit: type=1400 audit(2000000010.869:458): avc: denied { accept } for pid=5021 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.414617][ T3151] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 113.442480][ T3151] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 113.442492][ T5023] sit0: entered promiscuous mode [ 113.442525][ T3151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.460197][ T5023] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 113.466532][ T3151] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.484082][ T3151] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 113.495546][ T5023] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1526'. [ 113.497488][ T3151] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 113.515248][ T3151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.524989][ T3151] usb 6-1: config 0 descriptor?? [ 113.693548][ T5036] overlayfs: failed to clone upperpath [ 113.770869][ T3151] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.789687][ T3151] usb 6-1: USB disconnect, device number 12 [ 113.796970][ T3151] usblp0: removed [ 113.987013][ T4981] pim6reg1: entered promiscuous mode [ 113.992454][ T4981] pim6reg1: entered allmulticast mode [ 114.092881][ T5060] netlink: 'syz.2.1539': attribute type 4 has an invalid length. [ 114.239035][ T330] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 114.369003][ T330] usb 6-1: device descriptor read/64, error -71 [ 114.609049][ T330] usb 6-1: device descriptor read/64, error -71 [ 114.738371][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 114.757646][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 114.858979][ T330] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 114.988981][ T330] usb 6-1: device descriptor read/64, error -71 [ 115.174528][ T5086] /dev/loop0: Can't lookup blockdev [ 115.228966][ T330] usb 6-1: device descriptor read/64, error -71 [ 115.339083][ T330] usb usb6-port1: attempt power cycle [ 115.664066][ T36] audit: type=1400 audit(2000000013.129:459): avc: denied { mount } for pid=5115 comm="syz.1.1557" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 115.686510][ T330] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 115.710054][ T330] usb 6-1: device descriptor read/8, error -71 [ 115.816128][ T5137] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.825443][ T5137] overlayfs: missing 'lowerdir' [ 115.839912][ T330] usb 6-1: device descriptor read/8, error -71 [ 115.899792][ T36] audit: type=1326 audit(2000000013.369:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.1.1567" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c838ebe9 code=0x0 [ 116.078907][ T330] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 116.100262][ T5165] overlay: ./file0 is not a directory [ 116.262061][ T5170] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 116.338593][ T5189] 9pnet_fd: Insufficient options for proto=fd [ 116.353263][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 116.369588][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60402 sclass=netlink_route_socket pid=5191 comm=syz.2.1580 [ 116.378988][ T5192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60402 sclass=netlink_route_socket pid=5192 comm=syz.2.1580 [ 116.508876][ T330] usb 6-1: device not accepting address 16, error -71 [ 116.516001][ T330] usb usb6-port1: unable to enumerate USB device [ 116.948306][ T5219] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.957144][ T5219] overlayfs: missing 'lowerdir' [ 116.962773][ T36] audit: type=1400 audit(2000000014.429:461): avc: denied { create } for pid=5218 comm="syz.5.1590" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 116.985575][ T36] audit: type=1400 audit(2000000014.449:462): avc: denied { unmount } for pid=3894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.999976][ T5224] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 117.026175][ T5226] netlink: 'syz.5.1591': attribute type 1 has an invalid length. [ 117.043949][ T36] audit: type=1400 audit(2000000014.509:463): avc: denied { execmem } for pid=5230 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.083975][ T5235] overlayfs: failed to clone upperpath [ 117.219437][ T36] audit: type=1400 audit(2000000014.689:464): avc: denied { mounton } for pid=5250 comm="syz.0.1601" path="/494/file0" dev="tmpfs" ino=2689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 117.274087][ T5255] 9pnet_fd: Insufficient options for proto=fd [ 117.363136][ T36] audit: type=1400 audit(2000000014.829:465): avc: denied { append } for pid=5261 comm="syz.2.1606" name="file0" dev="tmpfs" ino=2556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.673225][ T36] audit: type=1400 audit(2000000015.139:466): avc: denied { create } for pid=5287 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.693652][ T36] audit: type=1400 audit(2000000015.139:467): avc: denied { write } for pid=5287 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.714053][ T36] audit: type=1400 audit(2000000015.139:468): avc: denied { nlmsg_write } for pid=5287 comm="syz.1.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.108800][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 118.198560][ T5297] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 118.219863][ T5299] overlayfs: failed to resolve './file2': -2 [ 118.259009][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 118.266795][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 118.276249][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.286622][ T10] usb 6-1: Product: syz [ 118.292397][ T10] usb 6-1: Manufacturer: syz [ 118.297173][ T10] usb 6-1: SerialNumber: syz [ 118.302824][ T10] usb 6-1: config 0 descriptor?? [ 118.414916][ T5333] fuse: Bad value for 'group_id' [ 118.420055][ T5333] fuse: Bad value for 'group_id' [ 118.426842][ T5333] fuse: Bad value for 'group_id' [ 118.431972][ T5333] fuse: Bad value for 'group_id' [ 118.694952][ T10] usb 6-1: USB disconnect, device number 17 [ 118.741278][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.951316][ T5341] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.262819][ T5367] netlink: 'syz.2.1644': attribute type 4 has an invalid length. [ 119.929501][ T5406] overlayfs: failed to clone upperpath [ 119.956590][ T5406] overlay: ./bus is not a directory [ 120.013612][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 120.033750][ T5422] overlayfs: failed to clone upperpath [ 120.608572][ T5445] fuse: Unknown parameter 'fÁ' [ 120.668800][ T5447] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1671'. [ 120.678538][ T5447] 9pnet_fd: Insufficient options for proto=fd [ 120.856230][ T5464] 9pnet_fd: p9_fd_create_tcp (5464): problem connecting socket to 127.0.0.1 [ 121.302973][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1684'. [ 121.363781][ T5489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214 [ 121.389742][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 121.458519][ T5518] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 121.468614][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 121.468631][ T36] audit: type=1400 audit(2000000018.929:477): avc: denied { relabelto } for pid=5517 comm="syz.0.1695" name="520" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 121.501415][ T36] audit: type=1400 audit(2000000018.939:478): avc: denied { associate } for pid=5517 comm="syz.0.1695" name="520" dev="tmpfs" ino=2833 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 121.529192][ T36] audit: type=1400 audit(2000000018.949:479): avc: denied { write } for pid=289 comm="syz-executor" name="520" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 121.555883][ T36] audit: type=1400 audit(2000000018.949:480): avc: denied { remove_name } for pid=289 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 121.583050][ T36] audit: type=1400 audit(2000000018.949:481): avc: denied { rmdir } for pid=289 comm="syz-executor" name="520" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 121.638608][ T330] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 121.789939][ T330] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 121.799242][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.808365][ T330] usb 6-1: config 0 descriptor?? [ 123.060017][ T330] usb 6-1: Cannot set autoneg [ 123.064977][ T330] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 123.077402][ T330] usb 6-1: USB disconnect, device number 18 [ 123.212257][ T5577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29266 sclass=netlink_route_socket pid=5577 comm=syz.1.1718 [ 123.360727][ T5583] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1720'. [ 123.696084][ T5591] input: syz1 as /devices/virtual/input/input5 [ 123.704239][ T36] audit: type=1400 audit(2000000021.169:482): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.732430][ T36] audit: type=1400 audit(2000000021.169:483): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=516 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.755830][ T36] audit: type=1400 audit(2000000021.169:484): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=516 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.784930][ T5591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.215425][ T36] audit: type=1400 audit(2000000021.679:485): avc: denied { create } for pid=5613 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.284426][ T5633] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 124.284456][ T5633] rust_binder: Error while translating object. [ 124.294568][ T5636] fuse: Bad value for 'fd' [ 124.297022][ T5633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.307327][ T5633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 124.869416][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 125.319491][ T36] audit: type=1400 audit(2000000022.789:486): avc: denied { bpf } for pid=5666 comm="syz.5.1752" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.366168][ T46] bridge_slave_1: left allmulticast mode [ 127.372021][ T46] bridge_slave_1: left promiscuous mode [ 127.377788][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.387649][ T46] bridge_slave_0: left allmulticast mode [ 127.393578][ T46] bridge_slave_0: left promiscuous mode [ 127.399471][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.481247][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.488527][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.495691][ T5759] bridge_slave_0: entered allmulticast mode [ 127.502186][ T5759] bridge_slave_0: entered promiscuous mode [ 127.508850][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.516085][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.523191][ T5759] bridge_slave_1: entered allmulticast mode [ 127.529655][ T5759] bridge_slave_1: entered promiscuous mode [ 127.535692][ T46] tipc: Left network mode [ 127.541536][ T46] veth1_macvtap: left promiscuous mode [ 127.547110][ T46] veth0_vlan: left promiscuous mode [ 127.663286][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.670638][ T5759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.678279][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.685334][ T5759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.707874][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.716172][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.726125][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.733318][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.742679][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.749771][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.775911][ T5759] veth0_vlan: entered promiscuous mode [ 127.786989][ T5759] veth1_macvtap: entered promiscuous mode [ 127.807163][ T5787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1792'. [ 127.817798][ T5787] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1792'. [ 127.833128][ T5787] netlink: 'syz.1.1792': attribute type 6 has an invalid length. [ 127.841683][ T5787] netlink: 'syz.1.1792': attribute type 5 has an invalid length. [ 127.845576][ T5789] FAT-fs (rnullb0): bogus number of reserved sectors [ 127.849696][ T5787] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1792'. [ 127.856217][ T5789] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 127.898218][ T36] audit: type=1400 audit(2000000025.360:487): avc: denied { read } for pid=5793 comm="syz.6.1795" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.924651][ T36] audit: type=1400 audit(2000000025.360:488): avc: denied { open } for pid=5793 comm="syz.6.1795" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.995126][ T5808] futex_wake_op: syz.1.1800 tries to shift op by 144; fix this program [ 128.160316][ T36] audit: type=1400 audit(2000000025.630:489): avc: denied { ioctl } for pid=5793 comm="syz.6.1795" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.185030][ T36] audit: type=1400 audit(2000000025.630:490): avc: denied { map } for pid=5793 comm="syz.6.1795" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.208464][ T36] audit: type=1400 audit(2000000025.630:491): avc: denied { write } for pid=5793 comm="syz.6.1795" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.236890][ T5827] tipc: Enabling of bearer rejected, failed to enable media [ 128.398298][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 128.548325][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 128.554740][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.566027][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.568071][ T5839] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1810'. [ 128.579253][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.599081][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.622030][ T10] usb 7-1: config 0 descriptor?? [ 128.640657][ T5843] overlayfs: failed to clone upperpath [ 128.861212][ T36] audit: type=1400 audit(2000000026.330:492): avc: denied { bind } for pid=5858 comm="syz.0.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 128.892599][ T5864] netlink: 'syz.0.1818': attribute type 5 has an invalid length. [ 128.900553][ T5864] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1818'. [ 129.000840][ T36] audit: type=1400 audit(2000000026.470:493): avc: denied { name_bind } for pid=5872 comm="syz.0.1822" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 130.915547][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 130.922955][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 130.939674][ T10] usb 7-1: USB disconnect, device number 2 [ 131.174854][ T5982] overlayfs: failed to clone upperpath [ 131.368707][ T6001] 9pnet_fd: Insufficient options for proto=fd [ 131.773098][ T6013] SELinux: security_context_str_to_sid (sH)×kÅystem_u) failed with errno=-22 [ 131.820414][ T6015] rust_binder: Write failure EFAULT in pid:13 [ 131.820943][ T6015] netlink: 'syz.6.1872': attribute type 4 has an invalid length. [ 131.933183][ T6030] rust_binder: Read failure Err(EAGAIN) in pid:15 [ 132.024602][ T6037] 9pnet_fd: Insufficient options for proto=fd [ 132.242700][ T36] audit: type=1400 audit(2000000029.710:494): avc: denied { execstack } for pid=6065 comm="syz.1.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 132.249191][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 132.262236][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 132.312853][ T6073] SELinux: Context ϧ® is not valid (left unmapped). [ 132.320664][ T36] audit: type=1400 audit(2000000029.790:495): avc: denied { create } for pid=6072 comm="syz.1.1891" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 132.321669][ T6073] overlayfs: failed to clone upperpath [ 132.342847][ T36] audit: type=1400 audit(2000000029.790:496): avc: denied { associate } for pid=6072 comm="syz.1.1891" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 132.377100][ T6073] overlay: Unknown parameter 'subj_user' [ 132.399112][ T6079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=6079 comm=syz.1.1893 [ 132.412451][ T6079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1893'. [ 132.429648][ T10] usb 7-1: config 7 has an invalid interface number: 43 but max is 0 [ 132.439753][ T10] usb 7-1: config 7 has no interface number 0 [ 132.445902][ T10] usb 7-1: config 7 interface 43 has no altsetting 0 [ 132.454413][ T10] usb 7-1: New USB device found, idVendor=8e38, idProduct=74d6, bcdDevice=d6.6c [ 132.462557][ T6083] fuse: Bad value for 'fd' [ 132.468187][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.476207][ T10] usb 7-1: Product: syz [ 132.480648][ T10] usb 7-1: Manufacturer: syz [ 132.485504][ T10] usb 7-1: SerialNumber: syz [ 132.698325][ T10] usb-storage 7-1:7.43: USB Mass Storage device detected [ 132.747512][ T10] usb 7-1: USB disconnect, device number 3 [ 133.213889][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 133.213921][ T36] audit: type=1400 audit(2000000030.680:506): avc: denied { mounton } for pid=6112 comm="syz.6.1906" path="/proc/20/task" dev="proc" ino=24855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 133.259750][ T6117] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1908'. [ 133.316187][ T36] audit: type=1400 audit(2000000030.780:507): avc: denied { view } for pid=6129 comm="syz.6.1914" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.348397][ T6136] 9pnet_fd: Insufficient options for proto=fd [ 133.446155][ T6151] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1923'. [ 133.464032][ T6151] tipc: Invalid UDP bearer configuration [ 133.464060][ T6151] tipc: Enabling of bearer rejected, failed to enable media [ 133.854579][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.862883][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.870616][ T6169] bridge_slave_0: entered allmulticast mode [ 133.877049][ T6169] bridge_slave_0: entered promiscuous mode [ 133.884729][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.898426][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.907464][ T6169] bridge_slave_1: entered allmulticast mode [ 133.913946][ T6169] bridge_slave_1: entered promiscuous mode [ 133.957796][ T6180] overlayfs: failed to clone upperpath [ 133.999268][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.006601][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.013973][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.021046][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.049245][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.057177][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.070630][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.077848][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.088820][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.096009][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.129090][ T6169] veth0_vlan: entered promiscuous mode [ 134.143019][ T6169] veth1_macvtap: entered promiscuous mode [ 134.212750][ T36] audit: type=1400 audit(2000000031.680:508): avc: denied { lock } for pid=6217 comm="syz.1.1944" path="socket:[25631]" dev="sockfs" ino=25631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.241931][ T6220] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 134.250709][ T6220] rust_binder: Write failure EINVAL in pid:7 [ 134.356103][ T6232] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1948'. [ 134.372087][ T6232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1948'. [ 134.427928][ T6237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.427959][ T6237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.453526][ T6237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.453561][ T6237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.474191][ T6241] rust_binder: Error in use_page_slow: ESRCH [ 134.484328][ T6241] rust_binder: use_range failure ESRCH [ 134.497874][ T6241] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 134.507897][ T6241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 134.520770][ T6241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:15 [ 134.525339][ T6252] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1955'. [ 134.565412][ T36] audit: type=1400 audit(2000000032.030:509): avc: denied { read append } for pid=6255 comm="syz.0.1956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.600054][ T36] audit: type=1400 audit(2000000032.030:510): avc: denied { open } for pid=6255 comm="syz.0.1956" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.631759][ T6261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.639051][ T6261] IPv6: NLM_F_CREATE should be set when creating new route [ 134.646299][ T6261] IPv6: NLM_F_CREATE should be set when creating new route [ 134.667711][ T6261] FAT-fs (rnullb0): bogus number of reserved sectors [ 134.674607][ T6261] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 134.683684][ T6261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6261 comm=syz.0.1958 [ 134.704740][ T36] audit: type=1400 audit(2000000032.170:511): avc: denied { unmount } for pid=6169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 134.724996][ T36] audit: type=1400 audit(2000000032.180:512): avc: denied { sys_module } for pid=6265 comm="syz.6.1961" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 134.987910][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 135.142256][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.153377][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 135.161199][ T9] usb 1-1: can't read configurations, error -71 [ 135.188096][ T6285] cgroup: Invalid name [ 135.215471][ T6289] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 135.215492][ T6289] rust_binder: Error while translating object. [ 135.224625][ T6289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.230883][ T6289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 135.258163][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 135.343204][ T6294] FAT-fs (rnullb0): bogus number of reserved sectors [ 135.349965][ T6294] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 135.370046][ T36] audit: type=1400 audit(2000000032.840:513): avc: denied { create } for pid=6295 comm="syz.0.1973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 135.453575][ T36] audit: type=1326 audit(2000000032.920:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.6.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ff00000 [ 135.477219][ T36] audit: type=1326 audit(2000000032.920:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6297 comm="syz.6.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ff00000 [ 135.775494][ T6328] netlink: 'syz.6.1983': attribute type 4 has an invalid length. [ 135.840858][ T6349] overlayfs: failed to clone lowerpath [ 136.231593][ T6371] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 136.239135][ T6371] rust_binder: Write failure EINVAL in pid:38 [ 136.239577][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1999'. [ 136.270038][ T6373] kernel profiling enabled (shift: 11) [ 136.306212][ T6373] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2000'. [ 136.619335][ T6378] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 136.659111][ T329] bridge_slave_1: left allmulticast mode [ 136.665118][ T329] bridge_slave_1: left promiscuous mode [ 136.671781][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.679893][ T329] bridge_slave_0: left allmulticast mode [ 136.685640][ T329] bridge_slave_0: left promiscuous mode [ 136.691497][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.801909][ T329] veth1_macvtap: left promiscuous mode [ 136.809322][ T329] veth0_vlan: left promiscuous mode [ 136.935445][ T6393] veth1: entered allmulticast mode [ 136.945585][ T6393] veth1: left allmulticast mode [ 137.063152][ T6409] 9pnet_fd: Insufficient options for proto=fd [ 137.351518][ T6411] vlan0: entered allmulticast mode [ 137.362636][ T6411] veth0_vlan: entered allmulticast mode [ 137.380643][ T6411] 9pnet_fd: p9_fd_create_tcp (6411): problem connecting socket to 127.0.0.1 [ 137.798478][ T6424] rust_binder: Error in use_page_slow: ESRCH [ 137.798524][ T6424] rust_binder: use_range failure ESRCH [ 137.805204][ T6424] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 137.812132][ T6424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 137.820241][ T6424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:61 [ 137.959465][ T6433] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.978709][ T6433] kvm: pic: level sensitive irq not supported [ 137.978850][ T6433] kvm: pic: non byte read [ 137.990039][ T6433] kvm: pic: level sensitive irq not supported [ 137.990114][ T6433] kvm: pic: non byte read [ 138.001261][ T6433] kvm: pic: level sensitive irq not supported [ 138.001366][ T6433] kvm: pic: non byte read [ 138.012571][ T6433] kvm: pic: level sensitive irq not supported [ 138.012650][ T6433] kvm: pic: non byte read [ 138.026173][ T6433] /dev/nbd0: Can't lookup blockdev [ 138.330350][ T6466] /dev/loop0: Can't lookup blockdev [ 138.567610][ T773] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.727593][ T773] usb 1-1: Using ep0 maxpacket: 16 [ 138.734278][ T773] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.744871][ T773] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.755790][ T773] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.765123][ T773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.773457][ T773] usb 1-1: Product: syz [ 138.777837][ T773] usb 1-1: Manufacturer: syz [ 138.782510][ T773] usb 1-1: SerialNumber: syz [ 138.942368][ T6490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2041'. [ 138.953340][ T6490] netlink: 'syz.2.2041': attribute type 16 has an invalid length. [ 139.658773][ T6524] netlink: 'syz.1.2053': attribute type 4 has an invalid length. [ 140.331207][ T6550] incfs: Error accessing: trans=fd,rfdno=0x0000000000000084,wfdno=0x0000000000000086. [ 140.341061][ T6550] incfs: mount failed -2 [ 140.487939][ T6576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=6576 comm=syz.2.2068 [ 141.185222][ T36] kauditd_printk_skb: 1395 callbacks suppressed [ 141.185242][ T36] audit: type=1400 audit(2000000038.650:1911): avc: denied { mounton } for pid=6599 comm="syz.2.2077" path="/file0/file0" dev="ramfs" ino=27269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 141.293361][ T773] usb 1-1: 0:2 : does not exist [ 141.302367][ T773] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 141.302484][ T36] audit: type=1326 audit(2000000038.770:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.2082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x0 [ 141.318438][ T773] usb 1-1: USB disconnect, device number 4 [ 141.340850][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.409918][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2082'. [ 141.768285][ T6621] overlayfs: failed to clone upperpath [ 141.786956][ T6624] incfs: Options parsing error. -22 [ 141.792255][ T6624] incfs: mount failed -22 [ 141.854953][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2090'. [ 141.866471][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'. [ 141.876107][ T6637] 9pnet_fd: Insufficient options for proto=fd [ 141.898770][ T36] audit: type=1326 audit(2016777484.363:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 141.922364][ T36] audit: type=1326 audit(2016777484.363:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 141.946011][ T36] audit: type=1326 audit(2016777484.363:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 141.970173][ T36] audit: type=1326 audit(2016777484.363:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 141.993726][ T36] audit: type=1326 audit(2016777484.363:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 142.017351][ T36] audit: type=1326 audit(2016777484.363:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 142.040881][ T36] audit: type=1326 audit(2016777484.363:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 142.064341][ T36] audit: type=1326 audit(2016777484.363:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.6.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa03578ebe9 code=0x7ffc0000 [ 142.156804][ T6650] binder: Unknown parameter 'fscontext?}' [ 142.291525][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.298748][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.306198][ T6652] bridge_slave_0: entered allmulticast mode [ 142.312739][ T6652] bridge_slave_0: entered promiscuous mode [ 142.319374][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.335582][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.345717][ T6652] bridge_slave_1: entered allmulticast mode [ 142.366366][ T6652] bridge_slave_1: entered promiscuous mode [ 142.453955][ T60] tipc: Disabling bearer [ 142.465953][ T60] tipc: Left network mode [ 142.555838][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.562968][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.570308][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.577389][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.592041][ T6653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 142.611268][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.628006][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.639220][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.646431][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.658960][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.666074][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.696338][ T6652] veth0_vlan: entered promiscuous mode [ 142.712612][ T6652] veth1_macvtap: entered promiscuous mode [ 142.763792][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2094'. [ 142.844390][ T6688] 2N: renamed from vcan0 (while UP) [ 142.941357][ T6698] binder: Binderfs stats mode cannot be changed during a remount [ 143.019721][ T6714] netlink: 'syz.1.2115': attribute type 1 has an invalid length. [ 143.047094][ T6716] can: request_module (can-proto-0) failed. [ 143.107463][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.118971][ T6708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 143.168759][ T209] rust_binder: 6707: removing orphan mapping 0:24 [ 143.278895][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.307368][ T10] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice=20.00 [ 143.316797][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.327624][ T10] usb 3-1: config 0 descriptor?? [ 143.336422][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 143.455760][ T6729] veth1_macvtap: left promiscuous mode [ 143.479697][ T6734] devpts: called with bogus options [ 145.168942][ T330] rust_binder: 0: removing orphan mapping 0:96 [ 145.175422][ T330] rust_binder: 0: removing orphan mapping 96:24 [ 145.255806][ T6767] rust_binder: Write failure EFAULT in pid:130 [ 145.303923][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2135'. [ 145.319513][ T6776] batadv_slave_1: entered promiscuous mode [ 145.325805][ T6775] batadv_slave_1: left promiscuous mode [ 145.431486][ T6778] netlink: 'syz.0.2136': attribute type 4 has an invalid length. [ 145.439338][ T6778] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2136'. [ 145.687257][ T773] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.837211][ T773] usb 1-1: Using ep0 maxpacket: 16 [ 145.843573][ T773] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.854014][ T773] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.869690][ T773] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.878936][ T773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.887011][ T773] usb 1-1: Product: syz [ 145.891386][ T773] usb 1-1: Manufacturer: syz [ 145.896070][ T773] usb 1-1: SerialNumber: syz [ 145.902420][ T209] usb 3-1: USB disconnect, device number 12 [ 145.949944][ T6791] netlink: 'syz.2.2140': attribute type 16 has an invalid length. [ 145.957979][ T6791] netlink: 'syz.2.2140': attribute type 4 has an invalid length. [ 145.965910][ T6791] netlink: 64094 bytes leftover after parsing attributes in process `syz.2.2140'. [ 146.106488][ T6778] rust_binder: 135: no such ref 3 [ 146.114143][ T773] usb 1-1: 0:2 : does not exist [ 146.121374][ T773] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 146.132480][ T773] usb 1-1: USB disconnect, device number 5 [ 146.142755][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.196842][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 146.241181][ T6802] binder: Unknown parameter 'defcontext01777777777777777777777' [ 146.266842][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 146.266859][ T36] audit: type=1400 audit(2016777488.723:1929): avc: denied { execute } for pid=6803 comm="syz.2.2145" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.714024][ T46] tipc: Subscription rejected, illegal request [ 146.730708][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2149'. [ 146.784716][ T36] audit: type=1326 audit(2016777489.243:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.2152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd70338ebe9 code=0x0 [ 147.202359][ T36] audit: type=1400 audit(2016777489.663:1931): avc: denied { setattr } for pid=6831 comm="syz.2.2155" name="KEY" dev="sockfs" ino=28043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.803691][ T6850] rust_binder: Error in use_page_slow: ESRCH [ 147.803892][ T6850] rust_binder: use_range failure ESRCH [ 147.833226][ T6850] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 147.847800][ T6850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 147.862859][ T6850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:29 [ 148.449534][ T6889] syzkaller0: entered promiscuous mode [ 148.464465][ T6889] syzkaller0: entered allmulticast mode [ 148.572489][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2173'. [ 148.594795][ T6896] netlink: 'syz.2.2174': attribute type 7 has an invalid length. [ 148.605024][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 148.716822][ T6896] rust_binder: Write failure EFAULT in pid:51 [ 148.767818][ T6897] /dev/rnullb0: Can't open blockdev [ 148.795056][ T6903] overlayfs: failed to clone upperpath [ 148.800967][ T6903] overlayfs: failed to clone upperpath [ 148.806875][ T6903] overlayfs: failed to clone upperpath [ 148.812882][ T6903] overlayfs: failed to clone upperpath [ 148.819187][ T6903] overlayfs: failed to clone upperpath [ 148.824989][ T6903] overlayfs: failed to clone upperpath [ 148.830941][ T6903] overlayfs: failed to clone upperpath [ 148.836943][ T6903] overlayfs: failed to clone upperpath [ 148.843270][ T6903] overlayfs: failed to clone upperpath [ 148.846511][ T6902] 9pnet_fd: p9_fd_create_unix (6902): problem connecting socket: ./bus: -111 [ 148.858040][ T6903] overlayfs: failed to clone upperpath [ 148.863912][ T6903] overlayfs: failed to clone upperpath [ 148.869867][ T6903] overlayfs: failed to clone upperpath [ 148.875711][ T6903] overlayfs: failed to clone upperpath [ 148.881757][ T6903] overlayfs: failed to clone upperpath [ 148.887904][ T6903] overlayfs: failed to clone upperpath [ 148.893775][ T6903] overlayfs: failed to clone upperpath [ 148.899874][ T6903] overlayfs: failed to clone upperpath [ 148.905713][ T6903] overlayfs: failed to clone upperpath [ 148.912064][ T6903] overlayfs: failed to clone upperpath [ 148.917975][ T6903] overlayfs: failed to clone upperpath [ 148.923811][ T6903] overlayfs: failed to clone upperpath [ 148.930132][ T6903] overlayfs: failed to clone upperpath [ 148.935942][ T6903] overlayfs: failed to clone upperpath [ 148.941954][ T6903] overlayfs: failed to clone upperpath [ 148.947817][ T6903] overlayfs: failed to clone upperpath [ 148.953580][ T6903] overlayfs: failed to clone upperpath [ 148.959582][ T6903] overlayfs: failed to clone upperpath [ 148.965463][ T6903] overlayfs: failed to clone upperpath [ 148.971410][ T6903] overlayfs: failed to clone upperpath [ 148.977419][ T6903] overlayfs: failed to clone upperpath [ 148.983309][ T6903] overlayfs: failed to clone upperpath [ 148.989162][ T6903] overlayfs: failed to clone upperpath [ 148.995000][ T6903] overlayfs: failed to clone upperpath [ 149.000873][ T6903] overlayfs: failed to clone upperpath [ 149.006657][ T6903] overlayfs: failed to clone upperpath [ 149.012592][ T6903] overlayfs: failed to clone upperpath [ 149.018381][ T6903] overlayfs: failed to clone upperpath [ 149.024323][ T6903] overlayfs: failed to clone upperpath [ 149.030259][ T6903] overlayfs: failed to clone upperpath [ 149.036100][ T6903] overlayfs: failed to clone upperpath [ 149.041921][ T6903] overlayfs: failed to clone upperpath [ 149.047802][ T6903] overlayfs: failed to clone upperpath [ 149.053575][ T6903] overlayfs: failed to clone upperpath [ 149.059483][ T6903] overlayfs: failed to clone upperpath [ 149.065252][ T6903] overlayfs: failed to clone upperpath [ 149.071120][ T6903] overlayfs: failed to clone upperpath [ 149.076918][ T6903] overlayfs: failed to clone upperpath [ 149.082792][ T6903] overlayfs: failed to clone upperpath [ 149.088635][ T6903] overlayfs: failed to clone upperpath [ 149.094442][ T6903] overlayfs: failed to clone upperpath [ 149.100510][ T6903] overlayfs: failed to clone upperpath [ 149.106737][ T6903] overlayfs: failed to clone upperpath [ 149.113071][ T6903] overlayfs: failed to clone upperpath [ 149.119081][ T6903] overlayfs: failed to clone upperpath [ 149.125186][ T6903] overlayfs: failed to clone upperpath [ 149.131463][ T6903] overlayfs: failed to clone upperpath [ 149.137660][ T6903] overlayfs: failed to clone upperpath [ 149.143705][ T6903] overlayfs: failed to clone upperpath [ 149.149737][ T6903] overlayfs: failed to clone upperpath [ 149.155573][ T6903] overlayfs: failed to clone upperpath [ 149.161540][ T6903] overlayfs: failed to clone upperpath [ 149.167370][ T6903] overlayfs: failed to clone upperpath [ 149.173239][ T6903] overlayfs: failed to clone upperpath [ 149.179113][ T6903] overlayfs: failed to clone upperpath [ 149.184982][ T6903] overlayfs: failed to clone upperpath [ 149.204180][ T36] audit: type=1326 audit(2016777491.663:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.1.2180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c838ebe9 code=0x0 [ 150.139544][ T6979] 9pnet_fd: Insufficient options for proto=fd [ 150.195232][ T6992] 9pnet_fd: Insufficient options for proto=fd [ 150.587635][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 150.596958][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2217'. [ 150.597120][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2217'. [ 150.830860][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.838030][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.845147][ T7049] bridge_slave_0: entered allmulticast mode [ 150.851681][ T7049] bridge_slave_0: entered promiscuous mode [ 150.858289][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.865705][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.873057][ T7049] bridge_slave_1: entered allmulticast mode [ 150.879744][ T7049] bridge_slave_1: entered promiscuous mode [ 150.936413][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.943823][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.951266][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.958396][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.980479][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.987996][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.999238][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.006429][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.014189][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.021466][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.046845][ T7049] veth0_vlan: entered promiscuous mode [ 151.058501][ T7049] veth1_macvtap: entered promiscuous mode [ 151.104482][ T7072] netlink: 'syz.6.2227': attribute type 11 has an invalid length. [ 151.106085][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2219'. [ 151.131035][ T7076] 9pnet_fd: Insufficient options for proto=fd [ 151.139405][ T7074] can: request_module (can-proto-0) failed. [ 151.153717][ T7079] /dev/loop0: Can't lookup blockdev [ 151.179649][ T7081] tmpfs: Unknown parameter '×P²ùí9»ÃIÃXßsnoswap' [ 151.300066][ T7090] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 151.404777][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2236'. [ 151.431275][ T7104] tipc: Enabling of bearer rejected, failed to enable media [ 151.809869][ T36] audit: type=1400 audit(2016777494.273:1933): avc: denied { write } for pid=7122 comm="syz.2.2246" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.811709][ T7123] /dev/md0: Can't lookup blockdev [ 151.860281][ T7126] tipc: Started in network mode [ 151.865232][ T7126] tipc: Node identity 16e8da26c0b6, cluster identity 4711 [ 151.872498][ T7126] tipc: Enabled bearer , priority 0 [ 151.879610][ T7126] syzkaller0: entered promiscuous mode [ 151.885085][ T7126] syzkaller0: entered allmulticast mode [ 151.892869][ T7126] tipc: Resetting bearer [ 151.957755][ T7125] tipc: Resetting bearer [ 151.964283][ T7125] tipc: Disabling bearer [ 152.067879][ T7133] netlink: 'syz.6.2250': attribute type 32 has an invalid length. [ 152.188794][ T7142] @: renamed from vlan0 [ 152.198676][ T36] audit: type=1400 audit(2016777494.663:1934): avc: denied { setattr } for pid=7141 comm="syz.0.2253" name="TIPC" dev="sockfs" ino=29842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.246112][ T7137] /dev/rnullb0: Can't open blockdev [ 152.303158][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2258'. [ 152.372115][ T7172] tipc: Enabling of bearer rejected, failed to enable media [ 152.432288][ T7182] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2267'. [ 152.616850][ T209] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.677832][ T36] audit: type=1326 audit(2016777495.143:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.6.2273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa03578ebe9 code=0x0 [ 152.778168][ T209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.788383][ T209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.788903][ T7201] tmpfs: Bad value for 'huge' [ 152.798625][ T209] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.811176][ T209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.819541][ T209] usb 2-1: SerialNumber: syz [ 153.029979][ T209] usb 2-1: 0:2 : does not exist [ 153.035143][ T209] usb 2-1: unit 5: unexpected type 0x03 [ 153.046482][ T209] usb 2-1: USB disconnect, device number 10 [ 153.092470][ T7210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2277'. [ 153.092486][ T36] audit: type=1400 audit(2016777495.553:1936): avc: denied { nlmsg_read } for pid=7209 comm="syz.0.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.211608][ T36] audit: type=1400 audit(2016777495.673:1937): avc: denied { shutdown } for pid=7211 comm="syz.0.2278" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.554338][ T7253] /dev/rnullb0: Can't open blockdev [ 153.619988][ T7257] rust_binder: inc_ref_done called when no active inc_refs [ 153.620015][ T7257] rust_binder: 27: no such ref 1 [ 153.632706][ T209] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.699868][ T7264] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2297'. [ 153.699991][ T7265] rust_binder: Error while translating object. [ 153.709664][ T7265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 153.715853][ T7265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:31 [ 153.777932][ T209] usb 3-1: device descriptor read/64, error -71 [ 153.808476][ T7273] netlink: 'syz.1.2300': attribute type 6 has an invalid length. [ 153.810553][ T7275] 9pnet_fd: Insufficient options for proto=fd [ 153.816349][ T7273] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.865908][ T7284] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 153.874333][ T7284] rust_binder: Write failure EINVAL in pid:40 [ 153.989979][ T7294] netlink: 'syz.1.2307': attribute type 64 has an invalid length. [ 154.004055][ T7294] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2307'. [ 154.026766][ T209] usb 3-1: device descriptor read/64, error -71 [ 154.090247][ T7297] SELinux: security_context_str_to_sid () failed with errno=-22 [ 154.090248][ T7298] SELinux: security_context_str_to_sid () failed with errno=-22 [ 154.090675][ T36] audit: type=1400 audit(2016777496.553:1938): avc: denied { setopt } for pid=7296 comm="syz.1.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.204436][ T7305] kvm: kvm [7303]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 154.213040][ T7305] kvm: kvm [7303]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 154.223668][ T7305] kvm: kvm [7303]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 154.235475][ T7305] kvm: kvm [7303]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 154.244297][ T7305] kvm: kvm [7303]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 154.249269][ T7307] rust_binder: Error while translating object. [ 154.252785][ T7307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 154.255619][ T7305] kvm_intel: kvm [7303]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 154.259542][ T7307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57 [ 154.277975][ T209] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.426744][ T209] usb 3-1: device descriptor read/64, error -71 [ 154.444606][ T7319] sit0: entered promiscuous mode [ 154.450786][ T7319] netlink: 'syz.0.2314': attribute type 1 has an invalid length. [ 154.460578][ T36] audit: type=1400 audit(2016777496.923:1939): avc: denied { map } for pid=7318 comm="syz.0.2314" path="socket:[30251]" dev="sockfs" ino=30251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.485701][ T36] audit: type=1400 audit(2016777496.923:1940): avc: denied { read } for pid=7318 comm="syz.0.2314" path="socket:[30251]" dev="sockfs" ino=30251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.509985][ T36] audit: type=1400 audit(2016777496.923:1941): avc: denied { ioctl } for pid=7318 comm="syz.0.2314" path="socket:[30251]" dev="sockfs" ino=30251 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.666722][ T209] usb 3-1: device descriptor read/64, error -71 [ 154.783628][ T209] usb usb3-port1: attempt power cycle [ 155.078590][ T329] bridge_slave_1: left allmulticast mode [ 155.086259][ T329] bridge_slave_1: left promiscuous mode [ 155.092204][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.100183][ T329] bridge_slave_0: left allmulticast mode [ 155.105909][ T329] bridge_slave_0: left promiscuous mode [ 155.111963][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.126683][ T209] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 155.158706][ T209] usb 3-1: device descriptor read/8, error -71 [ 155.279483][ T329] veth1_macvtap: left promiscuous mode [ 155.285142][ T329] veth0_vlan: left promiscuous mode [ 155.296873][ T209] usb 3-1: device descriptor read/8, error -71 [ 155.381676][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.388817][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.395918][ T7345] bridge_slave_0: entered allmulticast mode [ 155.402310][ T7345] bridge_slave_0: entered promiscuous mode [ 155.408753][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.415794][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.422916][ T7345] bridge_slave_1: entered allmulticast mode [ 155.429291][ T7345] bridge_slave_1: entered promiscuous mode [ 155.482699][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.489801][ T7345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.497164][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.504249][ T7345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.526363][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.533757][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.543532][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.550687][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.556954][ T209] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.568480][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.575575][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.588529][ T209] usb 3-1: device descriptor read/8, error -71 [ 155.604123][ T7345] veth0_vlan: entered promiscuous mode [ 155.615582][ T7345] veth1_macvtap: entered promiscuous mode [ 155.717690][ T209] usb 3-1: device descriptor read/8, error -71 [ 155.826847][ T209] usb usb3-port1: unable to enumerate USB device [ 155.873262][ T7363] __nla_validate_parse: 2 callbacks suppressed [ 155.873280][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 156.076662][ T209] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 156.154450][ T7397] overlay: ./file1 is not a directory [ 156.226678][ T209] usb 8-1: Using ep0 maxpacket: 16 [ 156.232357][ T209] usb 8-1: too many configurations: 97, using maximum allowed: 8 [ 156.241349][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.252979][ T209] usb 8-1: config 0 has no interfaces? [ 156.261165][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.271782][ T209] usb 8-1: config 0 has no interfaces? [ 156.277988][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.288679][ T209] usb 8-1: config 0 has no interfaces? [ 156.295471][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.305768][ T209] usb 8-1: config 0 has no interfaces? [ 156.311956][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.322085][ T209] usb 8-1: config 0 has no interfaces? [ 156.328334][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.338765][ T209] usb 8-1: config 0 has no interfaces? [ 156.344903][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.355118][ T209] usb 8-1: config 0 has no interfaces? [ 156.361414][ T209] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.371574][ T209] usb 8-1: config 0 has no interfaces? [ 156.569044][ T7434] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 156.569073][ T7434] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 156.577258][ T7434] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 156.590745][ T9] rust_binder: 7433: removing orphan mapping 0:96 [ 156.710709][ T7452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.710748][ T7452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 156.780215][ T36] audit: type=1326 audit(2016777499.244:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.816780][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 156.816798][ T36] audit: type=1326 audit(2016777499.274:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.846567][ T36] audit: type=1326 audit(2016777499.284:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.870461][ T36] audit: type=1326 audit(2016777499.284:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.894666][ T36] audit: type=1326 audit(2016777499.284:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.918509][ T36] audit: type=1326 audit(2016777499.284:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.919172][ T7457] 2N: renamed from vcan0 (while UP) [ 156.942127][ T36] audit: type=1326 audit(2016777499.284:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 156.981262][ T36] audit: type=1326 audit(2016777499.284:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 157.006204][ T36] audit: type=1326 audit(2016777499.284:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 157.029755][ T36] audit: type=1326 audit(2016777499.284:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 157.053285][ T36] audit: type=1326 audit(2016777499.284:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.0.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70338ebe9 code=0x7ff00000 [ 157.122764][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.138989][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.349614][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.359331][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.612297][ T7472] pim6reg1: entered promiscuous mode [ 157.617931][ T7472] pim6reg1: entered allmulticast mode [ 157.741006][ T7477] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 233) [ 157.741097][ T7477] rust_binder: Error while translating object. [ 157.751994][ T7477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.758620][ T7477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 157.859628][ T7480] __vm_enough_memory: pid: 7480, comm: syz.2.2364, bytes: 18014402804453376 not enough memory for the allocation [ 157.947283][ T7492] /dev/rnullb0: Can't open blockdev [ 157.957751][ T7494] /dev/rnullb0: Can't open blockdev [ 157.987233][ T7501] /dev/rnullb0: Can't open blockdev [ 158.096803][ T7510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.098357][ T7510] rust_binder: Error while translating object. [ 158.116766][ T7510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 158.123096][ T7510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:29 [ 158.140042][ T7533] netlink: 'syz.6.2377': attribute type 4 has an invalid length. [ 158.181368][ T7533] netlink: 'syz.6.2377': attribute type 4 has an invalid length. [ 158.200297][ T7533] 8021q: VLANs not supported on lo [ 158.205819][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.217214][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.427331][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.435854][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.448138][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2380'. [ 158.827409][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2388'. [ 158.838115][ T7563] 9pnet_fd: Insufficient options for proto=fd [ 158.905929][ T7579] overlay: ./file1 is not a directory [ 159.196888][ T7599] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 159.196925][ T7599] rust_binder: Error in use_page_slow: EBUSY [ 159.207392][ T7599] rust_binder: use_range failure EBUSY [ 159.213419][ T7599] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 159.219205][ T7599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 159.227116][ T7599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:146 [ 159.486487][ T330] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 159.647727][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.657948][ T330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 159.667146][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 159.677041][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 159.686880][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.707049][ T330] usb 3-1: string descriptor 0 read error: -22 [ 159.713522][ T330] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.722807][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.733590][ T330] usb 3-1: 0:2 : does not exist [ 159.751638][ T7608] overlayfs: failed to clone lowerpath [ 159.758636][ T7608] tc_dump_action: action bad kind [ 160.003607][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 160.024704][ T330] usb 3-1: USB disconnect, device number 17 [ 160.594640][ T7645] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 160.679413][ T7651] /dev/rnullb0: Can't open blockdev [ 160.693070][ T7653] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 160.713685][ T7657] rust_binder: 162: no such ref 1 [ 160.726659][ T7657] rust_binder: 162: no such ref 0 [ 160.731723][ T7657] rust_binder: 162: no such ref 2 [ 160.736845][ T7657] rust_binder: 162: no such ref 1 [ 160.818630][ T7666] kvm: Disabled LAPIC found during irq injection [ 160.832857][ T7666] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 160.931172][ T7668] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 241) [ 160.931201][ T7668] rust_binder: Error while translating object. [ 160.941877][ T7668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.948328][ T7668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 161.235465][ T7694] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 161.251916][ T7694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 161.457243][ T209] usb 8-1: string descriptor 0 read error: -32 [ 161.472747][ T209] usb 8-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 161.481841][ T209] usb 8-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 161.491372][ T209] usb 8-1: config 0 descriptor?? [ 161.496606][ T209] usb 8-1: can't set config #0, error -32 [ 161.781384][ T7708] overlayfs: conflicting options: nfs_export=on,index=off [ 161.872894][ T7723] incfs: Error accessing: ./file0. [ 161.878113][ T7723] incfs: mount failed -20 [ 161.882936][ T7723] incfs: Error accessing: ./file0. [ 161.888168][ T7723] incfs: mount failed -20 [ 162.019217][ T7745] overlayfs: missing 'workdir' [ 162.115866][ T6652] ------------[ cut here ]------------ [ 162.121462][ T6652] WARNING: CPU: 0 PID: 6652 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 162.129564][ T6652] Modules linked in: [ 162.133512][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz-executor Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 162.145321][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.155448][ T6652] RIP: 0010:drop_nlink+0xce/0x110 [ 162.160542][ T6652] Code: 04 00 00 be 08 00 00 00 e8 5f 46 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c5 a0 03 cc e8 82 0e 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 162.180207][ T6652] RSP: 0018:ffffc9000d36fc60 EFLAGS: 00010293 [ 162.186353][ T6652] RAX: ffffffff81edd58e RBX: ffff88810d36e5a0 RCX: ffff888135671300 [ 162.194349][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.202371][ T6652] RBP: ffffc9000d36fc88 R08: 0000000000000003 R09: 0000000000000004 [ 162.210486][ T6652] R10: dffffc0000000000 R11: fffff52001a6df7c R12: dffffc0000000000 [ 162.218515][ T6652] R13: 1ffff11021a6dcbd R14: ffff88810d36e5e8 R15: 0000000000000000 [ 162.226642][ T6652] FS: 000055556987c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 162.235775][ T6652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.242496][ T6652] CR2: 000055556989f4e8 CR3: 000000010fbae000 CR4: 00000000003526b0 [ 162.250565][ T6652] Call Trace: [ 162.253859][ T6652] [ 162.256972][ T6652] shmem_rmdir+0x5f/0x90 [ 162.261263][ T6652] vfs_rmdir+0x3dd/0x560 [ 162.265526][ T6652] incfs_kill_sb+0x109/0x230 [ 162.270182][ T6652] deactivate_locked_super+0xd8/0x2a0 [ 162.275621][ T6652] deactivate_super+0xb8/0xe0 [ 162.280358][ T6652] cleanup_mnt+0x3f1/0x480 [ 162.285272][ T6652] __cleanup_mnt+0x1d/0x40 [ 162.289767][ T6652] task_work_run+0x1e3/0x250 [ 162.294386][ T6652] ? __cfi_task_work_run+0x10/0x10 [ 162.299538][ T6652] ? __x64_sys_umount+0x126/0x170 [ 162.304604][ T6652] ? __cfi___x64_sys_umount+0x10/0x10 [ 162.310052][ T6652] ? __kasan_check_read+0x15/0x20 [ 162.315246][ T6652] resume_user_mode_work+0x36/0x50 [ 162.320523][ T6652] syscall_exit_to_user_mode+0x64/0xb0 [ 162.326114][ T6652] do_syscall_64+0x64/0xf0 [ 162.330589][ T6652] ? clear_bhb_loop+0x50/0xa0 [ 162.335300][ T6652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.341286][ T6652] RIP: 0033:0x7f834b18ff17 [ 162.345757][ T6652] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 162.365789][ T6652] RSP: 002b:00007fff0279b728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 162.374268][ T6652] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f834b18ff17 [ 162.382731][ T6652] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0279b7e0 [ 162.390855][ T6652] RBP: 00007fff0279b7e0 R08: 0000000000000000 R09: 0000000000000000 [ 162.398882][ T6652] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0279c870 [ 162.406919][ T6652] R13: 00007f834b211c05 R14: 0000000000027916 R15: 00007fff0279c8b0 [ 162.414911][ T6652] [ 162.417962][ T6652] ---[ end trace 0000000000000000 ]--- [ 162.423787][ T6652] ================================================================== [ 162.431886][ T6652] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 162.438158][ T6652] Write of size 4 at addr 0000000000000168 by task syz-executor/6652 [ 162.446236][ T6652] [ 162.448625][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz-executor Tainted: G W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 162.448653][ T6652] Tainted: [W]=WARN [ 162.448658][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.448669][ T6652] Call Trace: [ 162.448674][ T6652] [ 162.448681][ T6652] __dump_stack+0x21/0x30 [ 162.448707][ T6652] dump_stack_lvl+0x10c/0x190 [ 162.448730][ T6652] ? __cfi_dump_stack_lvl+0x10/0x10 [ 162.448762][ T6652] print_report+0x3d/0x70 [ 162.448788][ T6652] kasan_report+0x163/0x1a0 [ 162.448807][ T6652] ? ihold+0x24/0x70 [ 162.448824][ T6652] ? _raw_spin_unlock+0x45/0x60 [ 162.448847][ T6652] ? ihold+0x24/0x70 [ 162.448862][ T6652] kasan_check_range+0x299/0x2a0 [ 162.448880][ T6652] __kasan_check_write+0x18/0x20 [ 162.448902][ T6652] ihold+0x24/0x70 [ 162.448917][ T6652] vfs_rmdir+0x26a/0x560 [ 162.448937][ T6652] incfs_kill_sb+0x109/0x230 [ 162.448961][ T6652] deactivate_locked_super+0xd8/0x2a0 [ 162.448982][ T6652] deactivate_super+0xb8/0xe0 [ 162.449002][ T6652] cleanup_mnt+0x3f1/0x480 [ 162.449019][ T6652] __cleanup_mnt+0x1d/0x40 [ 162.449035][ T6652] task_work_run+0x1e3/0x250 [ 162.449054][ T6652] ? __cfi_task_work_run+0x10/0x10 [ 162.449072][ T6652] ? __x64_sys_umount+0x126/0x170 [ 162.449094][ T6652] ? __cfi___x64_sys_umount+0x10/0x10 [ 162.449117][ T6652] ? __kasan_check_read+0x15/0x20 [ 162.449139][ T6652] resume_user_mode_work+0x36/0x50 [ 162.449158][ T6652] syscall_exit_to_user_mode+0x64/0xb0 [ 162.449179][ T6652] do_syscall_64+0x64/0xf0 [ 162.449202][ T6652] ? clear_bhb_loop+0x50/0xa0 [ 162.449222][ T6652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.449241][ T6652] RIP: 0033:0x7f834b18ff17 [ 162.449254][ T6652] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 162.449267][ T6652] RSP: 002b:00007fff0279b728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 162.449283][ T6652] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f834b18ff17 [ 162.449294][ T6652] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0279b7e0 [ 162.449305][ T6652] RBP: 00007fff0279b7e0 R08: 0000000000000000 R09: 0000000000000000 [ 162.449315][ T6652] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0279c870 [ 162.449325][ T6652] R13: 00007f834b211c05 R14: 0000000000027916 R15: 00007fff0279c8b0 [ 162.449338][ T6652] [ 162.449344][ T6652] ================================================================== [ 162.697665][ T6652] Disabling lock debugging due to kernel taint [ 162.703923][ T6652] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 162.711765][ T6652] #PF: supervisor write access in kernel mode [ 162.717840][ T6652] #PF: error_code(0x0002) - not-present page [ 162.723827][ T6652] PGD 800000013d818067 P4D 800000013d818067 PUD 0 [ 162.730351][ T6652] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 162.736434][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz-executor Tainted: G B W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 162.749834][ T6652] Tainted: [B]=BAD_PAGE, [W]=WARN [ 162.754892][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.764987][ T6652] RIP: 0010:ihold+0x2a/0x70 [ 162.769521][ T6652] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 162.789426][ T6652] RSP: 0018:ffffc9000d36fca0 EFLAGS: 00010246 [ 162.795604][ T6652] RAX: ffff888135671300 RBX: 0000000000000000 RCX: ffff888135671300 [ 162.803676][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.811685][ T6652] RBP: ffffc9000d36fcb0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 162.819690][ T6652] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff88810d36e5ac [ 162.827671][ T6652] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 162.835671][ T6652] FS: 000055556987c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 162.844647][ T6652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.851344][ T6652] CR2: 0000000000000168 CR3: 000000010fbae000 CR4: 00000000003526b0 [ 162.859331][ T6652] Call Trace: [ 162.862627][ T6652] [ 162.865565][ T6652] vfs_rmdir+0x26a/0x560 [ 162.869823][ T6652] incfs_kill_sb+0x109/0x230 [ 162.874500][ T6652] deactivate_locked_super+0xd8/0x2a0 [ 162.879894][ T6652] deactivate_super+0xb8/0xe0 [ 162.884588][ T6652] cleanup_mnt+0x3f1/0x480 [ 162.889086][ T6652] __cleanup_mnt+0x1d/0x40 [ 162.893538][ T6652] task_work_run+0x1e3/0x250 [ 162.898151][ T6652] ? __cfi_task_work_run+0x10/0x10 [ 162.903275][ T6652] ? __x64_sys_umount+0x126/0x170 [ 162.908485][ T6652] ? __cfi___x64_sys_umount+0x10/0x10 [ 162.913871][ T6652] ? __kasan_check_read+0x15/0x20 [ 162.918917][ T6652] resume_user_mode_work+0x36/0x50 [ 162.924069][ T6652] syscall_exit_to_user_mode+0x64/0xb0 [ 162.929541][ T6652] do_syscall_64+0x64/0xf0 [ 162.934457][ T6652] ? clear_bhb_loop+0x50/0xa0 [ 162.939161][ T6652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.945195][ T6652] RIP: 0033:0x7f834b18ff17 [ 162.949818][ T6652] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 162.969529][ T6652] RSP: 002b:00007fff0279b728 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 162.977965][ T6652] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f834b18ff17 [ 162.985948][ T6652] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0279b7e0 [ 162.994029][ T6652] RBP: 00007fff0279b7e0 R08: 0000000000000000 R09: 0000000000000000 [ 163.002034][ T6652] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0279c870 [ 163.010028][ T6652] R13: 00007f834b211c05 R14: 0000000000027916 R15: 00007fff0279c8b0 [ 163.018121][ T6652] [ 163.021242][ T6652] Modules linked in: [ 163.025227][ T6652] CR2: 0000000000000168 [ 163.029377][ T6652] ---[ end trace 0000000000000000 ]--- [ 163.034830][ T6652] RIP: 0010:ihold+0x2a/0x70 [ 163.039347][ T6652] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 163.059021][ T6652] RSP: 0018:ffffc9000d36fca0 EFLAGS: 00010246 [ 163.065135][ T6652] RAX: ffff888135671300 RBX: 0000000000000000 RCX: ffff888135671300 [ 163.073123][ T6652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.081110][ T6652] RBP: ffffc9000d36fcb0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 163.089096][ T6652] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff88810d36e5ac [ 163.097077][ T6652] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 163.105091][ T6652] FS: 000055556987c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 163.114079][ T6652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.122174][ T6652] CR2: 0000000000000168 CR3: 000000010fbae000 CR4: 00000000003526b0 [ 163.130202][ T6652] Kernel panic - not syncing: Fatal exception [ 163.136535][ T6652] Kernel Offset: disabled [ 163.140984][ T6652] Rebooting in 86400 seconds..