last executing test programs: 50.992194018s ago: executing program 0 (id=52): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x10000, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @local}) sendto$inet(r1, &(0x7f00000001c0)="1ea4be9c0eab763122d3fd6a68dda1616d19c19426036fb5e8916c32b01c9ea872f93393e9f3a348fb12d69bec495157bd522dde16d7599f2578f38b9ec57b1f96467efa0dc34b2d3f4cb38393df6b20da76607bd9685ca5ad78d89fab41ca66dd1f03e95ce3a36ba9b78ebfaa66faa86e6b576190aa49ff6a324777062c82c81d7a0e58d1c6b28c7ecc6e699d2e", 0x8e, 0x48090, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0xfffffffffffffe3a, 0x18, &(0x7f0000000280)={@flat=@handle, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0x14}, @flat=@handle={0x73682a85, 0x110a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 50.914956369s ago: executing program 0 (id=56): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x57}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, r3, 0x0) 50.794401161s ago: executing program 0 (id=57): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1, 0x1}) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60800, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000b00)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 50.775979782s ago: executing program 0 (id=58): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r2, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0xc, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e9"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r5, 0x0, 0x4, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 47.573763614s ago: executing program 0 (id=91): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x104) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800000000000000000b000000080003"], 0x24}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="ff010000e901000006800000000000000100000002000b9b88051743"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 47.526670545s ago: executing program 0 (id=93): pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000e40)={0xf2, 0x100072}, 0x20) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) r2 = socket$tipc(0x1e, 0x2, 0x0) dup3(r2, r1, 0x0) 47.437208676s ago: executing program 32 (id=93): pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000e40)={0xf2, 0x100072}, 0x20) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"}) r2 = socket$tipc(0x1e, 0x2, 0x0) dup3(r2, r1, 0x0) 32.851216837s ago: executing program 2 (id=369): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x102) (async, rerun: 32) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async, rerun: 32) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x802c, &(0x7f0000000180)={[{@xattr}]}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x55, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r10) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0xe, 0x6, 0x300, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) 32.788796538s ago: executing program 2 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x4}}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r4, r2, 0x80000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x618400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, 0x0) r8 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r8) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = dup(r9) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) connect$inet6(r10, &(0x7f0000008900)={0xa, 0x4e21, 0x1, @local, 0x7}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 32.743674709s ago: executing program 2 (id=373): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) iopl(0x3) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 32.67376784s ago: executing program 2 (id=374): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x210749f, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = memfd_create(&(0x7f0000000180)='./binderfs/binder0\x00', 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={r2, 0x0, 0x4000}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=Xd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 32.67353582s ago: executing program 2 (id=375): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x202000, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, &(0x7f0000000100)="28213d91cdb8d1b72140860547884bced8fbc1302e41e47f81ca8fb20018995715ee41f9990d13b8a35217dcdb16a96b33ab357292a91f1ad2fab9baec9befe0fdffa37fb1d666da7ee70dc4d152a5080063c879c6484831d404957583b4482c8c690283b0248765e709555eb1f6e2b6bc4f2135da9885e2361c6ef09afa22e3bfdfa65a457af39165d55f25816c9a1b749f863f6d2ab388e900e0f1de32bf35e0c335684675dbaf1c009922baeed949c249152e7af8c832f303faa39824f2bd963fcf70e1b9b02caad89ef538bfadb22572ffc39cb45ffa0b5aea56ae699c7ef896", 0xe2, 0x0, &(0x7f0000000200)=@hci={0x1f, 0x3, 0x4}, 0x80) 32.622912962s ago: executing program 2 (id=376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIOCLEX(r1, 0x5451) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 32.547110203s ago: executing program 33 (id=376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIOCLEX(r1, 0x5451) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 26.035609749s ago: executing program 5 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r5, &(0x7f0000001cc0)={0x2020}, 0x2020) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb1, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffa, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x15) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.862787352s ago: executing program 5 (id=457): socket(0x1, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 25.862479862s ago: executing program 5 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.841678992s ago: executing program 5 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) geteuid() getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) fstat(0xffffffffffffffff, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000002600)={0x2020}, 0x2020) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440), 0x800) fstat(0xffffffffffffffff, &(0x7f00000004c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x6e45491b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x6, 0x2, 0x2, 0x0, 0x7fff, 0x4, {0x3, 0x16, 0xffffffffe7e797a2, 0x3ff, 0x64a, 0x4, 0xefc7, 0x1, 0x0, 0x4000, 0x7, r2, r3, 0xcf9, 0x200}}, {0x6, 0xc608, 0x4, 0xd, '.-:*'}}]}, 0x0, 0x0, 0x0}) unshare(0x2020000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 25.501607319s ago: executing program 5 (id=466): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=virtio,', {[{@nodevmap}, {@msize={'msize', 0x3d, 0x998}}, {@ignoreqv}, {@access_client}, {@access_client}, {@cache_mmap}], [{@pcr={'pcr', 0x3d, 0x10}}, {@subj_user={'subj_user', 0x3d, '{(F'}}, {@fowner_gt={'fowner>', r2}}, {@uid_gt={'uid>', r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '$.[#/,/'}}, {@smackfshat}, {@fowner_eq={'fowner', 0x3d, r0}}, {@hash}]}}) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') r3 = open$dir(&(0x7f0000000480)='./file0/file0\x00', 0x100, 0x2) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f00000004c0)={'#! ', './file0', [{}, {0x20, ',%'}], 0xa, "05f15a02d7a2da1da63adf25773b789c0ff51ff81841ecbd37d1f95f803c10f7537e13ca3f5719df85a956f713a7277d0c070432628f1aec8db465c1aa9c3f12f76bda63a1354d2dfc1bedbc7268c7cb459fb1e381bf4ca59547f3e6e5bad5998b003df48dcaa5c8671a42131397"}, 0x7d) r5 = openat2(r3, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)={0x2000, 0x0, 0x21}, 0x18) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x2008, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@directio}, {@directio}, {@posixacl}, {@privport}, {@cache_loose}], [{@fowner_lt={'fowner<', r0}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msize'}}, {@flag='lazytime'}, {@smackfsfloor}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@smackfsdef={'smackfsdef', 0x3d, '*)'}}]}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) mkdirat(r5, &(0x7f00000007c0)='./file0\x00', 0x8c) setxattr$trusted_overlay_origin(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840), &(0x7f0000000880), 0x2, 0x1) truncate(&(0x7f00000008c0)='./file0/file0\x00', 0x8) r7 = open(&(0x7f0000000900)='./file0/file0\x00', 0x40, 0x0) r8 = getuid() mount$bpf(0x0, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980), 0x2, &(0x7f00000009c0)={[{@uid={'uid', 0x3d, r8}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'fowner>'}}, {@subj_user={'subj_user', 0x3d, 'cache=loose'}}, {@subj_user={'subj_user', 0x3d, '/[(!!.'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, 'access=client'}}]}) read$FUSE(r5, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RSTATu(r5, &(0x7f0000002a80)={0x5f, 0x7d, 0x2, {{0x0, 0x45, 0x100, 0x1, {}, 0x100000, 0x9, 0x8001, 0x9a, 0xa, 'cache=mmap', 0x0, '', 0x1, ']', 0x7, 'fowner>'}, 0x5, '/\'!{%', r8, r9, r0}}, 0x5f) stat(&(0x7f0000002b00)='./file1\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x5, &(0x7f0000002c80)=[r1, r9, r9, r10, r11]) execve(&(0x7f0000002cc0)='./file0/file0\x00', &(0x7f0000002f40)={[&(0x7f0000002d00)='\\\x00', &(0x7f0000002d40)='lazytime', &(0x7f0000002d80)='/\x00', &(0x7f0000002dc0)='+\x00', &(0x7f0000002e00)='*-\x00', &(0x7f0000002e40)='-\x00', &(0x7f0000002e80)='*)', &(0x7f0000002ec0)='trans=virtio,', &(0x7f0000002f00)='/[(!!.']}, &(0x7f0000003000)={[&(0x7f0000002fc0)='^]-,*\x00']}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r5, 0x4068aea3, &(0x7f0000003040)) mount$9p_virtio(&(0x7f00000030c0), &(0x7f0000003100)='./file1\x00', &(0x7f0000003140), 0x8, &(0x7f0000003180)={'trans=virtio,', {[{@access_any}, {@aname={'aname', 0x3d, 'fowner'}}, {@cachetag}, {@access_client}, {@fscache}, {@access_any}], [{@permit_directio}]}}) move_mount(r3, &(0x7f0000003200)='./file0/file0\x00', r3, &(0x7f0000003240)='./file0/file0\x00', 0x102) open_tree(r6, &(0x7f0000003280)='./file0\x00', 0x8b101) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000032c0)) creat(&(0x7f0000003300)='./file1\x00', 0x0) 25.467216299s ago: executing program 5 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.380670051s ago: executing program 34 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.845797986s ago: executing program 4 (id=635): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) mlockall(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0xa, &(0x7f0000000180)=[{0xc0, 0x4, 0x0, 0x1}, {0x0, 0xf9, 0x4, 0xa3d7}, {0x8, 0xce, 0x3, 0x4}, {0xb90, 0xcb, 0x9, 0x4}, {0x3, 0x2, 0x8, 0xd811}, {0x5, 0x1, 0x8, 0x4}, {0x0, 0x65, 0x7, 0x4}, {0x8, 0x5, 0x3, 0xffffffd4}, {0x7, 0x0, 0x4, 0x2d}, {0x7, 0x2, 0x4f, 0x1000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) 3.845544966s ago: executing program 4 (id=636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c28975e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000200)={0x2b, 0x3}) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close_range(r0, 0xffffffffffffffff, 0x0) 3.241532378s ago: executing program 4 (id=647): r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) ftruncate(0xffffffffffffffff, 0x1) write$cgroup_subtree(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000240)=@ccm_128={{0x303}, "f7108300", "f3c6989b3854eb01b521eb3867adce70", "b9ed814d", "fa73dc9851a1688a"}, 0x28) syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r5, &(0x7f0000000400)="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", 0x1f000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r6, 0x4, 0x0) write$UHID_CREATE2(r6, 0x0, 0x1118) 3.206395688s ago: executing program 4 (id=651): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) nanosleep(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.14831851s ago: executing program 4 (id=655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0f0d1d8b42262966ba420066ed66baf80cb8282e758bef669a0cfc0c0cc6ee0f01df0f56bf34000000640f013c7dc3d976390f71d51bc4c35d695f93c9650f080f00d7", 0x43}], 0x1, 0x0, &(0x7f0000000040)=[@dstype3={0x7, 0x5}], 0x1) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000280)=[@wr_crn={0x46, 0x20, {0x2, 0xf18b}}, @cpuid={0x14, 0x18, {0x6, 0x509774d4}}, @code={0xa, 0x57, {"b9b60300000f3267f0ff4fe2c403f914c793450f01dff30f09c4617a7fec4e0fc76b32b914030000b8f6ffffffbaffffffff0f30c44145ebbb3e8a523e660f380b9e00000100"}}, @rdmsr={0x32, 0x18, {0x8b9}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @wrmsr={0x1e, 0x20, {0x300, 0xffff}}, @code={0xa, 0x8a, {"c74424002e000000c744240200000100ff2c24c4c3c90a7302f848b8fe660000000000000f23d80f21f835000000f00f23f866baf80cb8048adf8cef66bafc0cb8eb6c0000ef440f5475cff20f78d60200410f07420f01c4c7442400e99c0000c7442402b17c295ac7442406000000000f01142466ba2000ed"}}, @wrmsr={0x1e, 0x20, {0x40a, 0x3186}}, @wrmsr={0x1e, 0x20, {0x9f6}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @uexit={0x0, 0x18, 0x6b443b34}, @cpuid={0x14, 0x18, {0xfffffffc, 0x8}}, @rdmsr={0x32, 0x18, {0x1aa}}, @rdmsr={0x32, 0x18, {0x2f9}}, @uexit={0x0, 0x18, 0x6e87}, @wrmsr={0x1e, 0x20, {0x60c, 0xa}}, @wrmsr={0x1e, 0x20, {0x9b7}}, @wrmsr={0x1e, 0x20, {0x224, 0x2c03}}, @rdmsr={0x32, 0x18, {0xb69}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @rdmsr={0x32, 0x18, {0x2b9}}, @wrmsr={0x1e, 0x20, {0x2a3, 0x10000}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8000000000000000}, @cpuid={0x14, 0x18, {0xfa91df5}}, @cpuid={0x14, 0x18, {0x3, 0xf378}}, @wrmsr={0x1e, 0x20, {0x989, 0x8000000000000001}}, @cpuid={0x14, 0x18, {0x5, 0xc}}, @rdmsr={0x32, 0x18, {0xadf}}, @rdmsr={0x32, 0x18, {0x32e}}], 0x3e1}) r4 = dup3(r2, r3, 0x80000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.018049722s ago: executing program 4 (id=658): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSPTLCK(r0, 0x40087101, &(0x7f0000000000)=0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x801, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="32000000000000001800000000000000320b120000000000460000000000000020000000000000000000000000000000000000000000000014000000000000001800000000000000fefffffff9ffffff0000000000000000180000000000000007000000000000004600000000000000200000000000000002000000000000000000000800000000460000000000000020000000000000000000000000000000080000000000000046000000000000002000000000000000040000000000000003000000000000001e000000000000002000000000000000fc020000000000000f00000000000000460000000000000020000000000000008000000000000000ff0f0000000000001400000000000000180000000000000000000000000000001400000000000000180000000000000002000000090000001400000000000000180000000000000081000000010000003200000000000000180000000000000098010000000000000000000000000000180000000000000008528d9cffffffff3200000000000000180000000000000007090000000000001400000000000000180000000000000004000000ff0f00001400000000000000180000000000000001000000080000001e000000000000002000000000000000010900000000000002000000000000001400000000000000180000000000000002000000010000084600000000000000200000000000000003000000000000000400000000000000000000000000000018000000400000000100000000000000"], 0x238}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000004c0)={0x80a0000, 0xeeee0000, 0x1, 0x7f, 0x81}) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) unlinkat(r4, &(0x7f0000000200)='./file0\x00', 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet6(0xa, 0x80006, 0xff) sendto(r5, 0x0, 0x0, 0x810, &(0x7f00000008c0)=@xdp={0x2c, 0x3, 0x0, 0x1c}, 0x80) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x441241, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fe00090582024000000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200d000000000000000065fe3a47f5eae729d3dfc3e1880c7f2ffa156a4217bc58d04c6e5fdb8849fb4fc8e3f01679d7b2f3bf7fdd677479c27ced068f7a1bb8190000"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) pipe2(0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:ipmi_device_t:s0\x00', 0x23, 0x1) 2.58013026s ago: executing program 6 (id=680): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) write$selinux_load(r0, 0x0, 0x603f) 2.519617662s ago: executing program 6 (id=684): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.469541073s ago: executing program 6 (id=686): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ppoll(&(0x7f00000005c0)=[{r0, 0x42}], 0x1, &(0x7f0000000640), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x19, r2) r3 = syz_open_procfs(r2, &(0x7f0000000040)='gid_map\x00') ioctl$UDMABUF_CREATE_LIST(r3, 0xc0686611, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') lseek(r5, 0x800000008401, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(0xffffffffffffffff, 0x0, r9) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setresgid(r9, r8, r8) 1.608528749s ago: executing program 6 (id=690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x70) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, 0x6e6bb1}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x5000000, 0x8, 0x2}]}]}, 0xa0}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7f) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x802, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x8, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x16, 0x0, 0x101}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) socket$key(0xf, 0x3, 0x2) 1.57359871s ago: executing program 6 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000012c0), 0x0, &(0x7f0000001300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x80, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 1.525375301s ago: executing program 6 (id=692): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6b, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xcf7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xff, 0xe9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xc6, 0xd, 0x6, 0x2f}, 0x5d, &(0x7f0000000100)={0x5, 0xf, 0x5d, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x10, 0x15, 0xfff8, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x9, 0xf, 0x9, [0x3fcf, 0x3f30, 0xf, 0xf0, 0x7e0f, 0xffff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x1, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xa7, "90298a965827f1e66e4b93e0c4bf0cf9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x5, 0x2, 0x4, 0x16}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40e}}, {0x38, &(0x7f00000001c0)=@string={0x38, 0x3, "117d21158731d9693b669a59d9d318a23f0588d3e6f0543923982737edb2dd87b5edb5a7a0e56889ca4840b9e8b371315af2796fea76"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}, {0xf4, &(0x7f0000000240)=@string={0xf4, 0x3, "2e7bb31b79d23bbbb33073dbb75dba14afc98476f11df3745d4e3e372b2c77e3314c3ec32a000771c8c57c505163525d623325580f565786be69b6cda1064b023effee5c002526fdecbe6004f709e2dc08f0e2783faeb25e50658de9658fe007381b341e00ace3957864878ba7ed9b54e330de32bf93f861a4f1c1d748eeb216b330d1889f792924d1bfb9d2f2b702d736b919aab75d3401ef17c75329557bc11e1d773dbb8b593588635fcabd2dfae19e66cb767939badeb7144013da8960768e6d75664a63e8a03b36f4351695809ecb4b8d9032d7c9716b4c28b45ca8123678a6be556aa14bd3a18f757932c547d3637b"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.365731014s ago: executing program 1 (id=698): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "34e9309cbb8a092288d72ddcebea6c1f416164517cb8e76702eae32ba7ca3d6dbff379c7e1a234ed86f0789eb41f306d2159bd0d69bd5a345ab991343d39c89e", 0x2e}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0xf1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mlockall(0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat2(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x8a06aa286e03a994, 0x92, 0x23}, 0x18) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000000)='\x00'/10, 0xa, 0xc840, &(0x7f00000000c0)={0x2, 0x4c20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000040)=0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x81, 0x7, 0xb, 0x4}, {0x0, 0x3, 0x3, 0x6}]}) (async, rerun: 32) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000240)) (async, rerun: 32) mknodat(0xffffffffffffff9c, 0x0, 0x4, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x8) (async, rerun: 32) mlockall(0x3) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}], 0xc, 0x0, &(0x7f0000000380)='\x00'/12}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.346188714s ago: executing program 3 (id=699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.293505875s ago: executing program 1 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000012c0), 0x0, &(0x7f0000001300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x80, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 1.237769246s ago: executing program 3 (id=701): r0 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="ea00a0ffffa600c4c3ad0e76be51f3e1642e0f01c5c4c15211d4b9ae0b0000b8a75c9aa6baa0d6b23d0f300f01cf83cc00b9800000c00f3235000800000f30b9800000c00f3235000100000f30", 0x4d}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) munmap(&(0x7f0000fe8000/0x3000)=nil, 0x3000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x1) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc0046209, &(0x7f0000001340)) 1.237230096s ago: executing program 1 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = accept(r1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = memfd_secret(0x80000) fchownat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) write$P9_RUNLINKAT(r4, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24008080) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100, 0x3}) preadv2(r7, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 1.142052298s ago: executing program 1 (id=703): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) (fail_nth: 1) 296.630895ms ago: executing program 3 (id=704): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 115.872858ms ago: executing program 1 (id=705): inotify_init1(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x2d4, r2, 0x800, 0x8f1c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc58c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3818}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x257}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x100, @mcast2, 0x1e8}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2d4}}, 0x40) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) fstat(0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) inotify_init1(0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x2d4, r2, 0x800, 0x8f1c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc58c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3818}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x257}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x100, @mcast2, 0x1e8}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}}}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2d4}}, 0x40) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 112.773518ms ago: executing program 3 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000001300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x80, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 57.813729ms ago: executing program 3 (id=707): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.08645ms ago: executing program 3 (id=708): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xfff}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x64, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{0x9, 0x35, 0xfa, 0x3}, {0x2, 0x7, 0x1, 0x7fffffff}, {0xc8, 0x1, 0x5, 0xfffffff7}, {0x200, 0xfc, 0x4, 0x5}, {0x2, 0x2, 0x0, 0x8}, {0x6, 0x7, 0xfe, 0xf5}]}, 0x10) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) io_setup(0x7, &(0x7f00000002c0)=0x0) io_pgetevents(r6, 0x4, 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={&(0x7f0000000400)={[0x328]}, 0x8}) 0s ago: executing program 1 (id=709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x68101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz1\x00', {0x508, 0x7fff, 0x7, 0x1}, 0x100004a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x8, 0x0, 0x0, 0x4000000, 0x5, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0x1, 0x1, 0x3f, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x5, 0x0, 0x2, 0x0, 0xfffffff7, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x1d, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x80000001, 0x0, 0x15960318, 0x0, 0x0, 0xb, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x800000, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x5b}], 0x1, 0x5c, 0x0, 0x1b) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 25.518402][ T36] audit: type=1400 audit(1756962929.650:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.519751][ T281] cgroup: Unknown subsys name 'net' [ 25.541054][ T36] audit: type=1400 audit(1756962929.650:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.568349][ T36] audit: type=1400 audit(1756962929.680:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.568578][ T281] cgroup: Unknown subsys name 'devices' [ 25.749909][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.755533][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.911329][ T36] audit: type=1400 audit(1756962930.040:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.934508][ T36] audit: type=1400 audit(1756962930.040:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.959286][ T36] audit: type=1400 audit(1756962930.040:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.969707][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.991200][ T36] audit: type=1400 audit(1756962930.120:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.016686][ T36] audit: type=1400 audit(1756962930.120:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.049035][ T36] audit: type=1400 audit(1756962930.180:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.074658][ T36] audit: type=1400 audit(1756962930.180:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.074714][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.524487][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.531819][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.539031][ T291] bridge_slave_0: entered allmulticast mode [ 27.545303][ T291] bridge_slave_0: entered promiscuous mode [ 27.559030][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.566093][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.573392][ T289] bridge_slave_0: entered allmulticast mode [ 27.579617][ T289] bridge_slave_0: entered promiscuous mode [ 27.585769][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.592875][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.600024][ T291] bridge_slave_1: entered allmulticast mode [ 27.606246][ T291] bridge_slave_1: entered promiscuous mode [ 27.620864][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.628053][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.635125][ T289] bridge_slave_1: entered allmulticast mode [ 27.641514][ T289] bridge_slave_1: entered promiscuous mode [ 27.720013][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.727089][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.734174][ T290] bridge_slave_0: entered allmulticast mode [ 27.740407][ T290] bridge_slave_0: entered promiscuous mode [ 27.746538][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.753990][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.761094][ T288] bridge_slave_0: entered allmulticast mode [ 27.767326][ T288] bridge_slave_0: entered promiscuous mode [ 27.773757][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.780826][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.787903][ T288] bridge_slave_1: entered allmulticast mode [ 27.794142][ T288] bridge_slave_1: entered promiscuous mode [ 27.803557][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.810630][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.817687][ T290] bridge_slave_1: entered allmulticast mode [ 27.823959][ T290] bridge_slave_1: entered promiscuous mode [ 27.958249][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.965338][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.972667][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.979729][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.010306][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.017356][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.024662][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.031711][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.039908][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.046939][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.054236][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.061271][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.082630][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.089727][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.097001][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.104052][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.135750][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.143730][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.151077][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.159422][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.166611][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.173959][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.181245][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.188690][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.209427][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.216459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.224360][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.231415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.246220][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.253283][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.269867][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.276993][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.291960][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.299032][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.311119][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.318197][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.333386][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.340436][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.348510][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.355539][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.394231][ T288] veth0_vlan: entered promiscuous mode [ 28.420771][ T291] veth0_vlan: entered promiscuous mode [ 28.427186][ T289] veth0_vlan: entered promiscuous mode [ 28.445319][ T290] veth0_vlan: entered promiscuous mode [ 28.451614][ T291] veth1_macvtap: entered promiscuous mode [ 28.463173][ T288] veth1_macvtap: entered promiscuous mode [ 28.479790][ T289] veth1_macvtap: entered promiscuous mode [ 28.513051][ T290] veth1_macvtap: entered promiscuous mode [ 28.522404][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.600784][ T337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.600855][ T337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 28.649782][ T331] SELinux: failed to load policy [ 28.691616][ T352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.699782][ T356] rust_binder: Write failure EFAULT in pid:4 [ 28.706359][ T64] rust_binder: 0: removing orphan mapping 0:120 [ 28.725059][ T356] rust_binder: Write failure EFAULT in pid:4 [ 28.756338][ T369] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.761059][ T64] rust_binder: 0: removing orphan mapping 120:24 [ 28.781437][ T371] ======================================================= [ 28.781437][ T371] WARNING: The mand mount option has been deprecated and [ 28.781437][ T371] and is ignored by this kernel. Remove the mand [ 28.781437][ T371] option from the mount to silence this warning. [ 28.781437][ T371] ======================================================= [ 28.796406][ T374] Zero length message leads to an empty skb [ 28.828466][ T371] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 28.892721][ T388] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.926634][ T386] SELinux: failed to load policy [ 29.045889][ T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.045926][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 29.056247][ T405] fuse: Unknown parameter 'user_Xd' [ 29.078939][ T405] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 29.217581][ T423] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 29.227861][ T423] SELinux: failed to load policy [ 29.260026][ T426] rust_binder: Write failure EFAULT in pid:33 [ 29.317968][ T428] rust_binder: Write failure EFAULT in pid:35 [ 29.360993][ T438] tipc: Started in network mode [ 29.367760][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.374712][ T438] tipc: Node identity 4, cluster identity 4711 [ 29.388458][ T438] tipc: Node number set to 4 [ 29.388634][ T329] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 29.458311][ T441] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 29.547742][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 29.553825][ T329] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 29.554462][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 29.562970][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.580964][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.585896][ T9] usb 4-1: config 0 has no interface number 0 [ 29.591583][ T329] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.605595][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.617833][ T329] usb 1-1: Product: syz [ 29.622061][ T329] usb 1-1: Manufacturer: syz [ 29.622149][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 29.626727][ T329] usb 1-1: SerialNumber: syz [ 29.656249][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.666499][ T9] usb 4-1: Product: syz [ 29.677917][ T9] usb 4-1: Manufacturer: syz [ 29.682550][ T9] usb 4-1: SerialNumber: syz [ 29.698002][ T9] usb 4-1: config 0 descriptor?? [ 29.909663][ T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 29.916209][ T9] usb 4-1: No valid video chain found. [ 29.939056][ T9] usb 4-1: USB disconnect, device number 2 [ 30.049085][ T329] usb 1-1: 0:2 : does not exist [ 30.228105][ T447] binder: Bad value for 'max' [ 30.455167][ T329] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 30.474469][ T329] usb 1-1: USB disconnect, device number 2 [ 30.492627][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.569394][ T458] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 30.579061][ T458] SELinux: failed to load policy [ 30.600836][ T460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 30.615567][ T466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.624687][ T466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 30.862311][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 30.862330][ T36] audit: type=1400 audit(1756962934.990:171): avc: denied { append } for pid=472 comm="syz.1.42" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.901501][ T36] audit: type=1400 audit(1756962934.990:172): avc: denied { open } for pid=472 comm="syz.1.42" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.925444][ T477] SELinux: security_context_str_to_sid () failed with errno=-22 [ 30.942282][ T36] audit: type=1400 audit(1756962934.990:173): avc: denied { ioctl } for pid=472 comm="syz.1.42" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.975469][ T36] audit: type=1400 audit(1756962934.990:174): avc: denied { create } for pid=472 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.011347][ T485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.011468][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:34 [ 31.012896][ T36] audit: type=1400 audit(1756962934.990:175): avc: denied { setopt } for pid=472 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.057838][ T36] audit: type=1400 audit(1756962934.990:176): avc: denied { connect } for pid=472 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.080693][ T36] audit: type=1400 audit(1756962934.990:177): avc: denied { write } for pid=472 comm="syz.1.42" laddr=fe80::8cc6:9dff:fec3:2160 lport=1 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.105840][ T491] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 31.116872][ T491] SELinux: failed to load policy [ 31.123021][ T36] audit: type=1400 audit(1756962934.990:178): avc: denied { read } for pid=472 comm="syz.1.42" laddr=fe80::8cc6:9dff:fec3:2160 lport=1 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.165599][ T36] audit: type=1400 audit(1756962934.990:179): avc: denied { connect } for pid=472 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.185329][ T36] audit: type=1400 audit(1756962934.990:180): avc: denied { getopt } for pid=472 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.188304][ T500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 31.205363][ T500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:25 [ 31.245955][ T509] overlay: filesystem on ./bus is read-only [ 31.272206][ T510] capability: warning: `syz.1.53' uses deprecated v2 capabilities in a way that may be insecure [ 31.362028][ T513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.362071][ T513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.387775][ T329] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.497749][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.547773][ T329] usb 4-1: Using ep0 maxpacket: 32 [ 31.554015][ T329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.564145][ T329] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 31.574398][ T329] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.583467][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.591521][ T329] usb 4-1: Product: syz [ 31.595715][ T329] usb 4-1: Manufacturer: syz [ 31.600627][ T329] usb 4-1: SerialNumber: syz [ 31.605812][ T329] usb 4-1: config 0 descriptor?? [ 31.648871][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.659064][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.668672][ T64] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.678546][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.686545][ T64] usb 3-1: SerialNumber: syz [ 31.895027][ T64] usb 3-1: 0:2 : does not exist [ 31.900789][ T64] usb 3-1: unit 5 not found! [ 31.907124][ T64] usb 3-1: USB disconnect, device number 2 [ 31.947858][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.091430][ T525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.098459][ T525] rust_binder: Error in use_page_slow: ESRCH [ 32.098480][ T525] rust_binder: use_range failure ESRCH [ 32.104621][ T525] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 32.107147][ T524] rust_binder: Error in use_page_slow: ESRCH [ 32.110788][ T525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.118264][ T524] rust_binder: use_range failure ESRCH [ 32.124948][ T525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:74 [ 32.133575][ T524] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 32.147964][ T524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.155969][ T524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:74 [ 32.186028][ T528] SELinux: failed to load policy [ 32.230505][ T533] veth0_vlan: entered allmulticast mode [ 32.392527][ T540] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 32.576986][ T558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.73'. [ 32.613453][ T563] overlayfs: statfs failed on './file0' [ 32.847768][ T329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.997781][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 33.004066][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.015723][ T329] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 33.024822][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.032842][ T329] usb 2-1: Product: syz [ 33.037021][ T329] usb 2-1: Manufacturer: syz [ 33.041664][ T329] usb 2-1: SerialNumber: syz [ 33.047117][ T329] usb 2-1: config 0 descriptor?? [ 33.052877][ T329] usb 2-1: bad CDC descriptors [ 33.057893][ T329] usb 2-1: unsupported MDLM descriptors [ 33.256801][ T329] usb 2-1: USB disconnect, device number 2 [ 33.820740][ T578] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 33.831103][ T578] SELinux: failed to load policy [ 33.908551][ T584] netlink: 388 bytes leftover after parsing attributes in process `syz.1.82'. [ 34.037840][ T367] usb 4-1: USB disconnect, device number 3 [ 34.382120][ T595] batadv_slave_1: entered promiscuous mode [ 34.405462][ T596] batadv_slave_1: left promiscuous mode [ 34.424541][ T606] veth0_vlan: entered allmulticast mode [ 34.445870][ T609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.445903][ T609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 34.505155][ T612] SELinux: failed to load policy [ 34.549474][ T612] SELinux: policydb magic number 0xa000002 does not match expected magic number 0xf97cff8c [ 34.567777][ T612] SELinux: failed to load policy [ 34.609663][ T479] bridge_slave_1: left allmulticast mode [ 34.616986][ T479] bridge_slave_1: left promiscuous mode [ 34.622765][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.639047][ T479] bridge_slave_0: left allmulticast mode [ 34.646995][ T479] bridge_slave_0: left promiscuous mode [ 34.652832][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.746969][ T623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 34.801321][ T479] veth1_macvtap: left promiscuous mode [ 34.806896][ T479] veth0_vlan: left promiscuous mode [ 34.839069][ T628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.839094][ T628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 34.967246][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.983388][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.991814][ T626] bridge_slave_0: entered allmulticast mode [ 34.993322][ T638] SELinux: policydb magic number 0x10074f4 does not match expected magic number 0xf97cff8c [ 34.999492][ T626] bridge_slave_0: entered promiscuous mode [ 35.008288][ T638] SELinux: failed to load policy [ 35.015113][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.025961][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.033316][ T626] bridge_slave_1: entered allmulticast mode [ 35.040163][ T626] bridge_slave_1: entered promiscuous mode [ 35.063497][ T652] veth0_vlan: entered allmulticast mode [ 35.149549][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.156628][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.163946][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.171000][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.199273][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.206641][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.221294][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.228389][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.239213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.246297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.289482][ T626] veth0_vlan: entered promiscuous mode [ 35.304742][ T626] veth1_macvtap: entered promiscuous mode [ 35.389697][ T677] syzkaller0: entered promiscuous mode [ 35.395332][ T677] syzkaller0: entered allmulticast mode [ 35.518464][ T683] SELinux: failed to load policy [ 35.520287][ T686] random: crng reseeded on system resumption [ 35.570559][ T686] Restarting kernel threads ... done. [ 35.595745][ T688] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 35.595770][ T688] rust_binder: Error while translating object. [ 35.604793][ T688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.611652][ T688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 35.723105][ T700] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.740344][ T700] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 35.748907][ T700] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.756825][ T700] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 35.788478][ T704] netlink: 'syz.2.120': attribute type 27 has an invalid length. [ 35.811561][ T704] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.818830][ T704] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.820612][ T707] 9pnet_fd: Insufficient options for proto=fd [ 35.863181][ T704] veth0_vlan: left allmulticast mode [ 36.034328][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 36.034346][ T36] audit: type=1400 audit(1756962940.160:238): avc: denied { create } for pid=727 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 36.077987][ T36] audit: type=1400 audit(1756962940.190:239): avc: denied { sys_admin } for pid=727 comm="syz.2.128" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 36.111890][ T36] audit: type=1400 audit(1756962940.220:240): avc: denied { write } for pid=730 comm="syz.3.129" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.116719][ T734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 36.188394][ T36] audit: type=1400 audit(1756962940.320:241): avc: denied { read } for pid=735 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.275263][ T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 36.332899][ T754] SELinux: failed to load policy [ 36.367400][ T36] audit: type=1400 audit(1756962940.490:242): avc: denied { read } for pid=757 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.466223][ T764] 9pnet_fd: Insufficient options for proto=fd [ 36.487220][ T766] rust_binder: Error while translating object. [ 36.487249][ T766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.493555][ T766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 36.532383][ T770] rust_binder: Error while translating object. [ 36.532693][ T771] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 36.541643][ T770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.547964][ T771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 36.556567][ T770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 36.565275][ T771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:115 [ 36.875924][ T36] audit: type=1400 audit(1756962941.000:243): avc: denied { append } for pid=783 comm="syz.1.148" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.879548][ T784] loop7: detected capacity change from 0 to 7 [ 37.037711][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 3 [ 37.047535][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 37.070470][ T794] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 37.077875][ T794] rust_binder: Write failure EINVAL in pid:146 [ 37.133275][ T36] audit: type=1400 audit(1756962941.260:244): avc: denied { bind } for pid=800 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.168178][ T807] netlink: 'syz.2.154': attribute type 4 has an invalid length. [ 37.177258][ T807] netlink: 'syz.2.154': attribute type 17 has an invalid length. [ 37.203557][ T36] audit: type=1400 audit(1756962941.330:245): avc: denied { connect } for pid=808 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.224316][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 37.334986][ T36] audit: type=1400 audit(1756962941.460:246): avc: denied { ioctl } for pid=822 comm="syz.4.160" path="socket:[6790]" dev="sockfs" ino=6790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.378948][ T45] usb 4-1: device descriptor read/64, error -71 [ 37.410182][ T830] SELinux: failed to load policy [ 37.429121][ T832] fuse: Bad value for 'group_id' [ 37.434109][ T832] fuse: Bad value for 'group_id' [ 37.606400][ T36] audit: type=1400 audit(1756962941.730:247): avc: denied { write } for pid=840 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.626573][ T841] rust_binder: Error while translating object. [ 37.626608][ T841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.632878][ T841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 37.637851][ T45] usb 4-1: device descriptor read/64, error -71 [ 37.745686][ T848] bridge0: entered allmulticast mode [ 37.751389][ T848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 37.760303][ T848] bridge_slave_1: left allmulticast mode [ 37.765946][ T848] bridge_slave_1: left promiscuous mode [ 37.771760][ T848] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.779516][ T848] bridge_slave_0: left allmulticast mode [ 37.785242][ T848] bridge_slave_0: left promiscuous mode [ 37.791167][ T848] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.800241][ T848] bridge0 (unregistering): left allmulticast mode [ 37.835604][ T849] rust_binder: Write failure EFAULT in pid:47 [ 37.897795][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 38.047746][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.287830][ T45] usb 4-1: device descriptor read/64, error -71 [ 38.297643][ T861] SELinux: failed to load policy [ 38.397979][ T45] usb usb4-port1: attempt power cycle [ 38.420691][ T863] rust_binder: Write failure EFAULT in pid:138 [ 38.433845][ T870] binder: Bad value for 'stats' [ 38.480082][ T874] SELinux: failed to load policy [ 38.502958][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.527899][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.536979][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.547841][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.557008][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.566454][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.578790][ T878] tipc: Enabling of bearer rejected, failed to enable media [ 38.587655][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.596985][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.606250][ T877] netlink: 188 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.682408][ T889] SELinux: failed to load policy [ 38.713574][ T893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.737752][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 38.758809][ T45] usb 4-1: device descriptor read/8, error -71 [ 38.888871][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.127822][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 39.148972][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.164354][ T900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.164380][ T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 39.174264][ T900] rust_binder: 65: no such ref 2 [ 39.188416][ T900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 39.190326][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.211026][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.264060][ T904] SELinux: failed to load policy [ 39.298784][ T45] usb 4-1: device descriptor read/8, error -71 [ 39.308739][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.362741][ T913] rust_binder: Error while translating object. [ 39.362775][ T913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.375760][ T913] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 39.392139][ T913] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:166 [ 39.417884][ T45] usb usb4-port1: unable to enumerate USB device [ 39.445090][ T920] SELinux: failed to load policy [ 39.556235][ T930] rust_binder: 173: no such ref 1 [ 39.607777][ T931] 9pnet_fd: p9_fd_create_tcp (931): problem connecting socket to 127.0.0.1 [ 39.617230][ T931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 39.617265][ T931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:173 [ 40.102348][ T933] netlink: 'syz.4.197': attribute type 46 has an invalid length. [ 40.367784][ T329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.415068][ T937] SELinux: failed to load policy [ 40.494387][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.519698][ T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.531829][ T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.541733][ T329] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 40.551021][ T329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.559256][ T329] usb 5-1: SerialNumber: syz [ 40.789001][ T935] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 40.800098][ T329] usb 5-1: 0:2 : does not exist [ 40.808516][ T329] usb 5-1: USB disconnect, device number 2 [ 40.818970][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.340972][ T957] rust_binder: Failed copying into alloc: EFAULT [ 41.340991][ T957] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 41.357771][ T914] Bluetooth: hci0: command 0x1003 tx timeout [ 41.367664][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.378945][ T957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.378976][ T957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:73 [ 41.386721][ T329] rust_binder: 912: removing orphan mapping 0:24 [ 41.435243][ T961] 9pnet_fd: Insufficient options for proto=fd [ 41.472764][ T966] SELinux: failed to load policy [ 41.512192][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 41.512244][ T36] audit: type=1400 audit(1756962945.640:255): avc: denied { append } for pid=970 comm="syz.1.211" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 41.547823][ T36] audit: type=1400 audit(1756962945.650:256): avc: denied { module_load } for pid=972 comm="syz.4.212" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 41.757745][ T837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.773512][ T36] audit: type=1400 audit(1756962945.900:257): avc: denied { listen } for pid=976 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.807817][ T36] audit: type=1400 audit(1756962945.900:258): avc: denied { create } for pid=976 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.830494][ T36] audit: type=1400 audit(1756962945.940:259): avc: denied { listen } for pid=978 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.868546][ T985] rust_binder: Write failure EINVAL in pid:147 [ 41.927179][ T987] rust_binder: Write failure EFAULT in pid:192 [ 41.957750][ T837] usb 5-1: device descriptor read/64, error -71 [ 41.987574][ T991] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 42.101165][ T1000] rust_binder: Error in use_page_slow: ESRCH [ 42.101190][ T1000] rust_binder: use_range failure ESRCH [ 42.107224][ T1000] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 42.113017][ T1000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.131356][ T1000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:198 [ 42.141224][ T996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.197194][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.211297][ T837] usb 5-1: device descriptor read/64, error -71 [ 42.226319][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.234056][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.241752][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.261016][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.279786][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.287443][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.295388][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.308359][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.315922][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.323948][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.331649][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.345911][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.364219][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.372147][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.379909][ T1015] rust_binder: Write failure EFAULT in pid:161 [ 42.380006][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.398508][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.406170][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.414035][ T1015] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 42.423940][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.431517][ T1015] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 42.439418][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.446918][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.455796][ T837] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.464939][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.473698][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.481571][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.489382][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.496923][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.504653][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.512317][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.519970][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.534262][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.544538][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.558751][ T36] audit: type=1400 audit(1756962946.690:260): avc: denied { map } for pid=1016 comm="syz.3.229" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.587298][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.605012][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.606239][ T1019] SELinux: policydb magic number 0x10200 does not match expected magic number 0xf97cff8c [ 42.612624][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.622867][ T1019] SELinux: failed to load policy [ 42.630038][ T837] usb 5-1: device descriptor read/64, error -71 [ 42.641436][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.649055][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.656583][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.664109][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.671621][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.681447][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.688982][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.696476][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.705668][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.713231][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.721025][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.728566][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.736064][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.743643][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.751255][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.759214][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.766771][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.774819][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.782459][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.790123][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.797609][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.805328][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.827081][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.838240][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.845839][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.855778][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.867063][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.876235][ T1026] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.233' sets config #8 [ 42.885314][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.893207][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.900813][ T837] usb 5-1: device descriptor read/64, error -71 [ 42.907302][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.918000][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.927822][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.935636][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.943416][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.951884][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.959627][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.967246][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.982084][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 42.994249][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.004573][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.012613][ T837] usb usb5-port1: attempt power cycle [ 43.030316][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.051579][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.059555][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.071080][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.091552][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.099497][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.107075][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.116122][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.133540][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.141357][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.149176][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.156866][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.165797][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.173635][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.198759][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.206502][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.215513][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.228520][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.236019][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.263211][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.271120][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.279265][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.286971][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.294809][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.304962][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.316797][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.337875][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.345480][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.353440][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.361058][ T837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 43.373062][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.386473][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.396347][ T837] usb 5-1: device descriptor read/8, error -71 [ 43.403112][ T1041] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.403173][ T1041] rust_binder: Read failure Err(EFAULT) in pid:187 [ 43.411644][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.426069][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.435213][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.443003][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.458122][ T1045] tipc: Started in network mode [ 43.463016][ T1045] tipc: Node identity , cluster identity 4711 [ 43.469465][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.477111][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.484631][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.487148][ T1045] tipc: Failed to obtain node identity [ 43.492397][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.505372][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.507748][ T1045] tipc: Enabling of bearer rejected, failed to enable media [ 43.521889][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.529653][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.537176][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.544941][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.557760][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.557827][ T837] usb 5-1: device descriptor read/8, error -71 [ 43.565744][ T1046] syzkaller0: entered promiscuous mode [ 43.576964][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.584760][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.592597][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.601193][ T1046] syzkaller0: entered allmulticast mode [ 43.607094][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.614877][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.636121][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.656325][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.656675][ T1049] SELinux: policydb magic number 0x10200 does not match expected magic number 0xf97cff8c [ 43.674401][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.677763][ T1049] SELinux: failed to load policy [ 43.687075][ T456] hid-generic 0000:10000:0007.0002: unknown main item tag 0x0 [ 43.703608][ T456] hid-generic 0000:10000:0007.0002: hidraw0: HID v9.40 Device [syz1] on syz1 [ 43.743976][ T1055] rust_binder: Write failure EFAULT in pid:197 [ 43.757648][ T1054] fido_id[1054]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.817745][ T837] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 43.851389][ T837] usb 5-1: device descriptor read/8, error -71 [ 43.982313][ T837] usb 5-1: device descriptor read/8, error -71 [ 44.107871][ T837] usb usb5-port1: unable to enumerate USB device [ 44.128172][ T1076] SELinux: policydb magic number 0x10200 does not match expected magic number 0xf97cff8c [ 44.146183][ T1076] SELinux: failed to load policy [ 44.214286][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.223529][ T1083] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 44.232585][ T1083] rust_binder: Error while translating object. [ 44.241408][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.250283][ T36] audit: type=1400 audit(1756962948.380:261): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.257757][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 44.320799][ T1091] overlayfs: missing 'lowerdir' [ 44.336479][ T1091] rust_binder: 182: no such ref 1 [ 44.341599][ T1091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 44.424042][ T1101] SELinux: policydb magic number 0x10200 does not match expected magic number 0xf97cff8c [ 44.449162][ T1101] SELinux: failed to load policy [ 44.480102][ T1111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 44.480181][ T1110] 9pnet_fd: Insufficient options for proto=fd [ 44.592689][ T36] audit: type=1400 audit(1756962948.720:262): avc: denied { create } for pid=1122 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 44.612631][ T1121] 9pnet_fd: p9_fd_create_tcp (1121): problem connecting socket to 127.0.0.1 [ 44.614650][ T36] audit: type=1400 audit(1756962948.720:263): avc: denied { write } for pid=1122 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 44.643265][ T1127] syz.1.266 (1127): attempted to duplicate a private mapping with mremap. This is not supported. [ 44.685061][ T1131] SELinux: policydb magic number 0x10200 does not match expected magic number 0xf97cff8c [ 44.695218][ T1131] SELinux: failed to load policy [ 44.695396][ T36] audit: type=1400 audit(1756962948.820:264): avc: denied { create } for pid=1132 comm="syz.3.269" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.715424][ T1137] binder: Bad value for 'stats' [ 44.774192][ T1139] binder: Bad value for 'max' [ 44.787753][ T837] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.790638][ T1143] input: syz0 as /devices/virtual/input/input5 [ 44.878165][ T1155] binder: Unknown parameter 'defcontext01777777777777777777777' [ 44.898875][ T1157] rust_binder: Write failure EFAULT in pid:225 [ 44.913242][ T1160] SELinux: policydb magic number 0x10200 does not match expected magic number 0xf97cff8c [ 44.930368][ T1160] SELinux: failed to load policy [ 44.959084][ T837] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.970364][ T837] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.979740][ T837] usb 3-1: config 1 has no interface number 1 [ 44.987320][ T837] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.996562][ T837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.004589][ T837] usb 3-1: Product: syz [ 45.008832][ T837] usb 3-1: Manufacturer: syz [ 45.013452][ T837] usb 3-1: SerialNumber: syz [ 45.060904][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 45.107741][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.217805][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 45.229670][ T837] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 45.238186][ T837] usb 3-1: found format II with max.bitrate = 4, frame size=5 [ 45.245741][ T837] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 45.254293][ T837] usb 3-1: found format II with max.bitrate = 4, frame size=5 [ 45.262605][ T837] usb 3-1: failed to enable PITCH for EP 0x82 [ 45.268973][ T837] usb 3-1: 2:1: cannot set freq 12216350 to ep 0x82 [ 45.277735][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 45.283793][ T837] usb 3-1: USB disconnect, device number 3 [ 45.291380][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.300474][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.309548][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.320043][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.330573][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.340273][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.353288][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.362346][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.371266][ T45] usb 2-1: config 0 descriptor?? [ 45.378938][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 45.387229][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 45.398844][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 45.409927][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 45.421157][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.434160][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.443223][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.451927][ T9] usb 5-1: config 0 descriptor?? [ 45.457210][ T1164] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 45.578927][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.591015][ T45] usb 2-1: USB disconnect, device number 3 [ 45.597821][ T45] usblp0: removed [ 45.671797][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 45.678306][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 45.688004][ T9] usb 5-1: USB disconnect, device number 7 [ 45.813929][ T1192] syzkaller0: entered promiscuous mode [ 45.819448][ T1192] syzkaller0: entered allmulticast mode [ 46.017764][ T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 46.110849][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:259 [ 46.111374][ T1203] rust_binder: Error while translating object. [ 46.126140][ T1203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.132526][ T1203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:259 [ 46.167037][ T1197] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 4248, size: 18446744073709551492) [ 46.167750][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 46.176247][ T1197] rust_binder: Error while translating object. [ 46.193721][ T1197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.200095][ T1197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 46.210694][ T64] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.229367][ T64] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.239023][ T64] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.249310][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.260231][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.270071][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.283205][ T64] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.292451][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.301331][ T64] usb 2-1: config 0 descriptor?? [ 46.602353][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 46.602372][ T36] audit: type=1400 audit(1756962950.730:278): avc: denied { ioctl } for pid=1206 comm="syz.4.296" path="socket:[11522]" dev="sockfs" ino=11522 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.643051][ T1209] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 46.643069][ T1209] rust_binder: Error while translating object. [ 46.651888][ T1209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.658117][ T1209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 46.708706][ T64] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.742370][ T1216] rust_binder: Error while translating object. [ 46.742417][ T1216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.743903][ T64] usb 2-1: USB disconnect, device number 4 [ 46.749280][ T1216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 46.760206][ T64] usblp0: removed [ 46.917761][ T36] audit: type=1400 audit(1756962951.040:279): avc: denied { getopt } for pid=1222 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.993322][ T1233] __vm_enough_memory: pid: 1233, comm: syz.3.302, bytes: 18014402804453376 not enough memory for the allocation [ 47.026086][ T1237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 47.315761][ T1255] SELinux: failed to load policy [ 47.400133][ T1259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 47.400169][ T1259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:211 [ 47.533795][ T1272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 47.534051][ T1273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 47.573135][ T1276] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 47.589959][ T36] audit: type=1400 audit(1756962951.700:280): avc: denied { create } for pid=1277 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.590216][ T1276] SELinux: failed to load policy [ 47.612621][ T36] audit: type=1400 audit(1756962951.700:281): avc: denied { connect } for pid=1277 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.631425][ T1276] rust_binder: Write failure EFAULT in pid:268 [ 47.766980][ T1296] rust_binder: Error while translating object. [ 47.791329][ T1296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.798858][ T1296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 47.809410][ T36] audit: type=1400 audit(1756962951.940:282): avc: denied { mounton } for pid=1300 comm="syz.2.333" path="/99/file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.860226][ T1306] binder: Unknown parameter 'stjts' [ 47.872750][ T36] audit: type=1400 audit(1756962951.990:283): avc: denied { mount } for pid=1304 comm="syz.1.337" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.880170][ T1310] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 47.895085][ T36] audit: type=1400 audit(1756962952.030:284): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.921523][ T1306] binder: Unknown parameter 'stjts' [ 47.998794][ T1319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2541091674 (162629867136 ns) > initial count (104792502336 ns). Using initial count to start timer. [ 48.124849][ T36] audit: type=1400 audit(1756962952.250:285): avc: denied { setopt } for pid=1326 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.126288][ T1325] kvm: kvm [1323]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 48.153291][ T1325] kvm: kvm [1323]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 48.220996][ T1340] bridge0: entered allmulticast mode [ 48.244267][ T1342] __nla_validate_parse: 3 callbacks suppressed [ 48.244287][ T1342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 48.402920][ T1355] tipc: MTU too low for tipc bearer [ 48.496807][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 48.515002][ T1365] can0: slcan on ttyS3. [ 48.532174][ T36] audit: type=1400 audit(1756963208.659:286): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.557819][ T36] audit: type=1400 audit(1756963208.659:287): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.589148][ T1366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'. [ 48.602930][ T1365] can0 (unregistered): slcan off ttyS3. [ 48.617736][ T367] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.643175][ T1373] rust_binder: Failed copying into alloc: EFAULT [ 48.643199][ T1373] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 48.651924][ T1373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.660403][ T1373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:276 [ 48.767726][ T367] usb 2-1: Using ep0 maxpacket: 32 [ 48.811294][ T367] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 48.819867][ T367] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 48.828845][ T367] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 48.842126][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.861772][ T367] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.873382][ T367] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.889287][ T367] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.904259][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.923199][ T367] usb 2-1: config 0 descriptor?? [ 49.047881][ T1409] deleting an unspecified loop device is not supported. [ 49.055043][ T1409] fuse: Bad value for 'fd' [ 49.068326][ T1410] netlink: 'syz.3.365': attribute type 27 has an invalid length. [ 49.140016][ T367] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 49.172360][ T367] usb 2-1: USB disconnect, device number 5 [ 49.181705][ T367] usblp0: removed [ 49.445001][ T1444] 9pnet: Could not find request transport: Xd [ 49.519634][ T12] bridge_slave_1: left allmulticast mode [ 49.531637][ T12] bridge_slave_1: left promiscuous mode [ 49.537876][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.557732][ T12] bridge_slave_0: left allmulticast mode [ 49.563433][ T12] bridge_slave_0: left promiscuous mode [ 49.569256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.608973][ T12] bridge0 (unregistering): left allmulticast mode [ 49.647751][ T367] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 49.659791][ T12] tipc: Left network mode [ 49.777822][ T367] usb 2-1: device descriptor read/64, error -71 [ 49.788278][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.795349][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.802767][ T1451] bridge_slave_0: entered allmulticast mode [ 49.809483][ T1451] bridge_slave_0: entered promiscuous mode [ 49.816128][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.823975][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.827455][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 49.831074][ T1451] bridge_slave_1: entered allmulticast mode [ 49.840145][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 49.846137][ T1451] bridge_slave_1: entered promiscuous mode [ 49.956128][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.963228][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.970554][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.977610][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.995092][ T1457] kvm_intel: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf [ 50.027033][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.034964][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.042691][ T367] usb 2-1: device descriptor read/64, error -71 [ 50.057648][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.064846][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.075290][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf [ 50.084831][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.091899][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.109052][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae [ 50.123086][ T1451] veth0_vlan: entered promiscuous mode [ 50.137483][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b [ 50.149976][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a [ 50.161637][ T1451] veth1_macvtap: entered promiscuous mode [ 50.172722][ T1457] kvm: kvm [1456]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a [ 50.282462][ T1477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 50.287754][ T367] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.289783][ T45] rust_binder: 1472: removing orphan mapping 0:24 [ 50.431252][ T367] usb 2-1: device descriptor read/64, error -71 [ 50.489339][ T1480] rust_binder: Write failure EFAULT in pid:5 [ 50.677753][ T367] usb 2-1: device descriptor read/64, error -71 [ 50.748692][ T1497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 50.797816][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.798318][ T367] usb usb2-port1: attempt power cycle [ 50.859062][ T1503] rust_binder: Error while translating object. [ 50.859105][ T1503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.865329][ T1503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 50.958160][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 50.978518][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 50.988361][ T45] usb 6-1: config 9 has an invalid interface number: 63 but max is 1 [ 50.996546][ T45] usb 6-1: config 9 has an invalid interface number: 159 but max is 1 [ 51.005089][ T45] usb 6-1: config 9 has no interface number 0 [ 51.011230][ T45] usb 6-1: config 9 has no interface number 1 [ 51.017328][ T45] usb 6-1: config 9 interface 63 has no altsetting 0 [ 51.027763][ T64] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.038438][ T45] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 51.047744][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.055751][ T45] usb 6-1: Product: syz [ 51.060165][ T45] usb 6-1: Manufacturer: syz [ 51.064776][ T45] usb 6-1: SerialNumber: syz [ 51.147772][ T367] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.168719][ T367] usb 2-1: device descriptor read/8, error -71 [ 51.188858][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.199089][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.208796][ T64] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.217919][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.225918][ T64] usb 5-1: SerialNumber: syz [ 51.284991][ T45] usb 6-1: USB disconnect, device number 2 [ 51.297924][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 51.310685][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.327052][ T367] usb 2-1: device descriptor read/8, error -71 [ 51.391500][ T1511] rust_binder: Write failure EFAULT in pid:254 [ 51.407008][ T1513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 51.437472][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.447507][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.478268][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.488867][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 51.498896][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.514710][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 51.518027][ T1517] rust_binder: Write failure EFAULT in pid:260 [ 51.525457][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 51.545715][ T64] usb 5-1: USB disconnect, device number 8 [ 51.551225][ T1520] __vm_enough_memory: pid: 1520, comm: syz.1.399, bytes: 18014402804453376 not enough memory for the allocation [ 51.551945][ T9] usb 4-1: Product: syz [ 51.572577][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.589560][ T9] usb 4-1: Manufacturer: syz [ 51.594458][ T9] usb 4-1: SerialNumber: syz [ 51.805073][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 51.944655][ T1543] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 51.962820][ T1550] /dev/rnullb0: Can't open blockdev [ 52.007055][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 52.007074][ T36] audit: type=1400 audit(1756963212.129:317): avc: denied { read write } for pid=1507 comm="syz.3.394" name="lp0" dev="devtmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 52.007983][ T9] usb 4-1: USB disconnect, device number 8 [ 52.013465][ T36] audit: type=1400 audit(1756963212.129:318): avc: denied { open } for pid=1507 comm="syz.3.394" path="/dev/usb/lp0" dev="devtmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 52.067875][ T9] usblp0: removed [ 52.073214][ T36] audit: type=1400 audit(1756963212.129:319): avc: denied { ioctl } for pid=1507 comm="syz.3.394" path="/dev/usb/lp0" dev="devtmpfs" ino=492 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 52.143449][ T1563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:200 [ 52.234553][ T36] audit: type=1400 audit(1756963212.359:320): avc: denied { getopt } for pid=1570 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.237304][ T1571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.264008][ T1571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:204 [ 52.288243][ T36] audit: type=1400 audit(1756963212.419:321): avc: denied { connect } for pid=1572 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.338145][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 52.347129][ T1578] rust_binder: Write failure EFAULT in pid:211 [ 52.437760][ T359] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 52.547914][ T1592] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 52.598779][ T359] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.616922][ T359] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 52.638001][ T36] audit: type=1400 audit(1756963212.769:322): avc: denied { getopt } for pid=1601 comm="syz.1.425" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.638021][ T359] usb 6-1: config 0 interface 0 has no altsetting 0 [ 52.668710][ T359] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 52.687864][ T359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.696628][ T359] usb 6-1: config 0 descriptor?? [ 52.701985][ T1567] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 52.837752][ T837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 52.988861][ T837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.999911][ T837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.009852][ T837] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 53.018966][ T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.027660][ T837] usb 4-1: config 0 descriptor?? [ 53.112096][ T359] sony 0003:054C:024B.0003: item fetching failed at offset 0/2 [ 53.119984][ T359] sony 0003:054C:024B.0003: parse failed [ 53.125701][ T359] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 53.322179][ T359] usb 6-1: USB disconnect, device number 3 [ 53.439733][ T837] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 53.447264][ T837] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 53.458565][ T36] audit: type=1400 audit(1756963213.589:323): avc: denied { read } for pid=1611 comm="syz.4.429" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.481335][ T36] audit: type=1400 audit(1756963213.589:324): avc: denied { open } for pid=1611 comm="syz.4.429" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.504952][ T36] audit: type=1400 audit(1756963213.599:325): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=500 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 53.526547][ T837] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 53.526634][ T36] audit: type=1400 audit(1756963213.599:326): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=500 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 53.538396][ T837] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 53.569211][ T837] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 53.645397][ T1603] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.426'. [ 53.655818][ T359] usb 4-1: USB disconnect, device number 9 [ 53.665680][ T359] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 54.004047][ T1634] rtc_cmos 00:00: Alarms can be up to one day in the future [ 54.110366][ T1636] /dev/rnullb0: Can't open blockdev [ 54.447748][ T359] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 54.547772][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.597758][ T359] usb 6-1: Using ep0 maxpacket: 8 [ 54.604654][ T359] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 54.615522][ T359] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.625768][ T359] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.634853][ T359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.642860][ T359] usb 6-1: Product: 놸幨멸䞣컩⅘縼難ꐪ⌖Ջ䨞ⶻ㷩䶜ﳸᦈ쇎찭鈦螜뭌旻砿⼊叛ࠚ䖳吢翤逪㉺ﰖ⎯๰剸눖张ꠗយ哃䑗亱끖鸆㼃构嬁∿㓯쮔쮽叆㌕㕉滂䕆⍝⌌噉礪⛹ფ櫟簑롈൸螞㨊ㆃğ皅થ [ 54.669570][ T359] usb 6-1: Manufacturer: 룇ᣱ덨肅夶䲼볅报抛氁Ẹ것䜥 [ 54.677571][ T359] usb 6-1: SerialNumber: syz [ 54.707753][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 54.714075][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.725129][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.734932][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.747786][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.756876][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.765621][ T45] usb 4-1: config 0 descriptor?? [ 54.890287][ T359] usb 6-1: 0:2 : does not exist [ 54.897101][ T359] usb 6-1: USB disconnect, device number 4 [ 54.906959][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.172837][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 55.180188][ T45] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 55.188263][ T45] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 55.196358][ T45] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 55.208493][ T45] microsoft 0003:045E:07DA.0006: no inputs found [ 55.214863][ T45] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 55.422774][ T359] usb 4-1: USB disconnect, device number 10 [ 55.526987][ T1673] FAULT_INJECTION: forcing a failure. [ 55.526987][ T1673] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.540103][ T1673] CPU: 0 UID: 0 PID: 1673 Comm: syz.5.448 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 55.540131][ T1673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.540144][ T1673] Call Trace: [ 55.540149][ T1673] [ 55.540155][ T1673] __dump_stack+0x21/0x30 [ 55.540179][ T1673] dump_stack_lvl+0x10c/0x190 [ 55.540199][ T1673] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.540221][ T1673] ? check_stack_object+0x12c/0x140 [ 55.540236][ T1673] dump_stack+0x19/0x20 [ 55.540279][ T1673] should_fail_ex+0x3d9/0x530 [ 55.540302][ T1673] should_fail+0xf/0x20 [ 55.540323][ T1673] should_fail_usercopy+0x1e/0x30 [ 55.540337][ T1673] _copy_to_user+0x24/0xa0 [ 55.540354][ T1673] simple_read_from_buffer+0xed/0x160 [ 55.540373][ T1673] proc_fail_nth_read+0x19e/0x210 [ 55.540394][ T1673] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.540414][ T1673] ? bpf_lsm_file_permission+0xd/0x20 [ 55.540435][ T1673] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 55.540454][ T1673] vfs_read+0x27b/0xb60 [ 55.540467][ T1673] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 55.540492][ T1673] ? __cfi_vfs_read+0x10/0x10 [ 55.540505][ T1673] ? __kasan_check_write+0x18/0x20 [ 55.540527][ T1673] ? mutex_lock+0x92/0x1c0 [ 55.540542][ T1673] ? __cfi_mutex_lock+0x10/0x10 [ 55.540557][ T1673] ? __fget_files+0x2c5/0x340 [ 55.540574][ T1673] ksys_read+0x141/0x250 [ 55.540587][ T1673] ? __cfi_ksys_read+0x10/0x10 [ 55.540601][ T1673] ? __kasan_check_read+0x15/0x20 [ 55.540622][ T1673] __x64_sys_read+0x7f/0x90 [ 55.540635][ T1673] x64_sys_call+0x2638/0x2ee0 [ 55.540658][ T1673] do_syscall_64+0x58/0xf0 [ 55.540679][ T1673] ? clear_bhb_loop+0x50/0xa0 [ 55.540697][ T1673] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.540714][ T1673] RIP: 0033:0x7fcb79b8d5fc [ 55.540729][ T1673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.540749][ T1673] RSP: 002b:00007fcb7a930030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.540772][ T1673] RAX: ffffffffffffffda RBX: 00007fcb79dc5fa0 RCX: 00007fcb79b8d5fc [ 55.540801][ T1673] RDX: 000000000000000f RSI: 00007fcb7a9300a0 RDI: 0000000000000006 [ 55.540811][ T1673] RBP: 00007fcb7a930090 R08: 0000000000000000 R09: 0000000000000000 [ 55.540820][ T1673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.540829][ T1673] R13: 00007fcb79dc6038 R14: 00007fcb79dc5fa0 R15: 00007fffdc614ea8 [ 55.540841][ T1673] [ 55.834455][ T1679] overlayfs: overlapping lowerdir path [ 55.903665][ T1683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1683 comm=syz.5.451 [ 55.989501][ T1690] kvm: pic: single mode not supported [ 55.989553][ T1690] kvm: pic: non byte read [ 55.999972][ T1690] kvm: pic: non byte read [ 56.004534][ T1690] kvm: pic: single mode not supported [ 56.004549][ T1690] kvm: pic: level sensitive irq not supported [ 56.010578][ T1690] kvm: pic: non byte read [ 56.021713][ T1690] kvm: pic: single mode not supported [ 56.021726][ T1690] kvm: pic: level sensitive irq not supported [ 56.027172][ T1690] kvm: pic: non byte read [ 56.038175][ T1690] kvm: pic: non byte read [ 56.126694][ T1697] 9pnet_fd: Insufficient options for proto=fd [ 56.248653][ T1700] /dev/rnullb0: Can't open blockdev [ 56.277769][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.428879][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 56.440212][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 56.449309][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.458299][ T9] usb 5-1: config 0 descriptor?? [ 56.468005][ T1716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.468037][ T1716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 56.681462][ T479] bridge_slave_1: left allmulticast mode [ 56.698478][ T479] bridge_slave_1: left promiscuous mode [ 56.712084][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.720198][ T479] bridge_slave_0: left allmulticast mode [ 56.725858][ T479] bridge_slave_0: left promiscuous mode [ 56.731826][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.867225][ T9] logitech 0003:046D:CA03.0007: unbalanced delimiter at end of report description [ 56.877427][ T9] logitech 0003:046D:CA03.0007: parse failed [ 56.883836][ T9] logitech 0003:046D:CA03.0007: probe with driver logitech failed with error -22 [ 56.895095][ T479] veth1_macvtap: left promiscuous mode [ 56.900666][ T479] veth0_vlan: left promiscuous mode [ 56.964361][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.971541][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.978680][ T1739] bridge_slave_0: entered allmulticast mode [ 56.985498][ T1739] bridge_slave_0: entered promiscuous mode [ 56.991894][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.998957][ T1739] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.006004][ T1739] bridge_slave_1: entered allmulticast mode [ 57.012316][ T1739] bridge_slave_1: entered promiscuous mode [ 57.065132][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.072251][ T1739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.079579][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.086618][ T1739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.095207][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 57.097750][ T359] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 57.105014][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 57.121432][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.129957][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.144731][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.151808][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.160791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.167850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.187772][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 57.193332][ T1739] veth0_vlan: entered promiscuous mode [ 57.208680][ T1739] veth1_macvtap: entered promiscuous mode [ 57.280437][ T359] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.290633][ T359] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.299704][ T359] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.314074][ T359] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.323186][ T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.331264][ T359] usb 4-1: Product: syz [ 57.335443][ T359] usb 4-1: Manufacturer: syz [ 57.340179][ T359] usb 4-1: SerialNumber: syz [ 57.348441][ T359] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 57.354592][ T1753] netlink: 'syz.6.475': attribute type 4 has an invalid length. [ 57.355247][ T359] cdc_ncm 4-1:1.0: bind() failure [ 57.362971][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 57.373690][ T1753] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.475'. [ 57.384238][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.392783][ T31] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 57.401323][ T31] usb 2-1: config 0 has no interface number 0 [ 57.407479][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 57.418882][ T31] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 57.429208][ T31] usb 2-1: config 0 interface 88 has no altsetting 0 [ 57.429725][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 57.429743][ T36] audit: type=1400 audit(1756963217.559:340): avc: denied { map } for pid=1756 comm="syz.6.477" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.438253][ T31] usb 2-1: string descriptor 0 read error: -22 [ 57.473115][ T31] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 57.482521][ T31] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 57.492252][ T31] usb 2-1: config 0 descriptor?? [ 57.499106][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input7 [ 57.528273][ T334] udevd[334]: Unable to EVIOCGABS device "/dev/input/event3" [ 57.535858][ T334] udevd[334]: Unable to EVIOCGABS device "/dev/input/event3" [ 57.567561][ T359] usb 4-1: USB disconnect, device number 11 [ 57.616049][ T1757] rust_binder: Error in use_page_slow: ESRCH [ 57.616091][ T1757] rust_binder: use_range failure ESRCH [ 57.622216][ T1757] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 57.627744][ T1757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 57.635965][ T1757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:8 [ 57.659899][ T1759] SELinux: security_context_str_to_sid () failed with errno=-22 [ 57.795784][ T1770] binder: Bad value for 'max' [ 57.826163][ T36] audit: type=1400 audit(1756963217.949:341): avc: denied { mount } for pid=1773 comm="syz.6.483" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.848647][ T36] audit: type=1400 audit(1756963217.949:342): avc: denied { remount } for pid=1773 comm="syz.6.483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.868429][ T36] audit: type=1400 audit(1756963217.979:343): avc: denied { unmount } for pid=1739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.897328][ T1778] netlink: 'syz.6.485': attribute type 4 has an invalid length. [ 57.950260][ T36] audit: type=1326 audit(1756963218.079:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.6.486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49718ebe9 code=0x0 [ 58.009685][ T36] audit: type=1400 audit(1756963218.139:345): avc: denied { lock } for pid=1782 comm="syz.6.486" path="socket:[16794]" dev="sockfs" ino=16794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 58.271608][ T1796] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 58.527773][ T359] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 58.678983][ T359] usb 4-1: config 0 has an invalid interface number: 140 but max is 0 [ 58.687266][ T359] usb 4-1: config 0 has no interface number 0 [ 58.693386][ T359] usb 4-1: too many endpoints for config 0 interface 140 altsetting 224: 252, using maximum allowed: 30 [ 58.704589][ T359] usb 4-1: config 0 interface 140 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 58.718291][ T359] usb 4-1: config 0 interface 140 has no altsetting 0 [ 58.726023][ T359] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 58.735111][ T359] usb 4-1: New USB device strings: Mfr=0, Product=5, SerialNumber=0 [ 58.743408][ T359] usb 4-1: Product: syz [ 58.748379][ T359] usb 4-1: config 0 descriptor?? [ 58.931149][ T1807] netlink: 'syz.6.495': attribute type 4 has an invalid length. [ 58.955636][ T1809] input: syz1 as /devices/virtual/input/input8 [ 59.030538][ T31] usb 5-1: USB disconnect, device number 9 [ 59.058562][ T1815] SELinux: failed to load policy [ 59.063671][ T36] audit: type=1400 audit(1756963219.189:346): avc: denied { load_policy } for pid=1814 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.112004][ T36] audit: type=1400 audit(1756963219.219:347): avc: denied { read } for pid=1811 comm="syz.6.497" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 59.115988][ T1820] overlayfs: failed to resolve './file1': -2 [ 59.332092][ T36] audit: type=1400 audit(1756963219.459:348): avc: denied { append } for pid=1832 comm="syz.6.505" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.355209][ T36] audit: type=1400 audit(1756963219.459:349): avc: denied { read } for pid=1832 comm="syz.6.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.618043][ T367] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 59.768831][ T367] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 59.779753][ T367] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.786390][ T367] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 59.795541][ T367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.804300][ T367] usb 7-1: config 0 descriptor?? [ 59.809943][ T1834] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 59.867082][ T31] usb 2-1: USB disconnect, device number 10 [ 59.981161][ T1839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.981212][ T1839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 59.991420][ T1839] raw_sendmsg: syz.1.507 forgot to set AF_INET. Fix it! [ 60.030706][ T1841] SELinux: failed to load policy [ 60.052066][ T1844] overlayfs: failed to resolve './file1': -2 [ 60.092213][ T367] usb 7-1: string descriptor 0 read error: -71 [ 60.101597][ T367] usbhid 7-1:0.0: can't add hid device: -71 [ 60.107594][ T367] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 60.119268][ T367] usb 7-1: USB disconnect, device number 2 [ 60.622202][ T1867] SELinux: failed to load policy [ 60.640163][ T1869] overlayfs: failed to resolve './file1': -2 [ 60.657754][ T31] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 60.809232][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.820279][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.830138][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.844300][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 60.853635][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 60.861891][ T31] usb 5-1: SerialNumber: syz [ 60.869180][ T31] usb 5-1: config 0 descriptor?? [ 60.901291][ T1883] rtc_cmos 00:00: Alarms can be up to one day in the future [ 60.982100][ T1889] SELinux: failed to load policy [ 61.000864][ T837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.006606][ T1891] overlayfs: failed to resolve './file0': -2 [ 61.008889][ T837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.021973][ T837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.029792][ T837] rtc_cmos 00:00: Alarms can be up to one day in the future [ 61.039990][ T837] rtc rtc0: __rtc_set_alarm: err=-22 [ 61.281484][ T1865] rust_binder: Error while translating object. [ 61.281559][ T1865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 61.288067][ T1865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:294 [ 61.308371][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 61.319276][ T359] ftdi_sio 4-1:0.140: FTDI USB Serial Device converter detected [ 61.340431][ T1898] tipc: Started in network mode [ 61.343518][ T359] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 61.345691][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 61.359921][ T1898] tipc: Node identity , cluster identity 4711 [ 61.367830][ T359] usb 4-1: USB disconnect, device number 12 [ 61.370027][ T1898] tipc: Failed to obtain node identity [ 61.377853][ T359] ftdi_sio 4-1:0.140: device disconnected [ 61.387799][ T31] usb 5-1: USB disconnect, device number 10 [ 61.405415][ T1898] tipc: Enabling of bearer rejected, failed to enable media [ 61.451554][ T1905] binder: Bad value for 'stats' [ 61.621487][ T1918] overlayfs: failed to resolve './file0': -2 [ 61.728330][ T1926] rust_binder: 408: no such ref 1 [ 61.741890][ T1931] rust_binder: Write failure EFAULT in pid:320 [ 61.804894][ T1939] overlayfs: failed to resolve './file0': -2 [ 61.868878][ T1942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 61.963151][ T1946] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 61.990824][ T1955] binder: Unknown parameter 'J7777777' [ 62.062968][ T1952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 62.072742][ T359] rust_binder: 1951: removing orphan mapping 0:24 [ 62.127246][ T1978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.138687][ T1978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.167574][ T1985] overlayfs: failed to resolve './file1': -2 [ 62.173959][ T1962] rust_binder: 299: no such ref 1 [ 62.187734][ T1962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 62.295441][ T1991] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 62.314471][ T1991] SELinux: failed to load policy [ 62.336564][ T1994] rust_binder: Write failure EFAULT in pid:433 [ 62.357730][ T367] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.518590][ T1999] rust_binder: Error while translating object. [ 62.518659][ T1999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.524999][ T1999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438 [ 62.548386][ T367] usb 7-1: config index 0 descriptor too short (expected 11812, got 36) [ 62.582696][ T367] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 219 [ 62.599793][ T367] usb 7-1: can't read configurations, error -22 [ 62.618562][ T2001] overlayfs: failed to resolve './file0': -2 [ 62.708317][ T2004] rust_binder: 442: no such ref 1 [ 62.713575][ T2004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 62.748284][ T367] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.890611][ T2009] overlayfs: failed to resolve './file1': -2 [ 62.908819][ T367] usb 7-1: config index 0 descriptor too short (expected 11812, got 36) [ 62.918613][ T367] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 219 [ 62.927234][ T367] usb 7-1: can't read configurations, error -22 [ 62.934896][ T367] usb usb7-port1: attempt power cycle [ 62.969640][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 62.969652][ T36] audit: type=1400 audit(1756963223.099:354): avc: denied { remount } for pid=2010 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.016637][ T2017] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.026365][ T2017] SELinux: failed to load policy [ 63.277995][ T367] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.299193][ T367] usb 7-1: config index 0 descriptor too short (expected 11812, got 36) [ 63.307542][ T367] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 219 [ 63.316169][ T367] usb 7-1: can't read configurations, error -22 [ 63.447800][ T367] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 63.469249][ T367] usb 7-1: config index 0 descriptor too short (expected 11812, got 36) [ 63.477738][ T367] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 219 [ 63.486342][ T367] usb 7-1: can't read configurations, error -22 [ 63.492729][ T367] usb usb7-port1: unable to enumerate USB device [ 75.681262][ T2022] SELinux: policydb string length 1836477231 does not match expected length 8 [ 75.691220][ T2022] SELinux: failed to load policy [ 75.700194][ T2026] overlayfs: failed to resolve './file0': -2 [ 75.718940][ T2031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2031 comm=syz.4.583 [ 75.731715][ T2031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 75.747314][ T2035] overlayfs: failed to resolve './file1': -2 [ 75.777779][ T2038] SELinux: policydb version 1971958179 does not match my version range 15-33 [ 75.787731][ T36] audit: type=1400 audit(1756963235.909:355): avc: denied { accept } for pid=2030 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 75.809104][ T2038] SELinux: failed to load policy [ 75.868907][ T2045] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 75.879717][ T2045] SELinux: failed to load policy [ 75.914572][ T2051] netlink: 'syz.6.589': attribute type 13 has an invalid length. [ 75.945067][ T2060] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 75.966600][ T2061] /dev/nullb0: Can't lookup blockdev [ 75.991406][ T36] audit: type=1400 audit(1756963236.119:356): avc: denied { accept } for pid=2062 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.017833][ T2066] overlayfs: failed to resolve './file0': -2 [ 76.100522][ T2071] overlayfs: failed to resolve './file0': -2 [ 76.117649][ T2073] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 76.117756][ T2073] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 76.156511][ T2076] SELinux: failed to load policy [ 76.173862][ T2079] binder: Unknown parameter 'secl' [ 76.275749][ T2086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.275779][ T2086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.282594][ T2086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.288966][ T2086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.306584][ T2091] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 76.313087][ T2091] rust_binder: Error while translating object. [ 76.321748][ T2091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.327976][ T2091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 76.348616][ T2093] overlayfs: failed to resolve './file1': -2 [ 76.599654][ T2101] overlayfs: failed to resolve './file0': -2 [ 76.772894][ T2106] SELinux: failed to load policy [ 76.788019][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 76.797020][ T2108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.833985][ T2118] overlayfs: failed to resolve './file1': -2 [ 76.857739][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 76.873687][ T2120] rust_binder: Error while translating object. [ 76.873729][ T2120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 76.880000][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 77.001948][ T2126] overlayfs: failed to resolve './file0': -2 [ 77.027726][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 77.034086][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.042329][ T31] usb 2-1: config 0 has no interface number 0 [ 77.048513][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 77.056830][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.066037][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.074079][ T31] usb 2-1: Product: syz [ 77.078329][ T31] usb 2-1: Manufacturer: syz [ 77.082962][ T31] usb 2-1: SerialNumber: syz [ 77.088321][ T31] usb 2-1: config 0 descriptor?? [ 77.094019][ T31] smsc75xx v1.0.0 [ 77.137329][ T36] audit: type=1400 audit(1756963237.259:357): avc: denied { getopt } for pid=2129 comm="syz.6.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.140221][ T2130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 77.157049][ T2130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:125 [ 77.197196][ T2132] SELinux: failed to load policy [ 77.228693][ T36] audit: type=1400 audit(1756963237.359:358): avc: denied { getopt } for pid=2133 comm="syz.6.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.382730][ T2139] overlayfs: failed to resolve './file1': -2 [ 77.410614][ T2141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.410640][ T2141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 77.420376][ T2141] rust_binder: 329: no such ref 2 [ 77.434678][ T2141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329 [ 77.467793][ T367] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 77.623173][ T2154] SELinux: failed to load policy [ 77.632233][ T367] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.646373][ T367] usb 7-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 77.657738][ T367] usb 7-1: config 1 interface 0 has no altsetting 0 [ 77.664562][ T2156] rust_binder: Write failure EFAULT in pid:344 [ 77.665905][ T367] usb 7-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40 [ 77.681241][ T367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.681660][ T36] audit: type=1400 audit(1756963237.819:359): avc: denied { bind } for pid=2157 comm="syz.4.629" laddr=fe80::13 lport=2 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.689854][ T367] usb 7-1: Product: syz [ 77.714198][ T36] audit: type=1400 audit(1756963237.819:360): avc: denied { name_bind } for pid=2157 comm="syz.4.629" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 77.719546][ T367] usb 7-1: Manufacturer: syz [ 77.737414][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 77.744055][ T367] usb 7-1: SerialNumber: syz [ 77.753078][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 77.757927][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.766899][ T36] audit: type=1400 audit(1756963237.819:361): avc: denied { node_bind } for pid=2157 comm="syz.4.629" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 77.783356][ T2134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 77.818909][ T2164] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 77.826107][ T2164] rust_binder: Write failure EINVAL in pid:352 [ 77.906051][ T2169] overlayfs: failed to resolve './file0': -2 [ 78.008470][ T367] usbhid 7-1:1.0: can't add hid device: -71 [ 78.014466][ T367] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 78.032365][ T367] usb 7-1: USB disconnect, device number 7 [ 78.326044][ T2183] SELinux: failed to load policy [ 78.456433][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 78.467323][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 78.477145][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 78.486630][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 78.496363][ T31] usb 2-1: USB disconnect, device number 11 [ 78.597141][ T36] audit: type=1400 audit(1756963238.719:362): avc: denied { create } for pid=2190 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.650571][ T2222] overlayfs: failed to resolve './file0': -2 [ 78.669881][ T36] audit: type=1400 audit(1756963238.799:363): avc: denied { bind } for pid=2223 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.689581][ T36] audit: type=1400 audit(1756963238.799:364): avc: denied { name_bind } for pid=2223 comm="syz.3.644" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 78.711718][ T2224] rust_binder: Error while translating object. [ 78.711959][ T2224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.718402][ T2224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 78.806473][ T2232] rust_binder: Error while translating object. [ 78.815708][ T2232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.821994][ T2232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 78.831679][ T2233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2233 comm=syz.6.646 [ 78.844787][ T2229] rust_binder: Write failure EFAULT in pid:476 [ 78.853637][ T2232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2232 comm=syz.6.646 [ 78.920208][ T2239] SELinux: failed to load policy [ 78.924893][ T2243] fuse: Unknown parameter 'rootlode' [ 78.933293][ T2243] rust_binder: Error while translating object. [ 78.933329][ T2243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.950567][ T2243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 78.960440][ T2248] overlayfs: failed to resolve './file0': -2 [ 79.003015][ T2250] rust_binder: Error while translating object. [ 79.003066][ T2250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.009619][ T2250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 79.126945][ T2253] 9pnet_fd: Insufficient options for proto=fd [ 79.136751][ T2265] rust_binder: inc_ref_done called when no active inc_refs [ 79.203106][ T2273] SELinux: failed to load policy [ 79.228590][ T2275] overlayfs: failed to resolve './file1': -2 [ 79.387734][ T837] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 79.405800][ T2302] overlayfs: failed to resolve './file1': -2 [ 79.433828][ T2307] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 201) [ 79.433848][ T2307] rust_binder: Error while translating object. [ 79.444619][ T2307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.451499][ T2307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 79.461588][ T2307] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 79.504632][ T2311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:427 [ 79.517738][ T837] usb 5-1: device descriptor read/64, error -71 [ 79.548882][ T2315] rust_binder: Error while translating object. [ 79.548942][ T2315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.555212][ T2315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:497 [ 79.577601][ T2328] overlayfs: failed to resolve './file1': -2 [ 79.777742][ T837] usb 5-1: device descriptor read/64, error -71 [ 80.017753][ T837] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 80.147781][ T837] usb 5-1: device descriptor read/64, error -71 [ 80.387744][ T837] usb 5-1: device descriptor read/64, error -71 [ 80.487461][ T2348] binder: Bad value for 'defcontext' [ 80.501398][ T837] usb usb5-port1: attempt power cycle [ 80.599021][ T479] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.837781][ T837] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 80.868870][ T837] usb 5-1: device descriptor read/8, error -71 [ 80.890782][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 80.890800][ T36] audit: type=1400 audit(1756963241.019:371): avc: denied { accept } for pid=2387 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.917740][ T36] audit: type=1400 audit(1756963241.019:372): avc: denied { setattr } for pid=2387 comm="syz.1.702" name="secretmem" dev="secretmem" ino=22203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.008284][ T837] usb 5-1: device descriptor read/8, error -71 [ 81.017358][ T2391] FAULT_INJECTION: forcing a failure. [ 81.017358][ T2391] name failslab, interval 1, probability 0, space 0, times 1 [ 81.030668][ T2391] CPU: 0 UID: 0 PID: 2391 Comm: syz.1.703 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 81.030701][ T2391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.030714][ T2391] Call Trace: [ 81.030722][ T2391] [ 81.030730][ T2391] __dump_stack+0x21/0x30 [ 81.030765][ T2391] dump_stack_lvl+0x10c/0x190 [ 81.030792][ T2391] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.030824][ T2391] dump_stack+0x19/0x20 [ 81.030851][ T2391] should_fail_ex+0x3d9/0x530 [ 81.030883][ T2391] should_failslab+0xac/0x100 [ 81.030907][ T2391] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 81.030940][ T2391] ? __get_vm_area_node+0x154/0x3a0 [ 81.030968][ T2391] __get_vm_area_node+0x154/0x3a0 [ 81.030996][ T2391] __vmalloc_node_range_noprof+0x33c/0x1420 [ 81.031026][ T2391] ? sel_write_load+0x226/0x5e0 [ 81.031053][ T2391] ? kernel_text_address+0xa9/0xe0 [ 81.031080][ T2391] ? unwind_get_return_address+0x51/0x90 [ 81.031108][ T2391] ? _parse_integer_limit+0x195/0x1e0 [ 81.031139][ T2391] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 81.031169][ T2391] ? avc_has_perm_noaudit+0x268/0x360 [ 81.031199][ T2391] ? __asan_memcpy+0x5a/0x80 [ 81.031230][ T2391] ? avc_has_perm_noaudit+0x286/0x360 [ 81.031260][ T2391] ? sel_write_load+0x226/0x5e0 [ 81.031286][ T2391] vmalloc_noprof+0xfd/0x1d0 [ 81.031321][ T2391] ? sel_write_load+0x226/0x5e0 [ 81.031347][ T2391] ? __cfi_avc_has_perm+0x10/0x10 [ 81.031374][ T2391] ? mutex_lock+0x92/0x1c0 [ 81.031395][ T2391] ? __cfi_vmalloc_noprof+0x10/0x10 [ 81.031425][ T2391] sel_write_load+0x226/0x5e0 [ 81.031450][ T2391] ? proc_fail_nth_write+0x17e/0x210 [ 81.031477][ T2391] ? __cfi_sel_write_load+0x10/0x10 [ 81.031501][ T2391] ? bpf_lsm_file_permission+0xd/0x20 [ 81.031528][ T2391] ? __cfi_sel_write_load+0x10/0x10 [ 81.031553][ T2391] vfs_write+0x3c0/0xe80 [ 81.031572][ T2391] ? __cfi_vfs_write+0x10/0x10 [ 81.031590][ T2391] ? __kasan_check_write+0x18/0x20 [ 81.031618][ T2391] ? mutex_lock+0x92/0x1c0 [ 81.031638][ T2391] ? __cfi_mutex_lock+0x10/0x10 [ 81.031659][ T2391] ? __fget_files+0x2c5/0x340 [ 81.031684][ T2391] ksys_write+0x141/0x250 [ 81.031704][ T2391] ? __cfi_ksys_write+0x10/0x10 [ 81.031724][ T2391] ? __kasan_check_read+0x15/0x20 [ 81.031753][ T2391] __x64_sys_write+0x7f/0x90 [ 81.031774][ T2391] x64_sys_call+0x271c/0x2ee0 [ 81.031804][ T2391] do_syscall_64+0x58/0xf0 [ 81.031833][ T2391] ? clear_bhb_loop+0x50/0xa0 [ 81.031860][ T2391] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.031884][ T2391] RIP: 0033:0x7f4a9378ebe9 [ 81.031902][ T2391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.031921][ T2391] RSP: 002b:00007f4a94572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.031944][ T2391] RAX: ffffffffffffffda RBX: 00007f4a939c5fa0 RCX: 00007f4a9378ebe9 [ 81.031960][ T2391] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000003 [ 81.031975][ T2391] RBP: 00007f4a94572090 R08: 0000000000000000 R09: 0000000000000000 [ 81.031989][ T2391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.032003][ T2391] R13: 00007f4a939c6038 R14: 00007f4a939c5fa0 R15: 00007ffce6a4f698 [ 81.032022][ T2391] [ 81.032031][ T2391] syz.1.703: vmalloc error: size 24639, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 81.257756][ T837] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 81.258729][ T2391] ,cpuset= [ 81.288884][ T837] usb 5-1: device descriptor read/8, error -71 [ 81.297727][ T2391] syz1,mems_allowed=0 [ 81.381270][ T2391] CPU: 0 UID: 0 PID: 2391 Comm: syz.1.703 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 81.381296][ T2391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.381309][ T2391] Call Trace: [ 81.381315][ T2391] [ 81.381323][ T2391] __dump_stack+0x21/0x30 [ 81.381360][ T2391] dump_stack_lvl+0x10c/0x190 [ 81.381386][ T2391] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.381414][ T2391] dump_stack+0x19/0x20 [ 81.381437][ T2391] warn_alloc+0x1bc/0x2a0 [ 81.381462][ T2391] ? __cfi_warn_alloc+0x10/0x10 [ 81.381487][ T2391] ? __get_vm_area_node+0x392/0x3a0 [ 81.381512][ T2391] __vmalloc_node_range_noprof+0x361/0x1420 [ 81.381538][ T2391] ? kernel_text_address+0xa9/0xe0 [ 81.381562][ T2391] ? unwind_get_return_address+0x51/0x90 [ 81.381587][ T2391] ? _parse_integer_limit+0x195/0x1e0 [ 81.381614][ T2391] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 81.381640][ T2391] ? avc_has_perm_noaudit+0x268/0x360 [ 81.381668][ T2391] ? __asan_memcpy+0x5a/0x80 [ 81.381695][ T2391] ? avc_has_perm_noaudit+0x286/0x360 [ 81.381721][ T2391] ? sel_write_load+0x226/0x5e0 [ 81.381744][ T2391] vmalloc_noprof+0xfd/0x1d0 [ 81.381769][ T2391] ? sel_write_load+0x226/0x5e0 [ 81.381791][ T2391] ? __cfi_avc_has_perm+0x10/0x10 [ 81.381816][ T2391] ? mutex_lock+0x92/0x1c0 [ 81.381835][ T2391] ? __cfi_vmalloc_noprof+0x10/0x10 [ 81.381861][ T2391] sel_write_load+0x226/0x5e0 [ 81.381883][ T2391] ? proc_fail_nth_write+0x17e/0x210 [ 81.381908][ T2391] ? __cfi_sel_write_load+0x10/0x10 [ 81.381933][ T2391] ? bpf_lsm_file_permission+0xd/0x20 [ 81.381958][ T2391] ? __cfi_sel_write_load+0x10/0x10 [ 81.381981][ T2391] vfs_write+0x3c0/0xe80 [ 81.381999][ T2391] ? __cfi_vfs_write+0x10/0x10 [ 81.382017][ T2391] ? __kasan_check_write+0x18/0x20 [ 81.382044][ T2391] ? mutex_lock+0x92/0x1c0 [ 81.382062][ T2391] ? __cfi_mutex_lock+0x10/0x10 [ 81.382081][ T2391] ? __fget_files+0x2c5/0x340 [ 81.382103][ T2391] ksys_write+0x141/0x250 [ 81.382120][ T2391] ? __cfi_ksys_write+0x10/0x10 [ 81.382138][ T2391] ? __kasan_check_read+0x15/0x20 [ 81.382165][ T2391] __x64_sys_write+0x7f/0x90 [ 81.382182][ T2391] x64_sys_call+0x271c/0x2ee0 [ 81.382211][ T2391] do_syscall_64+0x58/0xf0 [ 81.382236][ T2391] ? clear_bhb_loop+0x50/0xa0 [ 81.382264][ T2391] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.382286][ T2391] RIP: 0033:0x7f4a9378ebe9 [ 81.382302][ T2391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.382318][ T2391] RSP: 002b:00007f4a94572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.382338][ T2391] RAX: ffffffffffffffda RBX: 00007f4a939c5fa0 RCX: 00007f4a9378ebe9 [ 81.382352][ T2391] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000003 [ 81.382365][ T2391] RBP: 00007f4a94572090 R08: 0000000000000000 R09: 0000000000000000 [ 81.382378][ T2391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.382389][ T2391] R13: 00007f4a939c6038 R14: 00007f4a939c5fa0 R15: 00007ffce6a4f698 [ 81.382412][ T2391] [ 81.382429][ T2391] Mem-Info: [ 81.438920][ T837] usb 5-1: device descriptor read/8, error -71 [ 81.450542][ T2391] active_anon:5855 inactive_anon:1 isolated_anon:0 [ 81.450542][ T2391] active_file:18945 inactive_file:3027 isolated_file:0 [ 81.450542][ T2391] unevictable:0 dirty:56 writeback:0 [ 81.450542][ T2391] slab_reclaimable:5824 slab_unreclaimable:73401 [ 81.450542][ T2391] mapped:24202 shmem:163 pagetables:1038 [ 81.450542][ T2391] sec_pagetables:0 bounce:0 [ 81.450542][ T2391] kernel_misc_reclaimable:0 [ 81.450542][ T2391] free:1522875 free_pcp:2143 free_cma:0 [ 81.567929][ T837] usb usb5-port1: unable to enumerate USB device [ 81.571385][ T2391] Node 0 active_anon:23420kB inactive_anon:4kB active_file:75780kB inactive_file:12108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96808kB dirty:224kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5440kB pagetables:4152kB sec_pagetables:0kB all_unreclaimable? no [ 81.777771][ T2391] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:5736kB free_cma:0kB [ 81.808187][ T2391] lowmem_reserve[]: 0 3921 3921 [ 81.818012][ T2391] Normal free:3132040kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23320kB inactive_anon:4kB active_file:75780kB inactive_file:12108kB unevictable:0kB writepending:24kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:2276kB free_cma:0kB [ 81.849506][ T2391] lowmem_reserve[]: 0 0 0 [ 81.854212][ T2391] DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 81.869771][ T2391] Normal: 217*4kB (UME) 792*8kB (UME) 726*16kB (UME) 663*32kB (UME) 373*64kB (UME) 32*128kB (UME) 19*256kB (ME) 10*512kB (UME) 7*1024kB (UM) 5*2048kB (ME) 741*4096kB (ME) = 3130532kB [ 81.888020][ T2391] 22132 total pagecache pages [ 81.892737][ T2391] 1 pages in swap cache [ 81.896886][ T2391] Free swap = 124732kB [ 81.901070][ T2391] Total swap = 124996kB [ 81.905243][ T2391] 2097051 pages RAM [ 81.909079][ T2391] 0 pages HighMem/MovableOnly [ 81.913762][ T2391] 351534 pages reserved [ 81.917970][ T2391] 0 pages cma reserved [ 81.923880][ T2391] Memory allocations: [ 81.927891][ T2391] 0 B 0 init/main.c:1370 func:do_initcalls [ 81.935107][ T2391] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 81.943198][ T2391] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 81.950863][ T2391] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 81.958788][ T2391] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 81.966692][ T2391] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 81.975317][ T2391] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 81.983235][ T2391] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 81.991156][ T2391] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 81.999709][ T2391] 0 B 0 init/initramfs.c:101 func:find_link [ 82.007198][ T2394] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 82.017133][ T2394] SELinux: failed to load policy [ 82.155121][ T2407] ------------[ cut here ]------------ [ 82.160689][ T2407] WARNING: CPU: 0 PID: 2407 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 82.170156][ T2407] Modules linked in: [ 82.174146][ T2407] CPU: 0 UID: 0 PID: 2407 Comm: syz.3.708 Not tainted syzkaller #0 ecd017b10525a6fce0a0b730885af6e9bd831db9 [ 82.185708][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.195901][ T2407] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 82.201921][ T2407] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d9 43 ee 05 00 0f 85 be 00 00 00 c6 05 cc 43 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 82.221688][ T2407] RSP: 0018:ffffc900010ef660 EFLAGS: 00010246 [ 82.228011][ T2407] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 82.236009][ T2407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900010ef718 [ 82.244209][ T2407] RBP: ffffc900010ef7a0 R08: ffffc900010ef717 R09: 0000000000000000 [ 82.252239][ T2407] R10: ffffc900010ef700 R11: fffff5200021dee3 R12: ffffc900010ef6a0 [ 82.260275][ T2407] R13: dffffc0000000000 R14: 1ffff9200021ded0 R15: 0000000000000000 [ 82.268309][ T2407] FS: 00007f24e32d36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.277269][ T2407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.283896][ T2407] CR2: 0000200000006000 CR3: 0000000113782000 CR4: 00000000003526b0 [ 82.291976][ T2407] Call Trace: [ 82.295275][ T2407] [ 82.298259][ T2407] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.304038][ T2407] ? kasan_save_alloc_info+0x40/0x50 [ 82.309366][ T2407] ? __kasan_slab_alloc+0x73/0x90 [ 82.314445][ T2407] ? ebitmap_read+0x144/0x990 [ 82.319159][ T2407] ? hashtab_init+0xdb/0x1f0 [ 82.323779][ T2407] ___kmalloc_large_node+0xb5/0x250 [ 82.329031][ T2407] ? hashtab_init+0xdb/0x1f0 [ 82.333652][ T2407] __kmalloc_large_node_noprof+0x1e/0xe0 [ 82.339398][ T2407] ? hashtab_init+0xdb/0x1f0 [ 82.344022][ T2407] __kmalloc_noprof+0x26d/0x450 [ 82.348948][ T2407] hashtab_init+0xdb/0x1f0 [ 82.353393][ T2407] ? policydb_read+0x86f/0x28c0 [ 82.358317][ T2407] symtab_init+0x44/0x70 [ 82.362585][ T2407] policydb_read+0x8fe/0x28c0 [ 82.367303][ T2407] ? kasan_save_alloc_info+0x40/0x50 [ 82.372631][ T2407] ? __cfi_policydb_read+0x10/0x10 [ 82.377803][ T2407] ? security_load_policy+0x128/0x12f0 [ 82.383289][ T2407] security_load_policy+0x162/0x12f0 [ 82.388623][ T2407] ? irqentry_exit+0x4a/0x60 [ 82.393246][ T2407] ? exc_page_fault+0x66/0xc0 [ 82.397990][ T2407] ? asm_exc_page_fault+0x2b/0x30 [ 82.403089][ T2407] ? __cfi_security_load_policy+0x10/0x10 [ 82.408872][ T2407] ? rep_movs_alternative+0x4a/0xa0 [ 82.414107][ T2407] sel_write_load+0x298/0x5e0 [ 82.418826][ T2407] ? futex_wait+0x29a/0x7a0 [ 82.423369][ T2407] ? __cfi_sel_write_load+0x10/0x10 [ 82.428629][ T2407] ? __cfi_futex_wait+0x10/0x10 [ 82.433514][ T2407] ? bpf_lsm_file_permission+0xd/0x20 [ 82.438947][ T2407] ? __cfi_sel_write_load+0x10/0x10 [ 82.444180][ T2407] vfs_write+0x3c0/0xe80 [ 82.448482][ T2407] ? __cfi_vfs_write+0x10/0x10 [ 82.453266][ T2407] ? __kasan_check_write+0x18/0x20 [ 82.458424][ T2407] ? mutex_lock+0x92/0x1c0 [ 82.462882][ T2407] ? __cfi_mutex_lock+0x10/0x10 [ 82.467810][ T2407] ? __fget_files+0x2c5/0x340 [ 82.472518][ T2407] ksys_write+0x141/0x250 [ 82.476891][ T2407] ? xfd_validate_state+0x68/0x150 [ 82.482045][ T2407] ? __cfi_ksys_write+0x10/0x10 [ 82.486924][ T2407] ? __kasan_check_write+0x18/0x20 [ 82.492081][ T2407] ? fpregs_restore_userregs+0x11d/0x260 [ 82.497779][ T2407] __x64_sys_write+0x7f/0x90 [ 82.502400][ T2407] x64_sys_call+0x271c/0x2ee0 [ 82.507095][ T2407] do_syscall_64+0x58/0xf0 [ 82.511562][ T2407] ? clear_bhb_loop+0x50/0xa0 [ 82.516273][ T2407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.522220][ T2407] RIP: 0033:0x7f24e238ebe9 [ 82.526655][ T2407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.546315][ T2407] RSP: 002b:00007f24e32d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.554807][ T2407] RAX: ffffffffffffffda RBX: 00007f24e25c5fa0 RCX: 00007f24e238ebe9 [ 82.562829][ T2407] RDX: 000000000000603f RSI: 0000200000000000 RDI: 0000000000000004 [ 82.570862][ T2407] RBP: 00007f24e2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 82.578874][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.586924][ T2407] R13: 00007f24e25c6038 R14: 00007f24e25c5fa0 R15: 00007fffbc14b368 [ 82.594965][ T2407] [ 82.598024][ T2407] ---[ end trace 0000000000000000 ]--- [ 82.603611][ T2407] SELinux: failed to load policy [ 82.637827][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.639216][ T914] Bluetooth: hci0: command 0x1003 tx timeout