last executing test programs: 7m9.699145283s ago: executing program 2 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000380)=""/137, &(0x7f0000000200)=0x89) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x80a0000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) r4 = socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x800, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20400}, 0x0) socketpair(0x1, 0x100000005, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x289, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40485404, 0xfffffffffffffffe) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (async) getsockname(r6, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x80) 7m9.614174862s ago: executing program 2 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x5, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000300)="8221a75ef9905713425f81639175c745476f06498ff28ffb5823f35039e5dd55d16f8aff4bdb02a491db6d2b212a624f745b6e4348e0ce95358afbbe3425e504d3dfad153332d75c49b1ff931815e710ca93fa9bd559e83bbbbb80a0bb4bf00dbdf03267875430618ec817fdff65c9fb716e640bae19aa4bcff8dbef3512c559487e4a2170b606f673ec995bde6ca1741f03ad23c807f0c1a25c551d3c5c0bf4a1079c98c2cdc6f1c00f6377943a45b17c585bfc2634", 0xb6, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r2, 0x69, 0x1e}, &(0x7f00000003c0)={'enc=', 'raw', ' hash=', {'xcbc(aes-fixed-time)\x00'}}, &(0x7f0000000440)="f5492ff85cef275cfeedd177bdbf321c7e04572e5338d9de62e8acaa0b8b799bcccc4b9622c70bb6dd307562bcf136c38c93f10a96d8137f73a02443dbe0763e4e0fd00cf14488c5cd6df2729c1715305f98d91581a6b9a52bf7fb542dde57c0f15f4ce439303a0a53", &(0x7f00000004c0)=""/30) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0xdc, 0x32, 0x8, 0xb57, 0x2a8d, 0x3374, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x3, 0x2, 0x3, 0x1, 0x2, 0x0, [], [{{0x9, 0x5, 0x88, 0x3, 0x400, 0xfe, 0xfa, 0x1}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x7, 0x3, 0x8}}]}}]}}]}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r5) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder-control\x00', 0x802, 0x0) close_range(r0, r6, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='anon_inodefs\x00', 0x200000, 0x0) 7m8.756873812s ago: executing program 2 (id=121): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x5, 0x10, @mcast1, @remote, 0x7, 0x7, 0x9}}) sendmmsg$inet(r2, &(0x7f0000000d40)=[{{0x0, 0xfffffffffffffce3, &(0x7f0000000680)=[{&(0x7f0000000100)="c607", 0x2}], 0x1, &(0x7f0000001000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRES32=r0, @ANYBLOB="9f0bdb3e67c5734bd2625aae0936c6ad02294f1be637c3302fa36439ff95cc9448a9e70e610ff3838cdf95f95183b2d0dbbf5f0b6e9503a873bdbb7b6313f6fa4948bf357a3c9d99d48f3b840448cae309cc05e3ca91532e328b1d84cf869ba58a96db21115b68b8785a1d5e243bbafa462fbc0ae3c33502ed03a1552990b71164c5270333d608a81401bbb601d65e0c5651343b4b0f77f1e304294c4523b896b873e3e021ae90c2869ec1", @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES64=r0], 0xf0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10, &(0x7f0000000340)}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @private=0xa010101}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0}}], 0x6, 0x24004c41) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000040)={{r4}, 0xb, 0xfffffffffffffffc, 0xffffffffffffff63}) write$P9_RVERSION(r4, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) 7m6.927667925s ago: executing program 2 (id=123): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') getxattr(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', &(0x7f0000000440)=""/4, 0x4) (async) getxattr(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', &(0x7f0000000440)=""/4, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000001040000000000000400000000000d000100aa5fab4c0400000103f8ff000921000000012207000905810316e1d0c280"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x7, "76ec"}, @main=@item_012={0x1, 0x0, 0x9, 'c'}, @main=@item_012={0x1, 0x0, 0x9, "b3"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0xee, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xb4, 0x9, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x7, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x80, 0x1, 0x8, 0x40, 0x6}, 0xf, &(0x7f0000000540)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x80, 0x81}]}, 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$printer(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x20, 0x23, 0x67, {0x67, 0x22, "9e95d8443fe45b0015184e0689e446e849285abca1cb3fbb9759d3bc1643630bf25876b0366e22260d126cd5d7fab9c2e51803af20d632f9b429577466d28ca5a4ec401077ed043e0822110769962c0cf8ade34504d84074343c0055da2eb26979733d4c80"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000980)={0x34, &(0x7f0000000700)={0x0, 0xf, 0x68, "ee2df6f1641e99e438c13153c4340c88d11da5aed53c5a1bb61b31f0d3232a192256cddd5a11516dfadf7381f5e72078f4cb42646e1536ace0a69bd2d24a0d42b54d6db320c424c8b642b642923d52a89d885f4a30fada91584381d99459b3154e400c1790d7e75c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xb1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0xd1, {0xcf, "c60d2e02c299c4d8a383a590897d2bce3f57b7d9a054d5a77b8d0ec6b1300297b58dde7621796391751251378d86559fac6bf426a7ae6a1fbd82247f2a0aa1ea0becaf59d6610cae26997caac929c3569348f35cdca0dca6d0f39b979155e7595921c10b2ad4de80bb6262207e60653ab59b8f11fe3215c8d51bd839abd638647263f0e1c192b993c6ae8a4d8f46e0c0449009286e4acb22ad9df70d10942cfacc6c3710a80f59b789542eaf7b1f5cb8f62ba04d41f648da078d415d73695347b309d463047066bc2aa15900af4f3f"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x48}, &(0x7f0000000940)={0x20, 0x0, 0x1}}) (async) syz_usb_control_io$printer(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x20, 0x23, 0x67, {0x67, 0x22, "9e95d8443fe45b0015184e0689e446e849285abca1cb3fbb9759d3bc1643630bf25876b0366e22260d126cd5d7fab9c2e51803af20d632f9b429577466d28ca5a4ec401077ed043e0822110769962c0cf8ade34504d84074343c0055da2eb26979733d4c80"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000980)={0x34, &(0x7f0000000700)={0x0, 0xf, 0x68, "ee2df6f1641e99e438c13153c4340c88d11da5aed53c5a1bb61b31f0d3232a192256cddd5a11516dfadf7381f5e72078f4cb42646e1536ace0a69bd2d24a0d42b54d6db320c424c8b642b642923d52a89d885f4a30fada91584381d99459b3154e400c1790d7e75c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xb1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0xd1, {0xcf, "c60d2e02c299c4d8a383a590897d2bce3f57b7d9a054d5a77b8d0ec6b1300297b58dde7621796391751251378d86559fac6bf426a7ae6a1fbd82247f2a0aa1ea0becaf59d6610cae26997caac929c3569348f35cdca0dca6d0f39b979155e7595921c10b2ad4de80bb6262207e60653ab59b8f11fe3215c8d51bd839abd638647263f0e1c192b993c6ae8a4d8f46e0c0449009286e4acb22ad9df70d10942cfacc6c3710a80f59b789542eaf7b1f5cb8f62ba04d41f648da078d415d73695347b309d463047066bc2aa15900af4f3f"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x48}, &(0x7f0000000940)={0x20, 0x0, 0x1}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000a00)={'#! ', '', [], 0xa, "5a700051b64bbac3ce356afb1cee6e563d8ccc6554b43d7a166099e3a3f383d950dabe992f"}, 0x29) (async) write$binfmt_script(r2, &(0x7f0000000a00)={'#! ', '', [], 0xa, "5a700051b64bbac3ce356afb1cee6e563d8ccc6554b43d7a166099e3a3f383d950dabe992f"}, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000009c0)=0x80) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000003a80)='ns/net\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x80, 0x1, [@m_ipt={0x50, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x27, 0x6, "a3ff70cc5ea43af9389600932a12cd9e8641d1ac468b8d7ae67b017ad2530e095a3d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) memfd_create(&(0x7f00000000c0)='./binderfs/binder1\x00', 0x1) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000200)) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x100}, @fd, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m3.70001441s ago: executing program 2 (id=136): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="150000008f8ea41f91cf04c9b309507b7b1ff717d63e034480"]) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300190e0000002cbd7000fcdbdf2505000600000000000a000000030000000000000000000000000000000000000102000000000000a802000100000000000000070c0000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) clock_getres(0xfffffffffffffffa, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 7m3.657543394s ago: executing program 2 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x504, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416dfa6fc2313e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400c041) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) shutdown(r0, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xe481b1619a4d0269, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}, {0xd000, 0xdddd1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x4, 0x7, 0x1a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x200008, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xc, 0x2, 0xa5b0, 0x9, 0x2, 0x7, 0x800, 0x0, 0x7, 0xffff, 0x6, 0x8, 0x8503, 0x6, 0x80000000], 0x3000, 0x401}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0xd) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000000)={0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00005d7000/0x3000)=nil, &(0x7f000042d000/0x2000)=nil, &(0x7f000055a000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00003e0000/0x1000)=nil, &(0x7f000075a000/0x4000)=nil, &(0x7f0000118000/0x2000)=nil, &(0x7f0000107000/0x4000)=nil, &(0x7f0000170000/0x1000)=nil, &(0x7f0000371000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="d702e2bf610b2a567e70ed3e4afac275945532f7a36213db754056703c6ec48dac", 0x21, r6}, 0x68) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x504, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416dfa6fc2313e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400c041) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) shutdown(r0, 0x1) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xe481b1619a4d0269, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}, {0xd000, 0xdddd1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x4, 0x7, 0x1a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x200008, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xc, 0x2, 0xa5b0, 0x9, 0x2, 0x7, 0x800, 0x0, 0x7, 0xffff, 0x6, 0x8, 0x8503, 0x6, 0x80000000], 0x3000, 0x401}) (async) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r5, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0xd) (async) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000000)={0x1}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00005d7000/0x3000)=nil, &(0x7f000042d000/0x2000)=nil, &(0x7f000055a000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00003e0000/0x1000)=nil, &(0x7f000075a000/0x4000)=nil, &(0x7f0000118000/0x2000)=nil, &(0x7f0000107000/0x4000)=nil, &(0x7f0000170000/0x1000)=nil, &(0x7f0000371000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="d702e2bf610b2a567e70ed3e4afac275945532f7a36213db754056703c6ec48dac", 0x21, r6}, 0x68) (async) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) 7m3.547215784s ago: executing program 32 (id=137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x504, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416dfa6fc2313e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400c041) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) shutdown(r0, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xe481b1619a4d0269, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}, {0xd000, 0xdddd1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x4, 0x7, 0x1a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x200008, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xc, 0x2, 0xa5b0, 0x9, 0x2, 0x7, 0x800, 0x0, 0x7, 0xffff, 0x6, 0x8, 0x8503, 0x6, 0x80000000], 0x3000, 0x401}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0xd) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000000)={0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00005d7000/0x3000)=nil, &(0x7f000042d000/0x2000)=nil, &(0x7f000055a000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00003e0000/0x1000)=nil, &(0x7f000075a000/0x4000)=nil, &(0x7f0000118000/0x2000)=nil, &(0x7f0000107000/0x4000)=nil, &(0x7f0000170000/0x1000)=nil, &(0x7f0000371000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="d702e2bf610b2a567e70ed3e4afac275945532f7a36213db754056703c6ec48dac", 0x21, r6}, 0x68) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x504, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d416dfa6fc2313e"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x400c041) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) shutdown(r0, 0x1) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xe481b1619a4d0269, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}, {0xd000, 0xdddd1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x4, 0x7, 0x1a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x9}, {}, 0xddf8ffdb, 0x0, 0x0, 0x200008, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xc, 0x2, 0xa5b0, 0x9, 0x2, 0x7, 0x800, 0x0, 0x7, 0xffff, 0x6, 0x8, 0x8503, 0x6, 0x80000000], 0x3000, 0x401}) (async) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r5, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0xd) (async) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) (async) ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000000)={0x1}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00005d7000/0x3000)=nil, &(0x7f000042d000/0x2000)=nil, &(0x7f000055a000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00003e0000/0x1000)=nil, &(0x7f000075a000/0x4000)=nil, &(0x7f0000118000/0x2000)=nil, &(0x7f0000107000/0x4000)=nil, &(0x7f0000170000/0x1000)=nil, &(0x7f0000371000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="d702e2bf610b2a567e70ed3e4afac275945532f7a36213db754056703c6ec48dac", 0x21, r6}, 0x68) (async) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) 6m21.01103294s ago: executing program 1 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x3b1c25aed43c2db}, 0xc) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) recvmmsg(r4, 0x0, 0x0, 0x400120a0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) read$FUSE(r2, &(0x7f000000c400)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff020000000000000100000000000000000a00"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000020000000a000418000000000000000048000200656362286369706865725f6e756c6c2900"/222], 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 6m20.349648043s ago: executing program 1 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000ff020000008a7402455b"]) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x1, &(0x7f00000000c0)='./binderfs/binder1\x00') (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x1, &(0x7f00000000c0)='./binderfs/binder1\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x7) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0xffffffffffffffff, 0xffffffffffff8000, 0x1, 0xa27, 0x1, 0x8001, 0xfff, 0x3, 0x94, 0x8, 0x7, 0xfffffffffc4087ed, 0x5, 0xfadb, 0x3c4, 0x9], 0x10000, 0x1090}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0xffffffffffffffff, 0xffffffffffff8000, 0x1, 0xa27, 0x1, 0x8001, 0xfff, 0x3, 0x94, 0x8, 0x7, 0xfffffffffc4087ed, 0x5, 0xfadb, 0x3c4, 0x9], 0x10000, 0x1090}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4) (async) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[=', 0x2}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000980)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f00000008c0)=0xe8) mount$9p_xen(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000a80)={'trans=xen,', {[{@access_client}, {@mmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@uid_gt={'uid>', r9}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@fsmagic={'fsmagic', 0x3d, 0xe}}]}}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 6m20.27334504s ago: executing program 1 (id=385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioprio_get$pid(0x2, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x4}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x64, 0x0, &(0x7f00000004c0)=[@request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x6, 0x0, &(0x7f0000000380)="65240c31f4f2"}) 6m20.171948749s ago: executing program 1 (id=386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xa, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x200000c0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0xffffffff, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0xa1, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0xfff71000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0xff, 0xfa}, {0x6000, 0x4005, 0x8, 0x9d, 0x3, 0x5, 0xff, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x60000018, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 6m20.069977679s ago: executing program 1 (id=388): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') 6m19.966679969s ago: executing program 1 (id=389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) epoll_create(0x3) (async) r2 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000540)={{0x80a0000, 0xeeee0000, 0x8, 0x3d, 0xfb, 0xd2, 0x40, 0x7f, 0x0, 0x0, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x41, 0x5, 0x7d, 0x9, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x4, 0xe, 0xf1}, {0xeeee0000, 0x1000, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x7f}, {0x8080000, 0x80a0000, 0xc, 0x7, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0xdddd1000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x40003, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write(r5, &(0x7f0000000400)="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", 0x1f000) 6m19.886317696s ago: executing program 33 (id=389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) epoll_create(0x3) (async) r2 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000540)={{0x80a0000, 0xeeee0000, 0x8, 0x3d, 0xfb, 0xd2, 0x40, 0x7f, 0x0, 0x0, 0x19}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x41, 0x5, 0x7d, 0x9, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x4, 0x42, 0xb, 0xf8, 0x8, 0x4, 0xe, 0xf1}, {0xeeee0000, 0x1000, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x83, 0xf7, 0x7f}, {0x8080000, 0x80a0000, 0xc, 0x7, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0xdddd1000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0xdddd0000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x1000, 0x7}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x40003, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write(r5, &(0x7f0000000400)="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", 0x1f000) 3m0.731684378s ago: executing program 4 (id=2166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000004010040"]) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r2, r7, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='autofs\x00', 0x1000, &(0x7f00000002c0)='5/W@\x00') recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 3m0.516292588s ago: executing program 4 (id=2171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0', [], 0xa, "6fa2dd05e52d"}, 0x11) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", "cba83b41", "ef3c6c588e3360e2"}, 0x38) sendfile(r2, r3, &(0x7f0000000100)=0x10, 0x7ffff000) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000009500)=ANY=[@ANYBLOB="0a0000090180c2000002aaaaaaaaaabb86dd62ee02b200005eff00000000000000000000000000000081fc010000000000000000000000000001"], 0x3a) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m0.331889465s ago: executing program 4 (id=2173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) openat$rnullb(0xffffffffffffff9c, 0x0, 0x161142, 0x0) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x3) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_aout(r4, &(0x7f00000007c0)=ANY=[], 0x120) read$FUSE(r4, &(0x7f0000004580)={0x2020}, 0x2020) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x272000, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x50800, 0x0) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, 0x0) 3m0.17920146s ago: executing program 4 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xf8, 0x1, 0x2, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0xcc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x6, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0xfffffffd}], 0x0, 0x0, 0x0}) 3m0.139748794s ago: executing program 4 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2188, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r1, 0x13, 0x7ffffffffffff, 0x40000b7) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x193ff000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="e6706961ca42565870d597f8137538354e05d33808af4c42f4f67d31811679d2a5dd2c743d7e88e1c498010482c37f6dbd14f58bcb2eccc7c4442be8fad31830ecc52c2ee6d6f1d551169bd6bd51828a623f9ec517ada134c685dc8817aaeb20ee702451910f4725839157ba2e9599a8813f323403704b6b2d2fcc1666a24480cd500494e88a862bae7d2bdc6ab38fc3c928504728d1f8af93aadbe8a246b018a66eec27393b1df77d", @ANYRES32=r3, @ANYRESHEX=r0], 0x40}}], 0x1, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000640)={0x1, 0x100205, 0x7d}, 0x10) (async) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$netlink(r4, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) ioctl$sock_bt_hci(r7, 0x800448d2, 0x0) (async) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/90, 0x5a, 0x3, 0x8, 0xf, 0x0, 0x3}}, 0x120) (async) write$UHID_INPUT2(r8, &(0x7f0000000680)=ANY=[@ANYBLOB="0c0000000000ac105dfb9568d2b8ca102a9a66d27a1f0d0e406136f5cb8dfab3d6134c0949cd82b656ab088ae69fc3b3ce2c6abc9881bea90174bbbf5a2d0623244826d9f2eee3fbb86e1c45fe0ff244d3b7693b4820357441a84e8c197cfaaef00b18707763bcd73458ae06160e2d763e128eb64890c571c4d26ca6eebeeba8"], 0x6) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000003c0)={'gre0\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x14, r9, 0x1, 0x4000}, 0x14}}, 0x48084) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=r9, @ANYBLOB="08002abd7000fcdbdf25020000002000018008000300020000001400020077673000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x490) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) fchmodat(r4, &(0x7f0000000300)='./file0\x00', 0x2) 3m0.07782786s ago: executing program 4 (id=2180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f00000004c0)="994db45df7e079b4f9e14148df4bfe69b005f1ce8b278c57c08e0e56e001ff1c27d21de29818865d249cd134db341eea425d69d2f39039788eef34f180e94ea987b20554bfdb32c37aaf4096c44fd882"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) (async) fsopen(&(0x7f00000002c0)='proc\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x8) (async) fchdir(r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f00000004c0)="994db45df7e079b4f9e14148df4bfe69b005f1ce8b278c57c08e0e56e001ff1c27d21de29818865d249cd134db341eea425d69d2f39039788eef34f180e94ea987b20554bfdb32c37aaf4096c44fd882"}) (async) 2m43.96693907s ago: executing program 34 (id=2180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f00000004c0)="994db45df7e079b4f9e14148df4bfe69b005f1ce8b278c57c08e0e56e001ff1c27d21de29818865d249cd134db341eea425d69d2f39039788eef34f180e94ea987b20554bfdb32c37aaf4096c44fd882"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/153, 0x99, 0x0, 0x23}, @fda={0x66646185, 0x3, 0x0, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000480)={0x0, 0x28, 0x48}}, 0x400}, @decrefs, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) (async) fsopen(&(0x7f00000002c0)='proc\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x8) (async) fchdir(r3) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}], 0x50, 0x0, &(0x7f00000004c0)="994db45df7e079b4f9e14148df4bfe69b005f1ce8b278c57c08e0e56e001ff1c27d21de29818865d249cd134db341eea425d69d2f39039788eef34f180e94ea987b20554bfdb32c37aaf4096c44fd882"}) (async) 38.727673084s ago: executing program 3 (id=3851): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) getuid() (async) getuid() socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0), 0x10000000000000a6, 0x0) (async) vmsplice(r3, &(0x7f00000000c0), 0x10000000000000a6, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00002a5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f080f2083c4e17c532d00580000b9800000c00f3235010000000f303e0f0f738d0d8fe9089036b8d60000000f23c00f21f835020008000f23f866f30f0966ba610066ed260f497d9c", 0x49}], 0x1, 0x1, &(0x7f00000000c0)=[@dstype0={0x6, 0xc}, @vmwrite={0x8, 0x0, 0x17, 0x0, 0x1, 0x0, 0x3, 0x0, 0x7f}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) epoll_create(0x3) (async) r4 = epoll_create(0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f000022f000/0x4000)=nil, 0x4000, 0x3000008, 0xa5af9c7e4fbdc1f, r4, 0xb698b000) 38.655993141s ago: executing program 3 (id=3852): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)={0x1058, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x1044, 0xca, 0x0, 0x1, [@nested={0x1040, 0x1, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x1034, 0xe9, 0x0, 0x1, [@generic="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", @typed={0x25, 0x11a, 0x0, 0x0, @binary="6e01bdefe1eeb35bacae41d1c8d5e53223cd60ad882e36ee1373f161a3d40ee486"}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x7}, @generic]}, @generic="334924eb"]}]}]}, 0x1058}}, 0x0) r2 = eventfd(0x0) socket(0x10, 0x803, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000340)="ee6a01d336645fb05d762bfeadb824f5ad175e7835b08021b12f1c57a8196e072a32ae68d5a70011d0374e7fecee74093559074d74b24fc069481f90e54e2ae0dd44fc5e4b156ea2a663a479add9b2f473ab7edeb0b81e3ec551d06941f72619cbd03b14a38c582b5d1979bc2787467dd9a891900cedfbf5140be33f7b766c67c8f9f1aa26860d") ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000100)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)={0x4, 0x0, [{0x6000, 0x5f, &(0x7f0000000880)=""/95}, {0xf000, 0xef, &(0x7f0000000240)=""/239}, {0x0, 0x35, &(0x7f00000000c0)=""/53}, {0xf000, 0x35, &(0x7f0000000a80)=""/53}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000200), &(0x7f00000007c0)=0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) read$FUSE(r5, &(0x7f00000042c0)={0x2020}, 0x2020) 38.654849061s ago: executing program 3 (id=3853): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x7, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x68, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}, @acquire, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) 38.639950652s ago: executing program 3 (id=3854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000000180)=""/156, 0x9c}, 0x400}, {{&(0x7f0000000240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/111, 0x6f}, {&(0x7f0000001340)=""/168, 0xa8}], 0x3, &(0x7f0000001440)=""/84, 0x54}, 0x1}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)=""/152, 0x98}, {&(0x7f0000001580)=""/160, 0xa0}, {&(0x7f0000001640)=""/19, 0x13}, {&(0x7f0000001680)=""/12, 0xc}, {&(0x7f00000016c0)=""/182, 0xb6}, {&(0x7f0000001780)=""/230, 0xe6}, {&(0x7f0000001880)=""/212, 0xd4}, {&(0x7f0000001980)=""/28, 0x1c}], 0x8, &(0x7f0000001a40)=""/15, 0xf}, 0xce51}, {{&(0x7f0000001a80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001b00)=""/253, 0xfd}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2}, 0x1ff}, {{&(0x7f0000002c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002cc0)=""/44, 0x2c}, {&(0x7f0000002d00)=""/35, 0x23}, {&(0x7f0000002d40)=""/128, 0x80}, {&(0x7f0000002dc0)=""/224, 0xe0}], 0x4, &(0x7f0000002f00)=""/106, 0x6a}, 0x4}, {{&(0x7f0000002f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/120, 0x78}], 0x1, &(0x7f00000030c0)=""/5, 0x5}, 0x1000}, {{&(0x7f0000003100)=@nfc_llcp, 0x80, &(0x7f00000044c0)=[{&(0x7f0000003180)=""/212, 0xd4}, {&(0x7f0000003280)=""/216, 0xd8}, {&(0x7f0000003380)=""/45, 0x2d}, {&(0x7f00000033c0)=""/4, 0x4}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/81, 0x51}, {&(0x7f0000004480)=""/48, 0x30}], 0x7, &(0x7f0000004540)=""/57, 0x39}, 0x2}], 0x7, 0x21, &(0x7f0000004740)={0x0, 0x989680}) io_setup(0xa, &(0x7f0000004780)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2, &(0x7f00000047c0)={0x7f24, {{0xa, 0x4e22, 0x9fe, @mcast2, 0x1}}, {{0xa, 0x4e21, 0x3, @mcast1, 0x4}}}, 0x108) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f0000004900)={0x2, 0x5, 0xfd, 0x8, 0x22d, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d3, 0x5c, 0x1, 0x23, 0x2, 0x20000000}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x18, 0x14, 0x10}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "855f55cc41822a1a9d734152b07d2b1c3c0ad71a91db13f3a7ae52c5fbdc68b3e359228f7ff05faa7b3fb771159133c4d90aff8f1a5394204fdb096d4d7bf1eaa7346be456d481c472723e029ef61e42bbd17e87af5fdc1f51980d5c83283ee1d0964983f15c846b3dcaea55e0c3455fcdfef8eb42623d3c18e7021880df96a7e968c874322dbb357750c36258223545cb93436c5c688054ec908601900be50212c54f6a425de99418d8c1d361e05ca36eda548276155c9adba3e2312267031a54b3e94a41f76e0b130bab155cc8b42a99914d05012cc7ee169b0325f72b72fb5705f9891ac192d842a4c9b4b6b3c0c72773ce0c5d6018d18612c3c6b47e87a8dce1d6a4d5f2da5c8643ed403ad8d1f6b9dc9458dba55f27835bf1561bd8c0e81d9f9b30f2f7703d47d92b59f1bfb58cea65da725e60ced784e664a11fb9d36fc4a1c651969ae903b2c87846165329c5c12aade93fb39f549e270f09c8e0ca00ae94e91cb5f71de1e9feb5d515d49f3e11a2c455bce0d7ee6981e2a1f4af7b0d8499f548e3ade8c792fe0ed77c8c23b3bfa25ee832017c0b9a94b40ef44e78b647beac954836aa2b5e8719f312e4876e00842815eca98ad5482c088f35f2f3886df8f7befdc6576976b0b3b228874adc7cacdcdd7e0591f1fbbef2a2e86f1b58bf3916f6634f597edf8eeda06ad40012ecf2b617a86e4d22f4d536def5cd48a34ee2e6f2aada36858dab06a08061ea138571201c7a6e03c96b7f447ac6e6857d15ff4c09dacc96d3d5b1a9ae9bc187c5139165fd5b7f91d9ccce2bac81c1c889dc05af892323cd93e3d02efcad7cc1e4014cd7ae57e3ffd16fc1d3fe67a938af2417f6ee6c6acd3cc7df7ac086f3fc060a86af7bf8c8ebc48f3bc3b1b17d888297333144451c8b532d21f2f7332873551884290f9c78cd38a39c6c5c536d76cae82a86b5bcb3c6ef7ed996530412913488c6455bf52555fbc36be49c1c51c6580449071a717015c8a03382e9527b52c18766e339213a026f5179c93392be2e334444200f0a3a3a0841be214bc41db4e7eb02a6735fe4a3450f66907dac50d613d73b5df875920365fbb5a898bf5170b67da2645c07077511296fdc2908837b3fc66ebb6213e97a16d51795a1427a111f0e63054e36a1baac6ed9d7a1da0dbddeca0c1a80bfee57d37e9583e2604189effcaa120de93cf553a5a797e27b34249ec6d7f1ada1314085145d020dd638a0f18cb96fd294cb925198b936969847dc19a6a6b6a1726806329eba95b570670972e871a590a414f3103992c212b0079738f6ded5c0aa867b80001ce382af7d3238f59514c6685b0864178de25f33cf123fc972e3fa5312063ff97840f971bb8fd7fac99fc4fb495e7e4983d57698ce89d75a7cafc7e60a01956e5f5045c0b572edd5a32d53108746d49cf5cd169a3dd4fca59898eea9090f01cd285aa36234bfd697005149a100684b920345de8bb2dadeaf756161235f70ebc2dc2205b05260f8eba24b3a67a5da75d5c7ba7d105ed2d0592559689d8f209a3a5c794275da20aad18024c3ee0c104ba8b57378afa8e4d7d1e29dbce720c182ffab4718446547a910e6f46b1ba4faac0559d8c9f45cb6b5f1d8c2499e2a9e67034267d158200cefab0ba312210341d201c967167739f0e67897fac9b372a7d7e0678f6f8e72eb9884ce8d2da4aa57eb41d41a4a2ce72c5750eb8480303698cf43914e685230d51dc578eddbc33fd7957abd2af276f93d270b2c0ee4e0869c8ca03c7a089e0c24a15b848c4c40b442a531dabba4b237805a185c58e907d776c4ad3349d2282b725dc2ebf48d14fe04d36db1c576f4288cc4209f1ac2bab7c8087f14ed9859dd73614593ae829b25cfc1658b10b4c4df86a43d0cb25575a2ad1b34f7127e9bc545bed3ff98b84d41d53000cbd926924ceef8e52e799955f1710b01514d33ca205f627a353fa4c45d32ebf2dbd54f9bbfa40e17cc48075596bbcfc49afb1a44057bc518f626f9eb58d60d40dae341df15fed7fcc58b620178d6c06784abc8570029ed908aa5e405a9c54c7e784a0aa3b211b170757b2e5ee4306c4944e1f183ccd9b810bfbe194bc28831897a28e6af2f4a7cc37c1a6044c972755010739a5a806c2598b0bcb3f9d496d51e624e2b1036441a7f304536d2bc3443c1145d6b21e57075f02c22c1450f3b8d5290927ca13b6a3bcfa5e548a01a3efe4badab363184ff868ebf63150b1935128b548b8567e2b4cedef55b958c9dbb3d21b5d0d16a36cd5b476a5fc2dcbb764a11020dacbc70c1ea566bee42c15c42a3595a6e3b5a522285f836781a99bd3d040f472fd8e5a5ff0fd7db9763043449f4c714e185a1fbb890b16306b0ad2f0c90977e180c7916d5d5eb725ec3880bf21169ba1c581cffbfcf5820897a6e12c47f75dbfd5b713cd8fbd02d478c05c72bc4f8c5908e70ea5c219864e197d3599035c6210ed64d3981ca90d3085c43ea298c73f04b8006bc1ef587668f3b63869b733fb826ead44b66e4bd93797025a0ab773dadd1dd9efbcfc8e90d5de9e02aa87617dc5e89534e3cc06175ac53f7dddf7f1fa0f8e5ac775830b3bd81a98777b0b8bc76a021306eab0bb39ca4449ba8a5d54e065d2a918b8310536a429b4acf42ec17dc5a8308eb91e5b89f54679a5380247e5bd436d82ecd83d64bf90241c62fb0541ed06364e716432412f933d162c5bc18fcdf89b6590744a2865e3289d3f6ae80d8c9a56527a0f69c63b97c525a4b4088aafdb3d1bed5a8d4842bac045e3cf3dd43e0afa40af7a5fed1b9de6be01ec6d0c20ec87cd09e523110d20bea37b21da0cd142c4e14f974ede06c362d8e2954d0c13c52dbc9ff9ac0b7ccf3b51af76a6656322a9505931bbb13c990b43a4603f8ea817eeafd38f76f62787f19eaed2aef87b87590afad3f3e643bbcce1097f2bbf9cee1552c074d801f8ef816800e68f94787a814f6f31caccd1ec672f9ec01c92f10faa29c9444bb6f4f9d19327dc4389d326d60d6a6034098a015587e12040075487c6879618111db619977d5e1d2b410d7757242699d29bc93991c7fc47b5dff5401e8646ea4038828054c07745110a482466b6b27e53afd1cead04411176451a934dc3283e760fc269537c9a55d439557b92392a92c14c3c6ec094701954d4b7e3b01c790efdc77ec539ca8e42d0e009bf36d7bdf762dc873d640332c7a328253b62806a5aad7f4901966391fc0d3e8ceb568b09eea0d1f7a55ffa82c612483af4f2955d5eb3b448d37a279babbdff646f2bbc2f90925b6ef7d4645afe5ef80152860ecd145a420fb0e165f465d13c9cf1b1bd7f79820887cd2e2400c815944c78d6433ec7a823b09824c0e6d2bbaf019e545098152d835df743ec5a9bb720a7ad0692f9e8f109e82813f01f529e05ffe9bcaa53ac2f7be2e587656550072adf584edca731d5bab651a11cd3880f1fd218470946f2140a8ccc4adf1ddc2576dce14d2ef7b7a4f7c9966b9123028f4bed4b21f6d173b87b463c0e9b8ed23b817cc2fe7f1167f770dc507b239f856b41daee323170bb402d5aabdb56264fd2aed89524d74c082fc8bfbfdaa36e1ac52fb27b8ddc8fc410d9070e374b27aa76bd09b9f743e59736e38cb7fb33b9b09a40533545a20fbd4bdf523f818c03f8a7eedbec2c35a152a1af8c2d9b5f86250b304ac643d5960be261056299d3fb4161f501baae51a71b74fed7c31ecdaaa73d88c6f5d93f84ea78e4bccbdbc931265163b6f04e27e00f0b550b4f95f2bef99422a7f0b80176fddf34b5b5091d7f3b022af4153c7d2f2bae185b645d985bf4e48f9560a7be0e61feb7971d814fece01af02f7c32105d82a909046e6f62bb6156089db2eea78f2bc13f091f2e5cc17319e3c3b3d2c80ef2917e84eda95ca8aa234908d3e72518f403b0aa7e28777b45555081f964791bc0f3d2adbf7c529b375a1ac34f4be745afa801876cb41bb4e45fefc2f04ea61b05d3d3326a8ac1910bd3dc289bf321e6a6d363425d4c7b4d1e8542240351bea10d74ba948bfa1fdee4d8a1ae12c3ea3d043f28ecf020de17295d206bad56be20337b3b72abd62bc0087feed06845b84057ed7ca427cda193bcff687db98b368e48aeb1b836f36774ef15b5d2d2ac7dc8726a7a4cefa3e0f11de1a5852dff7515c14fdef5a71b0d8350779f2ca5d2abe6a12425e579985e50718930f87bb3e675b695bf4fbbde7812a89f1c9e83dcca257b160700584aba0e6281fda5a455e8907025b9671d1f3daf5f8919cd805e26643e6e74641c431ebcbfc502a157a09e56feaeba125b8afbff7a653778d8f2bb6b2fcb70aee88e9a2ec0be370c006e439efa976197e30de71e44304d2ae4f72029d3712a1f30f609a3dc8d409f171b1489ee17bfb3cd70dbf0b85060306644c279f12adf667fe2206fa183b136d2ea0fe25cccfed8b7939ee8ec491fabf989d682410c8239a9e70dd646b579a8d7ac2b5f773b7a24af6b87622dfd42adb35b9ae3da17f0e149b2f7601cddf1920f084dc06a11e6a7e83f2a160c4e3c6bc9039581083245418f7b164ee5557949cb0779c76ba00bf9044733059dfa5026d1bb38d0ee9b528b2b850f9e641c460cdcabbcd930c01146a65af9a3929529fe6da5cce67fb4eb6e603a8e68a18a7d2f09fd8d420256c9e8b1b4af03913f6a634905bef055a635c7939b77ec1a7a94b3baf9503e1438dfdf0e5b49fb84c94be9fab7fd6f6039a080c64fcf5a382803f0fdbd0622cb420607c89daea3d7159624864c34089d9eb22dec44fc215618e259a4df50936dc3d89ed2d27d67b9cc570082ba3fbf8a5e546b9cc3588348cc1c1ffaaf94ec56244eecb46b8809aa12de15abf992c232ea8dc7712aa895f7702155ff720c986884bc8ceb5991ec48ce8c0465e935420f92fed6d8b65653633cb9d9b28723c90c33a4f127bb3b1ebed425e18f8347c1b4d84423c6a5daeff5066809b20849817fa053897e82f9feb429ef28b94a742f33ab1d00ea874c0795482a57edd2cb9e264eba82896dbdded030a722f1b5e42e76383c33710005108cd227d6273f8b659604f5f1a60bae108b37091880851ecb441b492819b859ac7d827ee03fd3586d951990bd9ff3ef2ed341f5845f141134913fa6225ad75a5e78d9c6edc5149322b747b11db8e83466969d81cb5c503a805ede62c12d6d014e15e0c8677ec6593a56fbf6476973e1acb395f701071ac9685d80338fe2ce1f6496fab1f530c08370e9e2ae5b484d2b60f657a0879ac1ebfdc347eb3c6f0bc9336ff9f55efe65cb921efe7ba67a67af42ac72e8a353990964d58e7d4ee8258171c4388d0d8dbad2cf0d2f0ce38f4e17f8ed37a42b654cfc13a960819d4c75f316dca5cbee21071ade411a52f530149d5855c1a3e35b7363c3c07b9049fd9faca324598a722a7b8d5fce7231308aa405a30adcf8f98160006a00e8801186b5aa122cc143e5c44d5e4f9b6551ef73135bfc41a770dc960cc9c822708800f81e5c80b94070ff81dc66138b5b2857d6f9daeb8dd34d1ff37414f8d8fd1f44a920d44ee12b413cb4ac9e4ec92ebd611c6758860751dab31f6c35b963f78cbc8738de19d4b786f4be0d3d94ba63880c2d8161e68a2d1f383174d9111fac108a90347e7179d8b15556eb5559b1abe6ce0edc63730fc6fa88093e2555e0635a0879c2eae81eb882d342f8755f89146b21ba702f3b94a24e2907107d05a99af67e1e37d40f690e8d93ad71e5649865ed7cf6de523bd558ba21c766491a614"}, @sadb_key={0x3, 0x9, 0x48, 0x0, "50f9b667a8f4c6ff76"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb5, 0x4, {0x6, 0x32, 0x4, 0x6, 0x0, 0x1, 0x0, @in=@empty, @in6=@private0}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bb0, 0x20, {0x6, 0x3c, 0x5, 0x2, 0x0, 0x0, 0x0, @in=@private=0xa010101, @in=@multicast1}}, @sadb_ident={0x2, 0xa, 0xf, 0x0, 0xd}, @sadb_x_filter={0x5, 0x1a, @in6=@private2, @in=@multicast2, 0x9, 0x10, 0x14}, @sadb_sa={0x2, 0x1, 0x4d5, 0x7, 0x6, 0x50, 0x0, 0x1}]}, 0x1168}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000005c00)={&(0x7f0000005b00)={0x1d, r1}, 0x10, &(0x7f0000005bc0)={&(0x7f0000005b40)=@canfd={{0x3, 0x1, 0x1}, 0x33, 0x2, 0x0, 0x0, "b06bdac5dada661141770a2e85f5ae213156b6b9716f0b12b5921964bd29dee32c5d96e8cf8194d7d8f1544b6bf4ac45fd8ea939de0758afa696e10c9c0181f1"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setns(r5, 0x20000000) getsockname$inet(r5, &(0x7f0000005c40)={0x2, 0x0, @remote}, &(0x7f0000005c80)=0x10) mount(&(0x7f0000005cc0)=@loop={'/dev/loop', 0x0}, &(0x7f0000005d00)='./file0\x00', &(0x7f0000005d40)='romfs\x00', 0x28080, &(0x7f0000005d80)='\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000005dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setxattr$security_capability(&(0x7f0000006000)='./file0\x00', &(0x7f0000006040), &(0x7f0000006080)=@v2={0x2000000, [{0xfffffff7, 0x2}, {0x1ff}]}, 0x14, 0x6) fcntl$setlease(r3, 0x400, 0x1) r6 = socket$inet(0x2, 0x800, 0x1) read$FUSE(r5, &(0x7f00000060c0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000008140), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000008200)={&(0x7f0000008100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000081c0)={&(0x7f0000008180)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84040}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r8, &(0x7f0000008340)={&(0x7f0000008240), 0x10, &(0x7f0000008300)={&(0x7f0000008280)={0x1, 0x8, 0x7ff, {0x77359400}, {0x77359400}, {0x4, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "799b1234f294acf7"}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c051) ioctl$BLKCLOSEZONE(r5, 0x40101287, &(0x7f0000008380)={0x6, 0x8}) mount$overlay(0x0, &(0x7f00000083c0)='./file0\x00', &(0x7f0000008400), 0x18e4003, &(0x7f0000008440)={[{@xino_off}, {@uuid_off}, {@index_on}], [{@subj_role={'subj_role', 0x3d, '&-\x98a'}}]}) fstat(r0, &(0x7f0000008480)) r9 = accept(r8, &(0x7f0000008500)=@isdn, &(0x7f0000008580)=0x80) shutdown(r9, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f00000085c0), &(0x7f0000008600)=0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000008640), &(0x7f0000008680)=0x4) 38.438374612s ago: executing program 3 (id=3859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000240)=[@request_death={0x400c6313, 0x2}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 38.35549538s ago: executing program 3 (id=3861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 22.35077755s ago: executing program 35 (id=3861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 5.374819583s ago: executing program 0 (id=4212): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ftruncate(r3, 0x309c000000000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xeffffffa, 0xb, 0xfffffffc, 0xfffffffc, 0x7f, "db5909003a7f000700"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000059a000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 64) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x171943, 0x0) readv(r6, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x400001000001fe) (async, rerun: 64) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) (async, rerun: 64) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r5, 0xca639000) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000300)={[{0x0, 0x3b0b, 0x80, 0x5f, 0x9, 0xb4, 0xf7, 0x4, 0x7, 0xbb, 0x0, 0x8, 0x1}, {0x5, 0x2, 0x1, 0x1, 0x10, 0x9, 0x40, 0x6, 0x10, 0xff, 0x3, 0xce, 0x5}, {0x75, 0x2, 0x3, 0x9, 0xdf, 0x0, 0x1, 0x7, 0xcf, 0xfb, 0x7, 0x4, 0xfffffffffffffffb}]}) 5.1917436s ago: executing program 0 (id=4214): r0 = timerfd_create(0x8, 0x80000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) clock_adjtime(0x5, &(0x7f0000000040)={0x6, 0x2, 0x0, 0x9, 0x4, 0x7f, 0x8000000000000001, 0x1, 0x5, 0x76f, 0x3, 0x80, 0x400, 0x5393, 0x3, 0x8, 0x3, 0x5, 0xffff, 0x8, 0xab0b, 0x9, 0x9, 0x2, 0x6, 0x2e}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xd5a, 0x4, 0xa, 0x7f, 0x8, 0x8, 0x2, 0x0, 0xfffffffffffffffa, 0x7fffffff, 0x0, 0x1, 0x7, 0x1, 0x1, 0xd48b], 0x1, 0x1000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000280)={0x0, 0x1, [0x4e3c, 0x0, 0x0, 0x4, 0x5, 0x814a]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x4, 0x40010, r1, 0x0) r5 = signalfd4(r2, &(0x7f00000002c0)={[0x6]}, 0x8, 0x1000) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000300)=[{{0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x3}}, {{0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x1}, {0x1, 0x0, 0x1}}], 0x40) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000340)={0x80, 0xe}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x180, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x95, 0x8, "7cac345ee5853ad51aca7cebbd69e1f90aa2eafeea073d0fa2c6216e85e9072071bba5bf34b10392e3051c5cdad7e09c3545d0a942280ff043e0efb0423ab714d8af296fa6a685558939ea648c84a6f405f88f5c524fd2b6694ea7e3747423ad9d5b31dda3db2a9e6684a1db43612f6f10f7605535e75c49fae76a731ce9e128ed0c8ba5866d2777a79e22caf54c893df4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x82, 0x8, "b992b35a072c68fef8c12fcf93d0dae3ff3491731cdca6e9cc4200d1ca427efb88fa861a0d7d09420df97444d2c589443aa6b44062e9b384b7021b34b75b08029a6d51da4ef8303cdab19540744c78449ebd0d9636e924005ddb5f47e0e2fa6c78e84d9f55addeb643eb0193bdf2f20d8bacc748fca6805845e8e63f8142"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELOBJ={0x130, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x66, 0x8, "9cfaee485bc605b2fab061baf849c4033a2712556c7a51eab4df279e89823ebcc9bbfa4156996dc5a224200b98d7171a3510f625527aa4ac024f9831e2905f063f09c84bdad6d89ab82d98a8a1208833ddfbaf02a0418652e9a6357bde52d6c357e9"}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "fa4921c9a5d5ed4abe4eebda8d56b520e6d5a46aeb878796d870ae753acce2c886318fa4bda16c297ca472c10be210b1f85e8b47265d94af8b1621ce325b1c9370d79dcdff2c22dfce34a2587946812f4fd5dd35911f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0xd0, 0x8, "2344965ddb1b252e145d40d978ce3aae18a41b600300863963fe4345c015a59edb1ac3489a3d239312c3d06a7f793380f781d0d2f18008146c277aaa45833ba39edb05fb1de1d6f6fcd406017f8a73d37a63b766a70cb37b76e2ccff2d43fbcc940c6bc0fa0196bb3946f0306249c5f3ac39123de40a3f924fc171f1bfeb70ca3ad4fb43769f5eec645b2f6884903963786b8c52de9e1dd59c5a398b96d1269f64eaac740591e6c510e68ad2a724cc4660f28ce7ec10b157a58df6f2ab4b086e30d84378741e028abcd60415"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWFLOWTABLE={0xcc, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x51c}, 0x1, 0x0, 0x0, 0x24008011}, 0x4841) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) mount$overlay(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x90004, &(0x7f0000000c00)={[{@metacopy_on}, {@verity_off}, {@verity_require}, {@verity_off}], [{@subj_type={'subj_type', 0x3d, '-^$'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', r7}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/self/net/pfkey\x00'}}, {@obj_role={'obj_role', 0x3d, 'ip_vti0\x00'}}, {@subj_role={'subj_role', 0x3d, '{].,'}}, {@uid_eq={'uid', 0x3d, r8}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_user={'obj_user', 0x3d, 'syz2\x00'}}, {@uid_gt={'uid>', r9}}]}) lsetxattr$security_ima(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80)=@md5={0x1, "3ba8f1fef76a3c5956aef4d80de0c815"}, 0x11, 0x1) statfs(&(0x7f0000000dc0)='./file0/file0\x00', &(0x7f0000000e00)=""/103) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000e80)={0xc7, 0x0, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x13, r1, 0xe53d6000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000f00), &(0x7f0000000f40)) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x41) 4.959008222s ago: executing program 0 (id=4215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x34}, 0x8) listen(r1, 0xb4) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000200)={'veth1_to_hsr\x00'}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0) connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000240)={0x80000000}) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 3.831515789s ago: executing program 5 (id=4219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) (async) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r3, r3, 0x0, 0x24002de8) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000004800", [0x0, 0x3]}}) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x5, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000004800", [0x0, 0x3]}}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.721103509s ago: executing program 5 (id=4221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.555868134s ago: executing program 5 (id=4223): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2000063, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80000, &(0x7f0000000480)={[{@nofavordynmods}, {@name={'name', 0x3d, ',-+'}}], [{@euid_gt={'euid>', r3}}, {@obj_user={'obj_user', 0x3d, 'cpuacct.usage_sys\x00'}}, {@measure}, {@uid_eq={'uid', 0x3d, r4}}]}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) dup(r5) r6 = gettid() tkill(r6, 0x1b) timer_delete(r1) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r7, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r8, 0x80404518, 0x0) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000580)=""/140) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xc6225a99193a0f7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3.472059133s ago: executing program 5 (id=4224): sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r1 = open$dir(&(0x7f0000000000)='./file1\x00', 0x42, 0x126) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchownat(r1, &(0x7f0000000040)='./file1\x00', r2, 0xffffffffffffffff, 0x800) (async) r3 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r3, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) (async, rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000380)={0x9a5, "aaa41a472088c4ce2d3878ce1e93dfdd7eb8190756adea8b433e4f053d616807df1c65c7d340421a5dbafec7c320f7b9453d70e62165eb6ed1d7ab5744426eff2dbfa501ace70bfa599c8ce3f62ed19b86fb878d7444e764b4922c4a3c84439c4b88d460840da4c9e1c16a43d6c28080473c6d52a33eba660a01d6324e44af2ac2cb51f08228c6e9788cbb9afc7280132d36ce779b647d73733d7f7b0ddf49a2f8a2d301b2213515b6df20d1827b871124fae0a01baa787570cb4d7ee69663f147dfd7d67c4d617fcdf6462931af423beefd138c222f019d745a2dbfe636da574b4990d15e434d96a2f8aadcfe549cf9904f170df52e6235b6d51650ec0f1f6e871f061ed7d09476f0180f010f6b096148f01127d5781cf0a2a98d905e578f0b2d5c96d42ce9b78e3692820562714b43b39cdf446d4ebe44429e74c9296b8939b96befefd6945ecbfee0f149726af9f28b6e161946c3184e648942fc58947cd8962290ab64390656ac0658a575da2397d7857644901c8292ea5f3d0878dcf8f535a17e9aee082270bb640e18d252fdec1c215088feda602597116b3a830992acf6f0236b1a22e9ed5b83616f15fcdbd3c55442d746948b2fefb73f753a1dfefcf1a948331633c356123e36418a2d7e3afff1e9c01cd7e1a2df949166a761861377fdda0a44d3470dce2dfde9947d1e43deab6e203e488447d64c513108fa6f2da6e19a60733356200b295b70fd8ec964dd944d266e6b77218f0019dfaa1e4e1380277fe1303b9c600f85df19e94974f91b9df7c8006137c08d5c0b2419a1dd1d5f2534ef49840d360b20c951f8edf9b3c999e51f831d75e3e8a9be5de99415a397a6b637a20a924686dd58608f3872fa90b029e7584fc44995fc0b9606dde102b33d4d4984d337df4de92601296f953e32a588a000d977f44766bc535b41512bacc222fd6f09d5bac123f5626855a419a87d7d98b001879d7f88ce9ef35898275c99b4c7e4ea5e6df05afb1537bb9d45395efbec71d19ace57e87184863957410551e16be9e3c0592f9a2e8ed82874b34a4575756fc147bb4b4da90ac9dd2016e5b2ad2041745e3b27f61dd3ad8f0b94278781b50beba8c6eb58a84207617f1143b46bca74d0ea4517d6294b8eed593c1193b3a21132d910bb3d45c54fc4a1c043ab6f550b4ef8d9b837380979b69b6e6c7633291dacb9c40c2270b660175c81d3cfb7bcf0179465fbf8abcdc8f3f55e94a8cd8cb0befb34ef146db6b81f43a057278455d010ddfbdc17016e075221959f9381ba974317797ec2b3506cb3a94faa22945e355fa476d438b02ebe5434dd99c3db69c188583a43041f4df6e52d3b3b3928e2d2b65734a4d82e437917ef70acd2dd45e4677c48cc2e6373f130b1d3e6b7f8eaf494415533660144d78426736256d9df464a09586b9ad5b2976bd46aa36eb18f9859afa23facbcbe07a4b1e56b2889f3b5cda34ef2666c58f0ab8cfc3d6fba98e9cf41bb04219a326f869b7f032c7488a15573cad9a93cd1ac1400d139eb9ef7765840a73eb927da436d077f6bb1ccae9e8f95cf2609684104e9e3424f06d7a65d74cdc4ed67926e442a7c391621f626286739246515d756eb160676851389fec74c1f0abace2d57002c185f3d4eef85b708d06a58e73c1b0fe56f80bbd383cb3ea57a229a4813ab3d666772e98f42187caa428d20929699c3d4f7cb8450fb7e7453cedf179c64af8569e0beeb652081319700ec30af6e35215b1aa3adf91c62181b47ca32f32f8ce3876fe3796f57f9c36c8888bcefba5d8528afd236855449e91c04ca7b61fc3d073c847ce82107619120f72e2b0d4bb0169fcb0d7e20ef6edd133b94a8ed7ca3138ef0c55b395b2b69839e99a376a6206bc6c7a1d1e4985e6b62afa264083714f920c84b16af600eb9bd138bf5e7c3f0b86384ed3118d10e22fccbbdc543dd15d1107d0bc9d1bbe291063ab81d95aa99cfc43cc0ed81eb6af713ac51fa8e6066434452180a39b69b31a05ddb47ff947c1ca1ec5b0bada4fad3b0e188a291f1b5d2ab53dcf7eefda178f86986440afe73c29ae83a42a04b3330100f3e85cb605e8cb9328c7451dcab3c6f88bdf384531dcec90937e570bbf1920f93dc04321e768742f0b9362fb3b4a63094c58ce5439c3f8cd719060dcd8d5868e25cc16d1e78b1ba06499611ee15d2415648ce9baef3233578c0b51103d917e8549b075a51c4c7061078e05c65d3d55a5b08c20b616ed4c462d77d542450bfabd9d100a5ba7da4913a2af8abc4dfa975ba1b3d39bbce7fce8b6cb9c73ff967685f5238b1a6cb946949ef15bb0c86dbc54abe24329bcec05d0dbb7b8369a4b2d3c13fdab8c8191f6b433fed62098cc06add86fa36600c7b44158c03a9312cf372489b946edad8ea2421580cd75b428a697f08920ad2f59eb5eda3e2ce945a1545bd57eed779439e3fd4fe5b38c7749a693475535d214b75932fb89ffe50a3f75c79428c21dc5449e7294786d4f572f9627aebc3404d2e5cf7c2ac8dbafaf25920522e0da0908102a6ffc0a8492549379bf502ef5806e24ca9868a99918f6269a0216ee5334b345c03f36426d693357117d5854b768f721fe2a9bd71fcbe7eee1c248efbf29744f543a8db46d54de7bd483395c1ba0240a6546470b04cf4aefcae3f367c3977c30b044b748ec029d0195f978b608361bd6a6077c80f0529e99a175af3aba0d5af5db12368f4d7aed328506d65b580d833e0e70d152485c175ee6f0d418f324a5a2d438f2c3c64b7ebe907fd3d83585f923c6e115271dee57e3f5526454b7020a3051cc1b6749eb126614ffedbec98714907daffc18047a3be8747bb2e04b3c36590c8ac3af1569982445537c142219ef9f6364234f42acec823dbeb1c7cb4f61fd9afd3b99b8b5b72eac2a797390c13531beae14261f47c565a47d97bcd4fb6939b7f35fadc753dccd2f15e15f338511afe653ad8d4e1c8254504f3d9b76aec17b4109be0ec25b064ae83e1b1733f8fd7d1cd5cafe81462a6509fa4f503df32b4faac9dfb829e62c7ef53f60ed22b2c9bf883c50186929a40b86efa9ee5b14729c37ad8572475d9ff44f51f1dfe0d0ea974bf89a1bc19286e7e01216e0a70fd7dc51b1105c0e8656aeaa98b4a7b4b01ca28b9b049f47b5e1f54495a36ef2a23f4fb855e270d7d65c1438a134a77e73ee10112d73c39de4363fa228fd893b4b291b54b19ec2489d3632964ceb66564bf3ea9a655b0e323828cf48cf0cc301cf9881d178e4f0b506c5832a2e37e274eaa94d5c653b6882fe670b8a819956fb34fb192efe93d7a286817bf8ebc2cd8ef9b2c27cb37d5f82d1935284b33eb36cf8d9a0127acc0adca54c188bfefb71a0598480f77bc299ae718098501b2ef5104c0917dd18d04f90e5d9a4245a1944d09c27f5e8137378c1201cb6811c1dc421d5f899eece7ebd719c70b578ef346147523670b6c384a53e3f4c81b"}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r6, 0x0, 0x3, 0x800000) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x7ffd}}, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r8, 0x10) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 3.295390449s ago: executing program 5 (id=4227): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="e635b02409efd220810b50c6115fd2917d3c9beb4578bc6301231e9e8f1e4a4865e3e9fa4757916015cf3553f2ce37739351ce29da17bd13062a9a00fefc9eef096b031853e6ebb2e65121fa659fe1640865c4298bffa9b90c0b4690fda50d7a5218b24f3adf109fa2df47b35269ecf65f48551bc165a84b1be85f75a73829bd5208a12d06917e483a55e27eff5f561efe0fea16068fb7f979075fc4b5fe4c84a6dffe706f18329242d8a3053719cf55f11b", 0xb2}, {0x0}, {&(0x7f0000000400)="1054018c", 0x4}, {&(0x7f0000000440)}], 0x4}, 0x800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendto$inet(r3, &(0x7f00000002c0)="000000005865acff07", 0x9, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0xfffffffffffffc3d, 0x0}, 0x3}], 0x38, 0x10000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01015300010203010902980003010000000904a10000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES8=r5], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008080) readv(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000400)="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", 0xc01) 3.18426668s ago: executing program 7 (id=4229): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) munlock(&(0x7f0000147000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000400)="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", 0x1f000) 3.019789845s ago: executing program 7 (id=4231): setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='sysfs\x00', 0x2204482, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x0, 0x0) 2.9721867s ago: executing program 7 (id=4232): ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0xa}, {0x0, 0x7ff, 0x913d, 0x0, 0x8006, 0xf42, 0x7, 0x3ff}, {0x0, 0x0, 0x0, 0x40000000000004}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffff9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r2, 0xffffb000) getpeername(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000080)=0x80) socket$inet6(0xa, 0x5, 0x30) 2.827914403s ago: executing program 6 (id=4234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0xffffffffffffffd8, &(0x7f0000000400)={@flat=@weak_binder, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/200, 0x0, 0x79, 0xa}, @flat=@binder={0x73622a85, 0x1, 0x1003}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) copy_file_range(r1, &(0x7f0000000000)=0x8, r0, &(0x7f0000000200)=0x6, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000240)='\xc4{&{\\{)#\xea\x1aI}!\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)={0x1}) 2.795395737s ago: executing program 7 (id=4235): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000040)="8630a4d86897204bd559922c4863dfb462", 0x11) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) 2.656281829s ago: executing program 6 (id=4236): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c0000000201010100000000000000000c400000000358000d8008000200ac1414bb14000500ff0100000000000000000000000000010c000380060001004e2400000400038024000380060001004e230000060001004e220000060001004e220000060002004e2100000400038000"/124], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000000ffffac1414150000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000010000000000000000000000000000000a"], 0xf8}}, 0x24000000) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa8700000000000000000000000000000000000000000000000000000000000000000a"], 0xf8}}, 0x5) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) read$FUSE(r5, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0x1, 0x40310016, 0x4, 0x5, 0x1, 0x1, 0x0, 0x0, 0x10, 0x1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendfile(r8, r7, 0x0, 0xffffffff) 2.528074832s ago: executing program 7 (id=4237): syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r0, 0x0, r0) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x3, 0x1, &(0x7f0000000300)=""/232, &(0x7f0000000000)=""/21, &(0x7f0000001180)=""/4096, 0xd000}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0xfff, 0x7fffffffffffffff) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r2, 0xffffa000) 2.401948914s ago: executing program 0 (id=4238): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000400000014003800ff010000000000000000000000000001150002"], 0x44}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0x6c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699d"}) 2.284259485s ago: executing program 0 (id=4239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) setuid(0xee00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100010000f7ff00fe728682e2020000000000000000000000000000fc0200000000000000000000e64001c15611954a000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa32030000020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010200000000000000000000000000000000fc0200000000000000000000000000003c0000000000000002000800"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) getpgrp(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast2, @private=0xa010102}, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r11, 0x1, 0x1a, 0x0, &(0x7f0000000480)) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f00000067c0)={0x1, 0x0, [{0x3c5, 0x0, 0x3}]}) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) io_setup(0x1, &(0x7f00000004c0)=0x0) io_getevents(0x0, 0x6, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000040)) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r14 = openat$incfs(r13, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r14, 0xc058671e, &(0x7f00000000c0)) r15 = openat(r14, &(0x7f0000000080)='./file1\x00', 0x20000, 0x112) io_submit(r12, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x20, 0x1, 0x202, r15, 0x0, 0x0, 0x8800000}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) 2.176044765s ago: executing program 6 (id=4240): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x7800, 0x1, 0xfffffffc, 0xdc67}}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000014c0)) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) 2.144729958s ago: executing program 0 (id=4241): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x3, 0x81, 0x10003}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000640)={0xf97cff8c, 0x8}, 0x10) rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r5 = dup(r1) r6 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_pidfd_open(r6, 0x0) ptrace$getsig(0x4202, r6, 0x300000000, &(0x7f00000001c0)) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6f3d000000007ffbd6dc30a5e243896e0ad0e7c1481a9624477508786e072f7c5a98ac81f6be742ec603ec676efb9213e27d6c91795827fbe4f04cab99c2367037c2f34f08747d5394cc7d6a3f3762defa5825ee4b39d2307fa151fae93282d5d57cdab4b5cdee43512561c569a296b925fe33e659ead982258287dfe47057a0a859b3dfa58c350dea581bbe606072fd7794059b247373", @ANYRESHEX=r5, @ANYBLOB=',k']) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$netlink(r5, &(0x7f0000000180)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x20000840}, 0x40004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0xa00000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r11, 0x6, &(0x7f0000000200)={0x2, 0x0, 0xe, 0xda5b, r10}) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x6e22, 0x40000, @empty}, 0x1c) 2.080924654s ago: executing program 6 (id=4242): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1000007fd) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x1000007fd) (async) 1.940089127s ago: executing program 6 (id=4243): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef69, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 1.91421994s ago: executing program 6 (id=4244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r8], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x28, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}, @decrefs={0x40046307, 0xfffffffc}, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) 292.899493ms ago: executing program 7 (id=4245): capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x6}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20ae5408c600e487, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0xb5, 0xa9c1, 0xeffffdff, 0x0, [{0x0, 0x80}, {0x9, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x44}, {0x2, 0x90, 0x4, '\x00', 0xff}, {0x30, 0x2, 0x5, '\x00', 0x3}, {0x0, 0x60}, {0x0, 0x85, 0xbe}, {0x0, 0x6, 0xd0}, {0x0, 0xff, 0x0, '\x00', 0xff}, {0xc, 0x4, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x4, 0xe, 0xb}, {0x2, 0x0, 0x31, '\x00', 0x3}, {0x3, 0x4d}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {0x0, 0x3, 0x1}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x40, 0x7, '\x00', 0xe0}, {0x2, 0x1, 0x7, '\x00', 0x6}, {0x80, 0x0, 0xe, '\x00', 0x5}, {0x8, 0x6}, {0x4, 0x41, 0x0, '\x00', 0x70}, {0x1, 0x6, 0xfe, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0xf4}]}}) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 0s ago: executing program 5 (id=4246): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000001200)=ANY=[@ANYBLOB="b0000000000000ab284dc9a95095f54e0800000000000600809bb7dba42f"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x11, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup3(r5, r4, 0x0) read$rfkill(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x212001, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) kernel console output (not intermixed with test programs): 8321][ T36] audit: type=1400 audit(2000000126.044:31933): avc: denied { create } for pid=8224 comm="syz.0.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.653839][ T36] audit: type=1400 audit(2000000126.044:31934): avc: denied { create } for pid=8224 comm="syz.0.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.700338][ T588] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 333.709036][ T588] usb 6-1: config 0 has no interface number 0 [ 333.722503][ T588] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 333.734303][ T588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.744595][ T588] usb 6-1: Product: syz [ 333.750797][ T588] usb 6-1: Manufacturer: syz [ 333.756371][ T588] usb 6-1: SerialNumber: syz [ 333.767033][ T588] usb 6-1: config 0 descriptor?? [ 333.805707][ T8232] netlink: 'syz.0.2534': attribute type 4 has an invalid length. [ 333.820893][ T8232] netlink: 'syz.0.2534': attribute type 4 has an invalid length. [ 334.002187][ T588] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 334.010271][ T588] usb 6-1: No valid video chain found. [ 334.020627][ T588] usb 6-1: USB disconnect, device number 79 [ 334.030838][ T1089] udevd[1089]: setting owner of /dev/bus/usb/006/079 to uid=0, gid=0 failed: No such file or directory [ 334.266941][ T8238] rust_binder: 1697: no such ref 3 [ 334.274994][ T8238] rust_binder: Error in use_page_slow: ESRCH [ 334.275020][ T8238] rust_binder: use_range failure ESRCH [ 334.282453][ T8238] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 334.289924][ T8238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.299676][ T8238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1697 [ 334.507399][ T8240] rust_binder: Error in use_page_slow: ESRCH [ 334.533154][ T8240] rust_binder: use_range failure ESRCH [ 334.541797][ T8244] rust_binder: Error while translating object. [ 334.547898][ T8244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.564647][ T8240] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 334.575381][ T8244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 334.584928][ T8240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.598097][ T8240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1697 [ 334.734178][ T8254] rust_binder: Write failure EFAULT in pid:90 [ 334.972995][ T8261] binder: Bad value for 'stats' [ 335.199029][ T8270] 9pnet_fd: Insufficient options for proto=fd [ 335.209116][ T8269] fuse: Invalid rootmode [ 335.222424][ T8272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8272 comm=syz.3.2548 [ 335.241720][ T8272] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 335.251913][ T8272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1704 [ 335.429828][ T8281] overlayfs: failed to resolve './file0': -2 [ 335.547855][ T8286] rust_binder: Write failure EFAULT in pid:1709 [ 336.111893][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.143180][ T46] bridge_slave_1: left allmulticast mode [ 336.151702][ T46] bridge_slave_1: left promiscuous mode [ 336.171148][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.176488][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.188598][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.202522][ T46] bridge_slave_0: left allmulticast mode [ 336.205246][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.245531][ T46] bridge_slave_0: left promiscuous mode [ 336.257199][ T8294] cgroup: fork rejected by pids controller in /syz3 [ 336.266891][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2559'. [ 336.272842][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.357970][ T45] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 336.492548][ T8342] overlayfs: failed to resolve './file0': -2 [ 336.507448][ T46] tipc: Left network mode [ 336.604726][ T46] veth1_macvtap: left promiscuous mode [ 336.614404][ T46] veth0_vlan: left promiscuous mode [ 336.705992][ T8351] rust_binder: Error while translating object. [ 336.706050][ T8351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 336.745924][ T8351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1745 [ 336.988885][ T8363] tipc: Enabling of bearer rejected, failed to enable media [ 337.035500][ T8362] tipc: Enabling of bearer rejected, failed to enable media [ 337.212690][ T45] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 337.383669][ T45] usb 6-1: Invalid ep0 maxpacket: 64 [ 337.390409][ T45] usb usb6-port1: attempt power cycle [ 337.689151][ T8370] input: syz0 as /devices/virtual/input/input53 [ 337.757500][ T45] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 337.803425][ T45] usb 6-1: Invalid ep0 maxpacket: 64 [ 337.950209][ T45] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 337.966731][ T8374] overlayfs: failed to clone upperpath [ 337.976099][ T45] usb 6-1: Invalid ep0 maxpacket: 64 [ 337.983199][ T45] usb usb6-port1: unable to enumerate USB device [ 338.045933][ T588] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 338.220024][ T588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 338.232764][ T588] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 338.247920][ T588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.265163][ T588] usb 4-1: config 0 descriptor?? [ 338.283905][ T8372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.612408][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 338.612429][ T36] audit: type=1400 audit(2000000130.771:32503): avc: denied { write } for pid=8398 comm="syz.0.2580" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.631252][ T8399] overlayfs: failed to clone upperpath [ 338.646805][ T36] audit: type=1400 audit(2000000130.771:32504): avc: denied { setopt } for pid=8398 comm="syz.0.2580" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.679707][ T36] audit: type=1400 audit(2000000130.771:32505): avc: denied { connect } for pid=8398 comm="syz.0.2580" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.707734][ T36] audit: type=1400 audit(2000000130.771:32506): avc: denied { write } for pid=8398 comm="syz.0.2580" laddr=fe80::a8aa:aaff:feaa:aa0c lport=58 faddr=ff02::1 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.742646][ T8401] veth1: entered allmulticast mode [ 338.751359][ T588] betop 0003:8380:1850.002C: unknown main item tag 0x0 [ 338.751399][ T588] betop 0003:8380:1850.002C: unknown main item tag 0x0 [ 338.754432][ T588] betop 0003:8380:1850.002C: hidraw0: USB HID v1.01 Device [HID 8380:1850] on usb-dummy_hcd.3-1/input0 [ 338.784407][ T36] audit: type=1400 audit(2000000130.771:32507): avc: denied { mounton } for pid=8398 comm="syz.0.2580" path="/319/file0" dev="tmpfs" ino=1794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 338.820813][ T588] betop 0003:8380:1850.002C: no inputs found [ 338.830110][ T36] audit: type=1400 audit(2000000130.781:32508): avc: denied { mount } for pid=8398 comm="syz.0.2580" name="/" dev="incremental-fs" ino=1794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 338.862969][ T36] audit: type=1400 audit(2000000130.781:32509): avc: denied { mounton } for pid=8398 comm="syz.0.2580" path="/319/bus" dev="tmpfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 338.889399][ T36] audit: type=1400 audit(2000000130.893:32510): avc: denied { create } for pid=8400 comm="syz.0.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.911782][ T36] audit: type=1400 audit(2000000130.893:32511): avc: denied { setopt } for pid=8400 comm="syz.0.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.937756][ T36] audit: type=1400 audit(2000000130.893:32512): avc: denied { ioctl } for pid=8371 comm="syz.3.2570" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.030120][ T8404] veth1: left allmulticast mode [ 339.127475][ T471] usb 4-1: USB disconnect, device number 97 [ 339.998966][ T8437] rust_binder: Error while translating object. [ 339.999006][ T8437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 340.006396][ T8437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 340.489593][ T8450] rust_binder: Failed to allocate buffer. len:72, is_oneway:true [ 340.668602][ T8452] veth0_virt_wifi: entered allmulticast mode [ 340.716910][ T8455] loop7: detected capacity change from 0 to 7 [ 340.742755][ T8452] veth0_virt_wifi: left allmulticast mode [ 340.754624][ C0] blk_print_req_error: 4 callbacks suppressed [ 340.754649][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.776366][ C0] buffer_io_error: 4 callbacks suppressed [ 340.776391][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.796529][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.807198][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.823408][ T8455] loop7: unable to read partition table [ 340.843446][ T8455] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 340.905733][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.917790][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.931414][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.941996][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.953769][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.966165][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 340.981122][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 340.992208][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.004279][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.015341][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.111015][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.165487][ T8462] 9pnet: Unknown protocol version 9 [ 341.421535][ T31] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 341.515903][ T8475] rust_binder: Write failure EFAULT in pid:140 [ 341.596068][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 341.632614][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 341.655418][ T31] usb 4-1: config 1 has no interface number 1 [ 341.677267][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 341.723060][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.754153][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.778538][ T31] usb 4-1: Product: syz [ 341.788703][ T31] usb 4-1: Manufacturer: syz [ 341.795125][ T31] usb 4-1: SerialNumber: syz [ 341.824692][ T8486] loop7: detected capacity change from 0 to 7 [ 341.852500][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.864732][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.880339][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.891586][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.903226][ T8486] loop7: unable to read partition table [ 341.934697][ T8486] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 341.944966][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 342.099663][ T31] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 342.139495][ T31] usb 4-1: failed to enable PITCH for EP 0x82 [ 342.169371][ T31] usb 4-1: USB disconnect, device number 98 [ 342.213121][ T8502] /dev/rnullb0: Can't lookup blockdev [ 342.433941][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.553584][ T8523] rust_binder: 1778: no such ref 1 [ 342.676267][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 343.130301][ T8552] fuse: Bad value for 'fd' [ 343.281474][ T8563] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 343.347124][ T8571] rust_binder: 1787: no such ref 1 [ 343.358938][ T8571] veth1: entered allmulticast mode [ 343.696384][ T8583] kvm: pic: non byte write [ 343.964779][ T36] kauditd_printk_skb: 750 callbacks suppressed [ 343.964800][ T36] audit: type=1400 audit(2000000135.780:33263): avc: denied { create } for pid=8602 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.986935][ T8603] overlayfs: failed to clone upperpath [ 343.999436][ T36] audit: type=1400 audit(2000000135.780:33264): avc: denied { create } for pid=8602 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.036524][ T36] audit: type=1400 audit(2000000135.780:33265): avc: denied { setopt } for pid=8602 comm="syz.0.2644" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.062371][ T36] audit: type=1400 audit(2000000135.789:33266): avc: denied { write } for pid=8602 comm="syz.0.2644" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.092054][ T36] audit: type=1400 audit(2000000135.789:33267): avc: denied { mounton } for pid=8602 comm="syz.0.2644" path="/350/file0" dev="tmpfs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.108809][ T8605] overlayfs: failed to clone upperpath [ 344.119543][ T36] audit: type=1400 audit(2000000135.789:33268): avc: denied { mount } for pid=8602 comm="syz.0.2644" name="/" dev="incremental-fs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 344.145629][ T8558] veth1: left allmulticast mode [ 344.151327][ T36] audit: type=1400 audit(2000000135.799:33269): avc: denied { mounton } for pid=8602 comm="syz.0.2644" path="/350/bus" dev="tmpfs" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.187370][ T36] audit: type=1400 audit(2000000135.902:33270): avc: denied { mounton } for pid=8604 comm="syz.0.2645" path="/351/file1" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.236778][ T36] audit: type=1400 audit(2000000136.033:33271): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.284531][ T36] audit: type=1400 audit(2000000136.033:33272): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.447902][ T8612] netlink: 'syz.0.2648': attribute type 6 has an invalid length. [ 344.775405][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 344.946306][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 344.956130][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.971185][ T10] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 344.983423][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.997512][ T10] usb 4-1: config 0 descriptor?? [ 345.275537][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 345.290913][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 345.330263][ T10] usb 4-1: USB disconnect, device number 99 [ 345.894307][ T8657] overlayfs: failed to clone upperpath [ 346.205743][ T8673] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 346.219062][ T8673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 346.228017][ T31] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 346.409510][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 346.434609][ T31] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.447276][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.455068][ T31] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 346.465450][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.478624][ T31] usb 4-1: config 0 descriptor?? [ 346.967624][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 346.980388][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.009163][ T31] usb 4-1: USB disconnect, device number 100 [ 347.109990][ T8713] netlink: 'syz.0.2683': attribute type 2 has an invalid length. [ 347.163626][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2684'. [ 347.959270][ T8743] vlan1: entered promiscuous mode [ 347.965022][ T8743] vlan1: entered allmulticast mode [ 347.973012][ T8743] veth0_vlan: entered allmulticast mode [ 348.780440][ T8757] x_tables: duplicate underflow at hook 1 [ 348.869673][ T8766] overlayfs: failed to clone upperpath [ 349.314870][ T36] kauditd_printk_skb: 449 callbacks suppressed [ 349.314892][ T36] audit: type=1400 audit(2000000140.789:33722): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 349.359384][ T36] audit: type=1400 audit(2000000140.836:33723): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.396857][ T36] audit: type=1400 audit(2000000140.836:33724): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.431789][ T36] audit: type=1400 audit(2000000140.836:33725): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.466105][ T36] audit: type=1400 audit(2000000140.855:33726): avc: denied { read write } for pid=8776 comm="syz.3.2705" name="binder1" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 349.517257][ T36] audit: type=1400 audit(2000000140.855:33727): avc: denied { read write open } for pid=8776 comm="syz.3.2705" path="/dev/binderfs/binder1" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 349.552751][ T36] audit: type=1400 audit(2000000140.864:33728): avc: denied { create } for pid=8776 comm="syz.3.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.590389][ T36] audit: type=1400 audit(2000000140.864:33729): avc: denied { read write } for pid=8776 comm="syz.3.2705" name="binder1" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 349.627598][ T36] audit: type=1400 audit(2000000140.864:33730): avc: denied { read write open } for pid=8776 comm="syz.3.2705" path="/dev/binderfs/binder1" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 349.665768][ T36] audit: type=1400 audit(2000000140.864:33731): avc: denied { create } for pid=8776 comm="syz.3.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.760641][ T8789] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2709'. [ 349.934107][ T8794] netlink: 'syz.5.2711': attribute type 2 has an invalid length. [ 350.040507][ T588] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 350.203787][ T588] usb 4-1: Using ep0 maxpacket: 32 [ 350.224113][ T588] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 350.243409][ T588] usb 4-1: config 0 has no interface number 0 [ 350.261698][ T588] usb 4-1: config 0 interface 13 has no altsetting 0 [ 350.282600][ T588] usb 4-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82 [ 350.295720][ T588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.306020][ T588] usb 4-1: Product: syz [ 350.313258][ T588] usb 4-1: Manufacturer: syz [ 350.319726][ T588] usb 4-1: SerialNumber: syz [ 350.327468][ T588] usb 4-1: config 0 descriptor?? [ 350.337493][ T588] usb-storage 4-1:0.13: USB Mass Storage device detected [ 350.580506][ T8838] __vm_enough_memory: pid: 8838, comm: syz.3.2708, bytes: 18014402804453376 not enough memory for the allocation [ 350.606605][ T588] usb 4-1: USB disconnect, device number 101 [ 351.551057][ T8876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.730649][ T8883] overlayfs: failed to clone upperpath [ 351.901245][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2736'. [ 352.778228][ T8923] overlayfs: failed to clone upperpath [ 352.843622][ T8925] netlink: 'syz.5.2747': attribute type 11 has an invalid length. [ 353.721483][ T8946] overlayfs: failed to clone lowerpath [ 353.730961][ T8947] overlayfs: failed to clone upperpath [ 353.736674][ T8946] 9pnet_fd: Insufficient options for proto=fd [ 354.373290][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2760'. [ 354.385744][ T8955] erspan0: default FDB implementation only supports local addresses [ 354.953383][ T36] kauditd_printk_skb: 419 callbacks suppressed [ 354.953403][ T36] audit: type=1400 audit(2000000146.071:34151): avc: denied { create } for pid=8958 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 354.994440][ T36] audit: type=1400 audit(2000000146.071:34152): avc: denied { execmem } for pid=8960 comm="syz.5.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 355.022595][ T36] audit: type=1400 audit(2000000146.071:34153): avc: denied { execute } for pid=8960 comm="syz.5.2763" path="/dev/ttynull" dev="tmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 355.058780][ T36] audit: type=1400 audit(2000000146.108:34154): avc: denied { create } for pid=8958 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.099343][ T36] audit: type=1400 audit(2000000146.108:34155): avc: denied { write } for pid=8958 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.130540][ T36] audit: type=1400 audit(2000000146.108:34156): avc: denied { read } for pid=8958 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.159361][ T36] audit: type=1400 audit(2000000146.136:34157): avc: denied { create } for pid=8962 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.204012][ T36] audit: type=1400 audit(2000000146.136:34158): avc: denied { create } for pid=8962 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.252506][ T36] audit: type=1400 audit(2000000146.136:34159): avc: denied { write } for pid=8962 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.288086][ T8974] rust_binder: Error while translating object. [ 355.288135][ T8974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.291522][ T8973] rust_binder: Error while translating object. [ 355.304296][ T8974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1855 [ 355.322459][ T36] audit: type=1400 audit(2000000146.136:34160): avc: denied { read } for pid=8962 comm="syz.5.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.325517][ T8973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.365699][ T8973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1855 [ 355.441680][ T8979] rust_binder: Error while translating object. [ 355.455511][ T8979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.462306][ T8979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1859 [ 355.921147][ T8988] tipc: Enabling of bearer rejected, failed to enable media [ 356.292221][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.302412][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.312894][ T8993] bridge_slave_0: entered allmulticast mode [ 356.321432][ T8993] bridge_slave_0: entered promiscuous mode [ 356.331330][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.341381][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.348973][ T8993] bridge_slave_1: entered allmulticast mode [ 356.357967][ T8993] bridge_slave_1: entered promiscuous mode [ 356.467607][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.475160][ T8993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.487157][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.497725][ T8993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.573857][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.590949][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.617846][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.626565][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.642260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.650868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.688069][ T9012] netlink: 'syz.0.2778': attribute type 8 has an invalid length. [ 356.698540][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 356.799099][ T8993] veth0_vlan: entered promiscuous mode [ 356.859275][ T8993] veth1_macvtap: entered promiscuous mode [ 356.859666][ T9021] 9pnet: Could not find request transport: fd$rfdno=0xffffffffffffffff [ 357.056911][ T9026] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 358.052073][ T9058] overlayfs: failed to resolve './file0': -2 [ 358.388639][ T9081] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 358.399910][ T9081] rust_binder: Write failure EINVAL in pid:196 [ 358.543335][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=9087 comm=syz.6.2801 [ 358.590621][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9087 comm=syz.6.2801 [ 358.610479][ T9089] loop7: detected capacity change from 0 to 7 [ 358.618630][ C0] blk_print_req_error: 5 callbacks suppressed [ 358.618657][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.636960][ C0] buffer_io_error: 4 callbacks suppressed [ 358.636983][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.655013][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.667548][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.677083][ T9089] loop7: unable to read partition table [ 358.684185][ T9087] rust_binder: Error while translating object. [ 358.684748][ T9087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 358.690236][ T9089] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 358.692208][ T9087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:202 [ 358.724437][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.748225][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.776414][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.787949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.816865][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.827473][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.838535][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.841284][ T9092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:204 [ 358.850837][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 358.871099][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.884005][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 359.016626][ T10] hid-generic 0003:0002:0037.002D: unknown main item tag 0x7 [ 359.035892][ T10] hid-generic 0003:0002:0037.002D: unknown main item tag 0x2 [ 359.063154][ T10] hid-generic 0003:0002:0037.002D: item fetching failed at offset 6/185 [ 359.103331][ T10] hid-generic 0003:0002:0037.002D: probe with driver hid-generic failed with error -22 [ 359.235355][ T9113] rust_binder: Write failure EINVAL in pid:208 [ 359.368246][ T9118] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 359.393817][ T9121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=9121 comm=syz.3.2814 [ 359.412085][ T9123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 359.750929][ T9134] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 359.768669][ T9134] rust_binder: Error while translating object. [ 359.805007][ T9134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.813118][ T9134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1871 [ 360.317517][ T36] kauditd_printk_skb: 756 callbacks suppressed [ 360.317538][ T36] audit: type=1400 audit(2000000151.091:34917): avc: denied { create } for pid=9152 comm="syz.0.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.363265][ T9153] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.366143][ T36] audit: type=1400 audit(2000000151.091:34918): avc: denied { setopt } for pid=9152 comm="syz.0.2824" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.374177][ T9153] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64 [ 360.374203][ T9153] audit: backlog limit exceeded [ 360.375330][ T9154] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.401170][ T36] audit: type=1400 audit(2000000151.091:34919): avc: denied { setopt } for pid=9152 comm="syz.0.2824" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.413952][ T9154] audit: audit_lost=126 audit_rate_limit=0 audit_backlog_limit=64 [ 360.417705][ T36] audit: type=1400 audit(2000000151.091:34920): avc: denied { setopt } for pid=9152 comm="syz.0.2824" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.424912][ T10] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 360.425169][ T9154] audit: backlog limit exceeded [ 360.667362][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.679109][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.690843][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.717606][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.738768][ T9169] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2828'. [ 360.756072][ T9169] rust_binder: 37: no such ref 1 [ 360.762740][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 360.772908][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 360.786504][ T10] usb 4-1: Product: syz [ 360.791899][ T10] usb 4-1: Manufacturer: syz [ 360.801803][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 361.081854][ T45] usb 4-1: USB disconnect, device number 102 [ 362.330016][ T45] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 362.490161][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 362.501978][ T45] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 362.513214][ T45] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 362.523985][ T45] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 362.534994][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 362.547171][ T45] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 362.560249][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 362.571728][ T45] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 362.584809][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 362.600309][ T45] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 362.612494][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.649875][ T45] usb 6-1: config 0 descriptor?? [ 362.671509][ T9219] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 362.704147][ T45] usblp0: Disabling reads from problematic bidirectional printer [ 362.907630][ T9230] binder: Unknown parameter 'appraise_type' [ 363.401627][ T9267] overlayfs: workdir and upperdir must be separate subtrees [ 363.422998][ T9268] overlayfs: workdir and upperdir must be separate subtrees [ 363.512204][ T45] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 363.532540][ T45] usb 6-1: USB disconnect, device number 84 [ 363.564152][ T45] usblp0: removed [ 364.276936][ T9310] SELinux: failed to load policy [ 364.306538][ T9310] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 364.333366][ T9310] rust_binder: Read failure Err(EAGAIN) in pid:65 [ 364.490586][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.509290][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.522171][ T9313] bridge_slave_0: entered allmulticast mode [ 364.531050][ T9313] bridge_slave_0: entered promiscuous mode [ 364.540496][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.551028][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.560762][ T9313] bridge_slave_1: entered allmulticast mode [ 364.570906][ T9313] bridge_slave_1: entered promiscuous mode [ 364.915762][ T46] bridge_slave_1: left allmulticast mode [ 364.922656][ T46] bridge_slave_1: left promiscuous mode [ 364.945491][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.959393][ T46] bridge_slave_0: left allmulticast mode [ 364.987119][ T46] bridge_slave_0: left promiscuous mode [ 365.011618][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.045620][ T46] bridge0 (unregistering): left allmulticast mode [ 365.087890][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2873'. [ 365.131657][ T9337] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 365.131701][ T9337] rust_binder: Error while translating object. [ 365.145310][ T9337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 365.170640][ T9337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 365.326010][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.346059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.374157][ T46] veth1_macvtap: left promiscuous mode [ 365.381766][ T46] veth0_vlan: left promiscuous mode [ 365.522572][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.533079][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.674314][ T9313] veth0_vlan: entered promiscuous mode [ 365.688687][ T36] kauditd_printk_skb: 751 callbacks suppressed [ 365.688707][ T36] audit: type=1400 audit(2000000156.121:35672): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.734261][ T9313] veth1_macvtap: entered promiscuous mode [ 365.757032][ T36] audit: type=1400 audit(2000000156.121:35673): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.820806][ T36] audit: type=1400 audit(2000000156.121:35674): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.861437][ T36] audit: type=1400 audit(2000000156.121:35675): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.903922][ T36] audit: type=1400 audit(2000000156.131:35676): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.937906][ T36] audit: type=1400 audit(2000000156.131:35677): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 365.990389][ T36] audit: type=1400 audit(2000000156.131:35678): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.028994][ T36] audit: type=1400 audit(2000000156.131:35679): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.057066][ T36] audit: type=1400 audit(2000000156.131:35680): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.089847][ T36] audit: type=1400 audit(2000000156.131:35681): avc: denied { sys_module } for pid=9313 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.371236][ T9380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 366.377288][ T9378] 9pnet_fd: Insufficient options for proto=fd [ 366.383255][ T9380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 366.398378][ T9380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:91 [ 366.452012][ T9383] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 366.498390][ T9383] rust_binder: Write failure EINVAL in pid:230 [ 366.575145][ T9390] usb usb9: usbfs: process 9390 (syz.3.2890) did not claim interface 47 before use [ 366.867985][ T9404] /dev/rnullb0: Can't lookup blockdev [ 367.155235][ T507] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 367.329075][ T507] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.350016][ T507] usb 6-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 367.365389][ T507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.381015][ T507] usb 6-1: config 0 descriptor?? [ 367.418918][ T9431] rust_binder: Write failure EINVAL in pid:21 [ 367.893010][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.911545][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.977019][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.987940][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.689787][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.710141][ T9478] tipc: Started in network mode [ 368.725995][ T9478] tipc: Node identity 4, cluster identity 4711 [ 368.735964][ T9478] tipc: Node number set to 4 [ 368.748343][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.750614][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.770521][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.875432][ T9481] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.885236][ T9480] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 369.567532][ T31] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 369.680189][ T9513] netlink: 'syz.5.2934': attribute type 25 has an invalid length. [ 369.749294][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 369.759184][ T31] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.771886][ T31] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 369.787865][ T31] usb 4-1: config 179 has no interface number 0 [ 369.798144][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.814465][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.826158][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.023492][ T9529] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 370.023524][ T9529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 370.032547][ T9529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:108 [ 370.068795][ T10] usb 4-1: USB disconnect, device number 103 [ 370.654308][ T9543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2943'. [ 370.667067][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2943'. [ 370.696669][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2943'. [ 370.715954][ T9543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2943'. [ 370.732749][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2943'. [ 370.755343][ T9543] overlayfs: failed to resolve './file1': -2 [ 370.913812][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.931648][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.965533][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.980222][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.092426][ T36] kauditd_printk_skb: 768 callbacks suppressed [ 371.092449][ T36] audit: type=1400 audit(2000000161.180:36450): avc: denied { read write } for pid=7597 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.122150][ T9554] overlayfs: missing 'lowerdir' [ 371.148926][ T36] audit: type=1400 audit(2000000161.208:36451): avc: denied { mounton } for pid=9553 comm="syz.0.2948" path="/479/file0" dev="tmpfs" ino=2698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 371.206431][ T36] audit: type=1400 audit(2000000161.208:36452): avc: denied { mount } for pid=9553 comm="syz.0.2948" name="/" dev="incremental-fs" ino=2698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 371.260576][ T36] audit: type=1400 audit(2000000161.208:36453): avc: denied { mounton } for pid=9553 comm="syz.0.2948" path="/479/bus" dev="tmpfs" ino=2702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 371.267560][ T9556] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 371.290826][ T36] audit: type=1400 audit(2000000161.218:36454): avc: denied { read write open } for pid=7597 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.373219][ T36] audit: type=1400 audit(2000000161.218:36455): avc: denied { ioctl } for pid=7597 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.415851][ T36] audit: type=1400 audit(2000000161.330:36456): avc: denied { create } for pid=9555 comm="syz.6.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.490989][ T9568] rust_binder: 249: no such ref 1 [ 371.501229][ T36] audit: type=1400 audit(2000000161.330:36457): avc: denied { write } for pid=9555 comm="syz.6.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.560269][ T9571] rust_binder: 61: no such ref 0 [ 371.577258][ T9571] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 371.592280][ T9571] rust_binder: Write failure EINVAL in pid:61 [ 371.611084][ T36] audit: type=1400 audit(2000000161.330:36458): avc: denied { read } for pid=9555 comm="syz.6.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.670944][ T36] audit: type=1400 audit(2000000161.340:36459): avc: denied { read } for pid=9555 comm="syz.6.2949" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 371.767940][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.792906][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.808521][ T9577] veth0_to_team: entered promiscuous mode [ 371.826265][ T9577] veth0_to_team: entered allmulticast mode [ 372.033207][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.054588][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.088621][ T9575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.088662][ T9575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 372.128800][ T9585] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2958'. [ 372.179797][ T9588] overlayfs: missing 'lowerdir' [ 372.196712][ T9575] syzkaller0: entered promiscuous mode [ 372.218599][ T9575] syzkaller0: entered allmulticast mode [ 372.448231][ T9596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9596 comm=syz.3.2961 [ 372.591467][ T9603] input: syz0 as /devices/virtual/input/input56 [ 372.618731][ T9605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 372.618772][ T9605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:76 [ 372.639588][ T9605] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 372.660099][ T9605] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2965'. [ 372.715833][ T9605] rust_binder: Write failure EFAULT in pid:76 [ 372.908626][ T9619] rust_binder: Write failure EFAULT in pid:263 [ 372.920205][ T9618] overlayfs: missing 'workdir' [ 373.022282][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.059514][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.229109][ T507] usbhid 6-1:0.0: can't add hid device: -32 [ 373.242241][ T507] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 373.804823][ T10] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 373.989489][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.000181][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.013908][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 374.021170][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 374.031753][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.043428][ T10] usb 4-1: config 0 descriptor?? [ 374.201889][ T9682] overlayfs: missing 'workdir' [ 374.497552][ T10] wacom 0003:056A:00C5.002E: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.3-1/input0 [ 374.660540][ T9699] netlink: 'syz.0.2997': attribute type 63 has an invalid length. [ 374.668960][ T9699] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2997'. [ 374.708735][ T10] usb 4-1: USB disconnect, device number 104 [ 375.576496][ T331] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 375.691320][ T9728] netlink: 'syz.0.3007': attribute type 2 has an invalid length. [ 375.758001][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 375.768271][ T331] usb 4-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 375.782534][ T331] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 375.804752][ T331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 375.814507][ T331] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 375.823999][ T331] usb 4-1: Product: syz [ 375.829184][ T331] usb 4-1: Manufacturer: syz [ 375.840806][ T331] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 376.064421][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2999'. [ 376.122002][ T45] usb 4-1: USB disconnect, device number 105 [ 376.328710][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3009'. [ 376.342416][ T9732] rust_binder: Write failure EINVAL in pid:120 [ 376.430785][ T36] kauditd_printk_skb: 507 callbacks suppressed [ 376.430807][ T36] audit: type=1400 audit(2000000166.193:36967): avc: denied { map } for pid=9735 comm="syz.6.3011" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.436660][ T9736] binder: Bad value for 'stats' [ 376.456974][ T36] audit: type=1400 audit(2000000166.193:36968): avc: denied { read } for pid=9735 comm="syz.6.3011" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.563032][ T36] audit: type=1400 audit(2000000166.193:36969): avc: denied { ioctl } for pid=9735 comm="syz.6.3011" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.641861][ T36] audit: type=1400 audit(2000000166.193:36970): avc: denied { call } for pid=9735 comm="syz.6.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 376.672221][ T9747] rust_binder: 269: no such ref 1 [ 376.688812][ T36] audit: type=1400 audit(2000000166.193:36971): avc: denied { ioctl } for pid=9735 comm="syz.6.3011" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.765820][ T36] audit: type=1400 audit(2000000166.193:36972): avc: denied { create } for pid=9735 comm="syz.6.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.792882][ T9753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=9753 comm=syz.3.3016 [ 376.843256][ T36] audit: type=1400 audit(2000000166.193:36973): avc: denied { setopt } for pid=9735 comm="syz.6.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.901232][ T36] audit: type=1400 audit(2000000166.193:36974): avc: denied { mounton } for pid=9735 comm="syz.6.3011" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.983034][ T36] audit: type=1400 audit(2000000166.230:36975): avc: denied { create } for pid=9737 comm="syz.0.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.999135][ T9764] audit: audit_backlog=65 > audit_backlog_limit=64 [ 377.073302][ T9767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9767 comm=syz.0.3021 [ 377.202339][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.257447][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.472436][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.495223][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.506256][ T9787] rust_binder: Error while translating object. [ 377.506321][ T9787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 377.528108][ T9790] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 377.553133][ T9787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 377.562407][ T9790] rust_binder: Write failure EINVAL in pid:139 [ 377.600053][ T9794] overlayfs: failed to clone upperpath [ 377.831827][ T9805] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3034'. [ 377.997068][ T9822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9822 comm=syz.5.3037 [ 378.032695][ T9822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9822 comm=syz.5.3037 [ 378.566932][ T9846] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 378.586088][ T9846] rust_binder: Write failure EINVAL in pid:292 [ 378.845066][ T9868] binder: Bad value for 'max' [ 378.967325][ T9875] binder: Bad value for 'max' [ 379.113184][ T9882] binder: Bad value for 'max' [ 379.406258][ T9886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 379.406297][ T9886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:177 [ 379.419781][ T9887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.712698][ T9901] overlayfs: failed to clone upperpath [ 379.728859][ T9901] overlayfs: failed to clone upperpath [ 379.736808][ T9903] overlayfs: failed to clone upperpath [ 379.916266][ T9915] netlink: 'syz.3.3073': attribute type 17 has an invalid length. [ 380.510790][ T9927] veth1: entered allmulticast mode [ 380.521827][ T9928] veth1: left allmulticast mode [ 380.529580][ T9924] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3077'. [ 380.545206][ T9927] veth1: entered allmulticast mode [ 380.552162][ T9928] veth1: left allmulticast mode [ 380.558803][ T9927] veth1: entered allmulticast mode [ 380.575822][ T9930] overlayfs: failed to clone upperpath [ 380.584698][ T9928] veth1: left allmulticast mode [ 380.597009][ T9927] veth1: entered allmulticast mode [ 380.605725][ T9928] veth1: left allmulticast mode [ 380.612687][ T9927] veth1: entered allmulticast mode [ 380.620220][ T9928] veth1: left allmulticast mode [ 380.627867][ T9927] veth1: entered allmulticast mode [ 380.634338][ T9928] veth1: left allmulticast mode [ 380.641572][ T9927] veth1: entered allmulticast mode [ 380.648931][ T9928] veth1: left allmulticast mode [ 380.655022][ T9927] veth1: entered allmulticast mode [ 380.663105][ T9928] veth1: left allmulticast mode [ 380.670759][ T9927] veth1: entered allmulticast mode [ 380.678706][ T9928] veth1: left allmulticast mode [ 380.685069][ T9927] veth1: entered allmulticast mode [ 380.693773][ T9928] veth1: left allmulticast mode [ 380.702023][ T9927] veth1: entered allmulticast mode [ 380.708157][ T9928] veth1: left allmulticast mode [ 380.715245][ T9927] veth1: entered allmulticast mode [ 380.721833][ T9928] veth1: left allmulticast mode [ 380.727824][ T9927] veth1: entered allmulticast mode [ 380.734758][ T9928] veth1: left allmulticast mode [ 380.740609][ T9927] veth1: entered allmulticast mode [ 380.747585][ T9928] veth1: left allmulticast mode [ 380.753795][ T9927] veth1: entered allmulticast mode [ 380.759804][ T9928] veth1: left allmulticast mode [ 380.766308][ T9927] veth1: entered allmulticast mode [ 380.771702][ T9928] veth1: left allmulticast mode [ 380.776979][ T9927] veth1: entered allmulticast mode [ 380.782388][ T9928] veth1: left allmulticast mode [ 380.787977][ T9927] veth1: entered allmulticast mode [ 380.794274][ T9928] veth1: left allmulticast mode [ 380.801237][ T9927] veth1: entered allmulticast mode [ 380.806855][ T9928] veth1: left allmulticast mode [ 380.813218][ T9927] veth1: entered allmulticast mode [ 380.818536][ T9928] veth1: left allmulticast mode [ 380.823956][ T9927] veth1: entered allmulticast mode [ 380.830212][ T9928] veth1: left allmulticast mode [ 380.836473][ T9927] veth1: entered allmulticast mode [ 380.843235][ T9928] veth1: left allmulticast mode [ 380.850026][ T9927] veth1: entered allmulticast mode [ 380.855915][ T9928] veth1: left allmulticast mode [ 380.862333][ T9927] veth1: entered allmulticast mode [ 380.871097][ T9926] veth1: left allmulticast mode [ 380.972374][ T9941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.972462][ T9940] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 381.024955][ T9943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 381.268993][ T9956] usb usb7: usbfs: process 9956 (syz.5.3088) did not claim interface 0 before use [ 381.460167][ T9963] SELinux: security_context_str_to_sid () failed with errno=-22 [ 381.777040][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 381.789972][ T9982] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 381.790003][ T9982] rust_binder: Error while translating object. [ 381.797929][ T36] kauditd_printk_skb: 1017 callbacks suppressed [ 381.797963][ T36] audit: type=1400 audit(2000000171.216:37958): avc: denied { ioctl } for pid=9981 comm="syz.5.3095" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.802614][ T9982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.811419][ T36] audit: type=1400 audit(2000000171.216:37959): avc: denied { call } for pid=9981 comm="syz.5.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 381.815562][ T9982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 381.948652][ T36] audit: type=1400 audit(2000000171.365:37960): avc: denied { mounton } for pid=9987 comm="syz.0.3099" path="/538/file0" dev="tmpfs" ino=3031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.959483][ T9988] overlayfs: failed to clone upperpath [ 381.981206][ T36] audit: type=1400 audit(2000000171.365:37961): avc: denied { mount } for pid=9987 comm="syz.0.3099" name="/" dev="incremental-fs" ino=3031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 382.013916][ T36] audit: type=1400 audit(2000000171.365:37962): avc: denied { mounton } for pid=9987 comm="syz.0.3099" path="/538/bus" dev="tmpfs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 382.073043][ T36] audit: type=1400 audit(2000000171.469:37963): avc: denied { read write } for pid=7597 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.109723][ T36] audit: type=1400 audit(2000000171.469:37964): avc: denied { read write open } for pid=7597 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.141562][ T36] audit: type=1400 audit(2000000171.469:37965): avc: denied { ioctl } for pid=7597 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.162294][ T9992] tipc: Started in network mode [ 382.169871][ T36] audit: type=1326 audit(2000000171.515:37966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.0.3100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe54bf8f6c9 code=0x0 [ 382.172671][ T9992] tipc: Node identity 4, cluster identity 4711 [ 382.196542][ T36] audit: type=1400 audit(2000000171.543:37967): avc: denied { read } for pid=9991 comm="syz.6.3101" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.201900][ T9992] tipc: Node number set to 4 [ 382.937065][ T9999] overlayfs: failed to clone upperpath [ 383.098745][T10008] rust_binder: Write failure EFAULT in pid:302 [ 383.171994][T10010] overlayfs: failed to clone upperpath [ 383.310902][T10021] overlayfs: failed to clone upperpath [ 383.313002][T10024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14151 sclass=netlink_route_socket pid=10024 comm=syz.3.3114 [ 383.696325][T10061] bridge0: port 3(syz_tun) entered disabled state [ 383.703955][T10061] syz_tun (unregistering): left allmulticast mode [ 383.710804][T10061] syz_tun (unregistering): left promiscuous mode [ 383.717679][T10061] bridge0: port 3(syz_tun) entered disabled state [ 383.985884][ T500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 383.985897][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 384.197214][T10078] random: crng reseeded on system resumption [ 384.241964][ T9578] Bluetooth: hci0: Frame reassembly failed (-84) [ 384.340346][T10085] netlink: 'syz.3.3135': attribute type 28 has an invalid length. [ 384.350762][T10085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10085 comm=syz.3.3135 [ 384.519407][T10099] netlink: 'syz.3.3140': attribute type 4 has an invalid length. [ 385.005224][T10145] 9pnet_fd: p9_fd_create_unix (10145): problem connecting socket: ./file0: -111 [ 386.376057][ T500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 386.383486][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 386.617160][T10207] rust_binder: Write failure EFAULT in pid:237 [ 387.143023][ T36] kauditd_printk_skb: 477 callbacks suppressed [ 387.143047][ T36] audit: type=1400 audit(2000000176.220:38445): avc: denied { execmem } for pid=10222 comm="syz.6.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 387.177713][ T36] audit: type=1400 audit(2000000176.220:38446): avc: denied { execute } for pid=10222 comm="syz.6.3185" path="/103/bus/cpuacct.usage_percpu" dev="overlay" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 387.217548][ T36] audit: type=1400 audit(2000000176.257:38447): avc: denied { read } for pid=10222 comm="syz.6.3185" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.246944][ T36] audit: type=1400 audit(2000000176.257:38448): avc: denied { read write } for pid=10222 comm="syz.6.3185" name=".pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.273174][ T36] audit: type=1400 audit(2000000176.257:38449): avc: denied { read write open } for pid=10222 comm="syz.6.3185" path="/103/bus/.pending_reads" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.299662][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3186'. [ 387.310067][ T36] audit: type=1400 audit(2000000176.257:38450): avc: denied { write open } for pid=10222 comm="syz.6.3185" path=2F202864656C6574656429 dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.346223][ T36] audit: type=1400 audit(2000000176.285:38451): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.377200][T10226] cgroup2: Unknown parameter 'net_cls' [ 387.394026][ T36] audit: type=1400 audit(2000000176.285:38452): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.424316][ T36] audit: type=1400 audit(2000000176.285:38453): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.477674][T10228] input: syz0 as /devices/virtual/input/input61 [ 387.486534][ T36] audit: type=1400 audit(2000000176.295:38454): avc: denied { unmount } for pid=7597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 387.571488][T10230] overlayfs: failed to clone upperpath [ 387.745319][T10233] rust_binder: 250: no such ref 3 [ 387.750897][T10233] rust_binder: 250: no such ref 1 [ 387.891721][ T9578] Bluetooth: hci0: Frame reassembly failed (-84) [ 387.905328][T10247] Bluetooth: hci0: Frame reassembly failed (-84) [ 388.167673][T10265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3202'. [ 388.247198][T10270] erofs: dax options not supported [ 390.044271][ T500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 390.044291][T10298] Bluetooth: hci0: command 0x1003 tx timeout [ 390.697657][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3225'. [ 391.237995][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 391.241547][ T500] Bluetooth: hci1: command 0x1003 tx timeout [ 391.263387][T10378] overlayfs: failed to clone upperpath [ 391.433782][ T10] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=10 comm=kworker/0:1 [ 391.448677][ T45] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=45 comm=kworker/1:1 [ 392.113172][T10396] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 392.466301][T10418] /dev/rnullb0: Can't lookup blockdev [ 392.489985][ T36] kauditd_printk_skb: 336 callbacks suppressed [ 392.490007][ T36] audit: type=1400 audit(2000000182.244:38791): avc: denied { connect } for pid=10416 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.529101][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3249'. [ 392.538775][ T36] audit: type=1400 audit(2000000182.272:38792): avc: denied { write } for pid=10416 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.591942][ T36] audit: type=1400 audit(2000000182.272:38793): avc: denied { ioctl } for pid=10416 comm="syz.3.3249" path="socket:[60980]" dev="sockfs" ino=60980 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.634699][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.644246][ T36] audit: type=1400 audit(2000000182.272:38794): avc: denied { write } for pid=10416 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.677067][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.697892][ T36] audit: type=1400 audit(2000000182.282:38795): avc: denied { create } for pid=10416 comm="syz.3.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 392.763805][ T36] audit: type=1400 audit(2000000182.291:38796): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.831935][ T36] audit: type=1400 audit(2000000182.291:38797): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.887043][ T36] audit: type=1400 audit(2000000182.291:38798): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.943428][ T36] audit: type=1400 audit(2000000182.319:38799): avc: denied { create } for pid=10419 comm="syz.0.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.973823][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.986247][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.988845][ T36] audit: type=1400 audit(2000000182.319:38800): avc: denied { create } for pid=10421 comm="syz.6.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.082961][T10451] overlayfs: failed to clone upperpath [ 393.099569][T10452] fuse: Bad value for 'fd' [ 393.201051][ T46] bridge_slave_1: left allmulticast mode [ 393.206791][ T46] bridge_slave_1: left promiscuous mode [ 393.212501][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.220114][ T46] bridge_slave_0: left allmulticast mode [ 393.226002][ T46] bridge_slave_0: left promiscuous mode [ 393.231689][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.343661][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.350970][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.358043][T10445] bridge_slave_0: entered allmulticast mode [ 393.365122][T10445] bridge_slave_0: entered promiscuous mode [ 393.374269][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.381694][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.388878][T10445] bridge_slave_1: entered allmulticast mode [ 393.395586][T10445] bridge_slave_1: entered promiscuous mode [ 393.414994][ T46] tipc: Left network mode [ 393.420802][ T46] veth0_vlan: left promiscuous mode [ 393.533474][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.540662][T10445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.548043][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.555124][T10445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.613181][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.629802][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.670108][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.677355][ T9578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.688627][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.695764][ T9578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.807899][T10445] veth0_vlan: entered promiscuous mode [ 393.827205][T10479] overlayfs: failed to clone upperpath [ 393.834661][T10480] overlayfs: failed to clone upperpath [ 393.867664][T10445] veth1_macvtap: entered promiscuous mode [ 394.102514][T10486] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 394.187376][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.204787][T10491] binder: Unknown parameter 'fscontext?}' [ 394.212601][T10491] binder: Unknown parameter 'fscontext?}' [ 394.219536][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.229410][T10491] binder: Unknown parameter 'fscontext?}' [ 394.230582][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.238287][T10491] binder: Unknown parameter 'fscontext?}' [ 394.245962][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.253026][T10491] binder: Unknown parameter 'fscontext?}' [ 394.261076][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.267964][T10491] binder: Unknown parameter 'fscontext?}' [ 394.276871][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.291008][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.299480][T10491] binder: Unknown parameter 'fscontext?}' [ 394.302425][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.319142][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.324822][T10491] binder: Unknown parameter 'fscontext?}' [ 394.329983][T10490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3268'. [ 394.344089][T10491] binder: Unknown parameter 'fscontext?}' [ 394.355073][T10491] binder: Unknown parameter 'fscontext?}' [ 394.364256][T10491] binder: Unknown parameter 'fscontext?}' [ 394.374441][T10491] binder: Unknown parameter 'fscontext?}' [ 394.381646][T10491] binder: Unknown parameter 'fscontext?}' [ 394.390104][T10491] binder: Unknown parameter 'fscontext?}' [ 394.398642][T10491] binder: Unknown parameter 'fscontext?}' [ 394.425888][T10491] binder: Unknown parameter 'fscontext?}' [ 394.439318][T10491] binder: Unknown parameter 'fscontext?}' [ 394.447312][T10491] binder: Unknown parameter 'fscontext?}' [ 394.454621][T10491] binder: Unknown parameter 'fscontext?}' [ 394.461826][T10491] binder: Unknown parameter 'fscontext?}' [ 394.469302][T10491] binder: Unknown parameter 'fscontext?}' [ 394.476676][T10491] binder: Unknown parameter 'fscontext?}' [ 394.483757][T10491] binder: Unknown parameter 'fscontext?}' [ 394.491177][T10491] binder: Unknown parameter 'fscontext?}' [ 394.498494][T10491] binder: Unknown parameter 'fscontext?}' [ 394.506450][T10491] binder: Unknown parameter 'fscontext?}' [ 394.515181][T10491] binder: Unknown parameter 'fscontext?}' [ 394.522507][T10491] binder: Unknown parameter 'fscontext?}' [ 394.529720][T10491] binder: Unknown parameter 'fscontext?}' [ 394.537106][T10491] binder: Unknown parameter 'fscontext?}' [ 394.544101][T10491] binder: Unknown parameter 'fscontext?}' [ 394.551208][T10491] binder: Unknown parameter 'fscontext?}' [ 394.559796][T10491] binder: Unknown parameter 'fscontext?}' [ 394.575469][T10491] binder: Unknown parameter 'fscontext?}' [ 394.582546][T10491] binder: Unknown parameter 'fscontext?}' [ 394.607413][T10491] binder: Unknown parameter 'fscontext?}' [ 394.614543][T10491] binder: Unknown parameter 'fscontext?}' [ 394.633123][T10501] 9pnet_fd: Insufficient options for proto=fd [ 394.639553][T10491] binder: Unknown parameter 'fscontext?}' [ 394.646587][T10491] binder: Unknown parameter 'fscontext?}' [ 394.660044][T10491] binder: Unknown parameter 'fscontext?}' [ 394.669341][T10491] binder: Unknown parameter 'fscontext?}' [ 394.676996][T10491] binder: Unknown parameter 'fscontext?}' [ 394.684414][T10491] binder: Unknown parameter 'fscontext?}' [ 394.695132][T10491] binder: Unknown parameter 'fscontext?}' [ 394.703422][T10491] binder: Unknown parameter 'fscontext?}' [ 394.710707][T10491] binder: Unknown parameter 'fscontext?}' [ 394.719826][T10491] binder: Unknown parameter 'fscontext?}' [ 394.728418][T10491] binder: Unknown parameter 'fscontext?}' [ 394.735668][T10491] binder: Unknown parameter 'fscontext?}' [ 394.742904][T10491] binder: Unknown parameter 'fscontext?}' [ 394.750684][T10491] binder: Unknown parameter 'fscontext?}' [ 394.758195][T10491] binder: Unknown parameter 'fscontext?}' [ 394.766036][T10491] binder: Unknown parameter 'fscontext?}' [ 394.773568][T10491] binder: Unknown parameter 'fscontext?}' [ 394.781183][T10491] binder: Unknown parameter 'fscontext?}' [ 394.789710][T10491] binder: Unknown parameter 'fscontext?}' [ 394.800372][T10491] binder: Unknown parameter 'fscontext?}' [ 394.818647][T10491] binder: Unknown parameter 'fscontext?}' [ 394.831238][T10491] binder: Unknown parameter 'fscontext?}' [ 394.840111][T10491] binder: Unknown parameter 'fscontext?}' [ 394.849447][T10491] binder: Unknown parameter 'fscontext?}' [ 394.856869][T10491] binder: Unknown parameter 'fscontext?}' [ 394.865556][T10491] binder: Unknown parameter 'fscontext?}' [ 394.873553][T10491] binder: Unknown parameter 'fscontext?}' [ 394.880754][T10491] binder: Unknown parameter 'fscontext?}' [ 395.034012][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 395.133766][T10516] netlink: 'syz.6.3278': attribute type 11 has an invalid length. [ 395.235704][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.254357][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.301315][T10518] rust_binder: Error while translating object. [ 395.301379][T10518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 395.307631][T10518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 395.431018][T10527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29509 sclass=netlink_route_socket pid=10527 comm=syz.6.3282 [ 395.688335][T10534] fuse: Bad value for 'fd' [ 395.949158][ T507] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 396.115769][T10548] overlayfs: missing 'lowerdir' [ 396.140980][ T507] usb 1-1: Using ep0 maxpacket: 16 [ 396.154007][ T507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.165519][ T507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.177985][ T507] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 396.187928][ T507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.211377][ T507] usb 1-1: config 0 descriptor?? [ 396.239782][T10555] loop7: detected capacity change from 0 to 7 [ 396.246370][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.255599][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.264825][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.274411][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.290427][T10555] loop7: unable to read partition table [ 396.298616][T10555] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 396.325464][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.350667][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.360032][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.374451][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.383704][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.392414][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.401626][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.412206][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.421404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.432561][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.441784][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 396.680739][ T507] playstation 0003:054C:05C4.002F: unknown main item tag 0x0 [ 396.696883][ T507] playstation 0003:054C:05C4.002F: unknown main item tag 0x0 [ 396.709115][ T507] playstation 0003:054C:05C4.002F: unknown main item tag 0x0 [ 396.716942][ T507] playstation 0003:054C:05C4.002F: unknown main item tag 0x0 [ 396.724559][ T507] playstation 0003:054C:05C4.002F: unknown main item tag 0x0 [ 396.736544][ T507] playstation 0003:054C:05C4.002F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 396.903969][ T507] playstation 0003:054C:05C4.002F: Invalid reportID received, expected 18 got 60 [ 396.913284][ T507] playstation 0003:054C:05C4.002F: Failed to retrieve DualShock4 pairing info: -22 [ 396.922718][ T507] playstation 0003:054C:05C4.002F: Failed to get MAC address from DualShock4 [ 396.931692][ T507] playstation 0003:054C:05C4.002F: Failed to create dualshock4. [ 396.940616][ T507] playstation 0003:054C:05C4.002F: probe with driver playstation failed with error -22 [ 397.120216][T10534] 9pnet: Could not find request transport: f_mXD0x0000000000000003 [ 397.166039][ T331] usb 1-1: USB disconnect, device number 42 [ 397.206884][ T500] Bluetooth: hci0: command 0x1003 tx timeout [ 397.213125][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 397.358715][T10585] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=276 sclass=netlink_xfrm_socket pid=10585 comm=syz.6.3303 [ 397.679494][T10595] netlink: 'syz.3.3307': attribute type 12 has an invalid length. [ 397.793496][T10597] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 397.831380][ T36] kauditd_printk_skb: 763 callbacks suppressed [ 397.831400][ T36] audit: type=1400 audit(2000000187.254:39564): avc: denied { mounton } for pid=10598 comm="syz.0.3309" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.861823][T10601] binder: Bad value for 'stats' [ 397.906888][ T36] audit: type=1400 audit(2000000187.264:39565): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 397.936820][T10604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.937742][T10604] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 397.965720][ T36] audit: type=1400 audit(2000000187.264:39566): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.027576][ T36] audit: type=1400 audit(2000000187.264:39567): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.080863][ T36] audit: type=1400 audit(2000000187.320:39568): avc: denied { read } for pid=10602 comm="syz.5.3310" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.123495][ T36] audit: type=1400 audit(2000000187.320:39569): avc: denied { read open } for pid=10602 comm="syz.5.3310" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.179761][T10617] /dev/loop0: Can't lookup blockdev [ 398.181393][T10616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 398.186038][ T36] audit: type=1400 audit(2000000187.348:39570): avc: denied { ioctl } for pid=10602 comm="syz.5.3310" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.231455][T10616] random: crng reseeded on system resumption [ 398.251415][ T36] audit: type=1400 audit(2000000187.348:39571): avc: denied { set_context_mgr } for pid=10602 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 398.288682][T10621] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 398.304693][ T36] audit: type=1400 audit(2000000187.348:39572): avc: denied { ioctl } for pid=10602 comm="syz.5.3310" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.331422][T10621] rust_binder: Write failure EINVAL in pid:317 [ 398.355060][ T36] audit: type=1400 audit(2000000187.348:39573): avc: denied { ioctl } for pid=10602 comm="syz.5.3310" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.457325][ T331] hid-generic 0004:0009:0035.0030: item fetching failed at offset 12/99 [ 398.465966][ T331] hid-generic 0004:0009:0035.0030: probe with driver hid-generic failed with error -22 [ 398.487349][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.507213][T10627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.515746][T10627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.528711][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.575712][T10631] x_tables: duplicate entry at hook 2 [ 398.671022][T10637] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 398.672082][T10638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10638 comm=syz.3.3321 [ 399.180097][T10671] x_tables: duplicate entry at hook 1 [ 399.190073][T10671] rust_binder: Write failure EFAULT in pid:323 [ 399.229735][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.244852][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.285399][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 399.434554][ T10] usb 1-1: device descriptor read/64, error -71 [ 399.701047][ T10] usb 1-1: device descriptor read/64, error -71 [ 399.956870][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 400.095408][ T10] usb 1-1: device descriptor read/64, error -71 [ 400.345677][T10703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=10703 comm=syz.6.3343 [ 400.361834][ T10] usb 1-1: device descriptor read/64, error -71 [ 400.366286][T10703] netlink: 'syz.6.3343': attribute type 16 has an invalid length. [ 400.377485][T10703] netlink: 'syz.6.3343': attribute type 4 has an invalid length. [ 400.386188][T10703] __nla_validate_parse: 58 callbacks suppressed [ 400.386208][T10703] netlink: 64094 bytes leftover after parsing attributes in process `syz.6.3343'. [ 400.472936][T10712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10712 comm=syz.6.3343 [ 400.489820][ T10] usb usb1-port1: attempt power cycle [ 400.842016][T10724] x_tables: unsorted entry at hook 1 [ 400.852717][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 400.876683][ T10] usb 1-1: device descriptor read/8, error -71 [ 401.024986][ T10] usb 1-1: device descriptor read/8, error -71 [ 401.072052][T10734] /dev/sr0: Can't lookup blockdev [ 401.278489][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 401.302131][ T10] usb 1-1: device descriptor read/8, error -71 [ 401.440870][ T10] usb 1-1: device descriptor read/8, error -71 [ 401.544327][T10745] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.553038][T10746] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.562201][ T10] usb usb1-port1: unable to enumerate USB device [ 402.385629][T10795] input: syz0 as /devices/virtual/input/input62 [ 402.510530][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.520118][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.193565][ T36] kauditd_printk_skb: 383 callbacks suppressed [ 403.193584][ T36] audit: type=1400 audit(2000000193.285:39957): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 403.249439][ T36] audit: type=1400 audit(2000000193.285:39958): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 403.276097][ T36] audit: type=1400 audit(2000000193.285:39959): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 403.320498][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3387'. [ 403.343263][ T36] audit: type=1400 audit(2000000193.331:39960): avc: denied { create } for pid=10827 comm="syz.5.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.357948][T10830] cgroup: none used incorrectly [ 403.370388][ T36] audit: type=1400 audit(2000000193.331:39961): avc: denied { write } for pid=10827 comm="syz.5.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.403711][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3387'. [ 403.420865][ T36] audit: type=1400 audit(2000000193.331:39962): avc: denied { create } for pid=10827 comm="syz.5.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.460120][ T36] audit: type=1400 audit(2000000193.331:39963): avc: denied { write } for pid=10827 comm="syz.5.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.481559][ T36] audit: type=1400 audit(2000000193.331:39964): avc: denied { read } for pid=10827 comm="syz.5.3386" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 403.533517][ T36] audit: type=1400 audit(2000000193.331:39965): avc: denied { read open } for pid=10827 comm="syz.5.3386" path="net:[4026532626]" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 403.575363][ T36] audit: type=1400 audit(2000000193.331:39966): avc: denied { create } for pid=10827 comm="syz.5.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.017535][T10880] rust_binder: Write failure EFAULT in pid:49 [ 404.263318][T10891] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 404.671846][T10920] rust_binder: Error while translating object. [ 404.671895][T10920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 404.690434][T10920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62 [ 404.730108][T10920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.751387][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.787005][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.842790][T10929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3418'. [ 405.022597][T10939] rust_binder: Read failure Err(EAGAIN) in pid:79 [ 405.229357][T10952] futex_wake_op: syz.0.3426 tries to shift op by 144; fix this program [ 405.267555][T10952] rust_binder: Error while translating object. [ 405.267601][T10952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 405.273817][T10952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 405.950373][T10982] fuse: Unknown parameter 'rootmodeU00000000000000000100000000000000000000000' [ 406.149584][T10986] netlink: 'syz.5.3438': attribute type 3 has an invalid length. [ 406.192421][T10986] netlink: 'syz.5.3438': attribute type 4 has an invalid length. [ 406.643163][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 406.719451][T11025] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3449'. [ 406.734447][T11025] rust_binder: 113: no such ref 0 [ 406.741204][T11025] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 406.750522][T11025] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 406.777773][T11029] rust_binder: 113: no such ref 0 [ 406.778864][T11025] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3449'. [ 406.885927][T11035] fuse: Bad value for 'group_id' [ 406.895726][T11035] fuse: Bad value for 'group_id' [ 406.993597][T11042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 406.995576][T11042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11042 comm=syz.5.3453 [ 407.019690][T11042] rust_binder: Error while translating object. [ 407.019750][T11042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 407.035848][T11040] rust_binder: 120: no such ref 3 [ 407.056635][T11040] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 407.064214][T11042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:387 [ 407.089544][T11040] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 407.116881][T11040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120 [ 407.387060][T11058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 407.405024][T11058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 407.414423][T11058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:394 [ 407.588448][ T471] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 407.755631][T11095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.756095][T11095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 407.776033][T11095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 407.783970][ T471] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 407.785542][T11095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:404 [ 407.796758][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 407.827801][ T471] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 407.852050][ T471] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 407.872100][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.873280][T11099] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 407.881098][T11099] rust_binder: Read failure Err(EFAULT) in pid:406 [ 407.893864][ T471] usb 1-1: config 0 descriptor?? [ 407.957823][ T9578] Bluetooth: hci1: Frame reassembly failed (-84) [ 408.212791][T11110] overlayfs: failed to clone upperpath [ 408.363301][ T471] a4tech 0003:09DA:001A.0031: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0 [ 408.535698][ T36] kauditd_printk_skb: 937 callbacks suppressed [ 408.535719][ T36] audit: type=1400 audit(2000000198.295:40904): avc: denied { create } for pid=11123 comm="syz.6.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.538487][T11124] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3484'. [ 408.543559][ T36] audit: type=1400 audit(2000000198.304:40905): avc: denied { write } for pid=11123 comm="syz.6.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.582372][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.592363][ T36] audit: type=1400 audit(2000000198.304:40906): avc: denied { nlmsg_read } for pid=11123 comm="syz.6.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.619437][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.624561][ T36] audit: type=1400 audit(2000000198.332:40907): avc: denied { create } for pid=11061 comm="syz.0.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.650234][ T36] audit: type=1400 audit(2000000198.332:40908): avc: denied { getopt } for pid=11061 comm="syz.0.3460" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.671794][ T36] audit: type=1400 audit(2000000198.341:40909): avc: denied { read write } for pid=11061 comm="syz.0.3460" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.696767][T11063] rust_binder: Write failure EFAULT in pid:126 [ 408.697417][ T574] usb 1-1: USB disconnect, device number 47 [ 408.699047][ T36] audit: type=1400 audit(2000000198.341:40910): avc: denied { read write open } for pid=11061 comm="syz.0.3460" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.737667][ T36] audit: type=1400 audit(2000000198.341:40911): avc: denied { ioctl } for pid=11061 comm="syz.0.3460" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.775123][ T36] audit: type=1400 audit(2000000198.341:40912): avc: denied { ioctl } for pid=11061 comm="syz.0.3460" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.807044][ T36] audit: type=1400 audit(2000000198.435:40913): avc: denied { create } for pid=11125 comm="syz.6.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 408.857541][T11130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3487'. [ 408.903002][T11137] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3490'. [ 409.492300][T11157] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3496'. [ 409.773507][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 409.933379][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 409.940860][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 409.949395][ T31] usb 1-1: config 0 has no interface number 0 [ 409.955651][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 409.966799][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.976263][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.984287][ T31] usb 1-1: Product: syz [ 409.988662][ T31] usb 1-1: Manufacturer: syz [ 409.993278][ T31] usb 1-1: SerialNumber: syz [ 410.001753][ T31] usb 1-1: config 0 descriptor?? [ 410.011353][ T31] smsc75xx v1.0.0 [ 410.167876][ T500] Bluetooth: hci1: command 0x1003 tx timeout [ 410.167876][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 411.097127][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 411.343469][T11157] 9pnet_fd: Insufficient options for proto=fd [ 411.344403][T11202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.378472][T11202] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 411.470115][T11206] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 411.608045][T11215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 412.681301][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 412.742289][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 412.770441][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 412.789796][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 412.809280][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 412.820471][ T31] usb 1-1: USB disconnect, device number 48 [ 412.855392][ T1089] udevd[1089]: setting owner of /dev/bus/usb/001/048 to uid=0, gid=0 failed: No such file or directory [ 413.063656][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3530'. [ 413.168076][T11253] input: syz1 as /devices/virtual/input/input63 [ 413.450706][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 413.610627][ T10] usb 1-1: device descriptor read/64, error -71 [ 413.866418][ T10] usb 1-1: device descriptor read/64, error -71 [ 413.928003][ T36] kauditd_printk_skb: 997 callbacks suppressed [ 413.928024][ T36] audit: type=1400 audit(2000000203.351:41911): avc: denied { mounton } for pid=11280 comm="syz.3.3542" path="/192/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 413.932267][T11281] can: request_module (can-proto-0) failed. [ 413.935693][ T36] audit: type=1400 audit(2000000203.351:41912): avc: denied { mount } for pid=11280 comm="syz.3.3542" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 413.985177][ T36] audit: type=1400 audit(2000000203.351:41913): avc: denied { remount } for pid=11280 comm="syz.3.3542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 414.005333][ T36] audit: type=1400 audit(2000000203.361:41914): avc: denied { write } for pid=11280 comm="syz.3.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.025989][ T36] audit: type=1400 audit(2000000203.361:41915): avc: denied { create } for pid=11280 comm="syz.3.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.045612][ T36] audit: type=1400 audit(2000000203.389:41916): avc: denied { mounton } for pid=11280 comm="syz.3.3542" path="/192/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 414.068426][ T36] audit: type=1400 audit(2000000203.417:41917): avc: denied { ioctl } for pid=11252 comm="syz.0.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.094211][ T36] audit: type=1400 audit(2000000203.417:41918): avc: denied { ioctl } for pid=11252 comm="syz.0.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.119329][ T36] audit: type=1400 audit(2000000203.492:41919): avc: denied { ioctl } for pid=11252 comm="syz.0.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.154215][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 414.162564][ T36] audit: type=1400 audit(2000000203.567:41920): avc: denied { ioctl } for pid=11252 comm="syz.0.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 414.303471][ T10] usb 1-1: device descriptor read/64, error -71 [ 414.569881][ T10] usb 1-1: device descriptor read/64, error -71 [ 414.687624][ T10] usb usb1-port1: attempt power cycle [ 415.049545][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 415.074676][ T10] usb 1-1: device descriptor read/8, error -71 [ 415.212116][ T10] usb 1-1: device descriptor read/8, error -71 [ 415.465232][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 415.491555][ T10] usb 1-1: device descriptor read/8, error -71 [ 415.545295][T11312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.574598][T11312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.601690][T11314] overlayfs: failed to resolve './bus': -2 [ 415.648625][ T10] usb 1-1: device descriptor read/8, error -71 [ 415.764204][ T10] usb usb1-port1: unable to enumerate USB device [ 416.192460][T11337] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 416.317672][T11339] rust_binder: Error while translating object. [ 416.317703][T11339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 416.324035][T11339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:475 [ 416.512710][T11346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 416.534269][T11346] loop7: detected capacity change from 0 to 7 [ 416.541748][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.551085][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 416.559077][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.568323][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 416.576421][T11346] loop7: unable to read partition table [ 416.582178][T11346] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 416.602211][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.612687][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.621889][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 416.630958][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.640265][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 416.649076][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.658384][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 416.668917][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.678160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 416.687157][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.696415][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 417.021065][T11364] netlink: 8540 bytes leftover after parsing attributes in process `syz.6.3570'. [ 417.034045][T11365] binfmt_misc: register: failed to install interpreter file ./file0 [ 417.043517][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3570'. [ 417.319875][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 417.365015][T11386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 417.481577][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 417.536573][ T31] usb 1-1: config 0 has an invalid interface number: 109 but max is 1 [ 417.557343][ T31] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 417.575637][ T31] usb 1-1: config 0 has an invalid interface number: 202 but max is 1 [ 417.595745][ T31] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 417.639618][ T31] usb 1-1: config 0 has no interface number 0 [ 417.645982][ T31] usb 1-1: config 0 has no interface number 1 [ 417.660961][ T31] usb 1-1: config 0 interface 109 altsetting 247 endpoint 0x7 has invalid wMaxPacketSize 0 [ 417.691014][ T31] usb 1-1: config 0 interface 109 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 417.723749][ T31] usb 1-1: config 0 interface 109 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 417.758009][ T31] usb 1-1: config 0 interface 109 altsetting 247 has a duplicate endpoint with address 0x5, skipping [ 417.780530][ T31] usb 1-1: config 0 interface 109 altsetting 247 bulk endpoint 0x2 has invalid maxpacket 32 [ 417.801664][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 417.823504][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 417.849261][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 417.885238][ T31] usb 1-1: config 0 interface 202 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 417.916705][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 417.928154][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 417.959332][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 417.971186][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 417.991606][ T31] usb 1-1: config 0 interface 202 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 418.012625][ T31] usb 1-1: config 0 interface 109 has no altsetting 0 [ 418.019554][ T31] usb 1-1: config 0 interface 202 has no altsetting 0 [ 418.053031][ T31] usb 1-1: Dual-Role OTG device on HNP port [ 418.061440][ T31] usb 1-1: New USB device found, idVendor=1bbb, idProduct=011e, bcdDevice= 8.ce [ 418.076004][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.084835][ T31] usb 1-1: Product: ࠖ [ 418.099489][ T31] usb 1-1: Manufacturer: ꓹ؊⮾꼽錖爓쟜쪑恾ᎅ㴗齘㟾⣆腅쉣줲䂄륤갍墹䬵㸒㳊뭋⃃ё湍䷁건廛ⷅ怡딮᡹䶌⭑Ჸ젬ꑛ趈질壂䛕鿖颪ꮪ뿾绶ൾ切쫏椫푷祝﷖森ᛳꮵ [ 418.122125][T11409] tipc: Enabling of bearer rejected, failed to enable media [ 418.138451][ T31] usb 1-1: SerialNumber: І [ 418.154582][ T31] usb 1-1: config 0 descriptor?? [ 418.194466][T11361] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 418.312794][T11421] SELinux: policydb string does not match my string SE Linux [ 418.332461][T11421] SELinux: failed to load policy [ 418.444265][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.489035][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.548260][T11431] 9pnet: Could not find request transport: Qd [ 418.804350][T11437] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3597'. [ 419.260561][ T36] kauditd_printk_skb: 633 callbacks suppressed [ 419.260582][ T36] audit: type=1400 audit(2000000208.361:42554): avc: denied { ioctl } for pid=11446 comm="syz.6.3601" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=65751 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 419.317777][ T36] audit: type=1400 audit(2000000208.408:42555): avc: denied { read } for pid=11448 comm="syz.5.3602" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 419.355667][ T36] audit: type=1400 audit(2000000208.446:42556): avc: denied { read open } for pid=11448 comm="syz.5.3602" path="net:[4026532626]" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 419.380625][ T36] audit: type=1400 audit(2000000208.446:42557): avc: denied { create } for pid=11448 comm="syz.5.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.411118][ T36] audit: type=1400 audit(2000000208.455:42558): avc: denied { setopt } for pid=11448 comm="syz.5.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.444550][ T36] audit: type=1400 audit(2000000208.455:42559): avc: denied { bind } for pid=11448 comm="syz.5.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.489634][ T36] audit: type=1400 audit(2000000208.455:42560): avc: denied { read } for pid=11448 comm="syz.5.3602" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.517331][ T36] audit: type=1400 audit(2000000208.455:42561): avc: denied { read open } for pid=11448 comm="syz.5.3602" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.569908][ T36] audit: type=1400 audit(2000000208.465:42562): avc: denied { create } for pid=11448 comm="syz.5.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.604625][ T36] audit: type=1400 audit(2000000208.465:42563): avc: denied { read write } for pid=11448 comm="syz.5.3602" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.104836][ T31] usb 1-1: USB disconnect, device number 53 [ 420.136955][ T1089] udevd[1089]: setting mode of /dev/bus/usb/001/053 to 020664 failed: No such file or directory [ 420.148848][ T1089] udevd[1089]: setting owner of /dev/bus/usb/001/053 to uid=0, gid=0 failed: No such file or directory [ 420.323715][T11475] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 420.368306][T11475] rust_binder: Write failure EINVAL in pid:150 [ 420.448200][T11482] netlink: 'syz.5.3614': attribute type 1 has an invalid length. [ 420.462907][T11483] netlink: 'syz.5.3614': attribute type 1 has an invalid length. [ 420.486823][T11482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.487189][T11482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 420.494001][T11482] rust_binder: Read failure Err(EFAULT) in pid:524 [ 420.544566][T11485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.795483][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.810954][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.837209][ T45] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 420.922542][T11496] overlayfs: failed to clone upperpath [ 421.007756][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 421.030981][ T45] usb 1-1: config 7 has an invalid interface number: 199 but max is 0 [ 421.049964][ T45] usb 1-1: config 7 has no interface number 0 [ 421.061534][ T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5a.a6 [ 421.071674][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.079711][ T45] usb 1-1: Product: syz [ 421.087315][ T45] usb 1-1: Manufacturer: syz [ 421.090308][T11509] bridge0: port 3(erspan0) entered blocking state [ 421.092004][ T45] usb 1-1: SerialNumber: syz [ 421.098523][T11509] bridge0: port 3(erspan0) entered disabled state [ 421.110866][T11509] erspan0: entered allmulticast mode [ 421.124387][T11509] erspan0: entered promiscuous mode [ 421.129818][T11509] bridge0: port 3(erspan0) entered blocking state [ 421.136329][T11509] bridge0: port 3(erspan0) entered listening state [ 421.335073][ T45] ums-cypress 1-1:7.199: USB Mass Storage device detected [ 421.413919][ T45] usb 1-1: USB disconnect, device number 54 [ 421.606291][T11553] __vm_enough_memory: pid: 11553, comm: syz.5.3639, bytes: 18014402804453376 not enough memory for the allocation [ 421.681295][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.690121][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.212222][ T471] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 422.311647][T11575] loop5: detected capacity change from 0 to 7 [ 422.373242][ T471] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 422.406956][ T471] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 422.416323][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.427904][T11578] Invalid logical block size (1) [ 422.452658][ T471] usb 1-1: config 0 descriptor?? [ 422.468635][T11575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 422.543019][T11578] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 422.560849][T11578] rust_binder: Write failure EINVAL in pid:540 [ 422.700566][ T574] usb 1-1: USB disconnect, device number 55 [ 423.418312][T11601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.628871][T11623] /dev/loop0: Can't open blockdev [ 423.763339][T11617] usb usb8: usbfs: process 11617 (syz.0.3662) did not claim interface 63 before use [ 423.837139][T11638] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 423.874946][T11638] SELinux: failed to load policy [ 423.991480][T11648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.023430][T11648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.514473][ T588] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 424.601088][ T36] kauditd_printk_skb: 778 callbacks suppressed [ 424.601109][ T36] audit: type=1400 audit(2000000213.371:43342): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.679519][ T588] usb 1-1: Using ep0 maxpacket: 16 [ 424.685005][ T36] audit: type=1400 audit(2000000213.371:43343): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.689878][ T588] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.742439][ T36] audit: type=1400 audit(2000000213.371:43344): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.745318][ T588] usb 1-1: config 0 interface 0 has no altsetting 0 [ 424.776576][ T588] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 424.778239][ T36] audit: type=1400 audit(2000000213.390:43345): avc: denied { read write } for pid=11680 comm="syz.5.3688" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.809244][ T588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.813833][ T36] audit: type=1400 audit(2000000213.390:43346): avc: denied { read write open } for pid=11680 comm="syz.5.3688" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 424.822150][ T588] usb 1-1: config 0 descriptor?? [ 424.887525][ T36] audit: type=1400 audit(2000000213.390:43347): avc: denied { create } for pid=11680 comm="syz.5.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.937849][T11693] overlay: ./file0 is not a directory [ 424.964966][ T36] audit: type=1400 audit(2000000213.390:43348): avc: denied { bind } for pid=11680 comm="syz.5.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.988635][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 425.002058][ T36] audit: type=1400 audit(2000000213.400:43349): avc: denied { listen } for pid=11680 comm="syz.5.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.037033][T11698] overlayfs: failed to clone upperpath [ 425.057536][T11697] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.063085][T11701] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.083654][T11698] overlayfs: failed to clone upperpath [ 425.442466][T11714] binder: Bad value for 'max' [ 425.739306][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.778232][T11728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.786825][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.796993][T11728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.813109][T11727] binder: Unknown parameter 'context[7' [ 426.478260][T11746] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 426.487282][T11746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 426.569588][T11749] rust_binder: Write failure EFAULT in pid:587 [ 426.789002][T11767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.796082][T11768] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 426.935135][T11775] netlink: 'syz.0.3717': attribute type 10 has an invalid length. [ 427.062617][T11779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.089822][T11779] rust_binder: Got transaction with invalid offset. [ 427.119755][T11779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 427.140410][T11779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 427.171796][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3721'. [ 427.191141][T11782] tipc: Started in network mode [ 427.196074][T11782] tipc: Node identity 1, cluster identity 4711 [ 427.202614][T11782] tipc: Node number set to 1 [ 427.207332][T11782] tipc: Cannot configure node identity twice [ 427.257572][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.275213][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.309650][T11795] overlayfs: failed to clone upperpath [ 427.697201][T11809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.704120][T11809] fuse: Bad value for 'rootmode' [ 427.721661][T11809] rust_binder: Error in use_page_slow: ESRCH [ 427.721687][T11809] rust_binder: use_range failure ESRCH [ 427.729201][T11809] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 427.734836][T11809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 427.743028][T11809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:617 [ 427.797621][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.808633][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.815568][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.822576][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.829511][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.836494][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.842407][T11813] rust_binder: Error in use_page_slow: ESRCH [ 427.849991][T11813] rust_binder: use_range failure ESRCH [ 427.855729][T11813] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 427.861356][T11813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 427.867517][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.869714][T11813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:619 [ 427.894807][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.895282][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.923931][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.950329][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.950763][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.973778][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.975411][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.991936][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.992362][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.999338][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.008653][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.027332][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.027732][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.034732][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.053143][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.085168][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.112577][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.112966][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.133211][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.159767][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.164100][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.193027][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.229295][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.229694][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.295458][T11811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.799564][T11861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3745'. [ 428.817009][T11861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.945831][T11870] binder: Bad value for 'stats' [ 429.143978][T11887] rust_binder: Error while translating object. [ 429.144020][T11887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 429.150343][T11887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 429.252527][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'. [ 429.413898][T11896] rust_binder: Write failure EFAULT in pid:642 [ 429.494112][T11898] netlink: 'syz.5.3759': attribute type 28 has an invalid length. [ 429.764782][T11904] /dev/rnullb0: Can't lookup blockdev [ 429.792211][T11904] /dev/rnullb0: Can't lookup blockdev [ 429.962695][ T36] kauditd_printk_skb: 901 callbacks suppressed [ 429.962714][ T36] audit: type=1400 audit(2000000218.400:44247): avc: denied { read write } for pid=10445 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.016614][ T36] audit: type=1400 audit(2000000218.400:44248): avc: denied { read write open } for pid=10445 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.042867][ T36] audit: type=1400 audit(2000000218.400:44249): avc: denied { ioctl } for pid=10445 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.103330][T11923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.112527][T11923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.122497][ T36] audit: type=1400 audit(2000000218.438:44250): avc: denied { ioctl } for pid=11914 comm="syz.3.3764" path="socket:[67849]" dev="sockfs" ino=67849 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.146776][T11923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.172776][ T36] audit: type=1400 audit(2000000218.438:44251): avc: denied { sys_module } for pid=11914 comm="syz.3.3764" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 430.178333][T11923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.195579][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.213432][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.222498][ T36] audit: type=1400 audit(2000000218.447:44252): avc: denied { create } for pid=11920 comm="syz.0.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.229776][ T588] usbhid 1-1:0.0: can't add hid device: -32 [ 430.243377][ T36] audit: type=1400 audit(2000000218.475:44253): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.248382][ T588] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 430.273568][ T36] audit: type=1400 audit(2000000218.475:44254): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.301365][T11926] binder: Unknown parameter 'contsy"tem_uGй :' [ 430.307435][ T36] audit: type=1400 audit(2000000218.475:44255): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.338950][ T36] audit: type=1400 audit(2000000218.475:44256): avc: denied { connect } for pid=11920 comm="syz.0.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.873918][T11934] overlayfs: failed to clone upperpath [ 431.159285][T11953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.213619][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.228847][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.241237][T11955] rust_binder: Error while translating object. [ 431.241297][T11955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 431.260175][T11955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:663 [ 431.626999][T11967] can: request_module (can-proto-6) failed. [ 432.321924][T11989] rust_binder: 668: no such ref 0 [ 432.327021][T11989] rust_binder: 668: no such ref 1 [ 432.432728][T12021] binder: Bad value for 'max' [ 432.975626][T12039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 432.983405][T12039] rust_binder: 687: no such ref 2 [ 433.089591][T12050] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3808'. [ 433.245885][T12061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:691 [ 433.259330][T12061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 433.271080][T12061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:691 [ 433.594173][T12083] netlink: 'syz.0.3819': attribute type 13 has an invalid length. [ 433.921532][T12097] cgroup2: Unknown parameter 'nste' [ 434.014418][T12099] /dev/rnullb0: Can't lookup blockdev [ 434.326821][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.338858][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.358056][T12112] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 435.059039][T12122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3833'. [ 435.183080][T12130] overlay: ./file0 is not a directory [ 435.199674][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.215937][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.306609][ T36] kauditd_printk_skb: 681 callbacks suppressed [ 435.306642][ T36] audit: type=1400 audit(2000000223.410:44938): avc: denied { create } for pid=12135 comm="syz.3.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.333535][ T36] audit: type=1400 audit(2000000223.410:44939): avc: denied { setopt } for pid=12135 comm="syz.3.3838" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.358862][ T36] audit: type=1400 audit(2000000223.410:44940): avc: denied { setopt } for pid=12135 comm="syz.3.3838" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.379473][ T36] audit: type=1400 audit(2000000223.410:44941): avc: denied { write } for pid=12135 comm="syz.3.3838" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.399925][ T36] audit: type=1400 audit(2000000223.410:44942): avc: denied { write } for pid=12135 comm="syz.3.3838" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.421259][ T36] audit: type=1400 audit(2000000223.420:44943): avc: denied { write } for pid=12135 comm="syz.3.3838" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.870550][ T36] audit: type=1400 audit(2000000223.945:44944): avc: denied { read write } for pid=10445 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.895116][ T36] audit: type=1400 audit(2000000223.945:44945): avc: denied { read write open } for pid=10445 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.944224][ T36] audit: type=1400 audit(2000000223.945:44946): avc: denied { ioctl } for pid=10445 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.970937][ T36] audit: type=1400 audit(2000000224.001:44947): avc: denied { read } for pid=12139 comm="syz.0.3840" name="binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 436.275564][T12162] overlayfs: failed to resolve './file1': -2 [ 436.295605][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.308023][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.365180][T12164] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3848'. [ 437.034212][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.059924][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.084838][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.100554][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.120751][T12170] veth0_to_batadv: entered allmulticast mode [ 437.127899][T12170] veth0_to_batadv: left allmulticast mode [ 437.457724][T12194] cgroup2: Unknown parameter 'mem' [ 437.499846][T12199] netlink: 'syz.6.3860': attribute type 15 has an invalid length. [ 437.624634][ C0] bridge0: port 3(erspan0) entered learning state [ 437.808920][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.817888][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.829944][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.839157][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.853561][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.862862][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.490333][T12216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 438.490403][T12216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:722 [ 438.502892][T12216] __vm_enough_memory: pid: 12216, comm: syz.5.3865, bytes: 18014402804453376 not enough memory for the allocation [ 438.619097][T12220] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 438.627527][T12220] rust_binder: Write failure EINVAL in pid:726 [ 438.779672][T12226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 438.791949][T12226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:728 [ 438.802557][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.840052][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.880452][T12228] rust_binder: Error while translating object. [ 438.880514][T12228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 438.891158][T12228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:262 [ 439.047344][T12233] rust_binder: Write failure EFAULT in pid:732 [ 439.104324][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.133413][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.256600][T12237] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3875'. [ 439.265593][T12237] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3875'. [ 439.274631][T12237] netlink: 'syz.6.3875': attribute type 6 has an invalid length. [ 439.282446][T12237] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3875'. [ 439.479791][T12243] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3877'. [ 439.555913][T12250] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3879'. [ 439.565414][T12251] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3879'. [ 439.610291][T12253] bridge0: port 3(erspan0) entered blocking state [ 439.616760][T12253] bridge0: port 3(erspan0) entered disabled state [ 439.623347][T12253] erspan0: entered allmulticast mode [ 439.629210][T12253] erspan0: entered promiscuous mode [ 439.635639][T12253] bridge0: port 3(erspan0) entered blocking state [ 439.642129][T12253] bridge0: port 3(erspan0) entered forwarding state [ 439.966270][T12276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 439.968795][T12276] fuse: Bad value for 'fd' [ 439.991439][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 440.001890][T12278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.013613][T12278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.047397][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3889'. [ 440.685406][ T36] kauditd_printk_skb: 599 callbacks suppressed [ 440.685429][ T36] audit: type=1400 audit(2000000228.458:45547): avc: denied { read write } for pid=10445 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.717822][ T36] audit: type=1400 audit(2000000228.458:45548): avc: denied { read write open } for pid=10445 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.749885][ T36] audit: type=1400 audit(2000000228.458:45549): avc: denied { ioctl } for pid=10445 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 440.775707][ T36] audit: type=1400 audit(2000000228.523:45550): avc: denied { create } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.795588][ T36] audit: type=1400 audit(2000000228.542:45551): avc: denied { create } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.815315][ T36] audit: type=1400 audit(2000000228.542:45552): avc: denied { setopt } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.835431][ T36] audit: type=1400 audit(2000000228.542:45553): avc: denied { setopt } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.855872][ T36] audit: type=1400 audit(2000000228.542:45554): avc: denied { write } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.877779][ T36] audit: type=1400 audit(2000000228.542:45555): avc: denied { write } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.898134][ T36] audit: type=1400 audit(2000000228.589:45556): avc: denied { read } for pid=12297 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.296446][T12315] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 441.506842][T12323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 441.514960][T12323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:301 [ 441.650046][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.681139][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.704498][T12330] overlayfs: failed to clone upperpath [ 441.797841][T12333] netlink: 'syz.6.3909': attribute type 4 has an invalid length. [ 442.143959][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 442.143987][ T500] Bluetooth: hci1: command 0x1003 tx timeout [ 442.566824][T12343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.576308][T12343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.869479][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.888986][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.911374][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.919923][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.967032][T12363] /dev/snd/timer: Can't lookup blockdev [ 443.667088][T12387] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 444.097020][T12405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:764 [ 444.169269][T12413] 8021q: VLANs not supported on lo [ 444.393671][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.425047][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.466155][T12423] rust_binder: 342: no such ref 2 [ 444.477306][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.486406][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.649090][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3942'. [ 444.658006][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3942'. [ 445.184489][T12450] rust_binder: Got transaction with invalid offset. [ 445.184582][T12450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 445.192083][T12450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 445.289535][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 445.344170][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.369372][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.379905][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.407841][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.068330][ T36] kauditd_printk_skb: 652 callbacks suppressed [ 446.068355][ T36] audit: type=1400 audit(2000000233.505:46209): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.088665][T12472] netlink: 'syz.5.3956': attribute type 12 has an invalid length. [ 446.170502][ T36] audit: type=1400 audit(2000000233.505:46210): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.234733][ T36] audit: type=1400 audit(2000000233.505:46211): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.246528][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.284758][ T36] audit: type=1400 audit(2000000233.524:46212): avc: denied { read write } for pid=12471 comm="syz.5.3956" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 446.295548][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.328553][T12482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 446.347126][ T36] audit: type=1400 audit(2000000233.524:46213): avc: denied { read write open } for pid=12471 comm="syz.5.3956" path="/dev/rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 446.355988][T12482] audit: audit_lost=141 audit_rate_limit=0 audit_backlog_limit=64 [ 446.377664][ T36] audit: type=1400 audit(2000000233.524:46214): avc: denied { write } for pid=12471 comm="syz.5.3956" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 446.399138][T12482] audit: backlog limit exceeded [ 446.411925][ T36] audit: type=1400 audit(2000000233.543:46215): avc: denied { read write } for pid=10445 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.454509][T12484] 9pnet_fd: Insufficient options for proto=fd [ 446.790835][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.804368][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.011801][T12518] overlayfs: failed to clone upperpath [ 447.011803][T12519] overlayfs: failed to clone upperpath [ 447.142971][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 447.144690][T12525] overlayfs: missing 'lowerdir' [ 448.471985][T12555] rust_binder: Read failure Err(EAGAIN) in pid:391 [ 449.049950][T12586] fuse: Unknown parameter 'grop_id' [ 449.303165][T12599] incfs: Backing dir is not set, filesystem can't be mounted. [ 449.310827][ T500] Bluetooth: hci1: command 0x1003 tx timeout [ 449.316896][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 449.323248][T12599] incfs: mount failed -2 [ 449.343682][T12599] binder: Unknown parameter '00000000000000000000' [ 449.580567][T12606] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4001'. [ 449.594998][T12606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 450.394515][T12616] rust_binder: Error while translating object. [ 450.403764][T12616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 450.410925][T12616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:781 [ 450.466314][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.490993][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.712325][T12620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:413 [ 451.430267][ T36] kauditd_printk_skb: 487 callbacks suppressed [ 451.430288][ T36] audit: type=1400 audit(2000000238.543:46703): avc: denied { read write } for pid=8993 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.492046][ T36] audit: type=1400 audit(2000000238.571:46704): avc: denied { read write open } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.518238][ T36] audit: type=1400 audit(2000000238.581:46705): avc: denied { ioctl } for pid=8993 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.552586][ T36] audit: type=1400 audit(2000000238.656:46706): avc: denied { execmem } for pid=12650 comm="syz.5.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 451.583608][ T36] audit: type=1400 audit(2000000238.684:46707): avc: denied { create } for pid=12650 comm="syz.5.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 451.604302][ T36] audit: type=1400 audit(2000000238.703:46708): avc: denied { connect } for pid=12650 comm="syz.5.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 451.627137][ T36] audit: type=1400 audit(2000000238.722:46709): avc: denied { read write } for pid=12650 comm="syz.5.4015" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 451.654777][ T36] audit: type=1400 audit(2000000238.722:46710): avc: denied { read write open } for pid=12650 comm="syz.5.4015" path="/dev/rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 451.683340][ T36] audit: type=1400 audit(2000000238.722:46711): avc: denied { write } for pid=12650 comm="syz.5.4015" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 451.712273][ T36] audit: type=1400 audit(2000000238.731:46712): avc: denied { read } for pid=12650 comm="syz.5.4015" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 451.870903][T12660] overlayfs: failed to clone upperpath [ 451.889610][T12660] overlayfs: failed to clone upperpath [ 452.138671][T12677] binder: Binderfs stats mode cannot be changed during a remount [ 452.311543][T12690] loop7: detected capacity change from 0 to 7 [ 452.318101][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.327428][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.335492][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.344698][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.352644][T12690] loop7: unable to read partition table [ 452.359651][T12690] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 452.385739][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.394964][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.404416][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.416546][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.425852][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.434471][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.443785][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.452924][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.462213][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.474210][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.483507][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.575073][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.591311][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.675599][T12702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.684518][T12702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.779667][T12712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.791235][T12712] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 452.810802][T12712] rust_binder: Write failure EINVAL in pid:828 [ 452.871148][T12716] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4037'. [ 452.894027][T12714] 9pnet_fd: Insufficient options for proto=fd [ 452.904563][T12716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.984549][T12716] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 452.998993][T12716] rust_binder: Write failure EINVAL in pid:830 [ 453.224673][T12737] rust_binder: Error while translating object. [ 453.239760][T12737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 453.266733][T12737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:435 [ 453.377388][T12742] rust_binder: 837: no such ref 1 [ 453.392220][T12742] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 453.393174][T12744] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 453.399330][T12742] rust_binder: 837: no such ref 1 [ 453.409387][T12744] rust_binder: Read failure Err(EAGAIN) in pid:440 [ 453.412791][T12742] rust_binder: 837: no such ref 2 [ 453.419427][T12746] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 453.424871][T12742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:837 [ 453.431732][T12746] rust_binder: Read failure Err(EAGAIN) in pid:440 [ 453.775252][T12761] rust_binder: Error while translating object. [ 453.781858][T12761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 453.793899][T12761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:842 [ 453.881157][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.911114][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.923451][T12757] bridge_slave_0: entered allmulticast mode [ 453.929926][T12757] bridge_slave_0: entered promiscuous mode [ 453.940550][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.948535][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.957154][T12757] bridge_slave_1: entered allmulticast mode [ 453.963583][T12757] bridge_slave_1: entered promiscuous mode [ 453.984572][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.993316][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.007036][ C0] bridge0: port 3(erspan0) entered forwarding state [ 454.013690][ C0] bridge0: topology change detected, propagating [ 454.094546][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.101650][T12757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.109013][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.116183][T12757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.171438][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.179047][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.194263][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.201383][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.213929][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.221056][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.302763][T12757] veth0_vlan: entered promiscuous mode [ 454.341200][T12757] veth1_macvtap: entered promiscuous mode [ 454.570521][T12785] fuse: Unknown parameter '<' [ 454.661482][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.671603][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.883424][T12806] rust_binder: Error while translating object. [ 454.883472][T12806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 454.889814][T12806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:9 [ 454.910974][T12808] tipc: Started in network mode [ 454.925730][T12808] tipc: Node identity 4, cluster identity 8 [ 454.931684][T12808] tipc: Node number set to 4 [ 455.648302][T12822] rust_binder: Error while translating object. [ 455.648354][T12822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 455.654964][T12822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 456.002752][T12843] overlayfs: failed to clone lowerpath [ 456.119196][T12847] rust_binder: Error while translating object. [ 456.119259][T12847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 456.125588][T12847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 456.154763][T12849] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4078'. [ 456.309130][T12865] netlink: 'syz.6.4081': attribute type 4 has an invalid length. [ 456.597160][ T45] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 456.757060][ T45] usb 8-1: Using ep0 maxpacket: 8 [ 456.764676][ T45] usb 8-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 456.773922][ T45] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 456.784150][ T45] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 456.793224][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.804921][ T36] kauditd_printk_skb: 1425 callbacks suppressed [ 456.804941][ T36] audit: type=1400 audit(2000000243.581:48138): avc: denied { ioctl } for pid=12869 comm="syz.7.4083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.838952][ T36] audit: type=1400 audit(2000000243.581:48139): avc: denied { ioctl } for pid=12869 comm="syz.7.4083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.865360][ T36] audit: type=1400 audit(2000000243.581:48140): avc: denied { ioctl } for pid=12869 comm="syz.7.4083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.890638][ T36] audit: type=1400 audit(2000000243.581:48141): avc: denied { ioctl } for pid=12869 comm="syz.7.4083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.027192][ T36] audit: type=1400 audit(2000000243.788:48142): avc: denied { read } for pid=12869 comm="syz.7.4083" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 457.050302][ T36] audit: type=1400 audit(2000000243.788:48143): avc: denied { read open } for pid=12869 comm="syz.7.4083" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 457.074462][ T36] audit: type=1400 audit(2000000243.788:48144): avc: denied { ioctl } for pid=12869 comm="syz.7.4083" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 457.099561][ T36] audit: type=1400 audit(2000000243.825:48145): avc: denied { create } for pid=12869 comm="syz.7.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.119644][ T36] audit: type=1400 audit(2000000243.825:48146): avc: denied { write } for pid=12869 comm="syz.7.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.139313][ T36] audit: type=1400 audit(2000000243.835:48147): avc: denied { mounton } for pid=12869 comm="syz.7.4083" path="/7/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 457.302266][ T45] usb 8-1: string descriptor 0 read error: -71 [ 457.323671][ T45] usb 8-1: USB disconnect, device number 2 [ 457.366734][ T1089] udevd[1089]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 457.916946][T12921] __vm_enough_memory: pid: 12921, comm: syz.7.4102, bytes: 18014402804453376 not enough memory for the allocation [ 458.019400][T12923] rust_binder: Write failure EFAULT in pid:458 [ 458.643606][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 458.817150][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 458.828296][ T10] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 458.837475][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.847204][ T10] usb 8-1: config 0 descriptor?? [ 458.858430][T12944] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 459.077294][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.090721][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.189208][T12952] netlink: 'syz.5.4114': attribute type 27 has an invalid length. [ 459.511924][ T10] hid-generic 0003:04F3:0755.0032: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 459.710357][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.719274][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.891424][ T588] usb 8-1: USB disconnect, device number 3 [ 460.316998][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 460.510393][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4125'. [ 460.657007][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.689433][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.888652][T13003] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 460.897617][T13003] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 461.377692][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.402195][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.467979][T13036] netlink: 'syz.7.4140': attribute type 5 has an invalid length. [ 461.475785][T13036] netlink: 'syz.7.4140': attribute type 5 has an invalid length. [ 461.483575][T13036] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4140'. [ 461.496910][T13036] rust_binder: Error while translating object. [ 461.496969][T13036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 461.503656][T13036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:60 [ 461.631603][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.650167][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.056134][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.065127][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.277960][ T36] kauditd_printk_skb: 407 callbacks suppressed [ 462.277981][ T36] audit: type=1400 audit(2000000248.713:48555): avc: denied { read write } for pid=12757 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.314676][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.323881][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.339548][ T36] audit: type=1400 audit(2000000248.723:48556): avc: denied { read write open } for pid=12757 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.374136][ T36] audit: type=1400 audit(2000000248.723:48557): avc: denied { ioctl } for pid=12757 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 462.399905][ T36] audit: type=1400 audit(2000000248.742:48558): avc: denied { read write } for pid=13058 comm="syz.7.4148" name="binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 462.426682][ T36] audit: type=1400 audit(2000000248.742:48559): avc: denied { create } for pid=13056 comm="syz.0.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 462.446625][ T36] audit: type=1400 audit(2000000248.751:48560): avc: denied { ioctl } for pid=13056 comm="syz.0.4147" path="socket:[72658]" dev="sockfs" ino=72658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 462.471706][ T36] audit: type=1400 audit(2000000248.751:48561): avc: denied { setopt } for pid=13056 comm="syz.0.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 462.491557][ T36] audit: type=1400 audit(2000000248.751:48562): avc: denied { write } for pid=13056 comm="syz.0.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 462.511338][ T36] audit: type=1400 audit(2000000248.751:48563): avc: denied { read write } for pid=13056 comm="syz.0.4147" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.535170][ T36] audit: type=1400 audit(2000000248.751:48564): avc: denied { read write open } for pid=13056 comm="syz.0.4147" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.672607][ T331] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 462.836153][T13062] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4149'. [ 462.852877][T13062] rust_binder: Error while translating object. [ 462.852915][T13062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 462.859183][T13062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:66 [ 462.869836][T13062] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 462.887194][T13062] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 462.887223][T13062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 462.895185][T13062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:66 [ 462.907318][ T331] usb 8-1: unable to get BOS descriptor or descriptor too short [ 462.927827][ T331] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 462.936893][ T331] usb 8-1: can't read configurations, error -71 [ 463.001433][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.011589][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.489676][T13078] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 464.058260][ T331] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 464.305847][ T331] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 464.313487][ T331] usb 8-1: can't read configurations, error -71 [ 464.329927][ T331] usb usb8-port1: attempt power cycle [ 464.445435][T13099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.445475][T13099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 465.167870][T13106] netlink: 388 bytes leftover after parsing attributes in process `syz.5.4164'. [ 465.272394][T13111] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 465.275020][T13111] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 465.299481][T13111] rust_binder: Write failure EINVAL in pid:91 [ 465.483383][T13126] overlay: ./file0 is not a directory [ 465.601053][T13127] syz.7.4172: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 465.616597][T13127] CPU: 0 UID: 0 PID: 13127 Comm: syz.7.4172 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 465.616633][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.616658][T13127] Call Trace: [ 465.616666][T13127] [ 465.616680][T13127] __dump_stack+0x21/0x30 [ 465.616719][T13127] dump_stack_lvl+0x10c/0x190 [ 465.616753][T13127] ? __cfi_dump_stack_lvl+0x10/0x10 [ 465.616787][T13127] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 465.616821][T13127] dump_stack+0x19/0x20 [ 465.616861][T13127] warn_alloc+0x1bc/0x2a0 [ 465.616893][T13127] ? __cfi_warn_alloc+0x10/0x10 [ 465.616923][T13127] ? kasan_save_track+0x4f/0x80 [ 465.616948][T13127] ? __kasan_kmalloc+0x96/0xb0 [ 465.616974][T13127] ? __kmalloc_cache_noprof+0x24c/0x490 [ 465.616998][T13127] ? do_sock_setsockopt+0x26d/0x400 [ 465.617032][T13127] ? __x64_sys_setsockopt+0x1b8/0x250 [ 465.617065][T13127] ? x64_sys_call+0x2adc/0x2ee0 [ 465.617097][T13127] ? do_syscall_64+0x58/0xf0 [ 465.617125][T13127] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 465.617154][T13127] __vmalloc_node_range_noprof+0x135/0x1420 [ 465.617195][T13127] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 465.617230][T13127] ? kasan_save_alloc_info+0x40/0x50 [ 465.617260][T13127] ? __kasan_kmalloc+0x96/0xb0 [ 465.617285][T13127] ? __kmalloc_cache_noprof+0x24c/0x490 [ 465.617308][T13127] ? futex_setup_timer+0xb4/0xd0 [ 465.617330][T13127] vmalloc_user_noprof+0x77/0x90 [ 465.617363][T13127] ? xskq_create+0xdb/0x2a0 [ 465.617397][T13127] xskq_create+0xdb/0x2a0 [ 465.617434][T13127] xsk_init_queue+0xb6/0x120 [ 465.617470][T13127] xsk_setsockopt+0x43f/0x6f0 [ 465.617505][T13127] ? __cfi_xsk_setsockopt+0x10/0x10 [ 465.617539][T13127] ? do_futex+0x309/0x500 [ 465.617564][T13127] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 465.617595][T13127] ? security_socket_setsockopt+0x33/0xd0 [ 465.617619][T13127] ? __cfi_xsk_setsockopt+0x10/0x10 [ 465.617653][T13127] do_sock_setsockopt+0x26d/0x400 [ 465.617700][T13127] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 465.617739][T13127] __x64_sys_setsockopt+0x1b8/0x250 [ 465.617775][T13127] x64_sys_call+0x2adc/0x2ee0 [ 465.617808][T13127] do_syscall_64+0x58/0xf0 [ 465.617845][T13127] ? clear_bhb_loop+0x50/0xa0 [ 465.617872][T13127] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 465.617898][T13127] RIP: 0033:0x7f7b9a78f6c9 [ 465.617919][T13127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.617940][T13127] RSP: 002b:00007f7b991e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 465.617966][T13127] RAX: ffffffffffffffda RBX: 00007f7b9a9e5fa0 RCX: 00007f7b9a78f6c9 [ 465.617984][T13127] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 465.618001][T13127] RBP: 00007f7b9a811f91 R08: 0000000000000004 R09: 0000000000000000 [ 465.618016][T13127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.618031][T13127] R13: 00007f7b9a9e6038 R14: 00007f7b9a9e5fa0 R15: 00007ffdca5e9af8 [ 465.618052][T13127] [ 465.618069][T13127] Mem-Info: [ 465.918645][T13127] active_anon:28854 inactive_anon:34 isolated_anon:0 [ 465.918645][T13127] active_file:13062 inactive_file:11644 isolated_file:0 [ 465.918645][T13127] unevictable:16406 dirty:57 writeback:0 [ 465.918645][T13127] slab_reclaimable:5470 slab_unreclaimable:77118 [ 465.918645][T13127] mapped:36166 shmem:20178 pagetables:1306 [ 465.918645][T13127] sec_pagetables:0 bounce:0 [ 465.918645][T13127] kernel_misc_reclaimable:0 [ 465.918645][T13127] free:1456014 free_pcp:7967 free_cma:0 [ 465.974345][T13127] Node 0 active_anon:113368kB inactive_anon:136kB active_file:52248kB inactive_file:46576kB unevictable:65588kB isolated(anon):0kB isolated(file):0kB mapped:142616kB dirty:228kB writeback:0kB shmem:77236kB shmem_thp:4096kB shmem_pmdmapped:4096kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6916kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no [ 466.009273][T13127] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5724kB free_cma:0kB [ 466.051687][T13127] lowmem_reserve[]: 0 3921 3921 [ 466.056634][T13127] Normal free:2863460kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112768kB inactive_anon:136kB active_file:52248kB inactive_file:46576kB unevictable:65588kB writepending:228kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:31424kB local_pcp:7712kB free_cma:0kB [ 466.093872][T13127] lowmem_reserve[]: 0 0 0 [ 466.100556][T13127] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 466.117046][T13127] Normal: 440*4kB (UME) 557*8kB (UME) 312*16kB (UME) 653*32kB (UME) 847*64kB (UME) 363*128kB (UME) 259*256kB (UME) 168*512kB (UME) 52*1024kB (UME) 3*2048kB (UE) 622*4096kB (UM) = 2892200kB [ 466.137737][T13127] 58634 total pagecache pages [ 466.142790][T13127] 51 pages in swap cache [ 466.147328][T13127] Free swap = 120024kB [ 466.151934][T13127] Total swap = 124996kB [ 466.156192][T13127] 2097051 pages RAM [ 466.161164][T13127] 0 pages HighMem/MovableOnly [ 466.165981][T13127] 351537 pages reserved [ 466.171291][T13127] 0 pages cma reserved [ 466.177631][T13127] Memory allocations: [ 466.181688][T13127] 0 B 0 init/main.c:1370 func:do_initcalls [ 466.189027][T13127] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 466.197145][T13127] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 466.211276][T13127] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 466.219323][T13127] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 466.243254][T13127] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 466.251925][T13127] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 466.279985][T13127] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 466.307213][T13127] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 466.316444][T13127] 0 B 0 init/initramfs.c:101 func:find_link [ 466.399017][T13150] fuse: Unknown parameter '' [ 466.573287][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.588014][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.715866][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 467.682013][ T36] kauditd_printk_skb: 369 callbacks suppressed [ 467.682035][ T36] audit: type=1400 audit(2000000253.780:48934): avc: denied { create } for pid=13198 comm="syz.5.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.763842][ T36] audit: type=1400 audit(2000000253.864:48935): avc: denied { mounton } for pid=13198 comm="syz.5.4195" path="/328/file0" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 467.889354][ T36] audit: type=1400 audit(2000000253.986:48936): avc: denied { mounton } for pid=13207 comm="syz.5.4197" path="/330/file0" dev="tmpfs" ino=1814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 467.889890][T13209] overlayfs: failed to clone upperpath [ 467.919499][ T36] audit: type=1400 audit(2000000253.986:48937): avc: denied { read } for pid=13201 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 467.919697][T13209] overlayfs: failed to clone upperpath [ 467.942495][ T36] audit: type=1400 audit(2000000254.005:48938): avc: denied { read } for pid=13201 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 467.969843][ T36] audit: type=1400 audit(2000000254.014:48939): avc: denied { mounton } for pid=13207 comm="syz.5.4197" path="/330/file0" dev="tmpfs" ino=1814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 468.300602][ T36] audit: type=1326 audit(2000000254.371:48940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.5.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50cbf8f6c9 code=0x7fc00000 [ 468.358006][ T36] audit: type=1326 audit(2000000254.371:48941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.5.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50cbf8f6c9 code=0x7fc00000 [ 468.473665][ T36] audit: type=1400 audit(2000000254.530:48942): avc: denied { create } for pid=13217 comm="syz.6.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 468.518953][ T36] audit: type=1400 audit(2000000254.549:48943): avc: denied { write } for pid=13217 comm="syz.6.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 468.700234][T13225] netlink: 37 bytes leftover after parsing attributes in process `syz.6.4201'. [ 468.918670][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 468.924896][ T500] Bluetooth: hci1: command 0x1003 tx timeout [ 470.274397][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 471.146850][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 472.422768][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 472.982892][T13351] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4232'. [ 473.003077][T13350] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4232'. [ 473.024645][ T36] kauditd_printk_skb: 401 callbacks suppressed [ 473.024664][ T36] audit: type=1400 audit(2000000258.799:49345): avc: denied { read write } for pid=13349 comm="syz.7.4232" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.094625][ T36] audit: type=1400 audit(2000000258.827:49346): avc: denied { read write open } for pid=13349 comm="syz.7.4232" path="/dev/rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.149130][ T36] audit: type=1400 audit(2000000258.827:49347): avc: denied { write } for pid=13349 comm="syz.7.4232" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.177232][ T36] audit: type=1400 audit(2000000258.827:49348): avc: denied { read write } for pid=13349 comm="syz.7.4232" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.222976][ T36] audit: type=1400 audit(2000000258.827:49349): avc: denied { read write open } for pid=13349 comm="syz.7.4232" path="/dev/rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.267126][ T36] audit: type=1400 audit(2000000258.827:49350): avc: denied { write } for pid=13349 comm="syz.7.4232" name="rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.308041][T13361] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4236'. [ 473.330902][ T36] audit: type=1400 audit(2000000258.827:49351): avc: denied { map } for pid=13349 comm="syz.7.4232" path="/dev/rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.358843][ T500] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 473.399000][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 473.408513][T13364] Bluetooth: hci1: Frame reassembly failed (-90) [ 473.413032][ T36] audit: type=1400 audit(2000000258.827:49352): avc: denied { read } for pid=13349 comm="syz.7.4232" path="/dev/rnullb0" dev="devtmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 473.419636][T13365] Bluetooth: hci1: Frame reassembly failed (-84) [ 473.495171][ T36] audit: type=1400 audit(2000000258.827:49353): avc: denied { create } for pid=13349 comm="syz.7.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 473.497741][T13364] Bluetooth: hci1: Frame reassembly failed (-84) [ 473.560570][ T36] audit: type=1400 audit(2000000258.855:49354): avc: denied { read write } for pid=12757 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 473.828944][T13378] SELinux: failed to load policy [ 474.115863][T13389] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4244'. [ 475.569654][T10298] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 475.675730][T13402] /dev/rnullb0: Can't lookup blockdev Connection to 10.128.1.47 closed by remote host. [ 475.972807][ T588] usb 1-1: USB disconnect, device number 56 [ 476.028106][ T45] usb 6-1: USB disconnect, device number 85 [ 476.508207][ T46] bridge_slave_1: left allmulticast mode [ 476.513878][ T46] bridge_slave_1: left promiscuous mode [ 476.519551][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.527073][ T46] bridge_slave_0: left allmulticast mode [ 476.532766][ T46] bridge_slave_0: left promiscuous mode [ 476.538366][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.710991][ T46] veth1_macvtap: left promiscuous mode [ 476.716519][ T46] veth0_vlan: left promiscuous mode [ 478.194284][T13411] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 478.201087][T13411] ACPI: PM: Preparing to enter system sleep state S5 [ 478.208306][T13411] kvm: exiting hardware virtualization [ 478.213876][T13411] reboot: Power down serialport: VM disconnected.