last executing test programs: 3m39.564013124s ago: executing program 32 (id=152): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x22080) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x5}, 0x4) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = gettid() tkill(r3, 0x35) poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_getres(0xe2249e36e7addc67, 0x0) tkill(r5, 0x12) r7 = userfaultfd(0xc01) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000657000/0x2000)=nil, 0x2000}, 0x4, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$tipc(r8, 0x0, &(0x7f00000001c0)) utimes(0x0, &(0x7f00000002c0)={{0x77359400}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) mprotect(&(0x7f0000771000/0x4000)=nil, 0x4000, 0x2000002) read$FUSE(r1, &(0x7f0000002400)={0x2020}, 0x2020) 3m8.114706556s ago: executing program 1 (id=575): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580d000) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 3m8.113748776s ago: executing program 1 (id=576): creat(&(0x7f0000001380)='./file0\x00', 0x19e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x2a}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 3m8.044807177s ago: executing program 1 (id=577): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$xdp(0x2c, 0x3, 0x0) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) setuid(0xee01) socket$inet6(0xa, 0xa, 0xefb) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x80, 0x2, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7f00, 0x996, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x29, 0x4b, 0x8, 0x5, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x10, 0x20, 0x3, 0x20000007}}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4, r3, 0x6, r1}, 0x10) 3m8.028152537s ago: executing program 1 (id=578): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x8b22, 0x0, 0x0, 0xc, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13000000000000000000000000000000000800000000004000", [0x0, 0x2000000000001]}}) 3m8.008967227s ago: executing program 1 (id=579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) r2 = socket(0xa, 0x3, 0x3a) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 3m7.953392138s ago: executing program 1 (id=580): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd7000000000000700000014"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m52.768990268s ago: executing program 33 (id=580): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd7000000000000700000014"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m14.898657097s ago: executing program 4 (id=1434): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f00000000c0)=[{0x3ff, 0x2, 0x40, 0x3}, {0x7, 0x7, 0x0, 0x8}, {0x3, 0x5, 0x2, 0x1c0000}, {0x4, 0x8, 0x7, 0x8586}, {0x400, 0x2, 0x0, 0xffffffff}, {0xb, 0x3, 0x2f, 0x80}, {0x2f, 0x8, 0xa, 0xfffffffa}, {0x0, 0x1a, 0x8}, {0x80, 0xc, 0x2, 0x4}, {0x80, 0x81, 0xff, 0x4}]}, 0x10) bind$bt_hci(r1, &(0x7f00000007c0)={0x1f, 0x3, 0x1}, 0x6) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0xffff}) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_clone(0x21008700, &(0x7f0000000140)="19956bbab6d645dd4e953eeb1bd199bc8b14bdd43eb0640ddfca0467c6ca82d4939833fcfafcd281e79de6b1c23a637883beb038367105ff59a09c1b3b099adbb5c7bd2501c50ec33a220ae8fdd4246f6e4edefa26870f89ea", 0x59, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="f55eb80b6b967348b3d0a8525541787345d15e5b41363c9f53f2bd08633fdd272b1a4dc61ebaf11eb0106208") 2m14.898467397s ago: executing program 4 (id=1435): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x5, 0x1, 0x2, 0x80c708, 0x9, 0x8000000, 0x6}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2m14.897858977s ago: executing program 4 (id=1436): openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x3081, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r2, 0x1, 0x2a, 0x0, &(0x7f00000002c0)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) (async) fcntl$setstatus(r3, 0x4, 0x40000) (async, rerun: 32) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100)={0x6, 0x1}, 0x2) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r6 = gettid() (async) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000440)=""/248, 0xfa}], 0x1) (async) tkill(r6, 0x11) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 2m14.891568637s ago: executing program 4 (id=1437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03", 0xcc}, {&(0x7f0000000800)="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", 0x20d}, {&(0x7f0000000100)="c06a2f35af048c", 0x7}], 0x3}, 0x4008810) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe000) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = openat(r7, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35) read$FUSE(r8, &(0x7f0000002a40)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m14.873863258s ago: executing program 4 (id=1438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r3, 0x9) sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x4) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.818614978s ago: executing program 4 (id=1439): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) fadvise64(r4, 0xd, 0x6f4, 0x3) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="d493403445a9b97c03fbbd495a1c1976514de5f2954e469d2b2a55d2537f2e7b0c51ef199a0f634702174935732a7dc41b610110b9ccdac86720ca045c67f417a247d0155e6977e520a6e1d6223bce8fdb32b91198d801d61dd0c6478df8c9cb0e06ab191417e2b4e9f24a95748a9869486ee173a04716db2f7dcd51df2ae6f8500e2e22bf86c1e3070271f5b98053e50ed2778373bcdb3de52a43545e5662847aa2dcc2337a4e970619abdddd50651b3d576f9f", @ANYRES16=r2, @ANYRESHEX=r1], 0xbd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x404000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000200)={0x2000, 0x4000}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c69676e6f726571762c00fedcd127d94c32560ca5cf73009d9dc8752e7fc3a11deb37595b117709376cb0a6508a77b3dc07f836321e32e65c9aa8ff7c6f87cf87c3e8370541b0d7b32d1131ef10f536e2b23b2032b539845d1128357efcfb780de6ce8cd8e610e55d0ecd6c73e74b6d70ae20f893110c00000000000000dcba1b53ae6b6156b10a60b47c9c3f003b73b5dce68b357e0c62"]) linkat(r1, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) (async) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) rt_sigreturn() (async) sendfile(r8, r0, 0x0, 0x80000000) 2m8.812944721s ago: executing program 5 (id=1605): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r0, 0x47b75000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) getpeername(r1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m8.812707361s ago: executing program 5 (id=1606): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x400102, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='#@@%\'\x00') ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)=',+\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 2m8.807089932s ago: executing program 5 (id=1607): socket$key(0xf, 0x3, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60641, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x8c, 0xfb, 0xb6, 0x8, 0x7ca, 0xa867, 0x19f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc, 0x10, 0x5, [{{0x9, 0x4, 0x38, 0x81, 0x0, 0x8, 0x5, 0x50, 0x9}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) sendmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xff, 0xed, "7977779708a68368e55167a74dbf21542c019071a4ade23eab21ea6828e0988b79496d929a441485e187fa72bc99c92ce4e1a47825269df112250ec28fca25", 0x9}, 0x80, 0x0}, 0x48080) futex(0x0, 0xc, 0x801, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) pipe2$9p(0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0301"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write(r0, &(0x7f0000000200)="abcea1", 0x3) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x70, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe7}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x40, 0x4, 0x5, 0x3, "161e7de1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x8, 0x2, {0x7, 0x25, 0x1, 0x80, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0xbd, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3e, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x3, 0x7}}}}}}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x22052, r3, 0x4e4f1000) 2m8.279203177s ago: executing program 5 (id=1610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mkdir(0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') setns(r2, 0x20000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) mkdir(0x0, 0x0) (async) chdir(0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) setns(r2, 0x20000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) (async) 2m8.268205047s ago: executing program 5 (id=1611): r0 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000062d000/0x4000)=nil, 0x4000}}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[], 0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000ff06000022a8a11700"/23], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f000000b700)=@buf={0x28, &(0x7f000000b680)="5559187a24b49ee6d5ec2b2df3b4fb5fbc9a8e900d3e819d0674c797023059c8e0003a8a857566ef"}) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x6e) 2m8.146146038s ago: executing program 5 (id=1613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd, @fda={0x66646185, 0x2, 0x0, 0x9}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x1000}], 0x63, 0x0, 0x0}) 2m8.124223319s ago: executing program 34 (id=1613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10a, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd, @fda={0x66646185, 0x2, 0x0, 0x9}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x1000}], 0x63, 0x0, 0x0}) 1m59.612990589s ago: executing program 35 (id=1439): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) fadvise64(r4, 0xd, 0x6f4, 0x3) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB="d493403445a9b97c03fbbd495a1c1976514de5f2954e469d2b2a55d2537f2e7b0c51ef199a0f634702174935732a7dc41b610110b9ccdac86720ca045c67f417a247d0155e6977e520a6e1d6223bce8fdb32b91198d801d61dd0c6478df8c9cb0e06ab191417e2b4e9f24a95748a9869486ee173a04716db2f7dcd51df2ae6f8500e2e22bf86c1e3070271f5b98053e50ed2778373bcdb3de52a43545e5662847aa2dcc2337a4e970619abdddd50651b3d576f9f", @ANYRES16=r2, @ANYRESHEX=r1], 0xbd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x404000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000200)={0x2000, 0x4000}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c69676e6f726571762c00fedcd127d94c32560ca5cf73009d9dc8752e7fc3a11deb37595b117709376cb0a6508a77b3dc07f836321e32e65c9aa8ff7c6f87cf87c3e8370541b0d7b32d1131ef10f536e2b23b2032b539845d1128357efcfb780de6ce8cd8e610e55d0ecd6c73e74b6d70ae20f893110c00000000000000dcba1b53ae6b6156b10a60b47c9c3f003b73b5dce68b357e0c62"]) linkat(r1, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) (async) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) rt_sigreturn() (async) sendfile(r8, r0, 0x0, 0x80000000) 1m32.514222215s ago: executing program 3 (id=2271): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x22, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8000]}, 0x8, 0x80800) read$FUSE(r3, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x7, 0xa0000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$KDSKBENT(r5, 0x4b47, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) lseek(0xffffffffffffffff, 0x3, 0x4) syz_usb_connect(0x0, 0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="120150021312f14082055b936cbe0102ff25fb05052406000005240007000d240f01030000000300090006090504024000082700c643a8efea68412c2a54ff7a"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x9) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x4, 0xfffffff9, 0x10, "5c601fb662b5939cc98b2be965ccf6f26c5454c5708b5acbda5cdc6d9899d888798840b4fbf30a2086360449406526d5b3f7aec8a4ba8e9cb2cb53af3176087f", "a1bc60b887cf031dcad06859dd858f15c69dcbf5dddc31ecf2984883f1f2113d", [0x7, 0x6]}) 1m29.476231406s ago: executing program 3 (id=2321): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa78ed000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r1, 0x0, 0x38) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000040)=0x4e72, 0x4) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x5}, 0x7}}}, 0x3a) 1m29.390531277s ago: executing program 3 (id=2322): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x11ff, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) (async) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb18"], 0x58}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000002c0)=ANY=[@ANYBLOB='defcontext=\"', @ANYRES8=r0]) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000200)={0x98, "5545a11338a4448d266d6e2f860b526a61fcddb8a62bc1b0c778722029047d264da4446c3127c2040a6ab0c6dee8b120f733a78bbeffa9c2e8bf08dd10b243333820b6d12b4eb1f3fdb2d4430b7b47d40514ea860dc61f8fc04f9bcf1162d00206161cdddb13b74012392b73d4f244714352480ee60eb937f1ea5e28152c2e5b5a24a43da479b052c6fb3acba7f3a577149797646f1d4716"}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.389815867s ago: executing program 3 (id=2323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) pipe2(&(0x7f0000000100), 0x44080) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e20, 0x1, @loopback, 0x7fff}, {0xa, 0x4e24, 0x5, @mcast1, 0x9}, 0x0, {[0x96, 0xfffff7c6, 0xfffffc01, 0x1, 0xfffff000, 0x9, 0x4, 0x8]}}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1m29.361428988s ago: executing program 3 (id=2324): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x810, r0, 0x3adf000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 1m29.274738209s ago: executing program 3 (id=2325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) (async, rerun: 64) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (rerun: 64) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async, rerun: 64) fsmount(r4, 0x1, 0x84) (async, rerun: 64) pidfd_send_signal(r3, 0x1e, 0x0, 0x0) (async) ioctl$ASHMEM_GET_NAME(r0, 0x40047703, 0x0) 1m29.1312063s ago: executing program 36 (id=2325): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) (async, rerun: 64) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (rerun: 64) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async, rerun: 64) fsmount(r4, 0x1, 0x84) (async, rerun: 64) pidfd_send_signal(r3, 0x1e, 0x0, 0x0) (async) ioctl$ASHMEM_GET_NAME(r0, 0x40047703, 0x0) 20.656852973s ago: executing program 8 (id=3862): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) timerfd_create(0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1000) 20.598119593s ago: executing program 8 (id=3863): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='virtiofs\x00', 0x8000, &(0x7f00000000c0)='\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000140)={0x77359400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) fcntl$setown(r2, 0x8, r3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r7) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000300)={0x4, 0x0, 0x1ff, 0x0, 0x8, "c434fb6a2954780b807bd0f2e90a932783d53d"}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000340)={0x77359400}, 0x10) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000380)={0x1000, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KVM_GET_EMULATED_CPUID(r9, 0xc008ae09, &(0x7f0000000500)=""/246) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) close_range(r0, r11, 0x0) socket$netlink(0x10, 0x3, 0x7) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000000640)=0x2, 0x4) r12 = syz_usb_connect$uac1(0x6, 0xa8, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xb, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffd, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x4, 0x6, 0xd3be, 0x5, 0x4}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x6, "32bd2d"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x0, '.'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x10, 0x9, 0xd, {0x7, 0x25, 0x1, 0x1, 0x5, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbd, 0x9, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4b, 0xc, 0x40, 0x4, "5d0b3156c7cf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x4, 0x5, {0x7, 0x25, 0x1, 0x0, 0x9, 0xc38}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x501, 0x2, 0x7, 0x2, 0xff, 0x1}, 0xd9, &(0x7f0000000780)={0x5, 0xf, 0xd9, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x54, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x81, 0x8, 0x5, 0x4}, @generic={0xbf, 0x10, 0x2, "c5f081133f3164967f5c04af74dc25d54f175356248d965372dcdd2f9c57f554a07ada3bb3638e6f57ab8202fa3ce663c78ab3f6c1b20c64c4e45560b8880a0a754a0726a7877c99ea903ef1db085090b0d400ac37a8533134f39dc025434cd4b907b3f63d94b31e37c4622752b3efc1ca99a67001bda7faa92de2097618996a0aca331abf2b2981afd95f78aa543d5dd65d572352a60fa44612e2a2b879e2c506d44567648f62a4c5fd10dfa5b874d79b54fce53bd376d2a38f56c6"}]}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2a2b}}, {0xd5, &(0x7f0000000900)=@string={0xd5, 0x3, "e50588f7dbbd54fa7920eaf344b9f36908d581ec2caf443a98424daf6ea6de339d8b534f2192b5d00cc7790d09b9de2c14705aa1a91493736bd548b861761b8ea959213a309a8da5d33bf26667e03a1c8567bf73da2689b3820f621d4a985f28b8501dedc37907e2ea4c3e8fefd376e1456a1603bfa1d447479ac5038fd3dd84258f849f46bd6e5d4fdf75b705c522bd86fc5863812227403efea743a0a13c34bf38efa527a8a14fe25cc6985a2ac40319c7193a4002582798aff32a982623225e69fea9cdf632df9e388754513be284a731a0"}}, {0xe5, &(0x7f0000000a00)=@string={0xe5, 0x3, "b7c02793aafc4f6cc06ad970d9dc603a492b07aa11b63f27d3ded5e61e96e5ba23ae8b15288fbb5ebfaf8b86156a9ddc9c837d05d7320211479870f9d104c379f6aa5dca01f6eaeae604af1c898c00e410fa10f35c143e916e54e2a1f36617e875b94777be1c530b5253d12e4e383c8c943785e5a7e7e4b70a6c6292fd5e41fc148f729c67d6321dbae86156960f0c0bb3dea459ea34175ebc826b756e9d773da4d367f2ca7583969bfddffb7621ddb79938c9ad0434f46a5de02a3ff97b6c92be75a23599449c19959a632bf4ba7777c7ba193a5aa62f1194df423beae10d0b69d995"}}, {0xc, &(0x7f0000000b00)=@string={0xc, 0x3, "8e89e86f28d1c34b0dcd"}}, {0xf7, &(0x7f0000000b40)=@string={0xf7, 0x3, "b115bf0eb39d5bd9b11d86e3b49ee4bffda46c177744f2c5bfbb526fbf731ed03eb06ea385cd00c28ccc2104e3d277abcf5d3ad101c0de5d363050c5ede2a5d454b83d0d990f03306aa8fbb3f9daa0587e42a7575a7a13b14ae7887fcaf0c52f90588eafe3158fc24100d88065f6f62e2f8b1035fdaaa94abb1dd7c4edb0418716944ab7d3dc749f318f67f21978edddcceb7e9c0ff45a6ebbb23b76347a65e120c99b2690694d83455346a4f62c54c790124afc48d5ba970152474a6b4c75fc8454b0ab0b5881a48ab450236f80810f7b508314b601646f93091265f968089d797fb99efc59d6051a442bf9d71c3685f20558cae4"}}, {0xce, &(0x7f0000000c40)=@string={0xce, 0x3, "e8f0f5b51725425ac148d3f3ff72e8739793556737a3666f8f99e59d383ca297207bd6c22956ea851f62f213cfa873e8e6fb916d66b6bf727be42edc7472276b2e1b0461a96bd2d5936154981afa1e608e57e875e10d3efb77db9b7798b8d1269c889aeb812ef29360c74f89faf6822f009e48a75e9ac27ffc19f98854ee6b227c4a03880f08ac6d575fee0ae4c840307640864f02d9d1427554fa435af2df3c0d2bea6f1f5020e0dd33170c09c55e3134a9e6d3ff7b5ccb0ab0a0d5adf2d9842a6441b5e989680522809fdf"}}]}) syz_usb_control_io(r12, &(0x7f0000001000)={0x2c, &(0x7f0000000dc0)={0x40, 0x22, 0xff, {0xff, 0x21, "b9e1174988a8552769f4325bef7649ffc3b0901da2d895cfdfcf973aa2ff53f0e61226f80a9e30076b9c51c2da355a6ccd76a18dc35da8e29bc6f15c46b3ef7593c52b31cb1e153bd85ad9ec7a10dc32b70f29def179f8c29b869eb4fc563fc362eb5fadb6aaa8c15def830fc470175e53357698f49ab530b639641d49c3c0ecbd696d5bc9884b7cbe53ba868e38d3716aefad803c38d0402c9700783e947cc0b53e826f5ebcc52ed872eda09ec689177b3844812dd5ffbbd70aa72860afe841fe70803b2d68f5d72d897f83ee09468a5c8838c025c41077ce6387358e9120ba1045b9b374d6992e0cb55aba93b5646f34da5caac938ab17b8f416577e"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5b}}, &(0x7f0000000f40)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x3, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x4f, "ebf810d2", "779c689e"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x0, 0x7, 0x0, 0x7, 0x400, 0x101}}}, &(0x7f00000014c0)={0x84, &(0x7f0000001040)={0x40, 0x14, 0x91, "104936a95f55fcc2c3002bb1eb4eeda024c67575098a6b8342658fbac64bf9f28b0e3cefa89b3a14ddc47385a154571b7c1238b082a95348e3d640d2916b6bfbc17ba906a28dc868b10e7534d2a5641bfb86c218b1f910d2aca6f3020b2f2ad7bf8888a3ea10e4025bd2715bae08ce5343e8a4d091b1245f32d9405884105305616313c964fa7e0cfeb88aa4ab977a958a"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0xe7}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001180)={0x20, 0x0, 0x4}, &(0x7f00000011c0)={0x20, 0x0, 0x8, {0x1, 0x8, [0xf00]}}, &(0x7f0000001200)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001240)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001280)={0x40, 0xb, 0x2, "119f"}, &(0x7f00000012c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001300)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001340)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001380)={0x40, 0x19, 0x2, "9ef7"}, &(0x7f00000013c0)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000001400)={0x40, 0x1c, 0x1, 0xec}, &(0x7f0000001440)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001480)={0x40, 0x21, 0x1, 0xef}}) mount$9p_unix(&(0x7f0000001580)='./file1\x00', &(0x7f00000015c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002600), 0x40, &(0x7f0000002640)={'trans=unix,', {[{@mmap}, {@directio}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002700)={0x0, 0x4, 0x5, 0x1ff}) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x309) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000002740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket(0x1f, 0x80003, 0x7f) 20.050592449s ago: executing program 8 (id=3884): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000000100000000000008001f0001000000", 0x24) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x6, 0x0, 0x3f}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x15}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 20.047436429s ago: executing program 8 (id=3885): ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000280)="72ebd434a1f47a11472f7d3639e784c888f49e350fae97d663") r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700), 0x622700, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xe8, 0x0, &(0x7f0000000840)=[@clear_death={0x400c630f, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/158, 0x9e, 0x1, 0x2d}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fda={0x66646185, 0x5, 0x1, 0x2d}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @increfs_done, @free_buffer={0x40086303, r5}, @release={0x40046306, 0x4}, @increfs={0x40046304, 0x2}, @enter_looper, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/218, 0xda, 0x0, 0x17}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0x73, 0x0, &(0x7f00000004c0)="21897935c34c8f452d848d943df5907d38d8268348d1da6957d14ac2528378caa1126ad1b4b3ed3f90723066a4efd496dbc789fd09207373f595974cd9d07047cbd956dda6b78faca296902ce40c1586ec7c49539b71fbd37a5edaaceaaba3f3cc13761e1688346f35c30d56610eef11a463b7"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r8, &(0x7f00000001c0)=@known='system.sockprotoname\x00') r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) 20.012451169s ago: executing program 8 (id=3886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000fc020000000000000000000000000000fe8000000000000000000000000000fd00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.93085361s ago: executing program 8 (id=3889): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$null(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) setresgid(0xee00, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, &(0x7f0000001300)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sync() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0x2020) 3.83293876s ago: executing program 37 (id=3889): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$null(0xffffffffffffff9c, 0x0, 0xc2401, 0x0) setresgid(0xee00, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, &(0x7f0000001300)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sync() r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0x2020) 3.574533513s ago: executing program 7 (id=4165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x840) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x2}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x110a}, @flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.558463803s ago: executing program 7 (id=4166): syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x254142) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x8511c1931f70e30b, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x7fff, 0x4, 0x1f9f}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)={0x5, 0x3d, "2467364dcc31ff9bd4bd5f0ecfe14640dcb2da6715f1713cce363e691e2c461f69c4af0cfd4fbd2e3872190b10047e486d65a1dfd24291781f8732fa1a"}) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5d1b}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xcda6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x44000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x28792000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000680)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) r6 = getpid() r7 = syz_clone3(&(0x7f0000001840)={0x1000000, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780), {0x1ff}, &(0x7f00000007c0)=""/4096, 0x1000, &(0x7f00000017c0)=""/11, &(0x7f0000001800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000018c0)={0x0, 0x0}) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001980)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000019c0)={0x50050000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x7}, &(0x7f00000005c0)=""/65, 0x41, &(0x7f0000000640)=""/35, &(0x7f0000001940)=[r4, r5, 0x0, r6, r8, r9], 0x6, {r10}}, 0x58) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001bc0)={0x1, 0x24}, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002c80)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000, 0x1, &(0x7f0000002c00)=""/123, 0x7b}, &(0x7f0000002cc0)=0x40) sendmsg$TIPC_CMD_GET_LINKS(r12, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x8010) write$cgroup_pid(r12, &(0x7f0000002e00)=r7, 0x12) ioctl$FIOCLEX(r2, 0x5451) ioctl$sock_SIOCINQ(r12, 0x541b, &(0x7f0000002e40)) 3.494642444s ago: executing program 9 (id=4162): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="dca65ae67d358391da936a3aaf75e930af885e86d0990679f620fd39973fba3b18a9dff9cdc454a865d5632a7a1d8980356f00fdcceb64e79e131aace82a7c1f26666916cd503ddab20d313e0c80cd3c943f119141f79f0fc7c1b631885c2b0dfc20b025f6781155f31a0bceb94e1042988e47e25684a3fb5f678b7c6b80c275321e1cf66254e817e83f1f1fa3802b80c6c256007fcc7ad1216b0e633f3cf7b65e1c1415992780292a40d01e541501f9bb48cd315b7a7da99856f00d97a39a0c13e0b7a38b03797f1185f6ca85b9b5912ea6977ac701800bae687292a9f3e818ec34306e7f1830e9fb76b91a007dade4941419ce09bd98b9f3dee9763d166bbd645f97868ed9da861cba65e6104806c9aa97308aaebbef2645b3014a157cb013e0884cd6a0bb84ac74c660f06403a756e53f80028dc87f2666cde6b068022ceaef522576b22a3b020d313f2036a9bb3e34e8d5ad29649680df5b87f8597f9a4b6cb70d230178e79a434b7b4ec2f708d9100b57766a68482e6e1deeac8475faac69c62a9f805b5059e540f433c859e1cca11afbff9c9666205a0a8a2acae36c7ef4ea28b2242a0f9ee3fa6610764d05f54bebad7e9d0178b6d839927bc466bd44521fca214d2f8f81c05524edef23eb0c7a61bcddeeeed8f9e7e6427b038dda8e3f122c7c7b867f2a3b0d6c8482bc374eea80a689a241221b2844cd006ca5a1890cea188055c4cafbc4af3f643f391a22ce10eb2d9be9f76b2ea817fded6f04669408e7b886ecb858091e6223e1a12232d7bcfe93ac45371061e5a4b4f05a5318e1294206a490c11c8ec82e30a53245aea19e", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00') read$FUSE(r3, &(0x7f0000001400)={0x2020}, 0x2020) open_tree(r3, &(0x7f0000000040)='./file0/file0\x00', 0x8901) shutdown(r2, 0x1) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r4, 0x0, 0x80000000) 3.438381684s ago: executing program 9 (id=4167): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x9, 0x802c, 0x0, 0x8, 0x0, 0xac, 0x5, 0x2, 0x1}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7702fdff003d", @ANYRESHEX=r3, @ANYBLOB=',ignoreqv,\x00']) (async) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) sendfile(r6, r0, 0x0, 0x80000000) 3.437342614s ago: executing program 9 (id=4168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000085806155040000102030109022400010101106b0904000d01030102000921ffff08012212030905810308004000091ff410a9dd32c33dbe053c0139ec51e020cbd412a5e035a890dd5b606dc9d33285c1ccb65d258c4f14d21788204a95f4fbc2ce4d2d232afe38fd1f2d5287a8a65b57c7cc186d0afea82eefefa9d728be1b18ef08d32429e046025c1e2cdaae87b4d1640ddd80559befe4fc777c0ddb2e4c1ed244c5d862f86421bf6e2ed55380e7518dd01966164b9828e9"], &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/disk', 0x200, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 3.384952345s ago: executing program 38 (id=4168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000085806155040000102030109022400010101106b0904000d01030102000921ffff08012212030905810308004000091ff410a9dd32c33dbe053c0139ec51e020cbd412a5e035a890dd5b606dc9d33285c1ccb65d258c4f14d21788204a95f4fbc2ce4d2d232afe38fd1f2d5287a8a65b57c7cc186d0afea82eefefa9d728be1b18ef08d32429e046025c1e2cdaae87b4d1640ddd80559befe4fc777c0ddb2e4c1ed244c5d862f86421bf6e2ed55380e7518dd01966164b9828e9"], &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/disk', 0x200, 0x4) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 1.487521665s ago: executing program 2 (id=4194): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, 0x0) shutdown(r0, 0x1) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40e, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000003080)) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) 1.223643698s ago: executing program 2 (id=4195): r0 = eventfd2(0xffffffff, 0x1) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = memfd_secret(0x0) finit_module(r1, 0x0, 0x3) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925017a28bd6e75a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff94a69a45824a40b3ebcc40cce194a8b08309e69eb997ef51e73af337dac630cf72a770cd982789ef18bfd4074f06ad20d8faecee5a744be348cc0abd9b280c8df2d07b4d143651c1735b30741bf569d8b1851ee369f0e31977580601436140a3df36eced03d7fe8c5b67261733817fe6697c6e28aad68455ebfe7ecb1ac92ba1dc4c0fbeae1bd550172fe2db47c6f231201eb99287", 0xf3}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00') read$FUSE(r7, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000100), 0x1004002, &(0x7f0000000000)=ANY=[@ANYRES8=r3]) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.192766898s ago: executing program 2 (id=4196): socket(0x29, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.167731378s ago: executing program 2 (id=4197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x11, 0xb}, {0x1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x1804}, 0x20000000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8004044}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fe88f976806163088c0001801400020067656e65766530000000000000000000080003000200000008000100e6606bd1ebcea66c2a43abd7d2d4ea1b38614e3cbdf688ff6337cecd000074069468539aa3143132140af7325dd5a58549", @ANYBLOB="f723e1887e9f29b4ed60a36df95bf888531397e0dafc644143a017fc00ef022e0afd48f75ae9b8416cd797c80372dfcb8727a3073f226628161cdc890a7e2e37c40e9a95438b93d5d94b607ca7325ce9a202313c23aac58c100813923e49343ff64a4d1af2a3eac1588a68fff35de050eea83d6efa849c38449c484ce42408571f223a2b408ce002d0f1f4665ff2d6f2b2c75eb6291a0d0d88708e8793fbe89122d7d65dfb1dea497ad362222118a8c156bcd7a8283b8d075c3d2a5bbb93faea4ea454f517c1e8e1a8dd5409", @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000100", @ANYRES32=r11, @ANYBLOB="0800030003000000080003000300000014000180080003000300000008000100", @ANYRES32=r12, @ANYRES8=r4], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r13 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x3}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 316.856777ms ago: executing program 6 (id=4207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = getpgid(r1) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r2, 0x0, 0x8}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c472356696e"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000002c0)={'system_u:object_r:mount_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x9}, 0x46) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000180)) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x1e, 0x1, 0x70bd25, 0x25dfdbfb, {0x1a}, [@generic="9b05a331b5"]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 316.096167ms ago: executing program 7 (id=4208): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc8900, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) (async) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x7, 0x412242) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {&(0x7f00000014c0)=""/207, 0xcf}], 0x2, 0x0, 0xfffffffc) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x20000040) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x4000000) (async, rerun: 64) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x1) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002080)={0x0, 0x0}, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4045) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000180)=0x9) 308.925188ms ago: executing program 6 (id=4209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x800) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x0, 0x8]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 262.974118ms ago: executing program 6 (id=4211): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@newsa={0x1dc, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}, [@algo_comp={0xec, 0x3, {{'deflate\x00'}, 0x520, "3eb50c080c3c816001d30ac45f8ae15ca0c4ab4f6e8a931ac091d1de3d7fe1183d981f27379a2294565a9d35e3b2d2b883d78f53a6f24fb088c64772ddfef869c74fe3fe0329ce6512b36a711cd22ddf4b5b4a4c472e1cc37c0a298f944425e27dc4c62580a4dee3b3f56ee6409d2d35d69cc98fb5b51086e61a716040f0bbaad64f4dc2a0a5c642dd3766fb3495c2ce9402f063e3dcdde4852e90f41250f9ed4522b382"}}]}, 0x1dc}}, 0x4000040) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x14800, &(0x7f0000000000)={[], [{@seclabel}]}) 255.377248ms ago: executing program 7 (id=4212): madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 248.291098ms ago: executing program 7 (id=4214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}}) process_vm_writev(0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030ffffb41e5d4cb789f8d23030302c757365725f69643db435c1c6297d568a6386ec6da7d9741bf9fc33ead4528a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20002000}) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000000080), 0x4) socket$tipc(0x1e, 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r12, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000200)=[@cr0={0x0, 0x40000000}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fstat(r5, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001080)={0x0, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x6, {0x454}}, &(0x7f00000004c0)={0x18, 0x0, 0x1, {0x80000001}}, 0x0, &(0x7f00000005c0)={0x18, 0xfffffffffffffff5, 0xab0a, {0x4ac7}}, &(0x7f0000000600)={0x28, 0x0, 0x200, {{0x1, 0x1, 0x1, r8}}}, &(0x7f0000000640)={0x60, 0x0, 0x0, {{0x8, 0x6, 0x7, 0x7, 0x3, 0x7fff, 0x81, 0xe4}}}, &(0x7f00000006c0)={0x18, 0xfffffffffffffff5, 0x5, {0x80000001}}, &(0x7f0000000700)={0x12, 0x0, 0x6ddba7f9, {'[\x00'}}, &(0x7f0000000740)={0x20, 0xb, 0xff, {0x0, 0x8}}, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x9, 0x5, 0x0, {0x0, 0x9, 0x8001, 0x5, 0x62c6, 0x8, 0xb, 0xfffffff8, 0x8, 0x8000, 0x48, 0x0, r7, 0xcb0, 0xa023}}}, 0x0, &(0x7f00000008c0)={0x68, 0x0, 0xf6, [{0x3, 0x2, 0x0, 0xd9a}, {0x5, 0x5, 0x1, 0x8, '.'}, {0x1, 0x4, 0x5, 0x59, '\x03\x01\x00\x00\x00'}]}, &(0x7f0000000b00)=ANY=[@ANYBLOB="28030000feffffff030000000000000001000000000000000000000000000000ab040000000000000000000000000000060000000500000004000000000000000500000000000000040000000000000007000000000000000200000000000000f8ffffffffffffff0500000001000000150000000040000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000d5000000000000000200000000000000ac1e00000000000002000000c71affff666400000000000000000000000000000300000000cf827d600ea352b88e9687efc009ea6d000000ab570000000000000600000000000000030000000a00000001000000000000000600000000000000df7600000000000007000000000000000a00000000000000090000000000000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000ff7f00000000000003000000000000001700000000000000000000000180ffff0600000000000000000000000000000002000000000000007affffffffffffff00000000010000000200000000000000090000000000000004000000000000000700000000000000020000000000000008000000000000007f000000fbffffffaed0000000c000000c000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="110c000007000000000000000300000000000000ff07000000000000080000000700000067726f75705f69640000000000000000020000000000000000000000000000000000010000000000faffffff020000000600000000000000060000000000000027b8000000000000fdffffffffffffffff00000000000000ff7f0000000000000a000000070000000600000000100000fee00000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="05000000991d00000000000002000000000000000900ca0000000000080000000180000067726f75705f6964000000000000000003000000000000000000008000000000ff0000000000000008000000040000000400000000000000090000000000000003000000000000f90000000000000000080000000000000000000000000000000700000001000000040000000010000003000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="0100000004000000000000000500000000000000cf00000000000000010000000800"/44], &(0x7f0000000e40)={0xa0, 0x0, 0x8, {{0x2, 0x3, 0x8000000000000000, 0x3, 0xaa, 0x1, {0x4, 0x0, 0x0, 0x40, 0x3, 0x7, 0x6, 0x0, 0x400, 0x2000, 0x9, 0x0, r7, 0xffffff80, 0x9a8e}}, {0x0, 0x5}}}, &(0x7f0000000f00)={0x20, 0x0, 0x0, {0x3, 0x4, 0x3, 0x7}}, &(0x7f0000000f40)={0x130, 0x0, 0x6, {0x9, 0x8, 0x0, '\x00', {0x40, 0x7, 0x10, 0x4, r6, r7, 0x4000, '\x00', 0x3, 0x1, 0xe55, 0x1, {0x5, 0x760}, {0x6, 0x8}, {0x3ac, 0x2}, {0x6, 0x5}, 0x1cb320f, 0xffffffff, 0x4, 0x6}}}}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 237.278948ms ago: executing program 2 (id=4215): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000200)=ANY=[@ANYBLOB="024f350f4e6c49f7ff060000000000000036364636c54d828877c6ba18b4c511146d0e85a995a7b5c8698c403f690f34b1cb35e4a3281e345e0d2d5f25dba38c974e77b5a1524235666549c06d2821246a411c5d7f99885ef814695ea64455159c3b10dd129cce06db355660a6f766833e62a9d18964afdb3537bd910984", @ANYRESOCT=0x0], 0x14, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = eventfd(0x3b0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000180)={r1, 0x2, 0x0, r2}) 232.328948ms ago: executing program 6 (id=4216): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8) write$P9_RGETLOCK(r3, 0x0, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/194, 0xc2}, {&(0x7f0000001a40)=""/124, 0x7c}, {&(0x7f0000001ac0)=""/215, 0xd7}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r6, &(0x7f00000000c0)="7185cd20bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800021, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRES32=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r6]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) socket$inet6(0xa, 0xa, 0xc0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)="3193f4b7b505668ca04e9574f4e19e1762ce9810b27929eba43ea28eaa051e81b18bcd778cef5890ed900e71fd26b141e9d639fca4d7fcc0bdecf999c4237f9928f70622c7842e48e6f4e45e6a751c6b103e7d8faa625f9d3b1679e1b4559e9c9e06", 0x62, 0x24044081, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe40}, 0xfffffffffffffff3) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000100)=0x2) mkdir(&(0x7f0000000200)='./file0\x00', 0x4c) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 186.664109ms ago: executing program 6 (id=4217): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a8002, 0x0) preadv2(r0, &(0x7f0000000880), 0x0, 0xa67, 0x2, 0xf) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4a8002, 0x0) (async) preadv2(r0, &(0x7f0000000880), 0x0, 0xa67, 0x2, 0xf) (async) 185.529119ms ago: executing program 0 (id=4218): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 184.994659ms ago: executing program 6 (id=4219): r0 = memfd_create(&(0x7f0000000800)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x05\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\xe0\x06\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\x06\x00\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9d\xd9\xa6\xe5\x00\x17\v\xc2\xd1\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03CatV\xe9\\#\xf8O\fw\xd9%cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbTA\xe6\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03\x1a\xb30\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xde\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\x97\xef\xdb\xcf\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x03\x9bh\x94m\xea\xea\x82c\x10\xacm\xce\xe2z\x92\x16\x8f*\xd3I\xe4AB\xd3\a\x1c\x14\xfb\x84\xa0\xa6\xdbW\x9b E\xa4W\x04\xe11+\xb9\xf6I\xf8\x1a\x82\x86\xdd\xa4m.A\xf7\xa97?Y\x10~\xd6\xb0\x91\x14\x17\xa9\x9ax\f\xa3V\xb0\xbb\xda\xf3,7\x14\x15\xbd\x8a\xbb\x1a\xf1\af\x92\x92\x12\xa5!\xee]\x7f\xce@\x85Id\x95\xdb\xb1#<\xe0\x83\x1bB\xe2\x86\xae*\xe49\xb9\xc4\xf3G\xc7\x10\xa4\n\x92\xe5\xaf\x86Mq\x8e\x06\xc5\xb8*\xc0\xd4b\xfd\xcd\xf9\x90\xae\f\xb44}\xe5 \x88\xa9\b\x01X\x9fo=\xe5jO\f|\x920x0}, 0x2020) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x58, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x2f, 0x0, r7}, 0x80004, 0x2}, [@proto={0x5, 0x19, 0x6c}]}, 0x58}, 0x1, 0x0, 0x0, 0x180}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x8920, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0200001300e999fdfffffffedbdf25fc000000000000000000000000000000000000000000000000000000000000000000e9d8000100c40a00600000000000", @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="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"/662], 0x2ec}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 139.709889ms ago: executing program 7 (id=4221): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, 0x0) (async) shutdown(r0, 0x1) (async, rerun: 32) rt_sigprocmask(0x1000000, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) (async, rerun: 32) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40e, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) 61.53777ms ago: executing program 0 (id=4222): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x15) unshare(0x8040600) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) dup(r7) mount$9p_fd(0x0, 0x0, &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB='2=_dno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@xino_auto}]}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0x10001, 0x0) 60.13548ms ago: executing program 0 (id=4223): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4010) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='.\x00', 0xffffffffffffffec}, {&(0x7f00000001c0)="2d400000805892bd031863af71156ddffc012c4551893445e3d0607db40e5a3f92f63252f497cd3d19ee3026c5159e89a751b6cd7f0380f0f54c03bab1aa9e680a8a6132e213dd993ae1875071a1362d5afdbebb04be8f6c0995b87e6daa209c772ffa7e62c850672ad21ea8836e000000", 0x71}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='.\x00', 0xffffffffffffffec}, {&(0x7f00000001c0)="2d400000805892bd031863af71156ddffc012c4551893445e3d0607db40e5a3f92f63252f497cd3d19ee3026c5159e89a751b6cd7f0380f0f54c03bab1aa9e680a8a6132e213dd993ae1875071a1362d5afdbebb04be8f6c0995b87e6daa209c772ffa7e62c850672ad21ea8836e000000", 0x71}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) (async) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r5, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0x6f90, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0xffffffffffffffa3}}], 0x1, 0x2000, 0x0) (async) recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0xffffffffffffffa3}}], 0x1, 0x2000, 0x0) getsockopt$inet6_int(r1, 0x29, 0xce, 0x0, &(0x7f0000002940)) 22.435811ms ago: executing program 0 (id=4224): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x94001, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xc) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 14.409ms ago: executing program 0 (id=4225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r4, 0xb8ec5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r6 = eventfd(0xfffffff8) write$eventfd(r6, &(0x7f0000000080)=0xd, 0x8) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=4226): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="06070000006f3d", @ANYRESHEX=r3, @ANYBLOB=',ignoreqv,\x00']) (async) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) (async) write(r6, &(0x7f0000001340)="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", 0x7d3) sendfile(r5, r0, 0x0, 0x80000000) kernel console output (not intermixed with test programs): rsing attributes in process `syz.3.1784'. [ 138.064763][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.071834][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.079152][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.086241][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.111455][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.118944][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.130540][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.137643][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.147740][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.154845][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.192313][ T5782] veth0_vlan: entered promiscuous mode [ 138.207581][ T5782] veth1_macvtap: entered promiscuous mode [ 138.253819][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1781'. [ 138.346178][ T5839] /dev/rnullb0: Can't lookup blockdev [ 138.363388][ T5841] kvm: MWAIT instruction emulated as NOP! [ 138.477263][ T5883] 9pnet_fd: Insufficient options for proto=fd [ 138.502547][ T5890] fuseblk: Bad value for 'fd' [ 138.652697][ T5908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 138.690320][ T36] audit: type=1400 audit(1752235584.795:1046): avc: denied { read } for pid=5909 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.927861][ T5926] xfrm0: mtu less than device minimum [ 139.522938][ T5972] fuse: Bad value for 'group_id' [ 139.525767][ T36] audit: type=1400 audit(1752235585.611:1047): avc: denied { mounton } for pid=5971 comm="syz.0.1833" path="/489/file0" dev="tmpfs" ino=2679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.530035][ T5972] fuse: Bad value for 'group_id' [ 139.565710][ T5974] rust_binder: 5974: no such ref 3 [ 139.571222][ T5974] rust_binder: 5974: no such ref 3 [ 139.576554][ T5974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 139.641832][ T45] Error reading MAC address [ 139.668429][ T45] usb 7-1: USB disconnect, device number 6 [ 139.975528][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 139.995844][ T64] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 140.138034][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 140.145128][ T45] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 140.149859][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 140.155384][ T45] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 140.178805][ T64] usb 8-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 140.188100][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.196489][ T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.206197][ T64] usb 8-1: config 0 descriptor?? [ 140.215093][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.215408][ T5988] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 140.225874][ T45] usb 7-1: SerialNumber: syz [ 140.242772][ T5983] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.252283][ T45] usb 7-1: bad CDC descriptors [ 140.517028][ T428] usb 7-1: USB disconnect, device number 7 [ 140.650307][ T36] audit: type=1326 audit(1752235586.723:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6017 comm="syz.3.1847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd26b8e929 code=0x0 [ 140.651018][ T64] itetech 0003:06CB:2968.0007: unknown main item tag 0x0 [ 140.701111][ T64] itetech 0003:06CB:2968.0007: item fetching failed at offset 3/5 [ 140.717316][ T64] itetech 0003:06CB:2968.0007: probe with driver itetech failed with error -22 [ 140.962887][ T45] usb 8-1: USB disconnect, device number 2 [ 141.156677][ T6038] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 185) [ 141.156708][ T6038] rust_binder: Error while translating object. [ 141.167668][ T6038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.174177][ T6038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 141.184487][ T6038] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 141.193890][ T6038] rust_binder: Read failure Err(EFAULT) in pid:93 [ 141.206347][ T6044] fuseblk: Bad value for 'user_id' [ 141.218209][ T6044] fuseblk: Bad value for 'user_id' [ 141.227036][ T6046] rust_binder: Write failure EFAULT in pid:95 [ 141.488242][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 141.640447][ T64] usb 7-1: device descriptor read/64, error -71 [ 141.679671][ T6077] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 141.715375][ T6086] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1869'. [ 141.724909][ T6086] 9pnet_fd: Insufficient options for proto=fd [ 141.774525][ T6095] fuseblk: Bad value for 'fd' [ 141.779609][ T6095] netlink: 'syz.3.1872': attribute type 11 has an invalid length. [ 141.787497][ T6095] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1872'. [ 141.883973][ T64] usb 7-1: device descriptor read/64, error -71 [ 141.949738][ T6123] fuseblk: Bad value for 'fd' [ 142.127271][ T64] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 142.211350][ T6138] netlink: 'syz.0.1888': attribute type 46 has an invalid length. [ 142.259079][ T64] usb 7-1: device descriptor read/64, error -71 [ 142.270568][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 142.353140][ T6154] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1894'. [ 142.502615][ T64] usb 7-1: device descriptor read/64, error -71 [ 142.573439][ T36] audit: type=1326 audit(1752235588.625:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.7.1895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe24838e929 code=0x0 [ 142.613958][ T64] usb usb7-port1: attempt power cycle [ 142.625841][ T6158] rust_binder: Write failure EFAULT in pid:90 [ 142.705536][ T6166] incfs: Options parsing error. -22 [ 142.717042][ T6166] incfs: mount failed -22 [ 142.893751][ T6170] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6170 comm=syz.0.1900 [ 142.958515][ T64] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 142.979745][ T64] usb 7-1: device descriptor read/8, error -71 [ 143.111434][ T64] usb 7-1: device descriptor read/8, error -71 [ 143.250363][ T36] audit: type=1326 audit(1752235589.277:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6178 comm="syz.3.1902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd26b8e929 code=0x0 [ 143.355300][ T64] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 143.374885][ T64] usb 7-1: device descriptor read/8, error -71 [ 143.474902][ T6194] batadv_slave_0: entered promiscuous mode [ 143.481715][ T6193] batadv_slave_0: left promiscuous mode [ 143.508015][ T64] usb 7-1: device descriptor read/8, error -71 [ 143.553422][ T36] audit: type=1400 audit(1752235589.583:1051): avc: denied { map } for pid=6201 comm="syz.0.1911" path="socket:[31206]" dev="sockfs" ino=31206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.616952][ T64] usb usb7-port1: unable to enumerate USB device [ 143.936212][ T36] audit: type=1400 audit(1752235589.958:1052): avc: denied { create } for pid=6229 comm="syz.0.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.973229][ T6234] netlink: 'syz.0.1923': attribute type 4 has an invalid length. [ 143.981086][ T6234] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1923'. [ 144.026748][ T36] audit: type=1400 audit(1752235590.047:1053): avc: denied { mount } for pid=6239 comm="syz.0.1925" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 144.027209][ T6240] overlayfs: failed to clone lowerpath [ 144.149212][ T6254] x_tables: unsorted underflow at hook 4 [ 144.247498][ T6279] overlayfs: failed to clone upperpath [ 144.373056][ T6298] incfs: Options parsing error. -22 [ 144.390309][ T6298] incfs: mount failed -22 [ 144.573418][ T292] bridge_slave_1: left allmulticast mode [ 144.580296][ T292] bridge_slave_1: left promiscuous mode [ 144.588986][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.600362][ T292] bridge_slave_0: left allmulticast mode [ 144.609911][ T292] bridge_slave_0: left promiscuous mode [ 144.621067][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.731392][ T6327] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 144.766441][ T292] veth1_macvtap: left promiscuous mode [ 144.777477][ T292] veth0_vlan: left promiscuous mode [ 144.927626][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.934862][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.945735][ T6340] bridge_slave_0: entered allmulticast mode [ 144.952257][ T6340] bridge_slave_0: entered promiscuous mode [ 144.959138][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.966438][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.973924][ T6340] bridge_slave_1: entered allmulticast mode [ 144.980415][ T6340] bridge_slave_1: entered promiscuous mode [ 145.063890][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.071013][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.078338][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.085401][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.118573][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.127961][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.139477][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.146585][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.171434][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.178540][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.209492][ T6340] veth0_vlan: entered promiscuous mode [ 145.223743][ T6340] veth1_macvtap: entered promiscuous mode [ 145.336112][ T6353] rust_binder: Read failure Err(EAGAIN) in pid:111 [ 145.347012][ T36] audit: type=1400 audit(1752235591.352:1054): avc: denied { shutdown } for pid=6351 comm="syz.6.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.516649][ T36] audit: type=1400 audit(1752235591.520:1055): avc: denied { append } for pid=6356 comm="syz.6.1967" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 145.616299][ T36] audit: type=1326 audit(1752235591.609:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9df8e929 code=0x7fc00000 [ 145.843997][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 146.027111][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1983'. [ 146.302745][ T36] audit: type=1400 audit(1752235592.301:1057): avc: denied { mount } for pid=6381 comm="syz.6.1977" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 146.325508][ T6425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.435925][ T6425] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.450347][ T6425] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 146.458708][ T6425] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.466658][ T6425] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 146.488536][ T6434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1996'. [ 146.688713][ T6448] rust_binder: 6448: no such ref 0 [ 146.694313][ T6448] rust_binder: Write failure EINVAL in pid:14 [ 146.750485][ T6448] rust_binder: Read failure Err(EAGAIN) in pid:14 [ 146.888803][ T6455] batadv_slave_0: mtu less than device minimum [ 146.964231][ T6465] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 146.973683][ T6465] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 146.983182][ T6465] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 146.992744][ T6465] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 147.003626][ T6465] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 147.005520][ T6468] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2014'. [ 147.125586][ T36] audit: type=1400 audit(1752235593.113:1058): avc: denied { mounton } for pid=6488 comm="syz.3.2017" path="/file0" dev="ramfs" ino=33300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 147.176843][ T36] audit: type=1326 audit(1752235593.162:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6494 comm="syz.7.2018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf238e929 code=0x0 [ 147.337099][ T6505] binder: Bad value for 'stats' [ 147.465625][ T6514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.536836][ T6516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 147.621579][ T6518] __vm_enough_memory: pid: 6518, comm: syz.6.2027, bytes: 1152922604118523904 not enough memory for the allocation [ 147.740086][ T6543] tmpfs: Unknown parameter '' [ 148.031936][ T6600] binder: Bad value for 'stats' [ 148.549805][ T6630] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2065'. [ 148.832878][ T46] bridge_slave_1: left allmulticast mode [ 148.838929][ T46] bridge_slave_1: left promiscuous mode [ 148.844796][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.852949][ T46] bridge_slave_0: left allmulticast mode [ 148.858667][ T46] bridge_slave_0: left promiscuous mode [ 148.865328][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.875782][ T46] tipc: Resetting bearer [ 148.897927][ T46] tipc: Disabling bearer [ 149.030647][ T46] tipc: Left network mode [ 149.051726][ T6658] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.059795][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.067277][ T6658] bridge_slave_0: entered allmulticast mode [ 149.073854][ T6658] bridge_slave_0: entered promiscuous mode [ 149.082756][ T46] veth1_macvtap: left promiscuous mode [ 149.194487][ T6658] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.218615][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.225747][ T6658] bridge_slave_1: entered allmulticast mode [ 149.249020][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 149.249039][ T36] audit: type=1400 audit(1752235595.223:1062): avc: denied { shutdown } for pid=6682 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.282963][ T6658] bridge_slave_1: entered promiscuous mode [ 149.408360][ T6658] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.415460][ T6658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.422826][ T6658] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.429916][ T6658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.462325][ T6696] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 208, size: 144) [ 149.462354][ T6696] rust_binder: Error while translating object. [ 149.483471][ T6696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.497329][ T6696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 149.507179][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.530605][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.550829][ T6700] netlink: 'syz.3.2089': attribute type 4 has an invalid length. [ 149.559533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.566711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.590521][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.597598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.650394][ T6658] veth0_vlan: entered promiscuous mode [ 149.670618][ T6658] veth1_macvtap: entered promiscuous mode [ 149.812393][ T6729] rust_binder: Failed to allocate buffer. len:4208, is_oneway:true [ 149.812433][ T6729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 149.820388][ T6729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:76 [ 150.053097][ T400] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 150.113583][ T64] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 150.225605][ T400] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.238611][ T400] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.244681][ T64] usb 7-1: device descriptor read/64, error -71 [ 150.248048][ T400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.262230][ T400] usb 1-1: Product: syz [ 150.266438][ T400] usb 1-1: Manufacturer: syz [ 150.271027][ T400] usb 1-1: SerialNumber: syz [ 150.277882][ T400] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 150.284719][ T400] cdc_ncm 1-1:1.0: bind() failure [ 150.290746][ T400] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 150.297579][ T400] cdc_ncm 1-1:1.1: bind() failure [ 150.496676][ T64] usb 7-1: device descriptor read/64, error -71 [ 150.695137][ T6749] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 95) [ 150.695163][ T6749] rust_binder: Error while translating object. [ 150.705860][ T6749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.712200][ T6749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 150.738640][ T64] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 150.777759][ T36] audit: type=1400 audit(1752235596.730:1063): avc: denied { mounton } for pid=6755 comm="syz.7.2109" path="/34/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 150.889836][ T64] usb 7-1: device descriptor read/64, error -71 [ 151.131782][ T64] usb 7-1: device descriptor read/64, error -71 [ 151.242925][ T64] usb usb7-port1: attempt power cycle [ 151.351224][ T6770] netlink: 'syz.3.2113': attribute type 19 has an invalid length. [ 151.370131][ T6772] /dev/loop0: Can't lookup blockdev [ 151.412116][ T6778] overlayfs: failed to clone upperpath [ 151.585169][ T64] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 151.606319][ T64] usb 7-1: device descriptor read/8, error -71 [ 151.747397][ T64] usb 7-1: device descriptor read/8, error -71 [ 151.988229][ T64] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 152.009388][ T64] usb 7-1: device descriptor read/8, error -71 [ 152.140436][ T64] usb 7-1: device descriptor read/8, error -71 [ 152.250198][ T64] usb usb7-port1: unable to enumerate USB device [ 153.406092][ T400] usb 1-1: USB disconnect, device number 18 [ 154.226230][ T6874] bpf: Bad value for 'mode' [ 154.906411][ T6884] rust_binder: Error while translating object. [ 154.906477][ T6884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.957625][ T6884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 155.708296][ T6899] binder: Unknown parameter 'conCext' [ 155.916610][ T6916] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.920814][ T36] audit: type=1400 audit(1752235601.845:1064): avc: denied { write } for pid=6915 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.924763][ T6916] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 155.952331][ T6916] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.962940][ T6918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 155.962971][ T6918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:221 [ 155.968752][ T6916] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 156.004213][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 156.036295][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 156.051095][ T6934] overlayfs: failed to clone upperpath [ 156.093238][ C0] blk_print_req_error: 15 callbacks suppressed [ 156.093260][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 3 [ 156.109231][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 156.115227][ C0] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 156.118411][ C1] buffer_io_error: 14 callbacks suppressed [ 156.118428][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 156.127530][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 156.133652][ C1] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 156.158288][ C1] Buffer I/O error on dev loop8, logical block 2, async page read [ 156.162096][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 156.176110][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.190770][ T9] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.201070][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.210289][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 156.218179][ C0] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.227430][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 156.235289][ C0] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.244460][ C0] Buffer I/O error on dev loop8, logical block 2, async page read [ 156.252750][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.256126][ T400] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 156.261250][ T9] usb 8-1: Product: syz [ 156.272817][ T9] usb 8-1: Manufacturer: syz [ 156.277720][ T9] usb 8-1: SerialNumber: syz [ 156.282800][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.292014][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 156.299912][ C0] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.309084][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 156.317022][ C0] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.326203][ C0] Buffer I/O error on dev loop8, logical block 2, async page read [ 156.334063][ T109] loop8: unable to read partition table [ 156.334357][ T9] usb 8-1: config 0 descriptor?? [ 156.345152][ T6901] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 156.348752][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 156.352442][ T6901] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 156.416511][ T400] usb 7-1: Using ep0 maxpacket: 16 [ 156.423690][ T400] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 156.434908][ T400] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.447830][ T400] usb 7-1: config 1 interface 0 has no altsetting 0 [ 156.455883][ T400] usb 7-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 156.464997][ T400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.473038][ T400] usb 7-1: Product: syz [ 156.477266][ T400] usb 7-1: Manufacturer: ࠧ [ 156.481880][ T400] usb 7-1: SerialNumber: syz [ 156.570009][ T6901] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 156.577217][ T6901] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 156.693455][ T400] usb 7-1: USB disconnect, device number 16 [ 156.987549][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 157.594825][ T9] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 157.605562][ T9] dm9601 8-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, a2:12:ad:46:e8:f4 [ 157.619403][ T9] usb 8-1: USB disconnect, device number 4 [ 157.626499][ T9] dm9601 8-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 157.716118][ T36] audit: type=1400 audit(1752235603.635:1065): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 158.265083][ T6961] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 158.326905][ T6989] overlayfs: failed to clone upperpath [ 158.360675][ T36] audit: type=1400 audit(1752235604.272:1066): avc: denied { relabelfrom } for pid=6966 comm="syz.0.2179" name="NETLINK" dev="sockfs" ino=37385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.388307][ T36] audit: type=1400 audit(1752235604.272:1067): avc: denied { relabelto } for pid=6966 comm="syz.0.2179" name="NETLINK" dev="sockfs" ino=37385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 158.395880][ T6998] tipc: Enabling of bearer rejected, media not registered [ 158.423614][ T7001] rust_binder: Write failure EINVAL in pid:96 [ 158.430520][ T7003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.437734][ T7003] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 185) [ 158.452970][ T7003] rust_binder: Error while translating object. [ 158.466555][ T7003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.492536][ T7003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 158.512875][ T7010] /dev/rnullb0: Can't lookup blockdev [ 158.538234][ T36] audit: type=1326 audit(1752235604.451:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.0.2189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 158.612162][ T36] audit: type=1400 audit(1752235604.521:1069): avc: denied { create } for pid=7023 comm="syz.7.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.656212][ T36] audit: type=1400 audit(1752235604.521:1070): avc: denied { write } for pid=7023 comm="syz.7.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.685938][ T36] audit: type=1400 audit(1752235604.521:1071): avc: denied { nlmsg_write } for pid=7023 comm="syz.7.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.727317][ T7040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.728290][ T7040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.734909][ T36] audit: type=1400 audit(1752235604.531:1072): avc: denied { lock } for pid=7024 comm="syz.6.2196" path="socket:[37546]" dev="sockfs" ino=37546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.823717][ T36] audit: type=1326 audit(1752235604.730:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7043 comm="syz.7.2202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf238e929 code=0x0 [ 158.867670][ T7049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7049 comm=syz.6.2203 [ 158.974017][ T7060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.974133][ T7060] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 158.980877][ T7060] rust_binder: Read failure Err(EFAULT) in pid:251 [ 159.311272][ T7074] rust_binder: Error while translating object. [ 159.318082][ T7074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.324369][ T7074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 159.480296][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7088 comm=syz.0.2213 [ 159.582363][ T305] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 159.592041][ T7094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 159.725947][ T7102] tipc: Started in network mode [ 159.740108][ T7102] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 159.743241][ T305] usb 7-1: Using ep0 maxpacket: 32 [ 159.749561][ T7102] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 159.757306][ T305] usb 7-1: config 63 has an invalid interface number: 13 but max is 0 [ 159.762512][ T7102] tipc: Enabled bearer , priority 10 [ 159.770700][ T305] usb 7-1: config 63 has no interface number 0 [ 159.784421][ T305] usb 7-1: config 63 interface 13 has no altsetting 0 [ 159.786365][ T7102] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 159.791276][ T7102] rust_binder: Read failure Err(EFAULT) in pid:146 [ 159.792827][ T305] usb 7-1: New USB device found, idVendor=0f19, idProduct=0105, bcdDevice= 1.00 [ 159.814974][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.823001][ T305] usb 7-1: Product: syz [ 159.827273][ T305] usb 7-1: Manufacturer: syz [ 159.831921][ T305] usb 7-1: SerialNumber: syz [ 160.097877][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.106522][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.123557][ T305] usb-storage 7-1:63.13: USB Mass Storage device detected [ 160.138788][ T305] usb-storage 7-1:63.13: Quirks match for vid 0f19 pid 0105: 20 [ 160.187931][ T305] usb 7-1: USB disconnect, device number 17 [ 160.443951][ T7134] tipc: Started in network mode [ 160.448949][ T7134] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 160.458189][ T7134] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 160.466436][ T7134] tipc: Enabled bearer , priority 10 [ 160.474519][ T7134] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 160.474536][ T7134] rust_binder: Read failure Err(EFAULT) in pid:123 [ 160.647396][ T305] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 160.770893][ T7150] 9pnet_fd: Insufficient options for proto=fd [ 160.808810][ T305] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.817883][ T305] usb 7-1: config 1 has no interface number 0 [ 160.823989][ T305] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.834885][ T305] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 160.843994][ T305] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 28, changing to 8 [ 160.854942][ T305] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9223, setting to 1024 [ 160.867417][ T305] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.876604][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.884723][ T305] usb 7-1: Product: syz [ 160.889307][ T437] tipc: Node number set to 1 [ 160.891449][ T305] usb 7-1: Manufacturer: syz [ 160.898582][ T305] usb 7-1: SerialNumber: syz [ 160.899530][ T7158] rust_binder: Error while translating object. [ 160.903267][ T7158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 160.910050][ T7158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:160 [ 161.112479][ T7132] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 161.334914][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 161.334933][ T36] audit: type=1400 audit(1752235607.229:1079): avc: denied { execmem } for pid=7172 comm="syz.7.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 161.575089][ T7178] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 161.575114][ T7178] rust_binder: Read failure Err(EFAULT) in pid:138 [ 161.583583][ T7178] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 161.590182][ T7178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 161.598304][ T31] tipc: Node number set to 1 [ 161.598574][ T7178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:138 [ 161.612803][ T7179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.691271][ T400] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 161.732944][ T7132] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 161.740873][ T305] cdc_ncm 7-1:1.1: bind() failure [ 161.852996][ T400] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 161.862914][ T400] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 161.874291][ T400] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 161.882039][ T437] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.883486][ T400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.899090][ T400] usb 8-1: Product: syz [ 161.903295][ T400] usb 8-1: Manufacturer: syz [ 161.907920][ T400] usb 8-1: SerialNumber: syz [ 161.913233][ T400] usb 8-1: config 0 descriptor?? [ 161.918489][ T7176] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 161.925778][ T7176] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 162.032614][ T437] usb 1-1: Using ep0 maxpacket: 8 [ 162.039232][ T437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.047683][ T437] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 162.055914][ T437] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 162.064639][ T437] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 162.074775][ T437] usb 1-1: config 4 has no interface number 0 [ 162.082309][ T437] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 162.091392][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.099606][ T437] usb 1-1: Product: syz [ 162.103802][ T437] usb 1-1: Manufacturer: syz [ 162.108419][ T437] usb 1-1: SerialNumber: syz [ 162.135039][ T7176] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 162.142379][ T7176] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 162.446179][ T7194] IPv6: syztnl0: Disabled Multicast RS [ 162.549791][ T7209] batadv_slave_0: entered promiscuous mode [ 162.556557][ T7208] batadv_slave_0: left promiscuous mode [ 162.691182][ T7213] netlink: 'syz.3.2254': attribute type 4 has an invalid length. [ 162.702557][ T7213] netlink: 'syz.3.2254': attribute type 4 has an invalid length. [ 163.163244][ T400] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 163.174056][ T400] dm9601 8-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 163.187948][ T400] usb 8-1: USB disconnect, device number 5 [ 163.194822][ T400] dm9601 8-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet [ 163.273969][ T36] audit: type=1400 audit(1752235609.162:1080): avc: denied { create } for pid=7225 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.274972][ T7227] overlayfs: failed to clone upperpath [ 163.312719][ T36] audit: type=1326 audit(1752235609.201:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7228 comm="syz.3.2259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd26b8e929 code=0x0 [ 163.382909][ T305] usb 7-1: USB disconnect, device number 18 [ 163.419737][ T36] audit: type=1400 audit(1752235609.311:1082): avc: denied { accept } for pid=7232 comm="syz.6.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.768924][ T305] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 163.921250][ T305] usb 7-1: config 1 has an invalid interface number: 6 but max is 2 [ 163.929522][ T305] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.939758][ T305] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.948753][ T305] usb 7-1: config 1 has no interface number 1 [ 163.954955][ T305] usb 7-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 163.968021][ T305] usb 7-1: config 1 interface 6 has no altsetting 0 [ 163.976252][ T305] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.985426][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.993488][ T305] usb 7-1: Product: 睡訍蓌ն姺휈㏾鑫뛒탇삻뵍缓멓䉪䕩녤î䔣㊣ꋘ㸕෱兠鼾曂憠紸읎뱏丐쥾傥ᶌ뙮渒⦫舄禊캞閄ᐯ鰎渚懯㉚賕滪戔鿸㱾↳鵝繦㓝썍岸岮ꌹᵍ䟒᝛阉䂔⌶ᆂ楐豩ꠡᎏ郓Ꙡ恐즪뒝◙㯰ō㇧锉৷휴堯ꅕ␕쥹駠ﰋ튨 [ 164.024082][ T305] usb 7-1: Manufacturer: Б [ 164.028620][ T305] usb 7-1: SerialNumber: 鲄蹤זּⶮ厥訡菮牕⾚䦠⎈봨嵏選饕䷓ᾪ᢭ᎈ[賹묝雡⹓⣑ꆁ扑귖禘襰⓼啐鹕共⨱旱雲呍Ꭱꊊ㵻ⴅ쾓⿸⃻유겭忝࿈ [ 164.369299][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.376533][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.383714][ T7243] bridge_slave_0: entered allmulticast mode [ 164.390134][ T7243] bridge_slave_0: entered promiscuous mode [ 164.396915][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.404044][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.410849][ T7236] 9pnet_fd: Insufficient options for proto=fd [ 164.411215][ T7243] bridge_slave_1: entered allmulticast mode [ 164.423756][ T7243] bridge_slave_1: entered promiscuous mode [ 164.493970][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.501088][ T7243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.508433][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.515529][ T7243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.548611][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.560752][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.571613][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.578704][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.588862][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.595981][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.630389][ T7243] veth0_vlan: entered promiscuous mode [ 164.647862][ T7243] veth1_macvtap: entered promiscuous mode [ 164.663641][ T437] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 164.670936][ T437] usb 1-1: No valid video chain found. [ 164.680791][ T437] usb 1-1: USB disconnect, device number 19 [ 164.714509][ T36] audit: type=1326 audit(1752235610.597:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066618e929 code=0x7ffc0000 [ 164.723412][ T7255] overlayfs: failed to resolve './file1': -2 [ 164.745182][ T36] audit: type=1326 audit(1752235610.597:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066618e929 code=0x7ffc0000 [ 164.786541][ T36] audit: type=1326 audit(1752235610.597:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f066618e929 code=0x7ffc0000 [ 164.812201][ T7258] rust_binder: Write failure EINVAL in pid:151 [ 164.812672][ T36] audit: type=1326 audit(1752235610.597:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06661c11e5 code=0x7ffc0000 [ 164.852340][ T36] audit: type=1326 audit(1752235610.597:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066618e929 code=0x7ffc0000 [ 164.882971][ T36] audit: type=1326 audit(1752235610.597:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.3.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0666190847 code=0x7ffc0000 [ 164.952886][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 165.096790][ T7271] rust_binder: Error while translating object. [ 165.096848][ T7271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 165.103081][ T7271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:158 [ 165.112505][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 165.131450][ T31] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 165.131963][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2275'. [ 165.140676][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.153753][ T437] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 165.158176][ T31] usb 8-1: Product: syz [ 165.169642][ T31] usb 8-1: Manufacturer: syz [ 165.174328][ T31] usb 8-1: SerialNumber: syz [ 165.315577][ T437] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.323321][ T437] usb 4-1: too many configurations: 37, using maximum allowed: 8 [ 165.333037][ T437] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 165.340722][ T437] usb 4-1: can't read configurations, error -61 [ 165.389013][ T7276] netlink: 'syz.0.2276': attribute type 4 has an invalid length. [ 165.410201][ T31] snd-usb-audio 8-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 165.419940][ T7276] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2276'. [ 165.431033][ T31] usb 8-1: USB disconnect, device number 6 [ 165.440542][ T5377] udevd[5377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.484570][ T437] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 165.603296][ T7287] rust_binder: Write failure EFAULT in pid:174 [ 165.636469][ T437] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.650523][ T437] usb 4-1: too many configurations: 37, using maximum allowed: 8 [ 165.659787][ T437] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 165.667484][ T437] usb 4-1: can't read configurations, error -61 [ 165.673905][ T437] usb usb4-port1: attempt power cycle [ 165.855670][ T428] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 166.007235][ T428] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.017460][ T437] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 166.025128][ T428] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.035629][ T428] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.050874][ T437] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.053601][ T7291] netlink: 'syz.7.2280': attribute type 10 has an invalid length. [ 166.060015][ T428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.074575][ T437] usb 4-1: too many configurations: 37, using maximum allowed: 8 [ 166.082401][ T428] usb 1-1: SerialNumber: syz [ 166.088132][ T437] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 166.095727][ T437] usb 4-1: can't read configurations, error -61 [ 166.142263][ T7294] kvm: pic: level sensitive irq not supported [ 166.142359][ T7294] kvm: pic: non byte read [ 166.153268][ T7294] kvm: pic: level sensitive irq not supported [ 166.153361][ T7294] kvm: pic: non byte read [ 166.164142][ T7294] kvm: pic: level sensitive irq not supported [ 166.164202][ T7294] kvm: pic: non byte read [ 166.236849][ T437] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 166.258657][ T437] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.266325][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2282'. [ 166.266593][ T437] usb 4-1: too many configurations: 37, using maximum allowed: 8 [ 166.284340][ T437] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 166.292015][ T437] usb 4-1: can't read configurations, error -61 [ 166.298865][ T437] usb usb4-port1: unable to enumerate USB device [ 166.312241][ T7289] rust_binder: 7289: no such ref 0 [ 166.469255][ T428] usb 1-1: 0:2 : does not exist [ 166.474279][ T428] usb 1-1: unit 5: unexpected type 0x0a [ 166.482240][ T428] usb 1-1: USB disconnect, device number 20 [ 166.499343][ T305] usb 7-1: 0:2 : does not exist [ 166.509932][ T305] usb 7-1: USB disconnect, device number 19 [ 166.534547][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.557156][ T5377] udevd[5377]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.772554][ T7320] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.772578][ T7320] rust_binder: Read failure Err(EFAULT) in pid:322 [ 166.859276][ T7324] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 166.903409][ T7327] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 166.940365][ T7327] cgroup: Need name or subsystem set [ 166.958752][ T7332] rust_binder: Error while translating object. [ 166.958837][ T7332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.965108][ T7332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 167.408321][ T7389] 9pnet_fd: Insufficient options for proto=fd [ 167.903638][ T305] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 167.923381][ T7415] SELinux: security_context_str_to_sid () failed with errno=-22 [ 168.064055][ T12] bridge_slave_1: left allmulticast mode [ 168.073289][ T12] bridge_slave_1: left promiscuous mode [ 168.081911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.092198][ T12] bridge_slave_0: left allmulticast mode [ 168.092952][ T305] usb 7-1: Using ep0 maxpacket: 16 [ 168.101130][ T12] bridge_slave_0: left promiscuous mode [ 168.104483][ T305] usb 7-1: config 51 has an invalid interface number: 99 but max is 0 [ 168.114512][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.125166][ T305] usb 7-1: config 51 has no interface number 0 [ 168.143481][ T305] usb 7-1: config 51 interface 99 has no altsetting 0 [ 168.158658][ T305] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=2c.25 [ 168.181219][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.207615][ T305] usb 7-1: Product: syz [ 168.215678][ T305] usb 7-1: Manufacturer: syz [ 168.220320][ T305] usb 7-1: SerialNumber: syz [ 168.247510][ T12] veth1_macvtap: left promiscuous mode [ 168.259816][ T12] veth0_vlan: left promiscuous mode [ 168.424706][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.431851][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.439599][ T7423] bridge_slave_0: entered allmulticast mode [ 168.442125][ T7400] FAT-fs (rnullb0): bogus number of reserved sectors [ 168.446287][ T7423] bridge_slave_0: entered promiscuous mode [ 168.452332][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 168.452351][ T36] audit: type=1400 audit(1752235614.284:1118): avc: denied { nlmsg_read } for pid=7399 comm="syz.6.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.459188][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.468690][ T7400] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 168.484787][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.484859][ T7423] bridge_slave_1: entered allmulticast mode [ 168.513121][ T7423] bridge_slave_1: entered promiscuous mode [ 168.516525][ T305] usb 7-1: USB disconnect, device number 20 [ 168.570093][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.577266][ T7423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.584548][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.591603][ T7423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.613934][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.621530][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.631545][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.638646][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.648189][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.655280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.683809][ T7423] veth0_vlan: entered promiscuous mode [ 168.695538][ T7423] veth1_macvtap: entered promiscuous mode [ 168.730999][ T7437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.857018][ T7443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.863664][ T7443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 169.158241][ T7469] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 169.296648][ T7476] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 169.334385][ T7481] sock: sock_timestamping_bind_phc: sock not bind to device [ 169.391857][ T7489] /dev/loop0: Can't lookup blockdev [ 169.412132][ T7495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7495 comm=syz.6.2345 [ 169.416707][ T7497] cgroup: Need name or subsystem set [ 169.425197][ T7494] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=7494 comm=syz.6.2345 [ 169.476637][ T7501] TCP: out of memory -- consider tuning tcp_mem [ 169.548491][ T36] audit: type=1400 audit(1752235615.322:1119): avc: denied { bind } for pid=7511 comm="syz.6.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.551367][ T7512] netlink: 'syz.6.2353': attribute type 15 has an invalid length. [ 169.578644][ T7512] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2353'. [ 169.590597][ T36] audit: type=1400 audit(1752235615.359:1120): avc: denied { listen } for pid=7511 comm="syz.6.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.711717][ T7519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 169.715920][ T36] audit: type=1400 audit(1752235615.472:1121): avc: denied { accept } for pid=7520 comm="syz.6.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.401091][ T36] audit: type=1400 audit(1752235616.108:1122): avc: denied { create } for pid=7556 comm="syz.7.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.466639][ T358] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 170.627829][ T358] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 170.638958][ T358] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 170.648842][ T358] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 170.657982][ T358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.861013][ T7571] overlayfs: failed to resolve './file0uuid=null': -2 [ 170.870788][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2376'. [ 170.885100][ T7555] rust_binder: Write failure EFAULT in pid:379 [ 170.934602][ T358] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 170.949520][ T358] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input28 [ 170.965548][ T358] usb 7-1: USB disconnect, device number 21 [ 171.368479][ T7574] netlink: 'syz.7.2377': attribute type 28 has an invalid length. [ 171.571015][ T7598] netlink: 'syz.7.2383': attribute type 4 has an invalid length. [ 171.601758][ T7628] netlink: 'syz.7.2393': attribute type 13 has an invalid length. [ 171.746346][ T36] audit: type=1326 audit(1752235617.371:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.0.2400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 171.769312][ T36] audit: type=1326 audit(1752235617.371:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.0.2400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 171.802810][ T358] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 171.963044][ T358] usb 7-1: Using ep0 maxpacket: 8 [ 171.976120][ T358] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 171.991470][ T358] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.992186][ T36] audit: type=1400 audit(1752235617.604:1125): avc: denied { create } for pid=7672 comm="syz.0.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.005813][ T358] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.038040][ T358] usb 7-1: config 0 has no interface number 0 [ 172.050460][ T358] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.063158][ T358] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 172.080886][ T358] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 172.090852][ T358] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 172.101112][ T358] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.121420][ T358] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 172.130786][ T358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.138953][ T358] usb 7-1: Product: syz [ 172.143239][ T358] usb 7-1: Manufacturer: syz [ 172.148066][ T358] usb 7-1: SerialNumber: syz [ 172.154251][ T358] usb 7-1: config 0 descriptor?? [ 172.166202][ T7676] netlink: 'syz.7.2409': attribute type 19 has an invalid length. [ 172.167309][ T358] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -12 [ 172.194424][ T5377] udevd[5377]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.375650][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.384723][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.392967][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.402455][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.410616][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.419348][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.427928][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.439367][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.447807][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.456603][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.467490][ T358] usb 7-1: USB disconnect, device number 22 [ 172.574920][ T7703] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2417'. [ 172.640364][ T36] audit: type=1400 audit(1752235618.212:1126): avc: denied { getopt } for pid=7715 comm="syz.0.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.678489][ T7725] overlayfs: failed to resolve './file0': -2 [ 173.045820][ T7745] 9pnet_fd: Insufficient options for proto=fd [ 173.078420][ T36] audit: type=1400 audit(1752235618.624:1127): avc: denied { shutdown } for pid=7738 comm="syz.6.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.082566][ T7739] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 173.443428][ T7756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 173.456278][ T7760] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 173.465811][ T7760] rust_binder: Write failure EINVAL in pid:33 [ 173.474367][ T7760] SELinux: syz.8.2438 (7760) set checkreqprot to 1. This is no longer supported. [ 173.680477][ T7777] netlink: 'syz.7.2444': attribute type 4 has an invalid length. [ 173.724696][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2448'. [ 173.748721][ T7797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.750399][ T7797] rust_binder: Error while translating object. [ 173.750410][ T7796] rust_binder: Error while translating object. [ 173.750437][ T7796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.756882][ T7797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.763189][ T7796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 173.769553][ T7797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 173.817610][ T7799] kvm: kvm [7798]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000068) [ 173.860573][ T7803] overlayfs: failed to clone upperpath [ 174.060008][ T7824] netlink: 'syz.6.2458': attribute type 4 has an invalid length. [ 174.171587][ T428] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 174.206635][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 174.206654][ T36] audit: type=1400 audit(1752235619.672:1129): avc: denied { mount } for pid=7852 comm="syz.6.2463" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 174.246640][ T36] audit: type=1400 audit(1752235619.709:1130): avc: denied { unmount } for pid=5267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 174.336370][ T428] usb 9-1: device descriptor read/64, error -71 [ 174.369428][ T7861] x_tables: duplicate underflow at hook 2 [ 174.379539][ T7862] x_tables: duplicate underflow at hook 2 [ 174.411306][ T7866] IPv6: syztnl0: Disabled Multicast RS [ 174.550289][ T7868] netlink: 'syz.0.2470': attribute type 4 has an invalid length. [ 174.592941][ T428] usb 9-1: device descriptor read/64, error -71 [ 174.764009][ T9] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 174.860230][ T428] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 174.924355][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 175.009892][ T428] usb 9-1: device descriptor read/64, error -71 [ 175.063329][ T9] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 175.245066][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 175.255868][ T9] usb usb7-port1: attempt power cycle [ 175.266476][ T428] usb 9-1: device descriptor read/64, error -71 [ 175.384142][ T428] usb usb9-port1: attempt power cycle [ 175.448751][ T7911] netlink: 'syz.7.2485': attribute type 58 has an invalid length. [ 175.481442][ T36] audit: type=1400 audit(1752235620.869:1131): avc: denied { execute } for pid=7919 comm="syz.7.2487" name="file0" dev="ramfs" ino=42719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 175.503555][ T36] audit: type=1400 audit(1752235620.869:1132): avc: denied { execute_no_trans } for pid=7919 comm="syz.7.2487" path="/file0" dev="ramfs" ino=42719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 175.619254][ T9] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 175.640992][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 175.747526][ T428] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 175.769869][ T428] usb 9-1: device descriptor read/8, error -71 [ 175.779611][ T9] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 175.801350][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 175.806761][ T9] usb usb7-port1: unable to enumerate USB device [ 175.815087][ T7924] netlink: 'syz.0.2489': attribute type 4 has an invalid length. [ 175.909342][ T428] usb 9-1: device descriptor read/8, error -71 [ 176.095426][ T36] audit: type=1400 audit(1752235621.440:1133): avc: denied { accept } for pid=7949 comm="syz.7.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.164469][ T428] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 176.186854][ T428] usb 9-1: device descriptor read/8, error -71 [ 176.235276][ T7954] netlink: 'syz.7.2499': attribute type 4 has an invalid length. [ 176.325981][ T428] usb 9-1: device descriptor read/8, error -71 [ 176.442502][ T428] usb usb9-port1: unable to enumerate USB device [ 176.822205][ T7975] futex_wake_op: syz.0.2505 tries to shift op by -1; fix this program [ 176.831358][ T36] audit: type=1400 audit(1752235622.132:1134): avc: denied { ioctl } for pid=7974 comm="syz.0.2505" path="socket:[42766]" dev="sockfs" ino=42766 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.856861][ T36] audit: type=1400 audit(1752235622.132:1135): avc: denied { link } for pid=7974 comm="syz.0.2505" name="file1" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.055622][ T7979] batadv_slave_0: entered promiscuous mode [ 177.062838][ T7978] batadv_slave_0: left promiscuous mode [ 177.205053][ T7983] netlink: 'syz.7.2509': attribute type 4 has an invalid length. [ 177.305553][ T7999] binder: Bad value for 'max' [ 177.514419][ T8016] netlink: 'syz.0.2521': attribute type 4 has an invalid length. [ 177.549469][ T8025] netlink: 'syz.0.2523': attribute type 15 has an invalid length. [ 177.575675][ T9] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 177.601331][ T8035] 9pnet_fd: Insufficient options for proto=fd [ 177.725333][ T9] usb 9-1: device descriptor read/64, error -71 [ 177.777219][ T8048] netlink: 'syz.0.2531': attribute type 4 has an invalid length. [ 177.992806][ T9] usb 9-1: device descriptor read/64, error -71 [ 177.994522][ T8081] netlink: 'syz.0.2543': attribute type 4 has an invalid length. [ 178.023721][ T8085] overlayfs: failed to clone upperpath [ 178.041500][ T8087] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2545'. [ 178.131658][ T428] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 178.249126][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 178.291883][ T428] usb 7-1: Using ep0 maxpacket: 16 [ 178.298383][ T428] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.306787][ T428] usb 7-1: config 1 has an invalid interface descriptor of length 4, skipping [ 178.315678][ T428] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.325841][ T428] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.334898][ T428] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.349122][ T428] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.358242][ T428] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.366250][ T428] usb 7-1: Product: syz [ 178.370447][ T428] usb 7-1: Manufacturer: syz [ 178.375054][ T428] usb 7-1: SerialNumber: syz [ 178.398802][ T9] usb 9-1: device descriptor read/64, error -71 [ 178.595919][ T8075] syz.6.2541 (8075): /proc/8074/oom_adj is deprecated, please use /proc/8074/oom_score_adj instead. [ 178.607235][ T8075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.607264][ T8075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 178.619611][ T428] usb 7-1: 0:2 : does not exist [ 178.635577][ T428] usb 7-1: USB disconnect, device number 27 [ 178.642465][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.655408][ T9] usb 9-1: device descriptor read/64, error -71 [ 178.773171][ T9] usb usb9-port1: attempt power cycle [ 179.084568][ T8110] netlink: 'syz.7.2553': attribute type 4 has an invalid length. [ 179.132393][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2555'. [ 179.136468][ T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 179.141520][ T8116] ip6_vti0: entered promiscuous mode [ 179.154225][ T8116] ip6_vti0: entered allmulticast mode [ 179.173703][ T9] usb 9-1: device descriptor read/8, error -71 [ 179.194761][ T8121] 9pnet_fd: Insufficient options for proto=fd [ 179.319157][ T9] usb 9-1: device descriptor read/8, error -71 [ 179.382597][ T8132] netlink: 'syz.0.2562': attribute type 4 has an invalid length. [ 179.574786][ T9] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 179.617976][ T9] usb 9-1: device descriptor read/8, error -71 [ 179.629392][ T8156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.646827][ T8156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.646863][ T8156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:441 [ 179.679920][ T8160] 9pnet_fd: Insufficient options for proto=fd [ 179.757578][ T9] usb 9-1: device descriptor read/8, error -71 [ 179.762776][ T8169] rust_binder: 8169: no such ref 0 [ 179.906793][ T8175] ip6tnl0: mtu less than device minimum [ 180.215887][ T9] usb usb9-port1: unable to enumerate USB device [ 180.406463][ T8211] fuse: Unknown parameter '4' [ 180.426585][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 180.505736][ T8224] 9pnet_fd: Insufficient options for proto=fd [ 180.566743][ T8233] 9pnet_fd: Insufficient options for proto=fd [ 180.619153][ T8242] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 180.641291][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2599'. [ 180.759989][ T36] audit: type=1400 audit(1752235625.799:1136): avc: denied { watch } for pid=8254 comm="syz.8.2608" path="/25/file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 180.837420][ T8257] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 180.837447][ T8257] rust_binder: Read failure Err(EFAULT) in pid:71 [ 180.857022][ T8251] validate_nla: 2 callbacks suppressed [ 180.857046][ T8251] netlink: 'syz.6.2606': attribute type 4 has an invalid length. [ 180.945961][ T8265] netlink: 'syz.6.2611': attribute type 12 has an invalid length. [ 180.954080][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.960492][ T36] audit: type=1326 audit(1752235625.995:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8252 comm="syz.0.2607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 181.013550][ T8274] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2607'. [ 181.741610][ T8295] netlink: 'syz.7.2617': attribute type 4 has an invalid length. [ 182.982350][ T8322] overlayfs: failed to clone upperpath [ 183.092040][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.799811][ T8327] futex_wake_op: syz.7.2628 tries to shift op by -1; fix this program [ 183.810983][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 183.883389][ T8331] overlayfs: failed to resolve './file1': -2 [ 183.977571][ T8337] netlink: 'syz.0.2632': attribute type 7 has an invalid length. [ 184.161047][ T45] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 184.322592][ T45] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.334293][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.345488][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.355538][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.374900][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.390700][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.406260][ T45] usb 7-1: config 0 descriptor?? [ 184.596773][ T8343] netlink: 'syz.0.2634': attribute type 30 has an invalid length. [ 184.841996][ T45] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 184.870317][ T45] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 185.026464][ T8360] netlink: 'syz.0.2637': attribute type 4 has an invalid length. [ 185.650258][ T36] audit: type=1400 audit(1752235630.382:1138): avc: denied { read } for pid=8372 comm="syz.8.2645" name="file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.679540][ T36] audit: type=1326 audit(1752235630.401:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.7.2644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf238e929 code=0x0 [ 185.685394][ T45] usb 7-1: USB disconnect, device number 28 [ 185.736803][ T8378] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2644'. [ 185.750594][ T8380] 9pnet_fd: Insufficient options for proto=fd [ 185.757649][ T8381] 9pnet_fd: Insufficient options for proto=fd [ 186.132936][ T8413] SELinux: Context system_u:object_r:scsi_generic_device_t:s0 is not valid (left unmapped). [ 186.143403][ T36] audit: type=1400 audit(1752235630.840:1140): avc: denied { relabelto } for pid=8412 comm="syz.8.2659" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 186.172014][ T36] audit: type=1400 audit(1752235630.840:1141): avc: denied { associate } for pid=8412 comm="syz.8.2659" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scsi_generic_device_t:s0" [ 186.201164][ T36] audit: type=1400 audit(1752235630.840:1142): avc: denied { read } for pid=8412 comm="syz.8.2659" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 186.331232][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 186.491577][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 186.497803][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.507978][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.520320][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.529456][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.537501][ T9] usb 7-1: Product: syz [ 186.541678][ T9] usb 7-1: Manufacturer: syz [ 186.546315][ T9] usb 7-1: SerialNumber: syz [ 186.552886][ T9] usb 7-1: selecting invalid altsetting 1 [ 186.784235][ T8451] netlink: 'syz.0.2672': attribute type 27 has an invalid length. [ 187.379098][ T428] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 187.413782][ T9] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 187.434285][ T9] usb 7-1: selecting invalid altsetting 1 [ 187.440070][ T9] cdc_ncm 7-1:1.0: bind() failure [ 187.446909][ T9] usb 7-1: USB disconnect, device number 29 [ 187.539315][ T428] usb 9-1: Using ep0 maxpacket: 16 [ 187.545712][ T428] usb 9-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 187.556071][ T428] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.565076][ T428] usb 9-1: New USB device found, idVendor=00d9, idProduct=0000, bcdDevice=80.00 [ 187.574142][ T428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.583005][ T428] usb 9-1: config 0 descriptor?? [ 187.805195][ T45] usb 9-1: USB disconnect, device number 10 [ 188.358144][ T8494] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 188.455658][ T8492] netlink: 'syz.0.2686': attribute type 4 has an invalid length. [ 188.550442][ T8516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8516 comm=syz.0.2694 [ 188.704741][ T8523] netlink: 'syz.0.2696': attribute type 4 has an invalid length. [ 188.708882][ T8539] incfs: Options parsing error. -22 [ 188.717911][ T8539] incfs: mount failed -22 [ 188.753529][ T36] audit: type=1326 audit(1752235633.282:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 188.777331][ T36] audit: type=1326 audit(1752235633.282:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 188.794598][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'. [ 188.809784][ T36] audit: type=1326 audit(1752235633.291:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 188.833314][ T36] audit: type=1326 audit(1752235633.291:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 188.833586][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2705'. [ 188.856822][ T36] audit: type=1326 audit(1752235633.291:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 188.890943][ T36] audit: type=1326 audit(1752235633.291:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 188.930452][ T36] audit: type=1326 audit(1752235633.291:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x7ffc0000 [ 189.061854][ T8567] netlink: 'syz.7.2710': attribute type 4 has an invalid length. [ 189.538438][ T400] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 189.698818][ T400] usb 9-1: Using ep0 maxpacket: 16 [ 189.705127][ T400] usb 9-1: config 0 has an invalid interface number: 225 but max is 0 [ 189.713389][ T400] usb 9-1: config 0 has no interface number 0 [ 189.719531][ T400] usb 9-1: config 0 interface 225 has no altsetting 0 [ 189.727742][ T400] usb 9-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 189.736876][ T400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.744912][ T400] usb 9-1: Product: syz [ 189.749079][ T400] usb 9-1: Manufacturer: syz [ 189.753699][ T400] usb 9-1: SerialNumber: syz [ 189.758900][ T400] usb 9-1: config 0 descriptor?? [ 190.029058][ T8603] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2724'. [ 190.038484][ T8603] syz.6.2724 (8603): attempted to duplicate a private mapping with mremap. This is not supported. [ 190.103570][ T8597] netlink: 'syz.0.2721': attribute type 4 has an invalid length. [ 190.187391][ T8631] /dev/rnullb0: Can't lookup blockdev [ 190.217710][ T8635] overlayfs: failed to clone upperpath [ 190.629746][ T400] asix 9-1:0.225 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 190.640065][ T400] asix 9-1:0.225 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 190.651249][ T400] asix 9-1:0.225: probe with driver asix failed with error -71 [ 190.660551][ T400] usb 9-1: USB disconnect, device number 11 [ 190.696042][ T8647] fuseblk: Bad value for 'fd' [ 190.783122][ T8666] overlayfs: failed to clone upperpath [ 191.267485][ T8687] overlayfs: overlapping lowerdir path [ 191.268752][ T8689] exFAT-fs (rnullb0): invalid boot record signature [ 191.279896][ T8689] exFAT-fs (rnullb0): failed to read boot sector [ 191.286332][ T8689] exFAT-fs (rnullb0): failed to recognize exfat type [ 191.330224][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 191.339436][ T8698] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2762'. [ 191.533708][ T8710] netlink: 'syz.0.2772': attribute type 4 has an invalid length. [ 192.014670][ T8756] netlink: 'syz.7.2781': attribute type 3 has an invalid length. [ 192.034520][ T8739] netlink: 'syz.6.2775': attribute type 4 has an invalid length. [ 192.059466][ T8764] fuseblk: Bad value for 'fd' [ 192.225588][ T8773] 2N: renamed from vcan0 (while UP) [ 192.258791][ T8781] incfs: Options parsing error. -22 [ 192.264075][ T8781] incfs: mount failed -22 [ 192.279815][ T8772] netlink: 'syz.7.2787': attribute type 19 has an invalid length. [ 192.467693][ T400] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 192.628053][ T400] usb 9-1: Using ep0 maxpacket: 16 [ 192.634237][ T400] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.644514][ T400] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.656881][ T400] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.666067][ T400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.674238][ T400] usb 9-1: Product: syz [ 192.678412][ T400] usb 9-1: Manufacturer: syz [ 192.683216][ T400] usb 9-1: SerialNumber: syz [ 192.689887][ T400] usb 9-1: selecting invalid altsetting 1 [ 192.934861][ T8789] netlink: 'syz.6.2792': attribute type 4 has an invalid length. [ 193.143382][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 193.143401][ T36] audit: type=1326 audit(1752235637.388:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.6.2812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x0 [ 193.553692][ T400] cdc_ncm 9-1:1.0: SET_NTB_FORMAT failed [ 193.582638][ T400] usb 9-1: selecting invalid altsetting 1 [ 193.588575][ T400] cdc_ncm 9-1:1.0: bind() failure [ 193.595659][ T400] usb 9-1: USB disconnect, device number 12 [ 193.619191][ T8858] x_tables: duplicate underflow at hook 1 [ 193.651074][ T8864] overlay: Unknown parameter 'smackfshat' [ 193.792279][ T8877] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 193.801178][ T8878] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 194.028018][ T8903] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2829'. [ 194.187753][ T8911] netlink: 'syz.6.2832': attribute type 4 has an invalid length. [ 194.224982][ T8922] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2836'. [ 194.899625][ T8940] netlink: 'syz.7.2844': attribute type 4 has an invalid length. [ 195.173135][ T8972] netlink: 'syz.8.2855': attribute type 4 has an invalid length. [ 195.261922][ T8996] vlan0: entered allmulticast mode [ 195.267093][ T8996] veth0_vlan: entered allmulticast mode [ 195.590964][ T36] audit: type=1400 audit(1752235639.680:1154): avc: denied { create } for pid=9011 comm="syz.7.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 195.977374][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2877'. [ 195.998317][ T9037] netlink: 'syz.8.2878': attribute type 6 has an invalid length. [ 196.006255][ T9037] netlink: 6016 bytes leftover after parsing attributes in process `syz.8.2878'. [ 196.210853][ T9067] /dev/rnullb0: Can't lookup blockdev [ 196.278625][ T9086] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2894'. [ 196.278701][ T9087] 9pnet_fd: Insufficient options for proto=fd [ 196.679249][ T9136] netlink: 'syz.7.2911': attribute type 27 has an invalid length. [ 196.815085][ T9152] netlink: 'syz.7.2916': attribute type 12 has an invalid length. [ 197.146470][ T36] audit: type=1400 audit(1752235641.130:1155): avc: denied { mount } for pid=9218 comm="syz.7.2939" name="/" dev="ramfs" ino=48364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 197.146936][ T9220] 9pnet_fd: Insufficient options for proto=fd [ 197.296347][ T9251] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.419651][ T9275] netlink: 'syz.8.2955': attribute type 4 has an invalid length. [ 197.429386][ T9275] netlink: 'syz.8.2955': attribute type 4 has an invalid length. [ 197.819644][ T9290] overlayfs: cannot append lower layer [ 197.929456][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2969'. [ 197.959068][ T9314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=9314 comm=syz.0.2970 [ 198.077366][ T36] audit: type=1400 audit(1752235642.000:1156): avc: denied { setopt } for pid=9324 comm="syz.8.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.095932][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2976'. [ 198.116164][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2976'. [ 198.373018][ T9342] netlink: 'syz.8.2982': attribute type 4 has an invalid length. [ 198.497535][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2990'. [ 198.646330][ T9383] overlayfs: failed to resolve './file1': -2 [ 198.696165][ T9386] netlink: 'syz.7.2994': attribute type 4 has an invalid length. [ 199.337244][ T36] audit: type=1400 audit(1752235643.178:1157): avc: denied { listen } for pid=9400 comm="syz.6.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 199.613256][ T9435] overlayfs: failed to clone upperpath [ 199.741913][ T9439] netlink: 'syz.7.3014': attribute type 4 has an invalid length. [ 201.974104][ T36] audit: type=1400 audit(1752235645.648:1158): avc: denied { setattr } for pid=9539 comm="syz.8.3049" name="/" dev="configfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.062420][ T36] audit: type=1326 audit(1752235645.732:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.0.3054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 202.259032][ T9569] fuse: Bad value for 'fd' [ 202.320108][ T9570] netlink: 'syz.8.3058': attribute type 12 has an invalid length. [ 202.439296][ T9586] overlayfs: conflicting options: userxattr,metacopy=on [ 202.766053][ T9597] netlink: 'syz.6.3068': attribute type 4 has an invalid length. [ 202.788340][ T9600] No source specified [ 203.071160][ T9604] overlayfs: failed to clone upperpath [ 203.622970][ T9623] netlink: 'syz.0.3077': attribute type 4 has an invalid length. [ 203.657135][ T9628] /dev/rnullb0: Can't lookup blockdev [ 203.789782][ T36] audit: type=1326 audit(1752235647.350:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.0.3086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 204.143182][ T9697] SELinux: Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped). [ 204.152346][ T36] audit: type=1400 audit(1752235647.678:1161): avc: denied { relabelto } for pid=9696 comm="syz.6.3104" name="NETLINK" dev="sockfs" ino=49006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:wtmp_t:s0" [ 204.503683][ T9717] /dev/rnullb0: Can't lookup blockdev [ 204.536421][ T9721] netlink: 244 bytes leftover after parsing attributes in process `syz.8.3114'. [ 204.725177][ T9736] tipc: Enabling of bearer rejected, failed to enable media [ 205.441678][ T9759] netlink: 'syz.0.3129': attribute type 4 has an invalid length. [ 205.500226][ T9774] overlayfs: failed to clone upperpath [ 206.560071][ T9825] fuseblk: Bad value for 'fd' [ 206.608295][ T9822] netlink: 'syz.6.3151': attribute type 4 has an invalid length. [ 207.351800][ T36] audit: type=1326 audit(1752235650.680:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x7fc00000 [ 207.401341][ T9870] /dev/loop0: Can't lookup blockdev [ 207.590559][ T9895] netlink: 'syz.6.3173': attribute type 4 has an invalid length. [ 207.719513][ T9925] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 208.987699][T10003] netlink: 'syz.7.3212': attribute type 19 has an invalid length. [ 208.995674][T10003] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3212'. [ 209.017644][T10005] netlink: 'syz.7.3213': attribute type 4 has an invalid length. [ 209.039911][ T36] audit: type=1400 audit(1752235652.261:1163): avc: denied { execmod } for pid=10008 comm="syz.7.3214" path="/dev/rnullb0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 209.070298][ T36] audit: type=1400 audit(1752235652.289:1164): avc: denied { remount } for pid=10011 comm="syz.7.3215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 209.123739][ T36] audit: type=1400 audit(1752235652.345:1165): avc: denied { audit_read } for pid=10019 comm="syz.7.3219" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.225719][T10027] netlink: 'syz.0.3222': attribute type 4 has an invalid length. [ 209.346680][T10065] netlink: 'syz.0.3234': attribute type 4 has an invalid length. [ 209.396570][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'. [ 209.781304][T10088] incfs: Options parsing error. -22 [ 209.781364][ T36] audit: type=1326 audit(1752235652.953:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.8.3243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347358e929 code=0x0 [ 209.786596][T10088] incfs: mount failed -22 [ 209.902464][T10094] netlink: 'syz.8.3244': attribute type 4 has an invalid length. [ 211.017809][T10133] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3259'. [ 211.106241][T10138] netlink: 'syz.6.3261': attribute type 4 has an invalid length. [ 211.349795][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3268'. [ 211.359518][T10155] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3267'. [ 211.386415][T10164] overlayfs: failed to clone upperpath [ 211.468567][T10172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2078 sclass=netlink_route_socket pid=10172 comm=syz.7.3272 [ 211.721588][T10195] netlink: 'syz.0.3273': attribute type 13 has an invalid length. [ 211.922786][T10223] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=10223 comm=syz.7.3291 [ 212.242708][T10250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10250 comm=syz.0.3300 [ 212.323899][T10253] netlink: 'syz.0.3301': attribute type 4 has an invalid length. [ 212.834410][T10270] overlayfs: failed to clone upperpath [ 212.834428][T10269] overlayfs: failed to clone upperpath [ 212.979855][ T36] audit: type=1400 audit(1752235655.937:1167): avc: denied { mounton } for pid=10273 comm="syz.8.3309" path=2F3136392FC1FEDC30 dev="tmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 213.098077][T10289] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3313'. [ 213.174083][ T36] audit: type=1400 audit(1752235656.124:1168): avc: denied { nlmsg_tty_audit } for pid=10292 comm="syz.0.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 213.267794][T10307] 9pnet_fd: Insufficient options for proto=fd [ 213.661632][T10369] netlink: 'syz.7.3342': attribute type 63 has an invalid length. [ 213.669586][T10369] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3342'. [ 213.679915][T10369] overlayfs: failed to clone lowerpath [ 214.099070][T10384] incfs: Options parsing error. -22 [ 214.104401][T10384] incfs: mount failed -22 [ 214.381100][T10407] futex_wake_op: syz.6.3356 tries to shift op by -1; fix this program [ 214.389765][T10407] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3356'. [ 214.414969][T10409] /dev/rnullb0: Can't lookup blockdev [ 214.590703][ T36] audit: type=1326 audit(1752235657.452:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.0.3361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 214.891620][T10425] netlink: 'syz.7.3364': attribute type 4 has an invalid length. [ 215.089417][ T36] audit: type=1326 audit(1752235657.920:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10428 comm="syz.6.3366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x0 [ 216.056600][T10481] netlink: 'syz.6.3379': attribute type 4 has an invalid length. [ 216.196732][T10495] netlink: 'syz.7.3386': attribute type 58 has an invalid length. [ 216.430504][T10515] netlink: 'syz.8.3393': attribute type 4 has an invalid length. [ 216.439357][T10516] netlink: 'syz.8.3393': attribute type 4 has an invalid length. [ 217.224604][T10571] overlayfs: missing 'lowerdir' [ 217.609320][ T36] audit: type=1400 audit(213.903:1171): avc: denied { getopt } for pid=10590 comm="syz.0.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 218.571015][T10631] overlayfs: failed to resolve './file0': -2 [ 218.574356][T10629] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 218.691831][T10637] syz.0.3437(10637): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 218.848195][ T36] audit: type=1400 audit(215.063:1172): avc: denied { write } for pid=10641 comm="syz.0.3438" path="socket:[51843]" dev="sockfs" ino=51843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.035800][ T36] audit: type=1326 audit(215.240:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10664 comm="syz.8.3446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f347358e929 code=0x0 [ 219.103837][T10666] overlayfs: failed to clone lowerpath [ 219.184573][T10675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10675 comm=syz.8.3448 [ 220.102526][ T36] audit: type=1326 audit(216.232:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.3466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaf238e929 code=0x0 [ 220.275321][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 220.684617][T10766] netlink: 'syz.8.3480': attribute type 5 has an invalid length. [ 220.692467][T10766] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3480'. [ 221.662887][T10817] 9pnet_fd: Insufficient options for proto=fd [ 221.997217][T10862] 9pnet_fd: Insufficient options for proto=fd [ 222.015867][T10866] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3512'. [ 222.290809][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3526'. [ 222.299799][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3526'. [ 222.308868][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3526'. [ 222.331902][T10904] overlayfs: failed to clone upperpath [ 222.351445][T10907] fuseblk: Bad value for 'fd' [ 222.489226][T10922] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3533'. [ 223.384106][ T36] audit: type=1326 audit(219.305:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.7.3549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf238e929 code=0x0 [ 224.492304][T11018] netlink: 'syz.7.3567': attribute type 4 has an invalid length. [ 224.766182][T11043] netlink: 'syz.7.3576': attribute type 4 has an invalid length. [ 224.850102][T11056] overlayfs: failed to clone upperpath [ 225.428685][T11075] netlink: 'syz.0.3586': attribute type 4 has an invalid length. [ 225.787348][T11123] netlink: 'syz.8.3602': attribute type 4 has an invalid length. [ 225.853223][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3606'. [ 225.878970][T11135] 9pnet_fd: Insufficient options for proto=fd [ 226.128305][T11146] netlink: 'syz.0.3611': attribute type 4 has an invalid length. [ 226.215098][ T36] audit: type=1400 audit(221.952:1176): avc: denied { shutdown } for pid=11161 comm="syz.0.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.382330][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3624'. [ 226.395177][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3624'. [ 226.412129][T11175] netlink: 'syz.6.3621': attribute type 4 has an invalid length. [ 226.556036][T11211] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3633'. [ 226.565871][T11211] netlink: 'syz.8.3633': attribute type 30 has an invalid length. [ 226.725955][T11213] netlink: 'syz.8.3634': attribute type 4 has an invalid length. [ 226.792266][ T36] audit: type=1400 audit(222.495:1177): avc: denied { create } for pid=11225 comm="syz.8.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 227.013895][T11236] netlink: 'syz.8.3643': attribute type 4 has an invalid length. [ 227.033207][T11239] /dev/nbd0: Can't lookup blockdev [ 227.078334][T11241] overlayfs: failed to clone upperpath [ 227.109664][T11245] overlayfs: failed to clone upperpath [ 227.171676][T11245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11245 comm=syz.0.3647 [ 227.815527][T11269] futex_wake_op: syz.7.3656 tries to shift op by 144; fix this program [ 228.348607][T11280] netlink: 'syz.0.3659': attribute type 4 has an invalid length. [ 228.723182][T11289] netlink: 'syz.6.3662': attribute type 6 has an invalid length. [ 228.731146][T11289] netlink: 'syz.6.3662': attribute type 4 has an invalid length. [ 228.738960][T11289] netlink: 'syz.6.3662': attribute type 6 has an invalid length. [ 228.747042][T11289] netlink: 'syz.6.3662': attribute type 13 has an invalid length. [ 228.755204][T11289] netlink: 3684 bytes leftover after parsing attributes in process `syz.6.3662'. [ 228.844995][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3669'. [ 228.856538][ T36] audit: type=1400 audit(224.431:1178): avc: denied { read } for pid=11305 comm="syz.7.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 228.866685][T11310] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3671'. [ 229.113308][ T36] audit: type=1326 audit(224.665:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11348 comm="syz.7.3686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaf238e929 code=0x0 [ 229.976227][T11413] No source specified [ 230.052787][ T36] audit: type=1326 audit(225.544:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.7.3715" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaf238e929 code=0x0 [ 230.075144][ T36] audit: type=1400 audit(225.553:1181): avc: denied { getattr } for pid=11434 comm="syz.0.3716" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 231.990477][T11532] validate_nla: 4 callbacks suppressed [ 231.990498][T11532] netlink: 'syz.7.3752': attribute type 4 has an invalid length. [ 232.018012][T11538] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 232.443990][T11547] overlayfs: failed to clone upperpath [ 232.532073][T11563] fuse: Unknown parameter 'X>r+? [ 232.532073][T11563] +-' [ 233.546999][T11585] netlink: 'syz.7.3771': attribute type 4 has an invalid length. [ 233.715212][T11613] 9pnet_fd: Insufficient options for proto=fd [ 233.772849][T11621] netlink: 'syz.8.3783': attribute type 12 has an invalid length. [ 234.047922][T11661] 9pnet_fd: Insufficient options for proto=fd [ 234.125826][T11667] SELinux: Context system_u:object_r:setrans_var_run_t:s0 is not valid (left unmapped). [ 234.136334][ T36] audit: type=1400 audit(229.370:1182): avc: denied { relabelto } for pid=11666 comm="syz.6.3799" name="file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:setrans_var_run_t:s0" [ 234.163507][T11667] 9pnet_fd: Insufficient options for proto=fd [ 234.181447][ T36] audit: type=1400 audit(229.370:1183): avc: denied { associate } for pid=11666 comm="syz.6.3799" name="file0" dev="tmpfs" ino=2397 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:setrans_var_run_t:s0" [ 234.551839][T11678] overlayfs: failed to clone lowerpath [ 235.006712][T11732] 8021q: VLANs not supported on lo [ 235.383165][T11761] tipc: Started in network mode [ 235.388070][T11761] tipc: Node identity 7, cluster identity 4711 [ 235.394334][T11761] tipc: Node number set to 7 [ 235.399922][T11761] overlayfs: failed to clone upperpath [ 235.541527][T11765] netlink: 'syz.8.3835': attribute type 4 has an invalid length. [ 235.882541][T11777] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3839'. [ 235.892062][T11777] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3839'. [ 235.901118][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'. [ 235.910041][T11777] tipc: MTU too low for tipc bearer [ 235.934794][T11782] sit0: entered promiscuous mode [ 235.941545][T11782] netlink: 'syz.6.3840': attribute type 1 has an invalid length. [ 235.949663][T11782] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3840'. [ 236.164345][T11808] netlink: 'syz.0.3849': attribute type 4 has an invalid length. [ 236.173469][T11808] netlink: 'syz.0.3849': attribute type 4 has an invalid length. [ 236.789187][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3865'. [ 236.811647][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3866'. [ 236.811756][T11854] overlayfs: failed to clone upperpath [ 237.364705][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3886'. [ 237.445376][ T36] audit: type=1326 audit(232.466:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11930 comm="syz.0.3892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8da7f8e929 code=0x0 [ 237.636791][T11969] netlink: 'syz.7.3906': attribute type 5 has an invalid length. [ 237.644692][T11969] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3906'. [ 237.960122][T11983] 9pnet_fd: Insufficient options for proto=fd [ 238.397821][T12009] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3921'. [ 238.418766][T12013] fuseblk: Bad value for 'fd' [ 238.879726][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3930'. [ 239.677102][ T36] audit: type=1400 audit(234.543:1185): avc: denied { bind } for pid=12070 comm="syz.7.3941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.075030][T12098] can: request_module (can-proto-0) failed. [ 240.126836][T12100] netlink: 'syz.7.3950': attribute type 46 has an invalid length. [ 240.160962][T12108] netlink: 'syz.7.3952': attribute type 29 has an invalid length. [ 240.615887][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.624160][T12133] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.632881][T12133] bridge_slave_0: entered allmulticast mode [ 240.639518][T12133] bridge_slave_0: entered promiscuous mode [ 240.664628][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.677949][T12133] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.685594][T12133] bridge_slave_1: entered allmulticast mode [ 240.692100][T12133] bridge_slave_1: entered promiscuous mode [ 240.723966][ T12] bridge_slave_1: left allmulticast mode [ 240.732833][ T12] bridge_slave_1: left promiscuous mode [ 240.738759][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.749960][ T12] bridge_slave_0: left allmulticast mode [ 240.755688][ T12] bridge_slave_0: left promiscuous mode [ 240.761547][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.874875][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.881976][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.889326][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.896409][T12133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.907017][ T12] tipc: Disabling bearer [ 240.912386][ T12] tipc: Left network mode [ 240.919197][ T12] veth1_macvtap: left promiscuous mode [ 240.925005][ T12] veth0_vlan: left promiscuous mode [ 240.946451][ T13] tipc: Subscription rejected, illegal request [ 241.004236][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.017334][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.027681][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.034776][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.044860][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.052001][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.092320][T12133] veth0_vlan: entered promiscuous mode [ 241.103829][T12133] veth1_macvtap: entered promiscuous mode [ 241.241852][ T36] audit: type=1400 audit(236.011:1186): avc: denied { write } for pid=12190 comm="syz.7.3979" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 241.269236][ T36] audit: type=1400 audit(236.011:1187): avc: denied { open } for pid=12190 comm="syz.7.3979" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 241.297261][ T36] audit: type=1400 audit(236.011:1188): avc: denied { map } for pid=12190 comm="syz.7.3979" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 241.498938][T12203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12203 comm=syz.7.3983 [ 241.524643][ T36] audit: type=1400 audit(236.273:1189): avc: denied { append } for pid=12204 comm="syz.7.3984" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 241.552155][ T36] audit: type=1400 audit(236.301:1190): avc: denied { execute } for pid=12204 comm="syz.7.3984" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 241.828037][T12235] Unsupported ieee802154 address type: 0 [ 241.887063][T12241] fuseblk: Unknown parameter '#)Jm'9WJ]F0xffffffffffffffff' [ 241.890380][ T36] audit: type=1400 audit(236.619:1191): avc: denied { read write } for pid=12240 comm="syz.7.3997" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.943777][ T36] audit: type=1400 audit(236.619:1192): avc: denied { open } for pid=12240 comm="syz.7.3997" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 241.986874][ T36] audit: type=1400 audit(236.619:1193): avc: denied { ioctl } for pid=12240 comm="syz.7.3997" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.568407][T12264] fuse: Bad value for 'fd' [ 242.569342][T12266] cgroup: none used incorrectly [ 242.596010][T12268] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 242.623500][T12271] netlink: 556 bytes leftover after parsing attributes in process `syz.7.4008'. [ 242.644507][ T36] audit: type=1400 audit(237.321:1194): avc: denied { map } for pid=12270 comm="syz.7.4008" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 242.709613][T12278] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4011'. [ 243.034262][ T437] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 243.173224][ T437] usb 8-1: device descriptor read/64, error -71 [ 243.429788][ T437] usb 8-1: device descriptor read/64, error -71 [ 243.686383][ T437] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 243.825339][ T437] usb 8-1: device descriptor read/64, error -71 [ 244.081899][ T437] usb 8-1: device descriptor read/64, error -71 [ 244.199650][ T437] usb usb8-port1: attempt power cycle [ 244.563014][ T437] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 244.585501][ T437] usb 8-1: device descriptor read/8, error -71 [ 244.724435][ T437] usb 8-1: device descriptor read/8, error -71 [ 244.979939][ T437] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 245.002332][ T437] usb 8-1: device descriptor read/8, error -71 [ 245.141338][ T437] usb 8-1: device descriptor read/8, error -71 [ 245.257958][ T437] usb usb8-port1: unable to enumerate USB device [ 246.129255][ T36] audit: type=1400 audit(240.585:1195): avc: denied { append } for pid=12347 comm="syz.7.4035" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.550701][T12369] overlayfs: failed to clone lowerpath [ 246.630100][T12376] /dev/rnullb0: Can't lookup blockdev [ 246.701974][T12380] SELinux: Context unconfined is not valid (left unmapped). [ 246.716313][ T36] audit: type=1400 audit(241.137:1196): avc: denied { relabelto } for pid=12379 comm="syz.0.4048" name="fuse" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined" [ 246.755210][ T36] audit: type=1400 audit(241.137:1197): avc: denied { associate } for pid=12379 comm="syz.0.4048" name="fuse" dev="tmpfs" ino=1050 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="unconfined" [ 246.800149][T12388] mmap: syz.0.4051 (12388): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 246.832030][T12391] fuse: Bad value for 'fd' [ 247.037007][T12399] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 247.037038][T12399] rust_binder: Error while translating object. [ 247.046064][T12399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.052374][T12399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 247.141937][T12401] rust_binder: 12401: no such ref 0 [ 247.168090][T12403] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 247.168109][T12403] rust_binder: Error while translating object. [ 247.176875][T12403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.183125][T12403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 247.193177][T12404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.328334][ T36] audit: type=1400 audit(241.708:1198): avc: denied { setattr } for pid=12419 comm="syz.7.4063" name="NETLINK" dev="sockfs" ino=57282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.415545][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4066'. [ 247.496723][T12437] fuse: Bad value for 'fd' [ 247.569999][ T36] audit: type=1400 audit(241.932:1199): avc: denied { ioctl } for pid=12442 comm="syz.7.4071" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 248.048134][ T45] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 248.193217][T12463] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4078'. [ 248.209505][ T45] usb 8-1: config index 0 descriptor too short (expected 4114, got 18) [ 248.217807][ T45] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 48, using maximum allowed: 30 [ 248.228572][ T45] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 248.243079][ T45] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 248.252270][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.260289][ T45] usb 8-1: Product: syz [ 248.264916][ T45] usb 8-1: Manufacturer: syz [ 248.269545][ T45] usb 8-1: SerialNumber: syz [ 248.280907][ T45] usb 8-1: config 0 descriptor?? [ 248.506338][ T45] usb 8-1: USB disconnect, device number 11 [ 248.516997][T12284] udevd[12284]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 249.023883][ T36] audit: type=1400 audit(243.298:1200): avc: denied { watch watch_reads } for pid=12487 comm="syz.0.4088" path="/512/file0" dev="tmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.060943][T12494] fuse: Unknown parameter 'AA' [ 249.094910][T12506] netlink: 'syz.7.4093': attribute type 4 has an invalid length. [ 249.162748][T12522] binder: Unknown parameter 'context' [ 249.164824][T12521] netlink: 'syz.6.4099': attribute type 40 has an invalid length. [ 249.480689][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 249.619704][ T9] usb 8-1: device descriptor read/64, error -71 [ 249.725588][T12571] overlayfs: failed to clone upperpath [ 249.873156][ T36] audit: type=1326 audit(244.084:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.6.4118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab4df8e929 code=0x0 [ 249.897651][ T9] usb 8-1: device descriptor read/64, error -71 [ 250.154165][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 250.293164][ T9] usb 8-1: device descriptor read/64, error -71 [ 250.549737][ T9] usb 8-1: device descriptor read/64, error -71 [ 250.667405][ T9] usb usb8-port1: attempt power cycle [ 251.030842][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 251.074589][ T9] usb 8-1: device descriptor read/8, error -71 [ 251.224279][ T9] usb 8-1: device descriptor read/8, error -71 [ 251.479834][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 251.502195][ T9] usb 8-1: device descriptor read/8, error -71 [ 251.641241][ T9] usb 8-1: device descriptor read/8, error -71 [ 251.757863][ T9] usb usb8-port1: unable to enumerate USB device [ 251.761575][T12653] netlink: 'syz.6.4144': attribute type 29 has an invalid length. [ 251.772258][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4144'. [ 252.308072][T12656] x_tables: duplicate underflow at hook 1 [ 252.446478][T12658] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 252.446947][T12658] rust_binder: Write failure EINVAL in pid:138 [ 252.645942][T12665] rust_binder: Write failure EINVAL in pid:145 [ 252.652530][T12665] netlink: 'syz.7.4148': attribute type 16 has an invalid length. [ 252.696735][T12674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4151'. [ 252.705762][T12674] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4151'. [ 252.714777][T12674] netlink: 'syz.6.4151': attribute type 6 has an invalid length. [ 252.722943][T12674] netlink: 'syz.6.4151': attribute type 5 has an invalid length. [ 252.730760][T12674] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4151'. [ 253.000273][T12688] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4157'. [ 253.128841][ T36] audit: type=1326 audit(503.135:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.151965][ T36] audit: type=1326 audit(503.135:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.174905][ T36] audit: type=1326 audit(503.135:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab4df8d290 code=0x7ffc0000 [ 253.197804][ T36] audit: type=1326 audit(503.135:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab4df8d290 code=0x7ffc0000 [ 253.220712][ T36] audit: type=1326 audit(503.135:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.243660][ T36] audit: type=1326 audit(503.135:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.266694][ T36] audit: type=1326 audit(503.135:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.289842][ T36] audit: type=1326 audit(503.135:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.312855][ T36] audit: type=1326 audit(503.135:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.335869][ T36] audit: type=1326 audit(503.135:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12700 comm="syz.6.4160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fab4df8e929 code=0x7ffc0000 [ 253.586457][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.593608][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.600813][T12707] bridge_slave_0: entered allmulticast mode [ 253.607221][T12707] bridge_slave_0: entered promiscuous mode [ 253.613753][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.620857][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.629878][T12707] bridge_slave_1: entered allmulticast mode [ 253.636789][T12707] bridge_slave_1: entered promiscuous mode [ 253.713602][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.720735][T12707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.728060][T12717] rust_binder: Error in use_page_slow: ESRCH [ 253.728082][T12717] rust_binder: use_range failure ESRCH [ 253.728094][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.734080][T12717] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 253.739562][T12707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.761787][T12717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 253.761816][T12717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:154 [ 253.797284][T12707] veth0_vlan: entered promiscuous mode [ 253.819505][T12707] veth1_macvtap: entered promiscuous mode [ 253.897961][ T13] bridge_slave_1: left allmulticast mode [ 253.903767][ T13] bridge_slave_1: left promiscuous mode [ 253.910419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.918449][ T13] bridge_slave_0: left allmulticast mode [ 253.924152][ T13] bridge_slave_0: left promiscuous mode [ 253.930164][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.030637][ T13] veth1_macvtap: left promiscuous mode [ 254.036328][ T13] veth0_vlan: left promiscuous mode [ 254.112789][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.119964][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.127135][T12724] bridge_slave_0: entered allmulticast mode [ 254.133722][T12724] bridge_slave_0: entered promiscuous mode [ 254.140361][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.147508][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.154787][T12724] bridge_slave_1: entered allmulticast mode [ 254.161106][T12724] bridge_slave_1: entered promiscuous mode [ 254.213998][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.221128][T12724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.228539][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.235675][T12724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.257902][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.265344][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.275546][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.282634][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.292650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.299779][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.329660][T12724] veth0_vlan: entered promiscuous mode [ 254.341489][T12724] veth1_macvtap: entered promiscuous mode [ 254.519941][T12747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4176'. [ 254.680110][T12753] rust_binder: Error while translating object. [ 254.680146][T12753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 254.686406][T12753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 254.765590][T12756] batadv_slave_0: entered promiscuous mode [ 254.976052][T12760] 9pnet_fd: Insufficient options for proto=fd [ 255.598715][T12754] batadv_slave_0: left promiscuous mode [ 255.676899][T12778] xfrm0: mtu less than device minimum [ 255.684813][T12778] overlay: Unknown parameter '/' [ 255.820591][T12789] netlink: 'syz.2.4193': attribute type 4 has an invalid length. [ 255.829624][T12789] FAULT_INJECTION: forcing a failure. [ 255.829624][T12789] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.842886][T12789] CPU: 0 UID: 0 PID: 12789 Comm: syz.2.4193 Not tainted 6.12.30-syzkaller-g5bbd30a60b96 #0 3d6f2d36d380480240f813e82e2a5ca54e02272f [ 255.842920][T12789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.842938][T12789] Call Trace: [ 255.842946][T12789] [ 255.842955][T12789] __dump_stack+0x21/0x30 [ 255.842999][T12789] dump_stack_lvl+0x10c/0x190 [ 255.843025][T12789] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.843055][T12789] dump_stack+0x19/0x20 [ 255.843079][T12789] should_fail_ex+0x3d9/0x530 [ 255.843107][T12789] should_fail+0xf/0x20 [ 255.843132][T12789] should_fail_usercopy+0x1e/0x30 [ 255.843161][T12789] _copy_to_user+0x24/0xa0 [ 255.843194][T12789] simple_read_from_buffer+0xed/0x160 [ 255.843217][T12789] proc_fail_nth_read+0x19e/0x210 [ 255.843248][T12789] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 255.843271][T12789] ? _raw_spin_unlock_bh+0x54/0x60 [ 255.843294][T12789] ? bpf_lsm_file_permission+0xd/0x20 [ 255.843320][T12789] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 255.843342][T12789] vfs_read+0x27b/0xb60 [ 255.843369][T12789] ? __kasan_check_write+0x18/0x20 [ 255.843397][T12789] ? __cfi_vfs_read+0x10/0x10 [ 255.843422][T12789] ? __kasan_check_write+0x18/0x20 [ 255.843448][T12789] ? mutex_lock+0x92/0x1c0 [ 255.843475][T12789] ? __cfi_mutex_lock+0x10/0x10 [ 255.843502][T12789] ? __fget_files+0x2c5/0x340 [ 255.843535][T12789] ksys_read+0x141/0x250 [ 255.843562][T12789] ? __cfi_ksys_read+0x10/0x10 [ 255.843590][T12789] ? __kasan_check_read+0x15/0x20 [ 255.843616][T12789] __x64_sys_read+0x7f/0x90 [ 255.843644][T12789] x64_sys_call+0x2638/0x2ee0 [ 255.843673][T12789] do_syscall_64+0x58/0xf0 [ 255.843694][T12789] ? clear_bhb_loop+0x50/0xa0 [ 255.843723][T12789] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 255.843749][T12789] RIP: 0033:0x7f98e2b8d33c [ 255.843778][T12789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.843797][T12789] RSP: 002b:00007f98e3984030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.843826][T12789] RAX: ffffffffffffffda RBX: 00007f98e2db5fa0 RCX: 00007f98e2b8d33c [ 255.843843][T12789] RDX: 000000000000000f RSI: 00007f98e39840a0 RDI: 000000000000000b [ 255.843857][T12789] RBP: 00007f98e3984090 R08: 0000000000000000 R09: 0000000000000000 [ 255.843871][T12789] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 255.843886][T12789] R13: 0000000000000000 R14: 00007f98e2db5fa0 R15: 00007ffc9d062618 [ 255.843905][T12789] [ 256.104399][T12793] fuseblk: Bad value for 'fd' [ 256.235357][T12801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12801 comm=syz.2.4197 [ 256.249407][T12801] rust_binder: Write failure EINVAL in pid:40 [ 256.433164][T12818] Invalid ELF header type: 2 != 1 [ 257.089448][T12848] fuse: Bad value for 'rootmode' [ 257.094051][T12852] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 257.214835][T12866] fuseblk: Bad value for 'fd' [ 257.255390][T12861] netlink: 564 bytes leftover after parsing attributes in process `syz.2.4220'. [ 257.281508][T12861] binder: Bad value for 'max' [ 257.327857][ T37] INFO: task syz.4.1439:4767 blocked for more than 122 seconds. [ 257.339402][ T37] Not tainted 6.12.30-syzkaller-g5bbd30a60b96 #0 [ 257.346670][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.353676][T12878] 9pnet_fd: Insufficient options for proto=fd [ 257.361717][ T37] task:syz.4.1439 state:D stack:0 pid:4767 tgid:4765 ppid:1011 flags:0x00000004 [ 257.372076][ T37] Call Trace: [ 257.375403][ T37] [ 257.378365][ T37] __schedule+0x132b/0x1e00 [ 257.383000][ T37] ? __sched_text_start+0x10/0x10 [ 257.388046][ T37] ? kasan_save_track+0x4f/0x80 [ 257.392994][ T37] ? update_curr+0xdc/0xaa0 [ 257.397511][ T37] ? enqueue_task+0x1133/0x11f0 [ 257.402394][ T37] schedule+0xc6/0x240 [ 257.406482][ T37] schedule_timeout+0xb2/0x3a0 [ 257.411245][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 257.416640][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 257.422194][ T37] wait_for_common+0x359/0x630 [ 257.426981][ T37] ? wait_for_completion+0x40/0x40 [ 257.432099][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 257.437229][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 257.442804][ T37] wait_for_completion_state+0x19/0x40 [ 257.448284][ T37] do_coredump+0x7cf/0x2bd0 [ 257.452820][ T37] ? stack_depot_save_flags+0x38/0x800 [ 257.458323][ T37] ? kasan_save_track+0x4f/0x80 [ 257.463186][ T37] ? kasan_save_track+0x3e/0x80 [ 257.468305][ T37] ? kasan_save_free_info+0x4a/0x60 [ 257.473512][ T37] ? __kasan_slab_free+0x5f/0x80 [ 257.478483][ T37] ? __cfi_do_coredump+0x10/0x10 [ 257.483431][ T37] ? __kasan_slab_free+0x6a/0x80 [ 257.488388][ T37] ? kmem_cache_free+0x1c1/0x510 [ 257.493334][ T37] ? get_signal+0xa75/0x14f0 [ 257.497955][ T37] get_signal+0x11fd/0x14f0 [ 257.502480][ T37] arch_do_signal_or_restart+0x96/0x720 [ 257.508038][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 257.514226][ T37] ? __kasan_check_write+0x18/0x20 [ 257.519373][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 257.524865][ T37] do_syscall_64+0x64/0xf0 [ 257.529287][ T37] ? clear_bhb_loop+0x50/0xa0 [ 257.533983][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 257.539887][ T37] RIP: 0003:0x7ffc777f2080 [ 257.544332][ T37] RSP: 0003:00007fa672db608c EFLAGS: 00050b02 [ 257.550403][ T37] RAX: 0000000000000000 RBX: 000000001f366328 RCX: 00007fa672db6080 [ 257.558387][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.566460][ T37] RBP: 000000000000007a R08: 00007fa672db6080 R09: 0000000000000000 [ 257.574450][ T37] R10: ffffffff000015be R11: 00007fa672d31c80 R12: 000000000000007a [ 257.582429][ T37] R13: 000000001f39f40b R14: 0000000000000000 R15: 0000000000000000 [ 257.590422][ T37] [ 257.594069][ T37] NMI backtrace for cpu 0 [ 257.594083][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g5bbd30a60b96 #0 3d6f2d36d380480240f813e82e2a5ca54e02272f [ 257.594113][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.594127][ T37] Call Trace: [ 257.594133][ T37] [ 257.594141][ T37] __dump_stack+0x21/0x30 [ 257.594171][ T37] dump_stack_lvl+0x10c/0x190 [ 257.594197][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 257.594225][ T37] dump_stack+0x19/0x20 [ 257.594249][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 257.594271][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 257.594294][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 257.594314][ T37] ? sched_show_task+0x379/0x560 [ 257.594339][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 257.594358][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 257.594382][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 257.594406][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 257.594429][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 257.594453][ T37] watchdog+0xd8f/0xed0 [ 257.594479][ T37] ? __cfi_watchdog+0x10/0x10 [ 257.594506][ T37] ? __kasan_check_read+0x15/0x20 [ 257.594532][ T37] ? __kthread_parkme+0x138/0x180 [ 257.594561][ T37] ? schedule+0xc6/0x240 [ 257.594584][ T37] kthread+0x2c7/0x370 [ 257.594601][ T37] ? __cfi_watchdog+0x10/0x10 [ 257.594625][ T37] ? __cfi_kthread+0x10/0x10 [ 257.594643][ T37] ret_from_fork+0x64/0xa0 [ 257.594669][ T37] ? __cfi_kthread+0x10/0x10 [ 257.594684][ T37] ret_from_fork_asm+0x1a/0x30 [ 257.594714][ T37] [ 257.594730][ T37] Sending NMI from CPU 0 to CPUs 1: [ 257.756216][ C1] NMI backtrace for cpu 1 [ 257.756231][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.30-syzkaller-g5bbd30a60b96 #0 3d6f2d36d380480240f813e82e2a5ca54e02272f [ 257.756254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.756264][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 257.756294][ C1] Code: cc cc cc b8 49 cb f5 66 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 9c 41 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 83 57 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 257.756308][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 257.756323][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366a600 RCX: ffffffff8585b00e [ 257.756337][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000003f0f6c [ 257.756347][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 257.756358][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd4c0 [ 257.756371][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87ca7768 [ 257.756382][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 257.756395][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.756411][ C1] CR2: 00007f8c14382178 CR3: 000000010629a000 CR4: 00000000003526b0 [ 257.756426][ C1] DR0: 0000000000000004 DR1: 0000000000000006 DR2: 0000000000000004 [ 257.756436][ C1] DR3: 0000000000001000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.756446][ C1] Call Trace: [ 257.756452][ C1] [ 257.756459][ C1] default_idle+0x17/0x30 [ 257.756484][ C1] arch_cpu_idle+0xd/0x20 [ 257.756507][ C1] default_idle_call+0x3f/0x80 [ 257.756520][ C1] do_idle+0x1a0/0x470 [ 257.756545][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 257.756570][ C1] cpu_startup_entry+0x48/0x70 [ 257.756593][ C1] start_secondary+0x12e/0x140 [ 257.756612][ C1] common_startup_64+0x13b/0x157 [ 257.756632][ C1] [ 257.942497][T12883] sit0: entered promiscuous mode [ 257.948984][T12883] netlink: 'syz.0.4227': attribute type 1 has an invalid length. [ 257.956865][T12883] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4227'. [ 257.965991][T12884] netlink: 'syz.0.4227': attribute type 1 has an invalid length. [ 257.973784][T12884] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4227'.