last executing test programs: 10m29.98237994s ago: executing program 3 (id=2033): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async, rerun: 32) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x6, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000d004"]) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = creat(&(0x7f0000000580)='./mnt\x00', 0x20) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000005c0)={0x80}) (async) r5 = socket$inet(0x2, 0x1, 0x1) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0xa, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) mkdir(0x0, 0x0) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team0\x00', &(0x7f0000000680)=@ethtool_rxnfc={0x31, 0xd, 0x8, {0x11, @tcp_ip4_spec={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e21, 0x4e20, 0xfd}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 0xf, 0x8, [0x7, 0xd]}, @usr_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x0, 0x3}, {0x0, @empty, 0x0, 0x80, [0x8, 0x3]}, 0xda7c, 0x1}}}) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000fff7ffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/247, 0xf7}, {0x0}], 0x2, 0x22, 0x800, 0xc) (async, rerun: 64) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$PTP_CLOCK_GETCAPS(r8, 0x80503d01, &(0x7f0000000140)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {}, {}, {0x0, @struct}}) (async) read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x206e) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r9) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) 10m29.98223819s ago: executing program 3 (id=2034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x180, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x200}, {0x0, 0x8}}}, 0xb8}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 10m29.98187719s ago: executing program 3 (id=2035): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x8, 0x2}, 0x48000000}}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000002c0)={0x0, 0x1, 0xfffffffffffffeff}) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) fchdir(0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000100)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4109, 0x100d}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0x10000e}, {{0x0, 0x0, 0x0}, 0x1a}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x80001000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40010100, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10m29.98141763s ago: executing program 3 (id=2036): setresgid(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x7d4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, r1, {0xcf}}, 0x18) setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') (async) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x7d4) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, r1, {0xcf}}, 0x18) (async) 10m29.969430641s ago: executing program 3 (id=2037): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) (async) unshare(0x22020600) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) (async) fcntl$setstatus(r1, 0x4, 0x40000) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 10m29.957098183s ago: executing program 3 (id=2038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x856, &(0x7f0000003100)={{0x12, 0x1, 0x201, 0x9c, 0x2d, 0xff, 0x40, 0x17cc, 0x1940, 0xad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x844, 0x2, 0x9e, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x75, 0x9, 0xd, 0x18, 0xc5, 0xda, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x1, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ea78bea572"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x0, 0x6, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xf10f}]}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x4, 0x3, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x565}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0xf, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xa, 0x3, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x1, 0xa0, 0x5, [@generic={0xb1, 0xf, "9e29e1c902a9c46890b6087c8468a913cb955401e79a3dbdf1bbe15c2b7cde74655ae382fe8c3690c51334d490ae30a815139c6ed642721c7989cfa4d0aca7c1aa495be0d0540a26f5496198bdbad23a12d132c985e77b42610b999deb3c95f1916aad737356446b81cc4bb6151ef304948dd23f33a313400aa91c957afcd67602b6ce3f0fd708b67721f13c22432b130067eace7f86a3a4ce5c8705dc08f44c7a33855bd1861f8534238e1fbaca96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xee, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x2}, @generic={0xf7, 0x1, "95f760886ffe63edca3943ff5b4cf3907e898779734455d8051e4115ee362ea61751af69071ae8e2c92c0d1e8f98f1b70c61a30be29a9f8fc3dcca8cf4f405cd8c5c855e9f24698294e861641407e477097738bfd0114540d20a551bf49b2a725505d233508ebdecaef3e4d772ffc3fe66491c0501fb33f7010f419de5826a064a5503854d038fba7ce3050c9bd236ab1befe28ee9b02cf39d65888b2a317d982f20dcb5e0e89db1911881fef1c904f406a6ecd18865ab4b121e0439f7b1da415982bdd6adb6f14292f83249d620234a3f5a65cc697b3879e355148c5e1192183025fba6274608f2b0aea64ec0925b76996d74f1d3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x1, 0x0, 0xfe}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3, 0xc, 0x5, [@generic={0xdf, 0x4, "b06e229c0dfedf5c2be07ad18a3adc63595340b0db7f142ff17edfc37499e375608ddb830eced375477d3b1ee5b1b5f618a257eab9487fb74cc07bbfc08e35ab5a764e7d35dd965027c6fac7de96871bfb6fe45a9e6879342a108ea491286679f615f886915a7d6232a68d1098dbcab24a7e15d12bd65c172acc67d4d562a3e07eef472364ec941488b40a6d473ed23b4770dc7f2e2df26560b7fd9f4a7ce52015484aa306c39b8c0f0ee446ded5c97ff7e5e4deadbc1cfdf579515808559ed116b50d1b75077449037d93b2e75d95ef91617a43d6d84b9d1f79e6acc8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x6, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x10}, @generic={0x38, 0x4, "322a3a9155c546227f4ece6a1705e7fde082ce573383042469a51002c2d843d4dac07d85d51f78ad8ab84fce4f632f5637b37e909f7b"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x4, 0x8b, [@generic={0x7e, 0x6, "76dde8697dfb9096e5df596dc7621adec7a993c246bc4963be12d0d31b54cfaf8f1e11acb7d4e623282770ecd8885e7d1ff6f65a675dea70d2e1916b27664edcfe7475ce6990a11c8c8cbbc289dd172884dc3f4835d4b72571d0d74afa0b21a7d318066234a38f590fa49ee242102191976aa614b8e75a9d9b608ba3"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x4, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x670, 0x6, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @generic={0xf3, 0x24, "c0fa9ab18b4065f30cd84f6b472350ea0dc98ea27886a3a13d4d5607d7937e9847593e48463f59bc1255ce438c0884284c7b3308f6ec2565a49be1414bdcf8fbc4b11c635d7ff6543e057cd8986a6d46229989ac45df45d8a67fb37dab4322dfd03326c7f6532007e80bef12d74bd8a764adf7a95a60a71b5b79297de63fd739d75b08ed859b070cb00aa919c8524fc6911e700d3be8a1ba6ca2eace2b4aeb0ebec13e4e83fdcb5d115731d783bb75d3edf67c16e710170a4e8404d1be01158030baf922c5f001e880e8f880c4d436df983e2a5e4e3c36c650ca906a619778ee3dbd8e067b9b808650da6927c368c2e82e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x6, 0x1}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0xd1, 0x2, 0x9, [@generic={0x8c, 0x30, "a85f4c26579c952326770f0ca892f28c36cbcf30f93f651966176b54a5867d01eab2c1af4c8bf1840c7814559ac8c633b32506a2c1a4737ae2a1f04acc429965372f3485b26193b5823772bdd0cc9ed16e8742c92417ec0f0f5c40ac9e9cf23acf97185e4dc8f96d682b98256b1b61cdff2b4d95598f53c512f59b36c4971c3f5d447a5832bbfcc804b9"}]}}]}}, {{0x9, 0x4, 0x72, 0x1, 0xd, 0xe6, 0xa3, 0x80, 0xf6, [], [{{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x1, 0x5, [@generic={0xc, 0x3, "21af396eab7804884e0b"}]}}, {{0x9, 0x5, 0xb, 0xf, 0x200, 0x7, 0x40, 0x4, [@generic={0x2e, 0x21, "bca5a07aebe6f1b78836b6139f04b51b9ef2496d8eb0ce86e7c4c76ca40be09af7b7ea2bd412e8dfbaeaf670"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xd, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0x65, 0x7, "a76ec0f82e5beb543b7050b955974e8d6d9c5345d106d299de4805a50d13de71263cd842d07156187b07f7bee336b16582403dab0ea05091bb8b4b30e52ddb32783bfac46d87d035b39bfa6634671a0611e8416650d5bca062b04f5ac821e6180e0c0d"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0xa, 0xa8efe57d10a3986f, 0x8, 0x2, 0xf3, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2e, 0x6, 0x9, [@generic={0xca, 0x7, "0141a8740705e2a84ebba3fc326fefca743959f0d457055bd6c762e72624476f12c12afab5c530bdcd75d4e0e14232c3b07d4798e2d9ef4ec0a1274f2841f89de08c2c2b554e5197642dfbd83772978aa5e7d3d95f45c740f9c2ed51a40859fddaf88ed8524a1a2833a60f3858331a8032cab053247261a0e4bea15df5136a3618e3d4f22d46120d6288291c9e6c6fa5578f270ad3cac77cd3508e3436cc807854dae2aecf7c6de20c7d121d59f46f7c719d5fd367a3eb20bfa655bc9af14c7b6e3abe5aa43c10e7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xc7, 0x2, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x12, 0x40, 0x0, 0x9, 0x5, [@generic={0x1a, 0x30, "9c5ace1f12ac34b801ad16ae89d0e4f919171318885665be"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1, 0x3, 0xf8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x40, 0xb, [@generic={0x5b, 0x10, "fffa5170ef61ddc1ae3c2e4034d923e7c55498bb8eacc573216fe59559bd87377b7006b6e4ea808525fbd423339a9b87f7f19492df3795206861cdda414054be10b35e381f4cde6c62b3ff99cd6a86f0e75f048ab1a0ba8ad6"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0xb, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xa, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xf9, 0xfe, 0x3}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x2, 0x81, 0x10, 0x8}, 0xed, &(0x7f0000000340)={0x5, 0xf, 0xed, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf00f, 0x9, [0xc03f]}, @generic={0xd, 0x10, 0x4, "7b1d7710dc009de80590"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x3, 0x7}, @generic={0xbd, 0x10, 0xa, "b05c15eb268b994e0b0a6eb88bbfc1d71e2b87eb294ccfbad626c070bd7b860474957e7342a368a5e40ae8ac4a71ff6b2b056aaad5d3abe43bd0e4f4a5862ae23953b221cb161eb7c72d4537f0e26354b881c3bff88bccc7fcee1fd0b03cdc3dca55b2a8f6537d0d353b35ba8e24f410e957e2f1b32e0e4f0e19da2494429e359191ac634c1dc5e9b75190c53dd4cb14ba18dede6de824a194eac433a613bc58b347cb5de111d99451b064899f64718c0c7d0d02100f41963275"}]}, 0x1, [{0x46, &(0x7f00000001c0)=@string={0x46, 0x3, "ea0304b7542208b901ce75de128c137ae41067d2d172ad7292397f2a0cd1e464e8d4050e3c7e922dd90200d8f88c34f1bf43524f8ea7fb03a4d38fa081d274814fdd1aa5"}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0xfffffffffffffff9}]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368923e1410886461686561640fb44bf04df72711fa2ae5d0231cb4a5505301e027423c35cf0c4efbb0eee58f41726743e479a1dc0d061d000000"]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_usb_connect(0x1, 0x856, &(0x7f0000003100)={{0x12, 0x1, 0x201, 0x9c, 0x2d, 0xff, 0x40, 0x17cc, 0x1940, 0xad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x844, 0x2, 0x9e, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x75, 0x9, 0xd, 0x18, 0xc5, 0xda, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x1, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ea78bea572"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x0, 0x6, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xf10f}]}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x4, 0x3, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x565}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0xf, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xa, 0x3, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x1, 0xa0, 0x5, [@generic={0xb1, 0xf, "9e29e1c902a9c46890b6087c8468a913cb955401e79a3dbdf1bbe15c2b7cde74655ae382fe8c3690c51334d490ae30a815139c6ed642721c7989cfa4d0aca7c1aa495be0d0540a26f5496198bdbad23a12d132c985e77b42610b999deb3c95f1916aad737356446b81cc4bb6151ef304948dd23f33a313400aa91c957afcd67602b6ce3f0fd708b67721f13c22432b130067eace7f86a3a4ce5c8705dc08f44c7a33855bd1861f8534238e1fbaca96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xee, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x2}, @generic={0xf7, 0x1, "95f760886ffe63edca3943ff5b4cf3907e898779734455d8051e4115ee362ea61751af69071ae8e2c92c0d1e8f98f1b70c61a30be29a9f8fc3dcca8cf4f405cd8c5c855e9f24698294e861641407e477097738bfd0114540d20a551bf49b2a725505d233508ebdecaef3e4d772ffc3fe66491c0501fb33f7010f419de5826a064a5503854d038fba7ce3050c9bd236ab1befe28ee9b02cf39d65888b2a317d982f20dcb5e0e89db1911881fef1c904f406a6ecd18865ab4b121e0439f7b1da415982bdd6adb6f14292f83249d620234a3f5a65cc697b3879e355148c5e1192183025fba6274608f2b0aea64ec0925b76996d74f1d3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x1, 0x0, 0xfe}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3, 0xc, 0x5, [@generic={0xdf, 0x4, "b06e229c0dfedf5c2be07ad18a3adc63595340b0db7f142ff17edfc37499e375608ddb830eced375477d3b1ee5b1b5f618a257eab9487fb74cc07bbfc08e35ab5a764e7d35dd965027c6fac7de96871bfb6fe45a9e6879342a108ea491286679f615f886915a7d6232a68d1098dbcab24a7e15d12bd65c172acc67d4d562a3e07eef472364ec941488b40a6d473ed23b4770dc7f2e2df26560b7fd9f4a7ce52015484aa306c39b8c0f0ee446ded5c97ff7e5e4deadbc1cfdf579515808559ed116b50d1b75077449037d93b2e75d95ef91617a43d6d84b9d1f79e6acc8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x6, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x10}, @generic={0x38, 0x4, "322a3a9155c546227f4ece6a1705e7fde082ce573383042469a51002c2d843d4dac07d85d51f78ad8ab84fce4f632f5637b37e909f7b"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x4, 0x8b, [@generic={0x7e, 0x6, "76dde8697dfb9096e5df596dc7621adec7a993c246bc4963be12d0d31b54cfaf8f1e11acb7d4e623282770ecd8885e7d1ff6f65a675dea70d2e1916b27664edcfe7475ce6990a11c8c8cbbc289dd172884dc3f4835d4b72571d0d74afa0b21a7d318066234a38f590fa49ee242102191976aa614b8e75a9d9b608ba3"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x4, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x670, 0x6, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @generic={0xf3, 0x24, "c0fa9ab18b4065f30cd84f6b472350ea0dc98ea27886a3a13d4d5607d7937e9847593e48463f59bc1255ce438c0884284c7b3308f6ec2565a49be1414bdcf8fbc4b11c635d7ff6543e057cd8986a6d46229989ac45df45d8a67fb37dab4322dfd03326c7f6532007e80bef12d74bd8a764adf7a95a60a71b5b79297de63fd739d75b08ed859b070cb00aa919c8524fc6911e700d3be8a1ba6ca2eace2b4aeb0ebec13e4e83fdcb5d115731d783bb75d3edf67c16e710170a4e8404d1be01158030baf922c5f001e880e8f880c4d436df983e2a5e4e3c36c650ca906a619778ee3dbd8e067b9b808650da6927c368c2e82e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x6, 0x1}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0xd1, 0x2, 0x9, [@generic={0x8c, 0x30, "a85f4c26579c952326770f0ca892f28c36cbcf30f93f651966176b54a5867d01eab2c1af4c8bf1840c7814559ac8c633b32506a2c1a4737ae2a1f04acc429965372f3485b26193b5823772bdd0cc9ed16e8742c92417ec0f0f5c40ac9e9cf23acf97185e4dc8f96d682b98256b1b61cdff2b4d95598f53c512f59b36c4971c3f5d447a5832bbfcc804b9"}]}}]}}, {{0x9, 0x4, 0x72, 0x1, 0xd, 0xe6, 0xa3, 0x80, 0xf6, [], [{{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x1, 0x5, [@generic={0xc, 0x3, "21af396eab7804884e0b"}]}}, {{0x9, 0x5, 0xb, 0xf, 0x200, 0x7, 0x40, 0x4, [@generic={0x2e, 0x21, "bca5a07aebe6f1b78836b6139f04b51b9ef2496d8eb0ce86e7c4c76ca40be09af7b7ea2bd412e8dfbaeaf670"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xd, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0x65, 0x7, "a76ec0f82e5beb543b7050b955974e8d6d9c5345d106d299de4805a50d13de71263cd842d07156187b07f7bee336b16582403dab0ea05091bb8b4b30e52ddb32783bfac46d87d035b39bfa6634671a0611e8416650d5bca062b04f5ac821e6180e0c0d"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0xa, 0xa8efe57d10a3986f, 0x8, 0x2, 0xf3, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2e, 0x6, 0x9, [@generic={0xca, 0x7, "0141a8740705e2a84ebba3fc326fefca743959f0d457055bd6c762e72624476f12c12afab5c530bdcd75d4e0e14232c3b07d4798e2d9ef4ec0a1274f2841f89de08c2c2b554e5197642dfbd83772978aa5e7d3d95f45c740f9c2ed51a40859fddaf88ed8524a1a2833a60f3858331a8032cab053247261a0e4bea15df5136a3618e3d4f22d46120d6288291c9e6c6fa5578f270ad3cac77cd3508e3436cc807854dae2aecf7c6de20c7d121d59f46f7c719d5fd367a3eb20bfa655bc9af14c7b6e3abe5aa43c10e7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xc7, 0x2, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x12, 0x40, 0x0, 0x9, 0x5, [@generic={0x1a, 0x30, "9c5ace1f12ac34b801ad16ae89d0e4f919171318885665be"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1, 0x3, 0xf8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x40, 0xb, [@generic={0x5b, 0x10, "fffa5170ef61ddc1ae3c2e4034d923e7c55498bb8eacc573216fe59559bd87377b7006b6e4ea808525fbd423339a9b87f7f19492df3795206861cdda414054be10b35e381f4cde6c62b3ff99cd6a86f0e75f048ab1a0ba8ad6"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0xb, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xa, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xf9, 0xfe, 0x3}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x2, 0x81, 0x10, 0x8}, 0xed, &(0x7f0000000340)={0x5, 0xf, 0xed, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf00f, 0x9, [0xc03f]}, @generic={0xd, 0x10, 0x4, "7b1d7710dc009de80590"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x3, 0x7}, @generic={0xbd, 0x10, 0xa, "b05c15eb268b994e0b0a6eb88bbfc1d71e2b87eb294ccfbad626c070bd7b860474957e7342a368a5e40ae8ac4a71ff6b2b056aaad5d3abe43bd0e4f4a5862ae23953b221cb161eb7c72d4537f0e26354b881c3bff88bccc7fcee1fd0b03cdc3dca55b2a8f6537d0d353b35ba8e24f410e957e2f1b32e0e4f0e19da2494429e359191ac634c1dc5e9b75190c53dd4cb14ba18dede6de824a194eac433a613bc58b347cb5de111d99451b064899f64718c0c7d0d02100f41963275"}]}, 0x1, [{0x46, &(0x7f00000001c0)=@string={0x46, 0x3, "ea0304b7542208b901ce75de128c137ae41067d2d172ad7292397f2a0cd1e464e8d4050e3c7e922dd90200d8f88c34f1bf43524f8ea7fb03a4d38fa081d274814fdd1aa5"}}]}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0xfffffffffffffff9}]}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r7) (async) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368923e1410886461686561640fb44bf04df72711fa2ae5d0231cb4a5505301e027423c35cf0c4efbb0eee58f41726743e479a1dc0d061d000000"]) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x648) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) (async) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) (async) 10m21.666636405s ago: executing program 1 (id=2240): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 10m21.610578901s ago: executing program 1 (id=2241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) sendfile(r2, r2, 0x0, 0x7ffff000) 10m21.610349091s ago: executing program 1 (id=2242): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000b40)=0x100c, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10m21.609802251s ago: executing program 1 (id=2243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) pipe(&(0x7f0000001300)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r1, 0x0, 0x0, 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 10m21.602683161s ago: executing program 1 (id=2244): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000277000/0x2000)=nil, 0x2000, 0x1000005) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) setresgid(0x0, 0x0, 0xee01) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x9}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) stat(&(0x7f0000000200)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x0, 0x7, 0x7, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0x1, [{@empty, 0xc8}, {@empty, 0x40}, {@loopback, 0x2242}]}, @ssrr={0x89, 0x1b, 0x35, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @multicast2, @local]}]}}}}}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000275000/0x3000)=nil, &(0x7f000012d000/0x4000)=nil, 0x3000, 0x2}) 10m21.601985092s ago: executing program 1 (id=2245): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r1 = getpgrp(r0) r2 = syz_pidfd_open(r1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r2, 0xfffffffc}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@out_dx={0xaa, 0x28, {0x2707, 0x2, 0x6}}, @wr_crn={0x46, 0x20, {0x4, 0x400}}, @uexit={0x0, 0x18, 0x9}, @set_irq_handler={0xbe, 0x20, {0x2b, 0x1}}, @in_dx={0x82, 0x20, {0xd6cf, 0x3}}, @wr_drn={0x6e, 0x20, {0x6, 0x6}}], 0xc0}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000140)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) 10m13.938289883s ago: executing program 32 (id=2038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x856, &(0x7f0000003100)={{0x12, 0x1, 0x201, 0x9c, 0x2d, 0xff, 0x40, 0x17cc, 0x1940, 0xad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x844, 0x2, 0x9e, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x75, 0x9, 0xd, 0x18, 0xc5, 0xda, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x1, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ea78bea572"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x0, 0x6, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xf10f}]}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x4, 0x3, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x565}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0xf, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xa, 0x3, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x1, 0xa0, 0x5, [@generic={0xb1, 0xf, "9e29e1c902a9c46890b6087c8468a913cb955401e79a3dbdf1bbe15c2b7cde74655ae382fe8c3690c51334d490ae30a815139c6ed642721c7989cfa4d0aca7c1aa495be0d0540a26f5496198bdbad23a12d132c985e77b42610b999deb3c95f1916aad737356446b81cc4bb6151ef304948dd23f33a313400aa91c957afcd67602b6ce3f0fd708b67721f13c22432b130067eace7f86a3a4ce5c8705dc08f44c7a33855bd1861f8534238e1fbaca96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xee, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x2}, @generic={0xf7, 0x1, "95f760886ffe63edca3943ff5b4cf3907e898779734455d8051e4115ee362ea61751af69071ae8e2c92c0d1e8f98f1b70c61a30be29a9f8fc3dcca8cf4f405cd8c5c855e9f24698294e861641407e477097738bfd0114540d20a551bf49b2a725505d233508ebdecaef3e4d772ffc3fe66491c0501fb33f7010f419de5826a064a5503854d038fba7ce3050c9bd236ab1befe28ee9b02cf39d65888b2a317d982f20dcb5e0e89db1911881fef1c904f406a6ecd18865ab4b121e0439f7b1da415982bdd6adb6f14292f83249d620234a3f5a65cc697b3879e355148c5e1192183025fba6274608f2b0aea64ec0925b76996d74f1d3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x1, 0x0, 0xfe}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3, 0xc, 0x5, [@generic={0xdf, 0x4, "b06e229c0dfedf5c2be07ad18a3adc63595340b0db7f142ff17edfc37499e375608ddb830eced375477d3b1ee5b1b5f618a257eab9487fb74cc07bbfc08e35ab5a764e7d35dd965027c6fac7de96871bfb6fe45a9e6879342a108ea491286679f615f886915a7d6232a68d1098dbcab24a7e15d12bd65c172acc67d4d562a3e07eef472364ec941488b40a6d473ed23b4770dc7f2e2df26560b7fd9f4a7ce52015484aa306c39b8c0f0ee446ded5c97ff7e5e4deadbc1cfdf579515808559ed116b50d1b75077449037d93b2e75d95ef91617a43d6d84b9d1f79e6acc8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x6, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x10}, @generic={0x38, 0x4, "322a3a9155c546227f4ece6a1705e7fde082ce573383042469a51002c2d843d4dac07d85d51f78ad8ab84fce4f632f5637b37e909f7b"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x4, 0x8b, [@generic={0x7e, 0x6, "76dde8697dfb9096e5df596dc7621adec7a993c246bc4963be12d0d31b54cfaf8f1e11acb7d4e623282770ecd8885e7d1ff6f65a675dea70d2e1916b27664edcfe7475ce6990a11c8c8cbbc289dd172884dc3f4835d4b72571d0d74afa0b21a7d318066234a38f590fa49ee242102191976aa614b8e75a9d9b608ba3"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x4, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x670, 0x6, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @generic={0xf3, 0x24, "c0fa9ab18b4065f30cd84f6b472350ea0dc98ea27886a3a13d4d5607d7937e9847593e48463f59bc1255ce438c0884284c7b3308f6ec2565a49be1414bdcf8fbc4b11c635d7ff6543e057cd8986a6d46229989ac45df45d8a67fb37dab4322dfd03326c7f6532007e80bef12d74bd8a764adf7a95a60a71b5b79297de63fd739d75b08ed859b070cb00aa919c8524fc6911e700d3be8a1ba6ca2eace2b4aeb0ebec13e4e83fdcb5d115731d783bb75d3edf67c16e710170a4e8404d1be01158030baf922c5f001e880e8f880c4d436df983e2a5e4e3c36c650ca906a619778ee3dbd8e067b9b808650da6927c368c2e82e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x6, 0x1}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0xd1, 0x2, 0x9, [@generic={0x8c, 0x30, "a85f4c26579c952326770f0ca892f28c36cbcf30f93f651966176b54a5867d01eab2c1af4c8bf1840c7814559ac8c633b32506a2c1a4737ae2a1f04acc429965372f3485b26193b5823772bdd0cc9ed16e8742c92417ec0f0f5c40ac9e9cf23acf97185e4dc8f96d682b98256b1b61cdff2b4d95598f53c512f59b36c4971c3f5d447a5832bbfcc804b9"}]}}]}}, {{0x9, 0x4, 0x72, 0x1, 0xd, 0xe6, 0xa3, 0x80, 0xf6, [], [{{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x1, 0x5, [@generic={0xc, 0x3, "21af396eab7804884e0b"}]}}, {{0x9, 0x5, 0xb, 0xf, 0x200, 0x7, 0x40, 0x4, [@generic={0x2e, 0x21, "bca5a07aebe6f1b78836b6139f04b51b9ef2496d8eb0ce86e7c4c76ca40be09af7b7ea2bd412e8dfbaeaf670"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xd, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0x65, 0x7, "a76ec0f82e5beb543b7050b955974e8d6d9c5345d106d299de4805a50d13de71263cd842d07156187b07f7bee336b16582403dab0ea05091bb8b4b30e52ddb32783bfac46d87d035b39bfa6634671a0611e8416650d5bca062b04f5ac821e6180e0c0d"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0xa, 0xa8efe57d10a3986f, 0x8, 0x2, 0xf3, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2e, 0x6, 0x9, [@generic={0xca, 0x7, "0141a8740705e2a84ebba3fc326fefca743959f0d457055bd6c762e72624476f12c12afab5c530bdcd75d4e0e14232c3b07d4798e2d9ef4ec0a1274f2841f89de08c2c2b554e5197642dfbd83772978aa5e7d3d95f45c740f9c2ed51a40859fddaf88ed8524a1a2833a60f3858331a8032cab053247261a0e4bea15df5136a3618e3d4f22d46120d6288291c9e6c6fa5578f270ad3cac77cd3508e3436cc807854dae2aecf7c6de20c7d121d59f46f7c719d5fd367a3eb20bfa655bc9af14c7b6e3abe5aa43c10e7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xc7, 0x2, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x12, 0x40, 0x0, 0x9, 0x5, [@generic={0x1a, 0x30, "9c5ace1f12ac34b801ad16ae89d0e4f919171318885665be"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1, 0x3, 0xf8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x40, 0xb, [@generic={0x5b, 0x10, "fffa5170ef61ddc1ae3c2e4034d923e7c55498bb8eacc573216fe59559bd87377b7006b6e4ea808525fbd423339a9b87f7f19492df3795206861cdda414054be10b35e381f4cde6c62b3ff99cd6a86f0e75f048ab1a0ba8ad6"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0xb, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xa, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xf9, 0xfe, 0x3}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x2, 0x81, 0x10, 0x8}, 0xed, &(0x7f0000000340)={0x5, 0xf, 0xed, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf00f, 0x9, [0xc03f]}, @generic={0xd, 0x10, 0x4, "7b1d7710dc009de80590"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x3, 0x7}, @generic={0xbd, 0x10, 0xa, "b05c15eb268b994e0b0a6eb88bbfc1d71e2b87eb294ccfbad626c070bd7b860474957e7342a368a5e40ae8ac4a71ff6b2b056aaad5d3abe43bd0e4f4a5862ae23953b221cb161eb7c72d4537f0e26354b881c3bff88bccc7fcee1fd0b03cdc3dca55b2a8f6537d0d353b35ba8e24f410e957e2f1b32e0e4f0e19da2494429e359191ac634c1dc5e9b75190c53dd4cb14ba18dede6de824a194eac433a613bc58b347cb5de111d99451b064899f64718c0c7d0d02100f41963275"}]}, 0x1, [{0x46, &(0x7f00000001c0)=@string={0x46, 0x3, "ea0304b7542208b901ce75de128c137ae41067d2d172ad7292397f2a0cd1e464e8d4050e3c7e922dd90200d8f88c34f1bf43524f8ea7fb03a4d38fa081d274814fdd1aa5"}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0xfffffffffffffff9}]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368923e1410886461686561640fb44bf04df72711fa2ae5d0231cb4a5505301e027423c35cf0c4efbb0eee58f41726743e479a1dc0d061d000000"]) truncate(&(0x7f0000000240)='./file0\x00', 0x648) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_usb_connect(0x1, 0x856, &(0x7f0000003100)={{0x12, 0x1, 0x201, 0x9c, 0x2d, 0xff, 0x40, 0x17cc, 0x1940, 0xad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x844, 0x2, 0x9e, 0x3, 0x0, 0x2, [{{0x9, 0x4, 0x75, 0x9, 0xd, 0x18, 0xc5, 0xda, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x1, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ea78bea572"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x0, 0x6, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0x0, 0xf10f}]}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x4, 0x3, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x565}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0xf, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xa, 0x3, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x1, 0xa0, 0x5, [@generic={0xb1, 0xf, "9e29e1c902a9c46890b6087c8468a913cb955401e79a3dbdf1bbe15c2b7cde74655ae382fe8c3690c51334d490ae30a815139c6ed642721c7989cfa4d0aca7c1aa495be0d0540a26f5496198bdbad23a12d132c985e77b42610b999deb3c95f1916aad737356446b81cc4bb6151ef304948dd23f33a313400aa91c957afcd67602b6ce3f0fd708b67721f13c22432b130067eace7f86a3a4ce5c8705dc08f44c7a33855bd1861f8534238e1fbaca96"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xee, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x0, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb, 0x2}, @generic={0xf7, 0x1, "95f760886ffe63edca3943ff5b4cf3907e898779734455d8051e4115ee362ea61751af69071ae8e2c92c0d1e8f98f1b70c61a30be29a9f8fc3dcca8cf4f405cd8c5c855e9f24698294e861641407e477097738bfd0114540d20a551bf49b2a725505d233508ebdecaef3e4d772ffc3fe66491c0501fb33f7010f419de5826a064a5503854d038fba7ce3050c9bd236ab1befe28ee9b02cf39d65888b2a317d982f20dcb5e0e89db1911881fef1c904f406a6ecd18865ab4b121e0439f7b1da415982bdd6adb6f14292f83249d620234a3f5a65cc697b3879e355148c5e1192183025fba6274608f2b0aea64ec0925b76996d74f1d3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x1, 0x0, 0xfe}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x3, 0xc, 0x5, [@generic={0xdf, 0x4, "b06e229c0dfedf5c2be07ad18a3adc63595340b0db7f142ff17edfc37499e375608ddb830eced375477d3b1ee5b1b5f618a257eab9487fb74cc07bbfc08e35ab5a764e7d35dd965027c6fac7de96871bfb6fe45a9e6879342a108ea491286679f615f886915a7d6232a68d1098dbcab24a7e15d12bd65c172acc67d4d562a3e07eef472364ec941488b40a6d473ed23b4770dc7f2e2df26560b7fd9f4a7ce52015484aa306c39b8c0f0ee446ded5c97ff7e5e4deadbc1cfdf579515808559ed116b50d1b75077449037d93b2e75d95ef91617a43d6d84b9d1f79e6acc8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x6, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x10}, @generic={0x38, 0x4, "322a3a9155c546227f4ece6a1705e7fde082ce573383042469a51002c2d843d4dac07d85d51f78ad8ab84fce4f632f5637b37e909f7b"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x9, 0x4, 0x8b, [@generic={0x7e, 0x6, "76dde8697dfb9096e5df596dc7621adec7a993c246bc4963be12d0d31b54cfaf8f1e11acb7d4e623282770ecd8885e7d1ff6f65a675dea70d2e1916b27664edcfe7475ce6990a11c8c8cbbc289dd172884dc3f4835d4b72571d0d74afa0b21a7d318066234a38f590fa49ee242102191976aa614b8e75a9d9b608ba3"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x4, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x670, 0x6, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}, @generic={0xf3, 0x24, "c0fa9ab18b4065f30cd84f6b472350ea0dc98ea27886a3a13d4d5607d7937e9847593e48463f59bc1255ce438c0884284c7b3308f6ec2565a49be1414bdcf8fbc4b11c635d7ff6543e057cd8986a6d46229989ac45df45d8a67fb37dab4322dfd03326c7f6532007e80bef12d74bd8a764adf7a95a60a71b5b79297de63fd739d75b08ed859b070cb00aa919c8524fc6911e700d3be8a1ba6ca2eace2b4aeb0ebec13e4e83fdcb5d115731d783bb75d3edf67c16e710170a4e8404d1be01158030baf922c5f001e880e8f880c4d436df983e2a5e4e3c36c650ca906a619778ee3dbd8e067b9b808650da6927c368c2e82e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x6, 0x1}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0xd1, 0x2, 0x9, [@generic={0x8c, 0x30, "a85f4c26579c952326770f0ca892f28c36cbcf30f93f651966176b54a5867d01eab2c1af4c8bf1840c7814559ac8c633b32506a2c1a4737ae2a1f04acc429965372f3485b26193b5823772bdd0cc9ed16e8742c92417ec0f0f5c40ac9e9cf23acf97185e4dc8f96d682b98256b1b61cdff2b4d95598f53c512f59b36c4971c3f5d447a5832bbfcc804b9"}]}}]}}, {{0x9, 0x4, 0x72, 0x1, 0xd, 0xe6, 0xa3, 0x80, 0xf6, [], [{{0x9, 0x5, 0xd, 0x4, 0x8, 0x2, 0x1, 0x5, [@generic={0xc, 0x3, "21af396eab7804884e0b"}]}}, {{0x9, 0x5, 0xb, 0xf, 0x200, 0x7, 0x40, 0x4, [@generic={0x2e, 0x21, "bca5a07aebe6f1b78836b6139f04b51b9ef2496d8eb0ce86e7c4c76ca40be09af7b7ea2bd412e8dfbaeaf670"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xd, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0x65, 0x7, "a76ec0f82e5beb543b7050b955974e8d6d9c5345d106d299de4805a50d13de71263cd842d07156187b07f7bee336b16582403dab0ea05091bb8b4b30e52ddb32783bfac46d87d035b39bfa6634671a0611e8416650d5bca062b04f5ac821e6180e0c0d"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0xa, 0xa8efe57d10a3986f, 0x8, 0x2, 0xf3, 0x5}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2e, 0x6, 0x9, [@generic={0xca, 0x7, "0141a8740705e2a84ebba3fc326fefca743959f0d457055bd6c762e72624476f12c12afab5c530bdcd75d4e0e14232c3b07d4798e2d9ef4ec0a1274f2841f89de08c2c2b554e5197642dfbd83772978aa5e7d3d95f45c740f9c2ed51a40859fddaf88ed8524a1a2833a60f3858331a8032cab053247261a0e4bea15df5136a3618e3d4f22d46120d6288291c9e6c6fa5578f270ad3cac77cd3508e3436cc807854dae2aecf7c6de20c7d121d59f46f7c719d5fd367a3eb20bfa655bc9af14c7b6e3abe5aa43c10e7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xc7, 0x2, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x12, 0x40, 0x0, 0x9, 0x5, [@generic={0x1a, 0x30, "9c5ace1f12ac34b801ad16ae89d0e4f919171318885665be"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x1, 0x3, 0xf8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x7, 0x40, 0xb, [@generic={0x5b, 0x10, "fffa5170ef61ddc1ae3c2e4034d923e7c55498bb8eacc573216fe59559bd87377b7006b6e4ea808525fbd423339a9b87f7f19492df3795206861cdda414054be10b35e381f4cde6c62b3ff99cd6a86f0e75f048ab1a0ba8ad6"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0xb, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0xa, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xf9, 0xfe, 0x3}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x1, 0x2, 0x81, 0x10, 0x8}, 0xed, &(0x7f0000000340)={0x5, 0xf, 0xed, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x0, 0xf00f, 0x9, [0xc03f]}, @generic={0xd, 0x10, 0x4, "7b1d7710dc009de80590"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x3, 0x7}, @generic={0xbd, 0x10, 0xa, "b05c15eb268b994e0b0a6eb88bbfc1d71e2b87eb294ccfbad626c070bd7b860474957e7342a368a5e40ae8ac4a71ff6b2b056aaad5d3abe43bd0e4f4a5862ae23953b221cb161eb7c72d4537f0e26354b881c3bff88bccc7fcee1fd0b03cdc3dca55b2a8f6537d0d353b35ba8e24f410e957e2f1b32e0e4f0e19da2494429e359191ac634c1dc5e9b75190c53dd4cb14ba18dede6de824a194eac433a613bc58b347cb5de111d99451b064899f64718c0c7d0d02100f41963275"}]}, 0x1, [{0x46, &(0x7f00000001c0)=@string={0x46, 0x3, "ea0304b7542208b901ce75de128c137ae41067d2d172ad7292397f2a0cd1e464e8d4050e3c7e922dd90200d8f88c34f1bf43524f8ea7fb03a4d38fa081d274814fdd1aa5"}}]}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0xfffffffffffffff9}]}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r7) (async) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368923e1410886461686561640fb44bf04df72711fa2ae5d0231cb4a5505301e027423c35cf0c4efbb0eee58f41726743e479a1dc0d061d000000"]) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x648) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) (async) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) (async) 10m5.317311139s ago: executing program 33 (id=2245): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r1 = getpgrp(r0) r2 = syz_pidfd_open(r1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x7, r2, &(0x7f0000000180)={0xffffffffffffffff, r2, 0xfffffffc}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@out_dx={0xaa, 0x28, {0x2707, 0x2, 0x6}}, @wr_crn={0x46, 0x20, {0x4, 0x400}}, @uexit={0x0, 0x18, 0x9}, @set_irq_handler={0xbe, 0x20, {0x2b, 0x1}}, @in_dx={0x82, 0x20, {0xd6cf, 0x3}}, @wr_drn={0x6e, 0x20, {0x6, 0x6}}], 0xc0}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000140)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) 8m57.142014283s ago: executing program 5 (id=3414): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) preadv2(r1, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) 8m57.141715643s ago: executing program 5 (id=3415): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x4, 0x3, 0x5, 0x2, 0x6, 0x7, 0x8f, 0x40, 0x38c, 0x3, 0x2, 0x38, 0x4, 0x3, 0x3, 0x84a6}, [{0x7, 0xf, 0x6, 0x10001, 0x101, 0x80000000000000, 0x2, 0x6}, {0x7, 0x8, 0x2, 0x4, 0x9, 0xeb, 0x0, 0x140}, {0x4, 0x6, 0x5, 0x3, 0x0, 0x676f, 0x0, 0x2}, {0x5, 0x5, 0x5, 0x72, 0x200, 0x7fffffff, 0xe5aa, 0x9}], "9585eb76898a6549ad1dc726c3a1d554486c5125d09bd5efd64807971b2c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa3e) ioctl$KVM_CREATE_VCPU(r0, 0x7706, 0x2) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000080)) 8m57.138954813s ago: executing program 5 (id=3416): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00') read$FUSE(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x12b8b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0xffffffffffffffff, r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)) 8m57.127323614s ago: executing program 5 (id=3417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x28b, 0x1000000003}) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000030000000900020073797a30000000000500010007000000051001000700ff000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}, @dead_binder_done, @register_looper], 0x0, 0x0, 0x0}) 8m56.894506827s ago: executing program 5 (id=3418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x6, 0x0, [{0x80000001, 0x8, 0x0, 0xfffffff4, 0x9}, {0xc000000a, 0x1000, 0x10000, 0x40000, 0x9}, {0x0, 0x5356, 0x4a32, 0x21}, {0x40000000, 0xffffffff, 0x9, 0x1}, {0x6, 0x6, 0x1, 0x7, 0x6}, {0xd, 0x8, 0x0, 0x401, 0x800000}]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') timerfd_settime(r1, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 8m56.027131482s ago: executing program 5 (id=3433): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r2, 0xffffb114) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x0, 0x0, 0x192, 0x4}}) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x40040}, 0x24004801) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000180)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)={0x18, 0x20, 0x1, 0x70bd23, 0x25dfdbfb, "", [@typed={0x8, 0x62, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 8m40.017603042s ago: executing program 34 (id=3433): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r2, 0xffffb114) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x0, 0x0, 0x192, 0x4}}) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x40040}, 0x24004801) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000180)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)={0x18, 0x20, 0x1, 0x70bd23, 0x25dfdbfb, "", [@typed={0x8, 0x62, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) 6m52.969289787s ago: executing program 4 (id=5730): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x2820c1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00022bbd7000ffdbdf2505000006f419000500060072"], 0x1c}, 0x1, 0x0, 0x0, 0x20040095}, 0x20000000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)=0x1f4) 6m52.958577978s ago: executing program 4 (id=5731): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000) 6m52.906421803s ago: executing program 4 (id=5732): modify_ldt$read(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r3, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084) inotify_add_watch(r0, &(0x7f0000000400)='./file0\x00', 0x2000100) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x36e0, &(0x7f0000000600)={0x0, 0x5946, 0x400, 0x0, 0x2c5}, 0x0, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0x401]}, 0x8) r4 = socket(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe64, 0x10001ff, @empty, 0x2}, 0x1c) r5 = socket(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="7365d84bae6632667300"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x84c00, 0x10) getdents(r6, &(0x7f0000001000)=""/4096, 0x1000) 6m52.016151551s ago: executing program 4 (id=5748): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x343, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220500000093c3898e9e"], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) 6m48.797455726s ago: executing program 4 (id=5780): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f00000007c0)="0b0312002e9b97cf5db4d0d010f6a1", 0xf, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r3, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 6m48.563869149s ago: executing program 4 (id=5781): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0xe4}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) (async) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25) (async) dup(r2) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0xe4}}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r5, r4, 0x0, 0xffffffff) (async) 6m32.43767311s ago: executing program 35 (id=5781): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0xe4}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) (async) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25) (async) dup(r2) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0xe4}}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r5, r4, 0x0, 0xffffffff) (async) 2.492827685s ago: executing program 7 (id=13080): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = getpgid(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) syz_pidfd_open(r2, 0x0) capset(&(0x7f0000000200)={0x19980330, r2}, &(0x7f0000000280)={0x7, 0x8, 0xdd8d, 0x81, 0x4, 0x800}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) setuid(r5) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={r2, r5, r7}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r8 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 2.492610515s ago: executing program 7 (id=13081): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000001400)=0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2.476168627s ago: executing program 6 (id=13083): mkdirat(0xffffffffffffff9c, &(0x7f00000057c0)='./file0\x00', 0x11) lsetxattr$system_posix_acl(&(0x7f0000005b80)='./file0\x00', &(0x7f0000005bc0)='system.posix_acl_access\x00', &(0x7f0000005c80)={{}, {0x1, 0x1}, [{}], {}, [], {}, {0x20, 0x6}}, 0x2c, 0x3) chmod(&(0x7f0000005e80)='./file0\x00', 0x40) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1) bind$inet(r2, &(0x7f0000000240)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000002340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x0, r6, {0xfffffffffffffff3}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r4, 0x0, 0xffffffff) setuid(0xee01) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, 0x0, 0x0) prctl$PR_SET_VMA(0x2a, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) fcntl$setlease(r8, 0x400, 0x0) read$FUSE(r0, &(0x7f0000002040)={0x2020}, 0x2020) 2.392664915s ago: executing program 7 (id=13084): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}}, 0x0) r3 = getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fchmodat(0xffffffffffffff9c, 0x0, 0x194) (async) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) setreuid(0x0, r5) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)={0x214, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x1ed, 0x1, 0x0, 0x1, [@generic="6111c6dc97546670c133d3cd0c350d4241ebd746b5a08e6b98d30c66ff5c5fac23f1e79495aef0ece55044bb1a6d379eb449aa3e83f902596c2ba257120f41d0053fed6c5ac2d3a0cd37cb847c899661be33ec338a218a45cb96c7ab3578881de1ec75c0c6705c621699e5680ca45b6c9a5d8d3b7ab9980692625176139ecf17cc28d01f0cc54cb92577512bd60c3458ec686d2bca7d798d52658a1f3239e58d87b9d102d28b5b4d118705c672b8d4575fbad8", @generic="7d5287ec0b7269e2eedc7b37147b27691029f3dbca640ad8f79d41979e2c2015c30a8cdec62d0ceabdf9794fd764429e9c9695ad9dab7ad1c9ad8c2bb4b299ba5aa321578dda13e78270d27eaf41f58268d1f60d84b5cfd2429fddc191bd387a69b115e92078", @nested={0xce, 0xd7, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x11ea}, @typed={0x8, 0x128, 0x0, 0x0, @pid=r3}, @generic="a94da18fec97f944c88c3b0e64599c46a141bcad1576a6c19a5644197d26c57f85cb16010d05ad733439", @nested={0x87, 0x10a, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @uid=r5}, @generic="575f5c823fb8f964e8e613028889f4b39dad0a70802995cf7d17331f741f234c4bae146a011e779e53194480100af52b2fe82722fe9b67e9f8fc2bb41b643806880b7c06dd0041a9609dc117524c5af9780fe54cda89619bcc03295b9199a7f4031c61cfca41f535e5f7454077cc4672c14009", @typed={0x4, 0xea}, @nested={0x4, 0xa0}]}]}]}]}, 0x214}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 2.392278495s ago: executing program 7 (id=13085): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x913, r0, 0xca639000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x100, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) 2.388777055s ago: executing program 6 (id=13087): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000003180)={{}, {0x0, 0xea60}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0xf3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x90, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x7, 0x0, 0x8}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.306040144s ago: executing program 6 (id=13088): r0 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4196ccce67868bab, 0x0, 0x80000}, 0x14}}, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x88101, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26008, 0x13, r1, 0x22e7c000) 2.303837884s ago: executing program 6 (id=13090): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x8, 0x200000}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$cont(0x20, r2, 0x4, 0x80000001) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1, 0x3, 0x6, 0x8, r2}) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r3, 0x3, 0x8, 0x1) ptrace$cont(0x7, r2, 0x3, 0x100000001) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/130, 0x82}], 0x1, 0xb, 0xe) sched_setattr(r2, &(0x7f0000000180)={0x38, 0x0, 0x20, 0x6, 0x1, 0x2, 0x1, 0x800, 0x7fff, 0x7}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) chdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.194003514s ago: executing program 7 (id=13092): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x30) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e24, 0x58, @local, 0xf5}, 0x1c) pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 1.065628855s ago: executing program 6 (id=13091): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)={0x2, 0x504}) (rerun: 32) 1.065393615s ago: executing program 7 (id=13092): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x30) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e24, 0x58, @local, 0xf5}, 0x1c) pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 794.700571ms ago: executing program 2 (id=13112): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000a00)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x8, 0x2, 0x1}, @fd, @flat=@handle={0x73682a85, 0x100, 0x2}}, 0x0}}], 0x0, 0x0, 0x0}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x26008890) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000040)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000120001"], 0x20}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x210800, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0]) 732.282437ms ago: executing program 2 (id=13113): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x101, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 730.693938ms ago: executing program 6 (id=13115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mlockall(0x5) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000021000100"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x3, 0xbd, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0xca, 0x1e, 0x1d, 0x20, 0xc26, 0xd, 0x6736, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x2, 0x4, 0x0, 0x1d0, 0x4, [{{0x9, 0x4, 0x5a, 0x4, 0x6, 0x9f, 0x3d, 0xe3, 0xc, [@hid_hid={0x9, 0x21, 0x9, 0xe9, 0x1, {0x22, 0xbc4}}], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0xae, 0x1, 0xf3, [@generic={0x1e, 0x11, "d767ffb42246df68e52654921de20c5ba98e4467be5d8ae63ab18165"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x4, 0xb, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xa, 0x40, 0x28, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x81, 0xf000}]}}, {{0x9, 0x5, 0xd, 0x13, 0x10, 0xe, 0x47, 0x4}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0xf, 0x7, 0xc, [@generic={0x2c, 0x21, "4e00b053efeaadb27d887716d2ff9a272cba02bd4654d3dc34f374d8cfea70f9c6ad22f373a8717e34ef"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xc, 0x50, 0xf6}}]}}, {{0x9, 0x4, 0x3e, 0x1f, 0x0, 0x1, 0x2, 0x8f, 0x48}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 729.779928ms ago: executing program 2 (id=13116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000400)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5a, 0x0, &(0x7f00000005c0)="70ecc00b398fc2d305dbb8580b48d26fe73063b83c3d675b5567218fb4f08adabd83e0bd58480cf25d17c8e12984ecbf5032b43666f9d797fa58257111c4b96f2d2d70754c704fb01586622812793868a399348a39d27f4f16f0"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 653.642415ms ago: executing program 2 (id=13118): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x1a, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) unshare(0x22020600) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x40000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, 0x0) 634.440357ms ago: executing program 2 (id=13120): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4, 0x2}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x10003, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000001c0)={0xa000000000000000, 0xf000, 0x9, 0x6, 0x16}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x50b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xe8, 0x6a}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x25, 0x4, 0xe0}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x7, 0x8, 0x10, 0x36}, 0x94, &(0x7f00000004c0)={0x5, 0xf, 0x94, 0x2, [@generic={0x84, 0x10, 0x1, "f7f6bd316239d916e7f803da137eaaef4b331f8ab27b8451ff4c45d08f1e3e06d07c60faf94e41c794f28a8e6d19f755019964cfa728750819f5cefc8704ca326a9e8e968e84f712f23ca84dad87e53cc40da98dba36e2908932ef3e99bc7f65d0ee0d660cdd2cb024829a8d3adbb802c9d36f125eb2e701b098c6e4d7c083bb67"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x9, 0x0, 0x1d4, 0x9}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x60e}}, {0xe4, &(0x7f00000003c0)=@string={0xe4, 0x3, "fc78f27722f687afa3856714823b78adb0bfbde7e1a68113edd5eca2744357653d104f304c73d9c674ded2546aeb144fb549460f511e54ceea1cc0dea5710cf0c75be6bfaa657de5997059a20837970641e6f0dc915b1ef8e3e8d1a784bd4d9c4f569ccf342145558404fae5b362c3a3b48a337d182c7e18aba5a75dae86d21de473faf5ba9f37069defc0713472037fac11d49dceebfb02a2af5f66d3beeb3a8d2dd8de3d50528c6a829b5cff5605fb96da4b4574fd37ecddfe20bd8ebb75f5db2adcddbf00b386b6bd116613fa9bde00b5adb66eb0a17bea036d6da4fabd1be048"}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "11ab2e625ea5f7662fe908b5377a25014b6b8435311f15acd6d0c214d0c275ee3a2fab4ce35616fde3c736c8a36aedebb80d030000a66f868b36d417e844fa24129da4a04f1e41d55a2e718f894ec1947f00edb39bec09f29ac052f0634ebf56ecd6c67edf8e7f81731c36ed834f0ec00b5e39a47c421ed168bf5897f5d53f71773d909cb6755025cb242e45177b0200"}}, {0xd7, &(0x7f00000005c0)=ANY=[@ANYBLOB="d703b3c7bd6e765b1d65737a10295d7a5cf9130a54d74114c7ba210e1e1b55b5fe92c19a6109bfc5291794c5a92d65db89764ecbc1c54e0cd7c82a5c70dc3ee507ed5b4b9bd68ab5195216f05e32e52b40e75180450463f52232de5865822ede321a8008c997660580df200c3f37096efb805fe0a20bc9672dccf5ea03c0cce111f2e8d8e6a4c867ed71af7deb0eae10a5871b076932685748b0e555a2b03910ac7a169996e50098e1924d93efdce2ba88b9830af3bde9a87aaf5be6130a2a9271deec941373d209a62e8bc23dbeae0b8526f604ed6093"]}]}) 321.220918ms ago: executing program 0 (id=13128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 300.88243ms ago: executing program 0 (id=13129): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2401, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) listen(0xffffffffffffffff, 0xfffffff7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d94583db43d28afce3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2401, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) (async) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) listen(0xffffffffffffffff, 0xfffffff7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) (async) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d94583db43d28afce3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) (async) 107.861609ms ago: executing program 0 (id=13130): uname(&(0x7f0000000000)=""/47) r0 = fsmount(0xffffffffffffffff, 0x1, 0x82) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x18}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240c8805}, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa163}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac39}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x30}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040}, 0x24000001) r1 = socket(0x3, 0x6, 0x10001) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000400)=""/234) uname(&(0x7f0000000500)=""/118) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x404c880) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000006c0)={0x1, 0x80000, 0x7fffffff, 0x1, 0xb7, "f886b533422ed2442e627fbc11f5c6607c0e86", 0x2, 0xffffff84}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x600000, 0x0) readahead(r4, 0xfffffffffffffffe, 0xfffffffffffff899) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) uname(&(0x7f00000008c0)=""/79) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000940)=0x8) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000980)) ioctl(r0, 0xb, &(0x7f00000009c0)="9d2962358f") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r7, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x54000}, 0x40) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x104, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8dd96200a3d68c3a}, 0xc) 107.498378ms ago: executing program 0 (id=13131): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x9, 0x3ff, 0x7, 0x6, 0x15, "881700ff0700"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x2000800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x9, 0x3ff, 0x7, 0x6, 0x15, "881700ff0700"}) (async) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x2000800}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) (async) 105.926049ms ago: executing program 0 (id=13132): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xa3, "6707e1d280cd2ed5ac383b28d298b106769fef393e474db8fb764607dbbbaac75b41754c977efef33eb31d40cd85cec3b059e6a4121130100d8d6f8a63002ca260c47941fc17a987cc894192a445e2c212e6052c3966c9d087f80880a174a7bf01625d17cec04dc65d954f42c67be838d1a82b144a5fb8e1c5bb6a6326c4ad07c6f9cf3ae912466fe336ff3e9f219c87c1c5ad20c9e96d60e94be341eda66ff53a4379"}, &(0x7f0000000000)=0xc7) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 104.990279ms ago: executing program 0 (id=13133): setresuid(0x0, 0xffffffffffffffff, 0xee01) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000040)="88d0a4332ca430eb314853fe5cef77c890ddaf6e26", 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x804) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000400)=ANY=[@ANYRESHEX=r4], 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f00000003c0)=ANY=[@ANYBLOB="726c6f675f70616765733d3138343436372c008c970bb295c261d2f92200b0c24c6dbb747c15da7d8c75"]) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000340)={{0xffffffffffffffff, 0x1, 0x1, 0x3, 0x7fff}, 0x9, 0x5}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) read(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="d3d221baf90f9651722250a90096c62159e210a904a8d9c3b0f40f81ee459c962d33032e73b24e7237a4db720654d8514bb5c22540c23b293fe68e24264a7fbfc1e26801e12dc491ced71a35e49dcba43d6185761602c734ee6ec3e5d671a68e0c294500bb1d611c8aaa25d1d50708b4fa4f333aa789343a25e162556e1f29f1de57d49b4b51d41f15417a6cb5b9d015e8767560e5660569bdc0a24451389819bd944641dcf11b57a612d00a9bf54a00908ba46cfba9998e937a3d9c38329095bc65321b4b79b95a7c171bc3041c375b20bfca6ba3d134e730c5d76ebb74c410d7bad6d0434dba479408dd9f50d1abf7b37d5369392f1f2d132bd4d16d4ffe21fc03c77c01e0a390d9353444f119bc3645", @ANYRES32=r4, @ANYRESHEX=r6], 0x34}}, 0x20048080) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) 0s ago: executing program 2 (id=13134): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000480)={0x0, 0x0, 0xfffffff9}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) fchown(r3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) kernel console output (not intermixed with test programs): 2353 comm="syz.0.11459" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.993217][ T36] audit: type=1400 audit(2000005407.875:38144): avc: denied { create } for pid=2353 comm="syz.0.11459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 673.013433][ T36] audit: type=1400 audit(2000005407.875:38145): avc: denied { setopt } for pid=2353 comm="syz.0.11459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 673.489460][ T2375] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 673.489482][ T2375] rust_binder: Error while translating object. [ 673.501798][ T2375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 673.508155][ T2375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:435 [ 673.561860][ T2387] rust_binder: Error while translating object. [ 673.578085][ T2387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 673.584345][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 673.608110][ T2389] Invalid ELF header type: 3 != 1 [ 673.623790][ T2389] Invalid ELF header type: 3 != 1 [ 673.629360][ T2389] Invalid ELF header type: 3 != 1 [ 673.635170][ T2389] Invalid ELF header type: 3 != 1 [ 673.640914][ T2389] Invalid ELF header type: 3 != 1 [ 673.649373][ T2389] Invalid ELF header type: 3 != 1 [ 673.724736][ T2392] overlayfs: unescaped trailing colons in lowerdir mount option. [ 673.734167][ T2392] 9pnet_fd: Insufficient options for proto=fd [ 673.984684][ T2401] overlayfs: empty lowerdir [ 674.075498][ T2415] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11482'. [ 674.121294][ T2420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 674.132742][ T2423] 9pnet_fd: Insufficient options for proto=fd [ 674.142690][ T2426] overlayfs: failed to clone lowerpath [ 674.146006][ T2420] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11485'. [ 674.161474][ T2420] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 674.161525][ T2420] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 674.176272][ T2420] rust_binder: Read failure Err(EFAULT) in pid:356 [ 674.242541][ T2436] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11490'. [ 674.266913][ T2438] SELinux: truncated policydb string identifier [ 674.273429][ T2438] SELinux: failed to load policy [ 674.400256][ T2464] overlayfs: failed to clone upperpath [ 675.416927][ T2492] 9pnet_fd: Insufficient options for proto=fd [ 675.462411][ T2497] netlink: 9 bytes leftover after parsing attributes in process `syz.6.11510'. [ 675.480982][ T2497] gretap0: entered promiscuous mode [ 675.508063][ T2504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 675.532363][ T2504] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 675.546210][ T2504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 675.546877][ T2504] rust_binder: Write failure EINVAL in pid:383 [ 675.627375][ T2523] rust_binder: Write failure EFAULT in pid:385 [ 675.690665][ T2532] netlink: 'syz.6.11522': attribute type 4 has an invalid length. [ 675.704893][ T2532] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.11522'. [ 676.050898][ T2585] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11539'. [ 676.086772][ T2594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11542'. [ 676.163836][ T2607] overlayfs: failed to clone upperpath [ 676.305291][ T2629] No source specified [ 676.512435][ T2665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=2665 comm=syz.7.11568 [ 676.537779][ T2665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=2665 comm=syz.7.11568 [ 676.704108][ T2698] netlink: 'syz.0.11581': attribute type 33 has an invalid length. [ 676.712188][ T2698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11581'. [ 676.902013][ T2717] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11587'. [ 676.958734][ T2730] 9pnet_fd: Insufficient options for proto=fd [ 677.161332][T26897] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 677.321187][T26897] usb 3-1: Using ep0 maxpacket: 16 [ 677.327786][T26897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.338765][T26897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 677.351875][T26897] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 677.361147][T26897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.370308][T26897] usb 3-1: config 0 descriptor?? [ 677.760650][ T2760] netlink: 'syz.0.11600': attribute type 4 has an invalid length. [ 677.769086][ T2760] netlink: 'syz.0.11600': attribute type 4 has an invalid length. [ 677.805054][T26897] microsoft 0003:045E:07DA.0026: item fetching failed at offset 31/34 [ 677.815589][T26897] microsoft 0003:045E:07DA.0026: parse failed [ 677.821770][T26897] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 677.955343][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 677.955364][ T36] audit: type=1400 audit(2000005412.538:38218): avc: denied { remount } for pid=2774 comm="syz.7.11605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 677.991702][ T2782] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 677.992323][ T36] audit: type=1400 audit(2000005412.566:38219): avc: denied { read } for pid=2781 comm="syz.7.11607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.104495][ T2718] tmpfs: Bad value for 'huge' [ 678.133552][ T36] audit: type=1400 audit(2000005412.706:38220): avc: denied { name_bind } for pid=2789 comm="syz.6.11609" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 678.155730][ T36] audit: type=1400 audit(2000005412.716:38221): avc: denied { map } for pid=2791 comm="syz.7.11610" path="socket:[137023]" dev="sockfs" ino=137023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 678.179616][ T36] audit: type=1400 audit(2000005412.716:38222): avc: denied { read } for pid=2791 comm="syz.7.11610" path="socket:[137023]" dev="sockfs" ino=137023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 678.259487][ T2799] incfs: Options parsing error. -22 [ 678.264840][ T2799] incfs: mount failed -22 [ 678.612486][ T36] audit: type=1400 audit(2000005413.157:38223): avc: denied { rename } for pid=2824 comm="syz.0.11621" name="file0" dev="tmpfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 678.634742][ T2827] netlink: 'syz.0.11622': attribute type 25 has an invalid length. [ 678.636130][ T36] audit: type=1400 audit(2000005413.176:38224): avc: denied { nlmsg_read } for pid=2826 comm="syz.0.11622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 678.816801][ T2830] IPv4: Oversized IP packet from 127.0.0.1 [ 678.822768][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 679.041664][ T36] audit: type=1400 audit(2000005413.560:38225): avc: denied { write } for pid=2842 comm="syz.6.11628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.055781][ T2845] netlink: 'syz.7.11629': attribute type 4 has an invalid length. [ 679.076620][ T2845] netlink: 'syz.7.11629': attribute type 4 has an invalid length. [ 679.087837][ T2845] 9pnet_fd: Insufficient options for proto=fd [ 679.087883][ T2851] 9pnet_fd: Insufficient options for proto=fd [ 679.263865][ T36] audit: type=1400 audit(2000005413.767:38226): avc: denied { lock } for pid=2862 comm="syz.0.11635" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=137056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 679.300206][ T2865] fuse: Bad value for 'fd' [ 679.349170][ T2880] 9pnet_fd: Insufficient options for proto=fd [ 679.379970][ T2884] devpts: called with bogus options [ 679.401276][ T2886] netlink: 'syz.0.11644': attribute type 11 has an invalid length. [ 679.411518][ T36] audit: type=1400 audit(2000005413.907:38227): avc: denied { bpf } for pid=2885 comm="syz.0.11644" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 679.429983][ T2891] 9pnet_fd: Insufficient options for proto=fd [ 679.688824][ T2934] Invalid ELF header len 1 [ 679.994069][ T2952] 9pnet_fd: Insufficient options for proto=fd [ 680.102782][T11009] usb 3-1: USB disconnect, device number 75 [ 680.233607][ T2981] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 680.233631][ T2981] rust_binder: Error while translating object. [ 680.245922][ T2981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 680.252222][ T2981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 680.365451][ T2984] 9pnet_fd: Insufficient options for proto=fd [ 680.402942][ T2987] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 680.427250][ T2987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11676'. [ 681.030939][ T3041] fuse: Unknown parameter '00000000000000000000005' [ 681.328142][ T3065] netlink: 37 bytes leftover after parsing attributes in process `syz.7.11704'. [ 681.522541][ T3091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 681.579235][ T3092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 681.588921][ T3092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:481 [ 682.001562][ T3098] tipc: Started in network mode [ 682.015744][ T3098] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 682.025298][ T3098] tipc: Enabling of bearer rejected, failed to enable media [ 682.372093][ T3108] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11716'. [ 682.695994][ T3170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 682.696025][ T3170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:500 [ 682.835567][ T3189] rust_binder: Read failure Err(EAGAIN) in pid:505 [ 682.888149][ T3198] binder: Unknown parameter 'defcontext18446744073709551615' [ 682.974374][ T3205] rust_binder: 515: no such ref 3 [ 683.008276][ T3217] netlink: 'syz.7.11752': attribute type 1 has an invalid length. [ 683.016219][ T3217] netlink: 1 bytes leftover after parsing attributes in process `syz.7.11752'. [ 683.035237][ T3206] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 683.112457][ T3237] netlink: 57 bytes leftover after parsing attributes in process `syz.7.11760'. [ 683.171931][ T3251] 9pnet_fd: Insufficient options for proto=fd [ 683.193251][ T3257] netlink: 'syz.7.11766': attribute type 2 has an invalid length. [ 683.381678][ T3272] bridge0: port 3(macsec0) entered blocking state [ 683.388350][ T3272] bridge0: port 3(macsec0) entered disabled state [ 683.394911][ T3272] macsec0: entered allmulticast mode [ 683.400684][ T3272] veth1_macvtap: entered allmulticast mode [ 683.407034][ T3272] macsec0: entered promiscuous mode [ 683.412627][ T3272] bridge0: port 3(macsec0) entered blocking state [ 683.419271][ T3272] bridge0: port 3(macsec0) entered forwarding state [ 683.440225][ T3276] fuse: Bad value for 'fd' [ 683.636207][ T3310] @: renamed from vlan0 (while UP) [ 683.771563][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 683.771583][ T36] audit: type=1400 audit(2000005417.998:38258): avc: denied { ioctl } for pid=3314 comm="syz.6.11786" path="socket:[138960]" dev="sockfs" ino=138960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 684.062432][ T36] audit: type=1400 audit(2000005418.270:38259): avc: denied { write } for pid=3320 comm="syz.2.11788" name="file2" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 684.083916][ T3323] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 684.092155][ T36] audit: type=1400 audit(2000005418.270:38260): avc: denied { ioctl } for pid=3320 comm="syz.2.11788" path="/166/file2" dev="tmpfs" ino=913 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 684.097121][ T3323] rust_binder: Write failure EINVAL in pid:522 [ 684.202221][T29733] tipc: Subscription rejected, illegal request [ 684.225704][ T3327] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 684.234070][ T3327] rust_binder: Write failure EINVAL in pid:524 [ 684.265102][ T3341] rust_binder: 527: no such ref 1 [ 684.289559][ T36] audit: type=1400 audit(2000005418.476:38261): avc: denied { getopt } for pid=3344 comm="syz.2.11798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 684.339698][ T3353] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 684.339725][ T3353] rust_binder: Read failure Err(EFAULT) in pid:536 [ 684.364336][ T3355] Invalid ELF header len 1 [ 684.402252][ T36] audit: type=1400 audit(2000005418.589:38262): avc: denied { lock } for pid=3356 comm="syz.2.11802" path="socket:[139012]" dev="sockfs" ino=139012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 684.638713][ T3366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 684.638744][ T3366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:549 [ 684.668008][ T36] audit: type=1400 audit(2000005418.842:38263): avc: denied { unmount } for pid=956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 684.713891][ T36] audit: type=1400 audit(2000005418.880:38264): avc: denied { listen } for pid=3378 comm="syz.2.11808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 684.751994][ T3381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 684.752120][ T3381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 684.761006][ T3381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:564 [ 684.898310][ T36] audit: type=1400 audit(2000005419.049:38265): avc: denied { mounton } for pid=3394 comm="syz.2.11814" path="/183/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 684.955174][ T36] audit: type=1400 audit(2000005419.086:38266): avc: denied { unmount } for pid=956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 685.067491][ T3407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 685.068310][ T3407] rust_binder: inc_ref_done called when no active inc_refs [ 685.443130][T11009] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 685.624310][T11009] usb 3-1: Using ep0 maxpacket: 32 [ 685.635248][T11009] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 685.643739][T11009] usb 3-1: config 0 has no interface number 0 [ 685.650343][T11009] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 685.660737][T11009] usb 3-1: config 0 interface 196 has no altsetting 0 [ 685.671134][T11009] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 685.680596][T11009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.689021][T11009] usb 3-1: Product: syz [ 685.693494][T11009] usb 3-1: Manufacturer: syz [ 685.698262][T11009] usb 3-1: SerialNumber: syz [ 685.707642][T11009] usb 3-1: config 0 descriptor?? [ 685.715197][ T3420] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.960815][T11009] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 685.968503][T11009] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 685.979050][T11009] usb 3-1: USB disconnect, device number 76 [ 686.058092][ T3616] rust_binder: Got transaction with invalid offset. [ 686.058155][ T3616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 686.065207][ T3616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:747 [ 686.110720][ T36] audit: type=1400 audit(2000005420.193:38267): avc: denied { getopt } for pid=3621 comm="syz.6.11838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 686.480809][ T3647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 686.481513][ T3647] rust_binder: 763: no such ref 0 [ 686.493268][ T3647] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 686.500592][ T3647] rust_binder: 763: no such ref 2 [ 686.506341][ T3647] rust_binder: Error while translating object. [ 686.506393][ T3647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 686.512630][ T3647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:763 [ 686.593193][ T3659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 686.630632][T29728] Bluetooth: hci0: Frame reassembly failed (-84) [ 687.782692][ T3710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11870'. [ 688.180000][ T3739] netlink: 120 bytes leftover after parsing attributes in process `syz.0.11878'. [ 688.189263][ T3739] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11878'. [ 688.222558][ T3747] netlink: 'syz.0.11880': attribute type 1 has an invalid length. [ 688.242984][ T3751] netlink: 'syz.0.11881': attribute type 4 has an invalid length. [ 688.296201][ T3753] fuse: Bad value for 'group_id' [ 688.301431][ T3753] fuse: Bad value for 'group_id' [ 688.779297][ T866] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 688.779306][T20237] Bluetooth: hci0: command 0x1003 tx timeout [ 688.817227][ T3762] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 689.109780][ T36] kauditd_printk_skb: 10558 callbacks suppressed [ 689.109800][ T36] audit: type=1326 audit(2000005423.008:48826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.141756][ T36] audit: type=1326 audit(2000005423.008:48827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.165569][ T36] audit: type=1326 audit(2000005423.008:48828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.189436][ T36] audit: type=1326 audit(2000005423.008:48829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.213295][ T36] audit: type=1326 audit(2000005423.008:48830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.237499][ T36] audit: type=1326 audit(2000005423.008:48831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.261608][ T36] audit: type=1326 audit(2000005423.008:48832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.285442][ T36] audit: type=1326 audit(2000005423.008:48833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.309515][ T36] audit: type=1326 audit(2000005423.008:48834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.334106][ T36] audit: type=1326 audit(2000005423.008:48835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.7.11884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7ff00000 [ 689.370036][ T3782] netlink: 'syz.0.11890': attribute type 27 has an invalid length. [ 689.416641][ T3782] 9pnet_fd: Insufficient options for proto=fd [ 689.443646][ T3792] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 689.529665][ T3795] rust_binder: 795: no such ref 1 [ 689.534789][ T3795] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 689.542206][ T3795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:795 [ 689.646147][ T3798] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 689.818568][ T3806] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 690.143840][T29728] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 690.151729][T29728] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 690.175683][T11009] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 690.385397][ T3812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 690.392359][ T3812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 690.399107][ T3812] rust_binder: inc_ref_done called when no active inc_refs [ 690.485132][T29728] ip6_tunnel:  xmit: Local address not yet configured! [ 690.516866][ T45] ip6_tunnel:  xmit: Local address not yet configured! [ 690.523987][T29728] ip6_tunnel:  xmit: Local address not yet configured! [ 690.570118][ T45] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 690.597801][ T3821] netlink: 'syz.0.11906': attribute type 1 has an invalid length. [ 690.672630][ T3833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11911'. [ 690.698008][ T45] ip6_tunnel:  xmit: Local address not yet configured! [ 690.772505][T11010] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 690.921819][ T45] ip6_tunnel:  xmit: Local address not yet configured! [ 690.944284][T11010] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 690.952631][T11010] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 690.968497][T11010] usb 3-1: config 8 has no interface number 0 [ 690.974661][T11010] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.989914][T11010] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 690.999162][T11010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.007723][T11010] usb 3-1: Product: syz [ 691.011948][T11010] usb 3-1: Manufacturer: syz [ 691.016563][T11010] usb 3-1: SerialNumber: syz [ 691.167014][T11009] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 691.252631][ T3818] rust_binder: Write failure EFAULT in pid:810 [ 691.321951][T11010] usb 3-1: USB disconnect, device number 77 [ 691.376369][ T3854] netlink: 'syz.0.11919': attribute type 4 has an invalid length. [ 691.384548][ T3854] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11919'. [ 691.638961][ T3885] 9pnet_fd: Insufficient options for proto=fd [ 691.761846][ T3887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3887 comm=syz.0.11931 [ 691.884207][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.884249][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.890735][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.897467][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.906903][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.913718][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.920435][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.927326][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.038939][ T3906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.091805][ T3906] rust_binder: 819: no such ref 1 [ 692.394869][ T3915] netlink: 488 bytes leftover after parsing attributes in process `syz.0.11941'. [ 692.833897][ T3940] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 693.202674][ T45] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 693.362552][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 693.368788][ T45] usb 3-1: config 245 has an invalid interface number: 159 but max is 3 [ 693.377660][ T45] usb 3-1: config 245 has an invalid interface number: 180 but max is 3 [ 693.386328][ T45] usb 3-1: config 245 has an invalid interface number: 176 but max is 3 [ 693.395106][ T45] usb 3-1: config 245 has an invalid interface number: 159 but max is 3 [ 693.396595][ T3983] netlink: 'syz.6.11967': attribute type 46 has an invalid length. [ 693.415820][ T45] usb 3-1: config 245 has 3 interfaces, different from the descriptor's value: 4 [ 693.425083][ T45] usb 3-1: config 245 has no interface number 0 [ 693.440667][ T45] usb 3-1: config 245 has no interface number 1 [ 693.447229][ T45] usb 3-1: config 245 has no interface number 2 [ 693.453662][ T45] usb 3-1: config 245 interface 176 altsetting 9 bulk endpoint 0xD has invalid maxpacket 16 [ 693.464248][ T45] usb 3-1: config 245 interface 176 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 693.475908][ T45] usb 3-1: config 245 interface 176 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 693.487311][ T45] usb 3-1: config 245 interface 176 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 693.499101][ T45] usb 3-1: config 245 interface 176 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 693.510539][ T45] usb 3-1: config 245 interface 176 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 693.521779][ T45] usb 3-1: config 245 interface 176 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 693.532879][ T45] usb 3-1: config 245 interface 159 has no altsetting 0 [ 693.540077][ T45] usb 3-1: config 245 interface 159 has no altsetting 1 [ 693.547176][ T45] usb 3-1: config 245 interface 180 has no altsetting 0 [ 693.554819][ T45] usb 3-1: config 245 interface 176 has no altsetting 0 [ 693.562222][ T3995] fuse: Unknown parameter 'ro8mode' [ 693.563614][ T45] usb 3-1: New USB device found, idVendor=0af0, idProduct=7706, bcdDevice= 0.00 [ 693.577130][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.585533][ T45] usb 3-1: Product: syz [ 693.590781][ T45] usb 3-1: Manufacturer: syz [ 693.595632][ T45] usb 3-1: SerialNumber: syz [ 693.784711][ T4004] netlink: 176 bytes leftover after parsing attributes in process `syz.6.11974'. [ 693.818930][ T45] usb-storage 3-1:245.159: USB Mass Storage device detected [ 693.887380][ T45] usb-storage 3-1:245.180: USB Mass Storage device detected [ 693.918744][ T45] usb-storage 3-1:245.176: USB Mass Storage device detected [ 693.998342][ T45] usb 3-1: USB disconnect, device number 78 [ 694.327312][ T4023] netlink: 'syz.0.11978': attribute type 10 has an invalid length. [ 694.574152][ T4043] 9pnet_fd: Insufficient options for proto=fd [ 694.956028][ T4056] fuse: Bad value for 'fd' [ 695.071532][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 695.071552][ T36] audit: type=1400 audit(2000005428.600:48911): avc: denied { connect } for pid=4067 comm="syz.7.11993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 695.365589][ T36] audit: type=1400 audit(2000005428.872:48912): avc: denied { append } for pid=4086 comm="syz.2.12000" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 695.395500][ T4087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 695.395661][ T4088] rust_binder: Error while translating object. [ 695.402518][ T4087] rust_binder: Error while translating object. [ 695.408919][ T4087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 695.415301][ T4087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:835 [ 695.424937][ T4088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 695.434269][ T4088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:835 [ 695.480793][ T4094] futex_wake_op: syz.6.12002 tries to shift op by -1; fix this program [ 695.499052][ T4094] futex_wake_op: syz.6.12002 tries to shift op by -1; fix this program [ 695.514480][ T4097] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 695.532875][ T4105] netlink: 'syz.6.12004': attribute type 13 has an invalid length. [ 695.573252][ T4117] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 696.450768][T29729] Bluetooth: hci0: Frame reassembly failed (-84) [ 696.462195][T29729] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 696.468336][ T36] audit: type=1400 audit(2000005429.913:48913): avc: denied { execute } for pid=4168 comm="syz.2.12024" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 696.728788][ T36] audit: type=1400 audit(2000005430.148:48914): avc: denied { accept } for pid=4177 comm="syz.7.12028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 696.895508][ T36] audit: type=1400 audit(2000005430.307:48915): avc: denied { create } for pid=4193 comm="syz.7.12033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 697.125085][ T4194] netlink: 'syz.7.12033': attribute type 1 has an invalid length. [ 697.133161][ T4194] netlink: 1 bytes leftover after parsing attributes in process `syz.7.12033'. [ 697.248368][ T4200] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12035'. [ 697.295938][ T36] audit: type=1400 audit(2000005430.692:48916): avc: denied { setattr } for pid=4196 comm="syz.7.12034" path="socket:[140918]" dev="sockfs" ino=140918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 697.442403][ T4219] 8021q: VLANs not supported on lo [ 697.451249][ T36] audit: type=1400 audit(2000005430.832:48917): avc: denied { create } for pid=4214 comm="syz.6.12040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 697.735461][ T4248] netlink: 'syz.6.12052': attribute type 1 has an invalid length. [ 698.354048][ T4285] tmpfs: Unknown parameter 'no' [ 698.585307][ T866] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 699.188292][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12074'. [ 699.281889][ T4317] overlayfs: failed to resolve './file1/file0': -2 [ 699.518882][ T36] audit: type=1400 audit(2000005432.775:48918): avc: denied { write } for pid=4336 comm="syz.2.12084" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crash_device_t:s0" [ 699.546764][ T36] audit: type=1400 audit(2000005432.775:48919): avc: denied { open } for pid=4336 comm="syz.2.12084" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crash_device_t:s0" [ 699.777669][ T4357] loop5: detected capacity change from 0 to 7 [ 699.921891][ T36] audit: type=1400 audit(2000005433.150:48920): avc: denied { append } for pid=4368 comm="syz.2.12093" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 700.008615][ T4382] binder: Bad value for 'defcontext' [ 700.292357][ T4398] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.12103'. [ 700.871000][ T36] audit: type=1400 audit(2000005434.041:48921): avc: denied { map } for pid=4409 comm="syz.7.12108" path="socket:[141841]" dev="sockfs" ino=141841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 700.877074][ T4410] sock: sock_timestamping_bind_phc: sock not bind to device [ 700.943541][ T4419] overlayfs: failed to resolve './bus/file0': -2 [ 701.008853][ T4421] SELinux: security_context_str_to_sid () failed with errno=-22 [ 701.223217][ T4435] fuse: Bad value for 'rootmode' [ 701.229347][ T36] audit: type=1400 audit(2000005434.379:48922): avc: denied { ioctl } for pid=4434 comm="syz.2.12116" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crash_device_t:s0" [ 701.379897][ T36] audit: type=1400 audit(2000005434.520:48923): avc: denied { map } for pid=4448 comm="syz.2.12121" path="/proc/894/net/ip6_flowlabel" dev="proc" ino=4026533286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 701.397546][ T4450] /dev/rnullb0: Can't lookup blockdev [ 701.545701][ T4470] rust_binder: 905: no such ref 1 [ 701.572822][ T36] audit: type=1400 audit(2000005434.698:48924): avc: denied { setattr } for pid=4472 comm="syz.2.12128" name="RAW" dev="sockfs" ino=142480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 701.795914][ T4497] netlink: 188 bytes leftover after parsing attributes in process `syz.7.12135'. [ 702.060612][ T36] audit: type=1400 audit(2000005435.158:48925): avc: denied { mounton } for pid=4531 comm="syz.7.12147" path="/404/file0" dev="tmpfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 702.060700][ T4532] /dev/loop0: Can't lookup blockdev [ 702.130978][ T4540] SELinux: Context ϧ is not valid (left unmapped). [ 702.426564][ T4558] overlayfs: failed to clone upperpath [ 702.450960][ T4563] netlink: 'syz.6.12157': attribute type 1 has an invalid length. [ 702.539249][ T4579] netlink: 'syz.6.12163': attribute type 13 has an invalid length. [ 702.550457][ T4579] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 702.559680][ T4579] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 702.571451][ T4579] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 702.691108][ T4586] overlayfs: failed to clone upperpath [ 702.851741][ T4608] overlayfs: failed to clone lowerpath [ 702.858964][ T36] audit: type=1400 audit(2000005435.899:48926): avc: denied { nlmsg_tty_audit } for pid=4609 comm="syz.6.12174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 702.895246][ T36] audit: type=1400 audit(2000005435.936:48927): avc: denied { accept } for pid=4609 comm="syz.6.12174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 703.840057][ T331] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 703.999953][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 704.006310][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.017486][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 704.030453][ T331] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 704.039547][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.048824][ T331] usb 3-1: config 0 descriptor?? [ 704.127993][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 704.128015][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 704.128030][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 704.202049][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12202'. [ 704.270928][ T4695] netlink: 'syz.7.12203': attribute type 1 has an invalid length. [ 704.279032][ T4695] netlink: 1 bytes leftover after parsing attributes in process `syz.7.12203'. [ 704.280870][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 704.295598][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 704.310447][ T331] usb 3-1: USB disconnect, device number 79 [ 704.369745][ T4713] overlayfs: failed to clone upperpath [ 704.380346][ T4713] overlayfs: failed to clone lowerpath [ 704.382604][ T4717] binder: Unknown parameter 'defcontext01777777777777777777777' [ 704.756726][ T331] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 704.917759][ T331] usb 3-1: config 151 has an invalid interface number: 131 but max is 0 [ 704.926348][ T331] usb 3-1: config 151 has no interface number 0 [ 704.933404][ T331] usb 3-1: config 151 interface 131 has no altsetting 0 [ 704.942687][ T331] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=4b.2c [ 704.963253][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.971621][ T331] usb 3-1: Product: syz [ 704.975983][ T331] usb 3-1: Manufacturer: syz [ 704.980663][ T331] usb 3-1: SerialNumber: syz [ 705.200814][ T4743] rust_binder: Write failure EINVAL in pid:954 [ 705.415703][ T331] usb 3-1: unknown interface protocol 0xc1, assuming v1 [ 705.429177][ T331] usb 3-1: cannot find UAC_HEADER [ 705.435949][ T331] snd-usb-audio 3-1:151.131: probe with driver snd-usb-audio failed with error -22 [ 705.446504][ T331] usb 3-1: USB disconnect, device number 80 [ 705.454087][T31710] udevd[31710]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:151.131/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 705.769428][ T4758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12226'. [ 706.148879][ T36] audit: type=1400 audit(2000005438.995:48928): avc: denied { write } for pid=4774 comm="syz.2.12233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 706.889045][ T4807] /dev/sg0: Can't lookup blockdev [ 706.960014][ T4814] rust_binder: 970: no such ref 1 [ 706.965507][ T4814] rust_binder: 970: no such ref 1 [ 706.970718][ T4814] rust_binder: Read failure Err(EAGAIN) in pid:970 [ 707.146973][ T4826] rust_binder: Failed copying remainder into alloc: EFAULT [ 707.146998][ T4826] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 707.154333][ T4826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 707.162763][ T4826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:977 [ 707.182631][ T4826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 707.182940][ T4828] rust_binder: Failed copying remainder into alloc: EFAULT [ 707.189610][ T4828] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 707.197046][ T4828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 707.205697][ T4828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:977 [ 707.350986][ T4846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12260'. [ 707.369823][ T4844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12260'. [ 707.391217][ T36] audit: type=1400 audit(2000005440.158:48929): avc: denied { accept } for pid=4849 comm="syz.6.12261" path="socket:[143116]" dev="sockfs" ino=143116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 707.874748][ T4874] cgroup: Bad value for 'name' [ 707.880318][ T4874] 9pnet: Could not find request transport: xen [ 708.161659][ T36] audit: type=1400 audit(2000005440.881:48930): avc: denied { create } for pid=4891 comm="syz.7.12276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 708.252765][ T45] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 708.413732][ T45] usb 3-1: config 0 has no interfaces? [ 708.419395][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.428880][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.437663][ T45] usb 3-1: config 0 descriptor?? [ 708.988122][ T4918] batadv_slave_1: entered promiscuous mode [ 709.049568][ T4919] netlink: 'syz.7.12284': attribute type 28 has an invalid length. [ 709.066753][ T4917] batadv_slave_1: left promiscuous mode [ 709.237613][ T36] audit: type=1400 audit(2000005441.894:48931): avc: denied { read } for pid=4929 comm="syz.7.12288" path="socket:[143219]" dev="sockfs" ino=143219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.432787][ T4940] overlayfs: failed to clone upperpath [ 709.798358][ T4962] bpf: Bad value for 'mode' [ 709.803239][ T4962] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 710.152769][ T4987] netlink: 'syz.6.12308': attribute type 6 has an invalid length. [ 710.358841][ T5004] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 710.367215][ T5005] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 710.693350][ T36] audit: type=1326 audit(2000005443.254:48932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.7.12325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e0bb8efc9 code=0x0 [ 710.982439][ T5051] fuseblk: Unknown parameter 'roH [ 710.982439][ T5051] mode' [ 711.157774][ T5086] 9pnet: Could not find request transport: fdfdno=[6% [ 711.219081][T11009] usb 3-1: USB disconnect, device number 81 [ 711.240043][ T5102] /dev/rnullb0: Can't lookup blockdev [ 711.252501][ T5106] /dev/rnullb0: Can't lookup blockdev [ 711.486860][ T36] audit: type=1400 audit(2000005444.005:48933): avc: denied { audit_write } for pid=5128 comm="syz.0.12357" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 711.515207][ T36] audit: type=1107 audit(2000005444.005:48934): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 711.529502][ T36] audit: type=1107 audit(2000005444.005:48935): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 711.543354][ T36] audit: type=1107 audit(2000005444.005:48936): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 711.557339][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12359'. [ 711.564541][ T36] audit: type=1107 audit(2000005444.005:48937): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 711.589024][ T36] audit: type=1107 audit(2000005444.005:48938): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 711.635307][ T5156] overlayfs: failed to clone lowerpath [ 711.651203][ T5155] 9pnet_fd: Insufficient options for proto=fd [ 711.663542][T11009] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 711.710260][ T5169] futex_wake_op: syz.0.12368 tries to shift op by -1; fix this program [ 711.834075][T11009] usb 3-1: Using ep0 maxpacket: 16 [ 711.842817][T11009] usb 3-1: unable to get BOS descriptor set [ 711.849702][T11009] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 711.859763][T11009] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 711.869823][T11009] usb 3-1: config 1 interface 0 has no altsetting 0 [ 711.880199][T11009] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.889519][T11009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.899840][T11009] usb 3-1: Product: syz [ 711.906482][T11009] usb 3-1: Manufacturer: syz [ 711.914031][T11009] usb 3-1: SerialNumber: syz [ 711.927170][ T5111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 711.934933][ T5111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 712.156540][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.164023][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.171731][ T5196] bridge_slave_0: entered allmulticast mode [ 712.178352][ T5196] bridge_slave_0: entered promiscuous mode [ 712.190965][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.198364][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.205730][ T5196] bridge_slave_1: entered allmulticast mode [ 712.212503][ T5196] bridge_slave_1: entered promiscuous mode [ 712.295677][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.302789][ T5196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.310154][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.317286][ T5196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.333329][T11009] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 712.349073][T11009] usb 3-1: USB disconnect, device number 82 [ 712.387083][T29728] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.400708][T29728] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.421815][T29715] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.428946][T29715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.450123][T29715] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.457267][T29715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.520125][ T5196] veth0_vlan: entered promiscuous mode [ 712.535552][ T5196] veth1_macvtap: entered promiscuous mode [ 712.652596][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12386'. [ 712.974557][ T45] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 712.992094][ T5255] rust_binder: Read failure Err(EAGAIN) in pid:1002 [ 713.156897][ T45] usb 1-1: config 1 has an invalid interface number: 146 but max is 0 [ 713.172162][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.182940][ T45] usb 1-1: config 1 has no interface number 0 [ 713.190850][ T45] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 713.200393][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.208461][ T45] usb 1-1: Product: syz [ 713.212977][ T45] usb 1-1: Manufacturer: syz [ 713.217661][ T45] usb 1-1: SerialNumber: syz [ 713.234182][ T45] usbserial_generic 1-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 713.241091][T11009] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 713.248191][ T45] usbserial_generic 1-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 713.267681][ T45] usbserial_generic 1-1:1.146: device has no bulk endpoints [ 713.277687][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 713.277706][ T36] audit: type=1400 audit(2000005445.684:48946): avc: denied { ioctl } for pid=5257 comm="syz.7.12393" path="socket:[144088]" dev="sockfs" ino=144088 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 713.325019][ T5260] No source specified [ 713.422233][T11009] usb 3-1: Using ep0 maxpacket: 32 [ 713.425238][ T5279] veth0: entered promiscuous mode [ 713.433247][ T5279] veth0: left promiscuous mode [ 713.434501][T11009] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 713.446801][T11009] usb 3-1: config 0 has no interface number 0 [ 713.452960][T11009] usb 3-1: config 0 interface 184 has no altsetting 0 [ 713.453350][ T5247] __vm_enough_memory: pid: 5247, comm: syz.0.12389, bytes: 18014402804453376 not enough memory for the allocation [ 713.461916][T11009] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 713.483656][ T45] usb 1-1: USB disconnect, device number 79 [ 713.485789][T11009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.498269][T11009] usb 3-1: Product: syz [ 713.502629][T11009] usb 3-1: Manufacturer: syz [ 713.507312][T11009] usb 3-1: SerialNumber: syz [ 713.531745][T11009] usb 3-1: config 0 descriptor?? [ 713.538558][ T5287] 9pnet_fd: Insufficient options for proto=fd [ 713.541214][T11009] smsc75xx v1.0.0 [ 713.559489][ T5287] 9pnet_fd: Insufficient options for proto=fd [ 713.566004][ T5287] 9pnet_fd: Insufficient options for proto=fd [ 713.578253][ T5287] 9pnet_fd: Insufficient options for proto=fd [ 713.586549][ T5287] 9pnet_fd: Insufficient options for proto=fd [ 713.628010][ T5298] netlink: 'syz.7.12406': attribute type 1 has an invalid length. [ 714.181950][T11009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 714.212366][T11009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 714.232699][T11009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 714.245185][T11009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 714.255042][T11009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 714.266024][T11009] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 714.276211][T11009] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 714.349561][ T45] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 714.520067][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 714.526792][ T45] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 714.536956][ T45] usb 1-1: config 0 has no interface number 0 [ 714.546261][T11009] usb 3-1: USB disconnect, device number 83 [ 714.546382][ T45] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 714.564017][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.572287][ T45] usb 1-1: Product: syz [ 714.576870][ T45] usb 1-1: Manufacturer: syz [ 714.581550][ T45] usb 1-1: SerialNumber: syz [ 714.587559][ T45] usb 1-1: config 0 descriptor?? [ 714.594076][ T45] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 714.602957][ T45] usb 1-1: Detected SIO [ 714.608127][ T45] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 715.103994][ T36] audit: type=1400 audit(2000005447.392:48947): avc: denied { getopt } for pid=5313 comm="syz.2.12410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.192515][ T5320] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 715.238121][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12414'. [ 715.255682][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12414'. [ 715.349931][ T331] usb 1-1: USB disconnect, device number 80 [ 715.372998][ T331] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 715.390167][ T331] ftdi_sio 1-1:0.217: device disconnected [ 715.497699][ T5338] /dev/nbd2: Can't lookup blockdev [ 715.703213][ T331] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 715.873721][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 715.884412][ T331] usb 1-1: no configurations [ 715.889053][ T331] usb 1-1: can't read configurations, error -22 [ 716.044274][ T331] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 716.225458][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 716.236699][ T331] usb 1-1: no configurations [ 716.241340][ T331] usb 1-1: can't read configurations, error -22 [ 716.257591][ T331] usb usb1-port1: attempt power cycle [ 716.630800][ T331] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 716.662999][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 716.673167][ T331] usb 1-1: no configurations [ 716.677810][ T331] usb 1-1: can't read configurations, error -22 [ 716.822392][ T331] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 716.844050][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 716.849915][ T331] usb 1-1: no configurations [ 716.855003][ T331] usb 1-1: can't read configurations, error -22 [ 716.861545][ T331] usb usb1-port1: unable to enumerate USB device [ 717.361308][ T5370] SELinux: security_context_str_to_sid () failed with errno=-22 [ 717.383405][ T36] audit: type=1326 audit(2000005449.531:48948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.7.12437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e0bb8efc9 code=0x0 [ 717.467362][ T5394] netlink: 'syz.2.12438': attribute type 21 has an invalid length. [ 717.475536][ T5394] netlink: 388 bytes leftover after parsing attributes in process `syz.2.12438'. [ 717.811593][ T5411] overlayfs: missing 'lowerdir' [ 717.813675][ T331] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 717.985210][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.995459][ T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.005066][ T331] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 718.014266][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 718.022492][ T331] usb 3-1: SerialNumber: syz [ 718.306443][ T331] usb 3-1: 0:2 : does not exist [ 718.313350][ T331] usb 3-1: USB disconnect, device number 84 [ 718.323180][T31710] udevd[31710]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 718.656214][ T5425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12450'. [ 718.682018][ T5421] SELinux: security_context_str_to_sid () failed with errno=-22 [ 718.735944][ T36] audit: type=1400 audit(2000005450.797:48949): avc: denied { read write } for pid=5428 comm="syz.0.12452" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 718.760457][ T36] audit: type=1400 audit(2000005450.797:48950): avc: denied { ioctl open } for pid=5428 comm="syz.0.12452" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 718.868828][T26897] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 719.008951][ T36] audit: type=1400 audit(2000005451.060:48951): avc: denied { create } for pid=5428 comm="syz.0.12452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 719.039358][T26897] usb 3-1: Using ep0 maxpacket: 16 [ 719.046651][T26897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.057938][T26897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.071625][T26897] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 719.081022][T26897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.090684][T26897] usb 3-1: config 0 descriptor?? [ 719.524726][T26897] usbhid 3-1:0.0: can't add hid device: -71 [ 719.533341][T26897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 719.545310][T26897] usb 3-1: USB disconnect, device number 85 [ 719.654719][ T36] audit: type=1400 audit(2000005451.660:48952): avc: denied { watch } for pid=5434 comm="syz.6.12454" path="/390/file0" dev="tmpfs" ino=2126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 720.355619][ T36] audit: type=1400 audit(2000005452.317:48953): avc: denied { mounton } for pid=5452 comm="syz.0.12460" path="cgroup:[4026532315]" dev="nsfs" ino=4026532315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 720.361066][ T5453] rust_binder: Write failure EFAULT in pid:33 [ 721.152985][ T5498] rust_binder: Write failure EFAULT in pid:1074 [ 721.235036][ T36] audit: type=1400 audit(2000005453.143:48954): avc: denied { mounton } for pid=5488 comm="syz.0.12472" path="/15/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 721.264342][ T5489] rust_binder: Error while translating object. [ 721.264397][ T5489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 721.275452][ T5497] 9pnet_fd: Insufficient options for proto=fd [ 721.291051][ T5489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44 [ 721.291787][ T36] audit: type=1400 audit(2000005453.180:48955): avc: denied { remount } for pid=5488 comm="syz.0.12472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 721.381369][ T36] audit: type=1400 audit(2000005453.284:48956): avc: denied { unmount } for pid=5196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 721.432905][T29733] Bluetooth: hci0: Frame reassembly failed (-84) [ 721.569931][ T5508] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 721.580717][ T36] audit: type=1400 audit(2000005453.471:48957): avc: denied { relabelto } for pid=5507 comm="syz.7.12479" name="ttyS3" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 721.610288][ T36] audit: type=1400 audit(2000005453.471:48958): avc: denied { associate } for pid=5507 comm="syz.7.12479" name="ttyS3" dev="tmpfs" ino=1370 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cron_spool_t:s0" [ 721.634195][ T5510] overlayfs: failed to clone upperpath [ 721.863989][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 721.995316][ T5553] netlink: 328 bytes leftover after parsing attributes in process `syz.2.12494'. [ 722.116997][ T5575] overlayfs: missing 'lowerdir' [ 723.168666][ T5608] overlayfs: failed to clone lowerpath [ 723.228368][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 723.263201][ T5620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=5620 comm=syz.2.12520 [ 723.523525][ T5647] rust_binder: Error while translating object. [ 723.523570][ T5647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 723.524707][ T5645] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.530317][ T5647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1110 [ 723.654609][T20237] Bluetooth: hci0: command 0x1003 tx timeout [ 723.669992][ T866] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 723.693744][ T5655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 723.693772][ T5655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 723.720593][ T5658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 723.730441][ T5658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 723.955242][ T5674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1125 [ 723.983787][ T5678] rust_binder: Write failure EFAULT in pid:1129 [ 724.855632][ T5725] __vm_enough_memory: pid: 5725, comm: syz.0.12551, bytes: 18014402804453376 not enough memory for the allocation [ 725.086233][ T5734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 725.094378][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 725.094401][ T36] audit: type=1400 audit(2000005456.774:48966): avc: denied { setopt } for pid=5733 comm="syz.2.12554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 725.169640][ T36] audit: type=1400 audit(2000005456.821:48967): avc: denied { write } for pid=5733 comm="syz.2.12554" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.210803][ T36] audit: type=1400 audit(2000005456.821:48968): avc: denied { remove_name } for pid=5733 comm="syz.2.12554" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.235479][ T5738] rust_binder: Error while translating object. [ 725.235532][ T5738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 725.258118][ T5738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:76 [ 725.267694][ T36] audit: type=1400 audit(2000005456.821:48969): avc: denied { unlink } for pid=5733 comm="syz.2.12554" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 725.415231][ T5758] rust_binder: 1153: no such ref 3 [ 725.420433][ T5758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1153 [ 725.451646][ T36] audit: type=1400 audit(2000005457.102:48970): avc: denied { mounton } for pid=5762 comm="syz.2.12562" path=2F3332352FE91F7189591E9233614B dev="tmpfs" ino=1780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 725.451695][ T5763] 9pnet: Could not find request transport: un~ [ 725.642988][ T5790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12572'. [ 725.708033][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12575'. [ 725.892907][ T5417] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 726.075255][ T5417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 726.086798][ T5417] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 726.095993][ T5417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.104877][ T5417] usb 3-1: config 0 descriptor?? [ 726.276797][ T5812] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 726.284130][ T5812] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 726.291549][ T5812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 726.325601][ T5417] logitech 0003:046D:C626.0027: unknown main item tag 0x4 [ 726.343791][ T5417] logitech 0003:046D:C626.0027: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0 [ 726.372615][ T5417] usb 3-1: USB disconnect, device number 86 [ 726.515094][ T5829] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12584'. [ 726.524833][ T36] audit: type=1400 audit(2000005458.106:48971): avc: denied { setopt } for pid=5828 comm="syz.2.12584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 726.554098][ T5831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 726.585732][T26898] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 726.746181][ T5833] rust_binder: Error in use_page_slow: ESRCH [ 726.746220][ T5833] rust_binder: use_range failure ESRCH [ 726.752598][ T5833] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 726.758136][T26898] usb 1-1: Using ep0 maxpacket: 8 [ 726.771443][ T5833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 726.771482][ T5833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1173 [ 726.782084][T26898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.802473][T26898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.812542][T26898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 726.825475][T26898] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 726.834571][T26898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.843508][T26898] usb 1-1: config 0 descriptor?? [ 727.277428][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.284665][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.291890][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.299050][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.306294][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.313503][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.320753][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.329063][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.336407][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.343745][T26898] logitech 0003:046D:C293.0028: unknown main item tag 0x0 [ 727.351628][T26898] logitech 0003:046D:C293.0028: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 727.363243][T26898] logitech 0003:046D:C293.0028: no inputs found [ 727.492978][ T5818] rust_binder: Got transaction with invalid offset. [ 727.493011][ T5818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 727.499758][ T5818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 727.509992][ T5818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.528403][ T5818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.540445][T11005] usb 1-1: USB disconnect, device number 85 [ 727.567070][ T5842] IPv6: NLM_F_CREATE should be specified when creating new route [ 727.568131][ T5845] /dev/rnullb0: Can't lookup blockdev [ 727.632472][ T5853] netlink: 312 bytes leftover after parsing attributes in process `syz.2.12592'. [ 727.644228][ T5853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 727.644523][ T5853] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 727.718690][ T36] audit: type=1400 audit(2000005459.232:48972): avc: denied { listen } for pid=5860 comm="syz.6.12595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 727.928769][ T31] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 728.090105][ T31] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 728.097576][ T31] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 728.108314][ T31] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 728.117563][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.125707][ T31] usb 3-1: Product: syz [ 728.130081][ T31] usb 3-1: Manufacturer: syz [ 728.134872][ T31] usb 3-1: SerialNumber: syz [ 728.141445][ T31] rndis_host 3-1:7.0: skipping garbage [ 728.147130][ T31] usb 3-1: bad CDC descriptors [ 728.247801][ T5872] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 728.247801][ T36] audit: type=1400 audit(2000005459.720:48973): avc: denied { relabelfrom } for pid=5871 comm="syz.0.12599" name="UDP" dev="sockfs" ino=147118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 728.281195][ T36] audit: type=1400 audit(2000005459.757:48974): avc: denied { relabelto } for pid=5871 comm="syz.0.12599" name="UDP" dev="sockfs" ino=147118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:auth_cache_t:s0" [ 728.313203][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12599'. [ 728.356209][ T5875] netlink: 'syz.0.12600': attribute type 5 has an invalid length. [ 728.364110][ T5875] netlink: 'syz.0.12600': attribute type 5 has an invalid length. [ 728.372099][ T5875] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12600'. [ 728.382695][ T5876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 728.383391][ T5874] netlink: 'syz.0.12600': attribute type 5 has an invalid length. [ 728.390454][ T5875] rust_binder: Error while translating object. [ 728.397878][ T5875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 728.398398][ T5874] netlink: 'syz.0.12600': attribute type 5 has an invalid length. [ 728.404141][ T5875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 728.413986][ T5874] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12600'. [ 728.441592][T26898] usb 3-1: USB disconnect, device number 87 [ 728.664983][ T5891] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 728.675403][ T36] audit: type=1400 audit(2000005460.132:48975): avc: denied { relabelto } for pid=5890 comm="syz.6.12607" name="438" dev="tmpfs" ino=2372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/usr/lib/telepathy/mission-control-5" [ 728.677703][ T5891] overlayfs: failed to resolve './file1': -2 [ 728.717503][ T31] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 728.877444][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 728.883830][ T31] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 728.892432][ T31] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 728.901529][ T31] usb 1-1: config 0 has no interface number 1 [ 728.907757][ T31] usb 1-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.921055][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 49, using maximum allowed: 30 [ 728.932025][ T31] usb 1-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 728.945240][ T31] usb 1-1: config 0 interface 114 has no altsetting 0 [ 728.952092][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 728.960769][ T31] usb 1-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 728.969922][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.978223][ T31] usb 1-1: Product: syz [ 728.982436][ T31] usb 1-1: Manufacturer: syz [ 728.987429][ T31] usb 1-1: SerialNumber: syz [ 728.998088][ T5893] binder: Bad value for 'stats' [ 729.001620][ T31] usb 1-1: config 0 descriptor?? [ 729.269592][ T5901] overlayfs: failed to clone upperpath [ 729.277057][ T5901] fuse: Unknown parameter 'fd}0x0000000000000005' [ 729.314363][T26898] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 729.495571][T26898] usb 3-1: Using ep0 maxpacket: 16 [ 729.501847][T26898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.512038][T26898] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 729.521172][T26898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.530497][T26898] usb 3-1: config 0 descriptor?? [ 729.861263][T26898] usb 3-1: USB disconnect, device number 88 [ 730.028329][ T5923] rust_binder: Write failure EFAULT in pid:1203 [ 730.110328][ T5926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 730.126391][ T5926] rust_binder: Error in use_page_slow: ESRCH [ 730.126413][ T5926] rust_binder: use_range failure ESRCH [ 730.132471][ T5926] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 730.138026][ T5926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 730.146418][ T5926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1206 [ 730.173007][ T5929] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 730.190985][ T5929] SELinux: failed to load policy [ 730.200304][ T5929] netlink: 'syz.2.12619': attribute type 12 has an invalid length. [ 730.273183][ T5933] netlink: 'syz.6.12621': attribute type 6 has an invalid length. [ 730.281282][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12621'. [ 730.497572][T11005] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 730.662714][T11005] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 730.671804][T11005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.688569][T11005] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.958434][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 730.958456][ T36] audit: type=1400 audit(2000005462.272:48987): avc: denied { bind } for pid=5971 comm="syz.0.12636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 731.018972][ T5974] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 731.133575][ T5979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 731.197001][ T36] audit: type=1400 audit(2000005462.487:48988): avc: denied { setopt } for pid=5983 comm="syz.0.12641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.227753][ T36] audit: type=1400 audit(2000005462.487:48989): avc: denied { bind } for pid=5983 comm="syz.0.12641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.253850][ T36] audit: type=1400 audit(2000005462.487:48990): avc: denied { ioctl } for pid=5983 comm="syz.0.12641" path="socket:[147322]" dev="sockfs" ino=147322 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.279789][ T36] audit: type=1400 audit(2000005462.487:48991): avc: denied { map } for pid=5983 comm="syz.0.12641" path="socket:[147322]" dev="sockfs" ino=147322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.304127][ T36] audit: type=1400 audit(2000005462.487:48992): avc: denied { read accept } for pid=5983 comm="syz.0.12641" path="socket:[147322]" dev="sockfs" ino=147322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.410952][ T5990] fuse: Unknown parameter '' [ 732.334563][ T36] audit: type=1400 audit(2000005463.557:48993): avc: denied { getopt } for pid=6006 comm="syz.0.12649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 732.480898][ T6013] SELinux: security_context_str_to_sid (>,SNKHC5 Չ9lY}E7c+2?cY\ٜ~KSo¼D\*2Ծz]H[cG}`:?rV<ץnyұ7[X) failed with errno=-22 [ 732.594228][ T36] audit: type=1400 audit(2000005463.801:48994): avc: denied { map } for pid=6015 comm="syz.0.12653" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 732.731006][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12655'. [ 732.882732][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12657'. [ 732.892186][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12657'. [ 732.903095][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.911653][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.912336][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.922757][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.929373][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.944232][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.062812][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12658'. [ 733.295390][ T6053] netlink: 140 bytes leftover after parsing attributes in process `syz.6.12665'. [ 733.408730][ T36] audit: type=1400 audit(2000005464.570:48995): avc: denied { create } for pid=6060 comm="syz.6.12668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 733.472004][T11005] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.481429][T11005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.514553][T11005] usb 3-1: can't set config #1, error -71 [ 733.527925][T11005] usb 3-1: USB disconnect, device number 89 [ 733.608551][ T6088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 733.634461][ T6088] rust_binder: Error in use_page_slow: ESRCH [ 733.637607][ T6092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=6092 comm=syz.6.12679 [ 733.641214][ T6088] rust_binder: use_range failure ESRCH [ 733.660240][ T6088] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 733.666809][ T6088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 733.674900][ T6088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1215 [ 733.688182][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12681'. [ 733.708446][ T6096] /dev/rnullb0: Can't lookup blockdev [ 733.738229][ T6101] __vm_enough_memory: pid: 6101, comm: syz.2.12683, bytes: 18014402804453376 not enough memory for the allocation [ 733.757639][ T6105] overlayfs: failed to clone upperpath [ 733.791098][ T6110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 733.792073][ T6110] rust_binder: Error in use_page_slow: ESRCH [ 733.798710][ T6110] rust_binder: use_range failure ESRCH [ 733.805047][ T6110] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 733.808441][ T6113] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 733.810644][ T6110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 733.826822][ T6110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1220 [ 733.849887][ T6116] binder: Bad value for 'max' [ 733.857372][ T6118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 733.881908][ T6120] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 733.888556][ T6120] rust_binder: Read failure Err(EFAULT) in pid:183 [ 733.894519][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12691'. [ 733.923996][ T36] audit: type=1400 audit(2000005465.049:48996): avc: denied { accept } for pid=6126 comm="syz.0.12692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 734.089031][ T6132] rust_binder: Fixups oob 178 180 369 186 [ 734.089052][ T6132] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 734.094919][ T6132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 734.103241][ T6132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 734.220153][ T6144] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12698'. [ 734.238698][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12698'. [ 734.247958][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12698'. [ 734.399769][ T31] usb 1-1: bad CDC descriptors [ 734.965396][ T6182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 734.965860][ T6182] rust_binder: Error in use_page_slow: ESRCH [ 734.972320][ T6182] rust_binder: use_range failure ESRCH [ 734.978433][ T6182] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 734.983934][ T6182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 734.992017][ T6182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1228 [ 735.184252][ T6190] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 735.202667][ T6190] netlink: 'syz.0.12714': attribute type 27 has an invalid length. [ 735.214501][ T6190] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 735.293934][T11009] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 735.466396][T11009] usb 3-1: config 7 has an invalid interface number: 53 but max is 1 [ 735.474619][T11009] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 735.483454][T11009] usb 3-1: config 7 has an invalid interface number: 222 but max is 1 [ 735.491757][T11009] usb 3-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 735.502067][T11009] usb 3-1: config 7 has no interface number 0 [ 735.508190][T11009] usb 3-1: config 7 has no interface number 1 [ 735.514304][T11009] usb 3-1: config 7 interface 53 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 735.525243][T11009] usb 3-1: config 7 interface 53 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 8 [ 735.535152][T11009] usb 3-1: config 7 interface 53 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 735.545825][T11009] usb 3-1: config 7 interface 53 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.555699][T11009] usb 3-1: config 7 interface 222 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 735.566798][T11009] usb 3-1: config 7 interface 222 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 8 [ 735.576792][T11009] usb 3-1: config 7 interface 222 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 735.587821][T11009] usb 3-1: config 7 interface 222 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 735.599384][T11009] usb 3-1: config 7 interface 222 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 735.613018][T11009] usb 3-1: config 7 interface 53 has no altsetting 0 [ 735.620593][T11009] usb 3-1: config 7 interface 222 has no altsetting 0 [ 735.630878][T11009] usb 3-1: New USB device found, idVendor=19d2, idProduct=1132, bcdDevice=1d.6c [ 735.640037][T11009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.648384][T11009] usb 3-1: Product: syz [ 735.652767][T11009] usb 3-1: Manufacturer: 㟝䜘㏑隶杏ݹ煯맶毷빚䱮렝᫙볉⟠⢣闖⩎ݿ퉠ꪃ괪[⣛Ì蒒倔ꨘ혻䑠ퟭ룇纵⍫䒭큷萜㏈ [ 735.666960][T11009] usb 3-1: SerialNumber: syz [ 735.672269][T11009] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 735.683102][T11009] usb 3-1: no configuration chosen from 1 choice [ 736.182355][ T6221] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 736.182663][ T6222] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 736.208975][ T6221] netlink: 'syz.6.12724': attribute type 2 has an invalid length. [ 736.217016][ T6222] netlink: 'syz.6.12724': attribute type 2 has an invalid length. [ 736.715374][ T6264] virtiofs: Unknown parameter 'always' [ 737.432242][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 737.432269][ T36] audit: type=1400 audit(2000005468.342:49005): avc: denied { read write } for pid=6294 comm="syz.7.12748" name="ttyS3" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 737.466226][ T36] audit: type=1400 audit(2000005468.342:49006): avc: denied { open } for pid=6294 comm="syz.7.12748" path="/dev/ttyS3" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 737.494156][ T36] audit: type=1400 audit(2000005468.351:49007): avc: denied { ioctl } for pid=6294 comm="syz.7.12748" path="/dev/ttyS3" dev="tmpfs" ino=1370 ioctlcmd=0x542e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 737.738017][ T6309] netlink: 'syz.0.12752': attribute type 4 has an invalid length. [ 737.748597][ T6309] netlink: 'syz.0.12752': attribute type 17 has an invalid length. [ 737.889064][ T6306] /dev/sr0: Can't lookup blockdev [ 737.889062][ T36] audit: type=1400 audit(2000005468.773:49008): avc: denied { mounton } for pid=6305 comm="syz.6.12753" path="/cgroup" dev="rootfs" ino=19878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 737.889098][ T36] audit: type=1400 audit(2000005468.773:49009): avc: denied { mounton } for pid=6305 comm="syz.6.12753" path="/cgroup" dev="rootfs" ino=19878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 737.905127][ T6307] /dev/sr0: Can't lookup blockdev [ 738.235325][ T395] usb 3-1: USB disconnect, device number 90 [ 738.254102][ T6314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 738.638164][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.653571][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.664146][ T6328] 9pnet_fd: Insufficient options for proto=fd [ 738.670528][ T6328] rust_binder: Write failure EFAULT in pid:228 [ 738.672712][ T395] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 738.844456][ T395] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 738.853718][ T395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.862570][ T395] usb 3-1: config 0 descriptor?? [ 739.321756][ T6353] rust_binder: 248: no such ref 0 [ 739.327997][ T6354] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 739.335461][ T6354] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 739.528395][ T6357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6357 comm=syz.7.12769 [ 739.602675][ T6366] 9pnet_fd: Insufficient options for proto=fd [ 739.625697][ T6368] fuse: Bad value for 'group_id' [ 739.630882][ T6368] fuse: Bad value for 'group_id' [ 739.756236][ T36] audit: type=1326 audit(2000005470.518:49010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.7.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7fc00000 [ 739.780451][ T36] audit: type=1326 audit(2000005470.518:49011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.7.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7fc00000 [ 739.820170][ T36] audit: type=1326 audit(2000005470.584:49012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.7.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7fc00000 [ 739.843960][ T36] audit: type=1326 audit(2000005470.584:49013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.7.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7fc00000 [ 739.884179][ T36] audit: type=1326 audit(2000005470.640:49015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.7.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0bb8efc9 code=0x7fc00000 [ 739.990791][ T6376] __nla_validate_parse: 4 callbacks suppressed [ 739.990814][ T6376] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12777'. [ 740.109325][ T6386] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 740.110201][ T6386] @0: renamed from bond_slave_1 [ 740.504509][ T6414] rust_binder: 264: no such ref 3 [ 740.509747][ T6414] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 740.517226][ T6414] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 740.524416][ T6414] rust_binder: Write failure EFAULT in pid:264 [ 740.546004][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.557781][ T6423] fuse: Unknown parameter 'roomode' [ 740.562813][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.804026][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12801'. [ 741.267298][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.284649][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.291974][ T6461] bridge_slave_0: entered allmulticast mode [ 741.303248][ T6461] bridge_slave_0: entered promiscuous mode [ 741.315545][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.329670][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.342743][ T6461] bridge_slave_1: entered allmulticast mode [ 741.352412][ T6461] bridge_slave_1: entered promiscuous mode [ 741.448296][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.455399][ T6461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.462749][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.469954][ T6461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.490372][ T395] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 741.505437][T29733] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.512637][ T395] asix 3-1:0.0: probe with driver asix failed with error -71 [ 741.520334][T29733] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.526385][ T395] usb 3-1: USB disconnect, device number 91 [ 741.544642][T29728] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.551772][T29728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.562390][T29733] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.569753][T29733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.602618][ T6483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 741.603572][ T6483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 741.614847][ T6483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1242 [ 741.621524][ T6461] veth0_vlan: entered promiscuous mode [ 741.664435][ T6461] veth1_macvtap: entered promiscuous mode [ 741.700155][ T6496] rust_binder: 1246: no such ref 1 [ 741.705638][ T6496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1246 [ 741.746063][ T6507] rust_binder: Write failure EFAULT in pid:2 [ 742.023589][ T6557] netlink: 72 bytes leftover after parsing attributes in process `syz.6.12835'. [ 742.028056][ T6559] rust_binder: Write failure EFAULT in pid:10 [ 742.049926][ T6557] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=24858 sclass=netlink_xfrm_socket pid=6557 comm=syz.6.12835 [ 742.066815][ T6561] rust_binder: Write failure EFAULT in pid:12 [ 742.083170][ T6563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 742.168793][T26898] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 742.257012][ T6585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=6585 comm=syz.6.12845 [ 742.290869][ T6587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 742.290903][ T6587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 742.339890][T26898] usb 3-1: Using ep0 maxpacket: 8 [ 742.341010][ T6594] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 742.353430][T26898] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.354768][ T6594] batadv_slave_1: entered promiscuous mode [ 742.372410][T26898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 742.388372][T26898] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 742.397726][T26898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.406436][T26898] usb 3-1: config 0 descriptor?? [ 742.418071][ T6596] batadv_slave_1: left promiscuous mode [ 742.563172][T11009] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 742.723025][T11009] usb 8-1: Using ep0 maxpacket: 32 [ 742.729452][T11009] usb 8-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 742.738584][T11009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.747597][T11009] usb 8-1: config 0 descriptor?? [ 743.054316][T26898] usbhid 3-1:0.0: can't add hid device: -71 [ 743.060536][T26898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 743.069793][T26898] usb 3-1: USB disconnect, device number 92 [ 743.184342][T11009] logitech 0003:046D:C29C.0029: unknown main item tag 0x0 [ 743.193208][T11009] logitech 0003:046D:C29C.0029: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.7-1/input0 [ 743.394831][T11009] logitech 0003:046D:C29C.0029: no inputs found [ 743.403151][T11009] usb 8-1: USB disconnect, device number 50 [ 743.431822][ T6605] 9pnet_fd: Insufficient options for proto=fd [ 743.457745][ T6608] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 4096) [ 743.457767][ T6608] rust_binder: Error while translating object. [ 743.468844][ T6608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 743.475273][ T6608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 743.578599][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 743.578621][ T36] audit: type=1400 audit(2000005474.112:49044): avc: denied { watch watch_reads } for pid=6615 comm="syz.0.12854" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 743.582357][ T6616] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 743.624545][ T6616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 743.629597][ T6616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 743.639221][ T6616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:294 [ 743.698481][ T6618] netlink: 'syz.2.12855': attribute type 46 has an invalid length. [ 743.729327][ T6623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.729491][ T6623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.743687][ T6623] rust_binder: Error in use_page_slow: ESRCH [ 743.751005][ T6623] rust_binder: use_range failure ESRCH [ 743.759024][ T6623] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 743.764595][ T6623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 743.772961][ T6623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1264 [ 743.845116][ T6636] netlink: 'syz.0.12860': attribute type 1 has an invalid length. [ 743.864314][ T6634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.864434][ T36] audit: type=1400 audit(2000005474.384:49045): avc: denied { add_name } for pid=6635 comm="syz.0.12860" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.885499][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12861'. [ 743.901802][ T36] audit: type=1400 audit(2000005474.384:49046): avc: denied { create } for pid=6635 comm="syz.0.12860" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 743.923316][ T36] audit: type=1400 audit(2000005474.384:49047): avc: denied { associate } for pid=6635 comm="syz.0.12860" name=".pending_reads" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 744.036489][ T36] audit: type=1400 audit(2000005474.543:49048): avc: denied { listen } for pid=6648 comm="syz.7.12868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 744.249878][ T36] audit: type=1400 audit(2000005474.731:49049): avc: denied { append } for pid=6677 comm="syz.0.12875" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 744.250924][ T6678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 744.285751][ T6678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:310 [ 744.357304][ T6682] netlink: 'syz.2.12877': attribute type 4 has an invalid length. [ 744.378338][ T6682] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12877'. [ 744.417258][ T6686] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 744.417287][ T6686] rust_binder: Read failure Err(EFAULT) in pid:312 [ 744.446418][ T6688] rust_binder: Write failure EFAULT in pid:314 [ 744.537844][ T6697] rust_binder: Error while translating object. [ 744.540385][ T6695] __vm_enough_memory: pid: 6695, comm: syz.2.12880, bytes: 18014402804453376 not enough memory for the allocation [ 744.544188][ T6697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 744.562888][ T6697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 744.671982][T29727] Bluetooth: hci0: Frame reassembly failed (-84) [ 744.678986][ T6712] netlink: 'syz.0.12887': attribute type 27 has an invalid length. [ 744.679021][T29727] Bluetooth: hci0: Frame reassembly failed (-84) [ 744.693647][T29727] Bluetooth: hci0: Frame reassembly failed (-84) [ 744.907683][ T6710] /dev/rnullb0: Can't lookup blockdev [ 745.151196][ T6720] rust_binder: Error while translating object. [ 745.151232][ T6720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 745.157937][ T6720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 745.433423][ T6749] rust_binder: Write failure EFAULT in pid:61 [ 745.475350][ T6755] 9pnet_fd: Insufficient options for proto=fd [ 745.518088][ T36] audit: type=1400 audit(2000005475.932:49050): avc: denied { ioctl } for pid=6760 comm="syz.7.12906" path="/24/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 745.522676][ T6761] rust_binder: Error while translating object. [ 745.544455][ T6761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 745.550696][ T6761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 745.594424][ T6770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.617298][ T6772] rust_binder: Write failure EFAULT in pid:72 [ 745.624488][ T6774] /dev/rnullb0: Can't lookup blockdev [ 745.774088][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.774122][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.780845][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.787806][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.794308][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.800882][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.807688][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.814401][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.820984][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.827973][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.834594][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.841487][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.848038][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.854581][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.861339][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.868340][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.874915][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.881481][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.888125][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.895200][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.901772][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.908326][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.915241][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.921739][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.928278][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.934748][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.941243][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.947830][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.954326][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.960864][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.967725][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.974226][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.980697][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.987209][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 745.993667][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.000445][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.007359][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.013882][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.020469][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.026931][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.033519][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.040099][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.046659][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.053155][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.060078][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.066536][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.073204][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.079917][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.086385][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.092857][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.099294][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.105765][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.112223][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.118718][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.125461][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.131904][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.138392][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.144958][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.151580][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.158145][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.164620][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.171317][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.178068][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.184556][ T6787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 746.209058][ T6792] netlink: 'syz.7.12917': attribute type 2 has an invalid length. [ 746.254661][ T6792] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 746.266567][ T36] audit: type=1400 audit(2000005476.626:49051): avc: denied { create } for pid=6799 comm="syz.2.12919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 746.294471][ T36] audit: type=1400 audit(2000005476.654:49052): avc: denied { read write } for pid=6801 comm="syz.2.12920" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 746.318756][ T36] audit: type=1400 audit(2000005476.654:49053): avc: denied { open } for pid=6801 comm="syz.2.12920" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 746.385235][ T6809] rust_binder: Write failure EINVAL in pid:87 [ 746.564848][ T6816] rust_binder: Write failure EFAULT in pid:94 [ 746.585133][ T6818] overlayfs: failed to resolve './file0/file0': -2 [ 746.598892][ T6818] netlink: 72 bytes leftover after parsing attributes in process `syz.7.12925'. [ 746.609652][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12925'. [ 746.674231][ T6827] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 746.685461][ T6827] incfs: Can't find or create .index dir in ./file0 [ 746.692250][ T6827] incfs: mount failed -30 [ 746.847978][T20237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 746.848003][ T866] Bluetooth: hci0: command 0x1003 tx timeout [ 746.874673][ T6832] rust_binder: Write failure EFAULT in pid:110 [ 746.882010][ T6836] x_tables: unsorted entry at hook 2 [ 746.908452][ T6838] binder: Unknown parameter '1' [ 747.193036][ T6859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 747.193074][ T6859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 747.208135][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.231910][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.245774][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.258840][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.272307][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.289411][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.302550][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=6863 comm=syz.2.12943 [ 747.321233][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.349987][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.359070][ T6871] SELinux: security_context_str_to_sid () failed with errno=-22 [ 747.368087][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.376859][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.386627][ T6869] rust_binder: 336: no such ref 1 [ 747.389547][ T6873] SELinux: security_context_str_to_sid () failed with errno=-22 [ 747.392528][ T6869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 747.428844][ T6876] fuse: Unknown parameter '' [ 747.443879][ T6876] fuse: Unknown parameter ';RTpv2e>fd' [ 747.811652][ T6892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6892 comm=syz.2.12953 [ 747.915172][ T6895] overlayfs: failed to clone lowerpath [ 747.918678][ T6899] Invalid ELF header magic: != ELF [ 747.927112][ T6899] 9pnet_virtio: no channels available for device 127.0.0.1 [ 747.970528][ T6903] rust_binder: Write failure EFAULT in pid:338 [ 748.050847][ T6918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 748.057306][ T6917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 748.064068][ T6917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:123 [ 748.092847][ T6922] 9pnet_fd: Insufficient options for proto=fd [ 748.139055][ T6928] tmpfs: Cannot disable swap on remount [ 748.203773][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.212850][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.383006][T11010] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 748.543998][T11010] usb 8-1: unable to get BOS descriptor or descriptor too short [ 748.552056][T11010] usb 8-1: not running at top speed; connect to a high speed hub [ 748.560567][T11010] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 748.573277][T11010] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 748.582442][T11010] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.590680][T11010] usb 8-1: Product: syz [ 748.595110][T11010] usb 8-1: Manufacturer: syz [ 748.599958][T11010] usb 8-1: SerialNumber: syz [ 748.829151][T11010] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 748.848648][T11010] usb 8-1: USB disconnect, device number 51 [ 749.419305][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12991'. [ 749.428979][ T6987] rust_binder: Write failure EFAULT in pid:131 [ 749.558403][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 749.558424][ T36] audit: type=1400 audit(2000005479.722:49063): avc: denied { connect } for pid=6999 comm="syz.2.12996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 749.683010][ T7003] bridge0: port 3(veth0_vlan) entered blocking state [ 749.698086][ T7003] bridge0: port 3(veth0_vlan) entered disabled state [ 749.717364][ T7003] veth0_vlan: entered allmulticast mode [ 749.790257][ T7019] netlink: 596 bytes leftover after parsing attributes in process `syz.0.13002'. [ 749.904720][ T7027] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 749.928337][ T7027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 749.928350][ T7028] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 749.952270][ T7028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 750.025376][ T7027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 750.045554][ T7027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:361 [ 750.189347][ T7040] rust_binder: 368: no such ref 0 [ 750.203967][ T7040] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 750.211467][ T7040] rust_binder: 368: no such ref 2 [ 750.216881][ T7040] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 750.453151][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.470822][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.866254][ T31] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 751.028411][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.039468][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.049884][ T31] usb 8-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 751.059332][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.071926][ T31] usb 8-1: config 0 descriptor?? [ 751.078820][ T7097] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13028'. [ 751.294224][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.301263][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.308372][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.315554][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.322738][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.329951][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.336902][ T31] wacom 0003:056A:0000.002A: unknown main item tag 0x0 [ 751.344505][ T31] wacom 0003:056A:0000.002A: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 751.358346][ T31] wacom 0003:056A:0000.002A: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.7-1/input0 [ 751.382570][ T31] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0000.002A/input/input53 [ 751.396404][ T36] audit: type=1400 audit(2000005481.439:49064): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=1111 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 751.419236][ T36] audit: type=1400 audit(2000005481.439:49065): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1111 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 751.452850][ T36] audit: type=1400 audit(2000005481.505:49066): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1111 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 751.506242][ T7064] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 751.514445][T11005] usb 8-1: USB disconnect, device number 52 [ 751.542966][ T7130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7130 comm=syz.7.13038 [ 751.617427][ T7138] fuse: Unknown parameter 'use} [ 751.617427][ T7138] wr_id' [ 751.671268][ T36] audit: type=1400 audit(2000005481.702:49067): avc: denied { create } for pid=7146 comm="syz.6.13046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 751.699419][ T7153] tmpfs: Bad value for 'huge' [ 751.728189][ T7160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7160 comm=syz.6.13049 [ 751.917784][ T36] audit: type=1400 audit(2000005481.927:49068): avc: denied { listen } for pid=7187 comm="syz.6.13059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 752.030415][ T7205] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13062'. [ 752.115476][ T7218] 9pnet_fd: Insufficient options for proto=fd [ 752.517536][ T7222] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 752.721381][ T7239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 752.777518][ T36] audit: type=1400 audit(2000005482.734:49069): avc: denied { setattr } for pid=7237 comm="syz.2.13073" name="PACKET" dev="sockfs" ino=153261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 752.815451][ T7246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197 [ 752.954202][ T7259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 752.963869][ T7258] rust_binder: Error while translating object. [ 752.970638][ T7259] rust_binder: Error while translating object. [ 752.987416][ T7259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 752.993851][ T7258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 753.003905][ T7259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 753.007108][ T7267] /dev/loop0: Can't lookup blockdev [ 753.013434][ T7258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 753.079088][ T7276] overlayfs: failed to clone upperpath [ 753.132208][ T7285] overlayfs: failed to clone upperpath [ 753.186196][ T7291] /dev/nbd2: Can't lookup blockdev [ 753.426500][T29715] bridge_slave_1: left allmulticast mode [ 753.432252][T29715] bridge_slave_1: left promiscuous mode [ 753.438197][T29715] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.447218][T29715] bridge_slave_0: left allmulticast mode [ 753.453054][T29715] bridge_slave_0: left promiscuous mode [ 753.458763][T29715] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.579737][T29715] veth1_macvtap: left promiscuous mode [ 753.586246][T29715] veth0_vlan: left promiscuous mode [ 753.639882][ T7304] overlayfs: regular lower layers cannot follow data lower layers [ 753.694315][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.706426][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.713633][ T7296] bridge_slave_0: entered allmulticast mode [ 753.720040][ T7296] bridge_slave_0: entered promiscuous mode [ 753.726753][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.733902][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.741022][ T7294] bridge_slave_0: entered allmulticast mode [ 753.747474][ T7294] bridge_slave_0: entered promiscuous mode [ 753.754456][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.761676][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.769288][ T7294] bridge_slave_1: entered allmulticast mode [ 753.775652][ T7294] bridge_slave_1: entered promiscuous mode [ 753.781894][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.789107][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.796555][ T7296] bridge_slave_1: entered allmulticast mode [ 753.803270][ T7296] bridge_slave_1: entered promiscuous mode [ 753.856068][ T7316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 753.856107][ T7316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:391 [ 753.943119][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.959852][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.967138][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.974379][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.982920][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.990017][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.997418][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.004518][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.014027][ T7330] rust_binder: 393: no such ref 0 [ 754.058082][T29733] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.075318][T29733] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.083846][T29733] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.093714][T29733] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.115042][T29729] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.122241][T29729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.133961][T29729] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.141069][T29729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.162560][T29733] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.169653][T29733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.177690][T29733] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.184883][T29733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.245824][ T7296] veth0_vlan: entered promiscuous mode [ 754.256397][ T7294] veth0_vlan: entered promiscuous mode [ 754.278438][ T7294] veth1_macvtap: entered promiscuous mode [ 754.287477][ T7296] veth1_macvtap: entered promiscuous mode [ 754.374320][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13110'. [ 754.383482][ T7362] veth0_vlan: left allmulticast mode [ 754.389403][ T7362] bridge0: port 3(veth0_vlan) entered disabled state [ 754.405289][ T7362] bridge_slave_1: left allmulticast mode [ 754.412602][ T7362] bridge_slave_1: left promiscuous mode [ 754.416780][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.418232][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.423121][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.425017][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.439570][ T7362] bridge_slave_0: left allmulticast mode [ 754.452072][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.452101][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.461812][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.468542][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.475250][ T7362] bridge_slave_0: left promiscuous mode [ 754.476550][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.488032][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.488875][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.508316][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.508343][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.518642][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.525337][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.531863][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.538637][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.547910][T29729] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 754.562646][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.562675][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.569825][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.576435][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.583096][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.589822][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.596404][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.608502][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.616188][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.623089][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.630570][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.637136][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.644386][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.657126][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.667943][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.675188][ T7374] binder: Unknown parameter 'stat' [ 754.687627][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.687656][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 754.748128][ T7387] 9pnet_fd: Insufficient options for proto=fd [ 754.761974][ T7387] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 754.761996][ T7387] rust_binder: Read failure Err(EFAULT) in pid:413 [ 754.770755][ T7387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 754.777437][ T7387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:413 [ 754.801889][ T7391] fuse: Unknown parameter 'H' [ 754.817792][ T7391] rust_binder: Error while translating object. [ 754.817827][ T7391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 754.825653][ T7391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:415 [ 754.847922][ T7395] /dev/rnullb0: Can't lookup blockdev [ 755.030512][ T7408] rust_binder: Write failure EFAULT in pid:430 [ 755.031031][ T7408] rust_binder: Error while translating object. [ 755.038168][ T7408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 755.044385][ T7408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:430 [ 755.122704][ T7411] rust_binder: Write failure EFAULT in pid:432 [ 755.156765][ T7413] rust_binder: Write failure EFAULT in pid:435 [ 755.179273][ T7415] 9pnet: Could not find request transport: X==(=0x000000000000000a [ 755.367235][ T7431] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 755.369358][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.470204][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.479856][ T7431] ------------[ cut here ]------------ [ 755.485618][ T7431] WARNING: CPU: 1 PID: 7431 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 755.495379][ T7431] Modules linked in: [ 755.499297][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.0.13133 Not tainted syzkaller #0 13e4930ead2c4bb99e6e1e727baa5d081f82ad96 [ 755.511026][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 755.521248][ T7431] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 755.527337][ T7431] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f2 0e ee 05 00 0f 85 be 00 00 00 c6 05 e5 0e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 755.547554][ T7431] RSP: 0018:ffffc900039b7860 EFLAGS: 00010246 [ 755.553685][ T7431] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 755.561919][ T7431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900039b7918 [ 755.570365][ T7431] RBP: ffffc900039b7988 R08: ffffc900039b7917 R09: 0000000000000000 [ 755.578493][ T7431] R10: ffffc900039b7900 R11: fffff52000736f23 R12: ffffc900039b78a0 [ 755.586524][ T7431] R13: dffffc0000000000 R14: 1ffff92000736f10 R15: 0000000000000000 [ 755.594559][ T7431] FS: 00007f70afcf36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 755.603632][ T7431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.610329][ T7431] CR2: 0000000000000000 CR3: 00000001434a6000 CR4: 00000000003526b0 [ 755.618559][ T7431] DR0: 00000000fffffff0 DR1: 0000000000000000 DR2: 0000000000000000 [ 755.626783][ T7431] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 755.634917][ T7431] Call Trace: [ 755.638226][ T7431] [ 755.641192][ T7431] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 755.647500][ T7431] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 755.653412][ T7431] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 755.659089][ T7431] ___kmalloc_large_node+0x81/0x220 [ 755.664364][ T7431] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 755.670040][ T7431] __kmalloc_large_node_noprof+0x1e/0xe0 [ 755.675840][ T7431] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 755.681559][ T7431] __kmalloc_noprof+0x336/0x530 [ 755.686551][ T7431] ? __cfi_lockref_get+0x10/0x10 [ 755.691570][ T7431] incfs_realloc_mount_info+0xa7/0x4d0 [ 755.697199][ T7431] ? incfs_add_sysfs_node+0x118/0x240 [ 755.702792][ T7431] incfs_alloc_mount_info+0x479/0x600 [ 755.708333][ T7431] incfs_mount_fs+0x3ca/0x960 [ 755.713149][ T7431] ? __cfi_incfs_mount_fs+0x10/0x10 [ 755.718541][ T7431] ? vfs_parse_fs_string+0x102/0x170 [ 755.724108][ T7431] ? selinux_capable+0x38/0x50 [ 755.729082][ T7431] legacy_get_tree+0x106/0x1b0 [ 755.734009][ T7431] ? __cfi_incfs_mount_fs+0x10/0x10 [ 755.739314][ T7431] vfs_get_tree+0x9e/0x290 [ 755.743801][ T7431] do_new_mount+0x251/0xb40 [ 755.748450][ T7431] ? security_capable+0xcf/0xf0 [ 755.753527][ T7431] path_mount+0x688/0x1050 [ 755.757987][ T7431] ? putname+0x113/0x150 [ 755.762321][ T7431] __se_sys_mount+0x2bd/0x480 [ 755.767062][ T7431] ? __x64_sys_mount+0xf0/0xf0 [ 755.771899][ T7431] ? __kasan_check_write+0x18/0x20 [ 755.777141][ T7431] ? fpregs_restore_userregs+0x11d/0x260 [ 755.782863][ T7431] __x64_sys_mount+0xc3/0xf0 [ 755.787488][ T7431] x64_sys_call+0x2021/0x2ee0 [ 755.792279][ T7431] do_syscall_64+0x58/0xf0 [ 755.796746][ T7431] ? clear_bhb_loop+0x50/0xa0 [ 755.801570][ T7431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 755.807503][ T7431] RIP: 0033:0x7f70aed8efc9 [ 755.811978][ T7431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.832035][ T7431] RSP: 002b:00007f70afcf3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.840609][ T7431] RAX: ffffffffffffffda RBX: 00007f70aefe5fa0 RCX: 00007f70aed8efc9 [ 755.848791][ T7431] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 755.856850][ T7431] RBP: 00007f70aee11f91 R08: 00002000000003c0 R09: 0000000000000000 [ 755.865197][ T7431] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 755.873302][ T7431] R13: 00007f70aefe6038 R14: 00007f70aefe5fa0 R15: 00007ffc54332238 [ 755.881523][ T7431] [ 755.884573][ T7431] ---[ end trace 0000000000000000 ]--- [ 755.890395][ T7431] incfs: Error allocating mount info. -12 [ 755.896762][ T7431] incfs: mount failed -12 [ 755.971824][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 756.739237][T20237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 756.739285][ T866] Bluetooth: hci0: command 0x1003 tx timeout [ 760.747071][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!