last executing test programs: 23m0.240343712s ago: executing program 32 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="640f226436260f01c4f00fbb2ac4e17c2e39b804fe00000f23c80f21f835080040000f23f8c744240076000000c744240238520000c7442406000000000f011424c4c1adfcab7a00000066baf80cb8fa267483ef66bafc0c66b8000066ef66baf80cb8281c5b88ef66bafc0ced0f789700000000", 0x74}], 0x0, 0x6c, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 22m40.528778002s ago: executing program 33 (id=564): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="9f49615eb3496585d9717525132be7803ebc9bc621f439fb38ac8d816ad4f319250218195cd3652d8b72ca4c82671a6f669c3bbe8452c691bc121b0003dc7d9013d175b3195090f6015f32edd789386167a973fc5697fc86a2839b6565dd840f59c7d4eea19f927537d47e9fc3f8f40ed7c34f665da7720b46160e75fabcb1026b259caff2403484a87aecfd16f9cbe2d0ab11722442305cc66c3f70edfae41fe1a991a615", 0xa5}], 0x1, 0x200, 0x101, 0x8) 22m35.182844556s ago: executing program 34 (id=500): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x1b1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000380)='./bus\x00', 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400040000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000000)=0x9b1, 0x4) connect$inet6(r6, &(0x7f0000000400)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) pread64(r7, &(0x7f0000001a00)=""/4096, 0x1000, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) readv(r5, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)="c3011b095af008cdb48378a3104fb9a2e6dc385bfe9c8d6f695f37afa06ac9deb0a4aabd8f16db493372cddf4e4b1062469f54aef531f958656b2b06d09fdd4fb3f384c94b0bac03ca8d523808bb14ab453773f9d256fab4a8197a95ae9ad6a5b9fc21b49d87907c7b3d4c6017123037a8e0faa23e0aa514265eec07fccee6e8dad33bf34edec00e5ac1749e4328bafb0128bf2f024de011c1dd209eb94391eb7ff9193e85f2660099a170350e14ecfc4c2f807dd37c7fc5181d1af29cf4603a7a1e43455a942be7d4cb5d3341ba87438e5086450d9c7e564e75da", 0xdb) 21m28.566026141s ago: executing program 35 (id=1445): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x23ca, @ipv4={'\x00', '\xff\xff', @local}, 0x8c}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x5, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x49, 0x6, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x40, 0x25, 0x4, 0x1cfbf09af5fd9869}]}, 0x20}}, 0x84) r2 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) splice(r3, 0x0, r2, &(0x7f0000000140)=0x8008, 0x2, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x60000) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000080)=0x1) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\v'], 0x68) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000100)) 19m9.364520878s ago: executing program 36 (id=3193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_usb_connect(0x0, 0xf9, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xc8, 0xb, 0xf3, 0x8, 0x15ba, 0x2a, 0x2eef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x2, 0x3, 0x61, 0x40, 0x7, [{{0x9, 0x4, 0x1, 0xa, 0x0, 0xff, 0x4d, 0x66, 0x24, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xf79c, 0x10, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x50b2, 0x38}, [@acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x5, [0x3d59]}]}, @generic={0xf, 0x3, "b21d6af5e4a015ed3eaf91da4c"}]}}, {{0x9, 0x4, 0xeb, 0x8, 0x4, 0xe2, 0x9e, 0x93, 0x8, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "892bfe5bfa"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x901, 0x1, 0xc0}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x6, 0x78, 0x3, 0x0, 0xf}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @obex={0x5, 0x24, 0x15, 0x101}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "17"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7a, 0x4, 0x80}, [@country_functional={0x6, 0x24, 0x7, 0xe, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0x9, 0x2, 0x10, 0x9, 0xb4, 0x98, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x1, 0x7, [@generic={0x9, 0x4, "1390fb61b70a61"}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x9, 0xc, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0x2, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x5}]}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x19, &(0x7f0000000c00)=ANY=[], 0x2, [{0xe1, 0x0}, {0x0, 0x0}]}) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r1 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 16m39.524231049s ago: executing program 37 (id=4973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'erspan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 11m15.346330256s ago: executing program 38 (id=9043): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000080)=[@rdmsr={0x32, 0x18, {0xa12}}, @rdmsr={0x32, 0x18, {0x3a5}}, @cpuid={0x14, 0x18, {0x4, 0x10000}}, @rdmsr={0x32, 0x18, {0x295}}, @wr_crn={0x46, 0x20, {0x0, 0xc77}}, @rdmsr={0x32, 0x18, {0x1a0}}, @wrmsr={0x1e, 0x20, {0xaf4, 0x1}}, @cpuid={0x14, 0x18, {0x81, 0x3}}, @wrmsr={0x1e, 0x20, {0xa11, 0x1000}}, @rdmsr={0x32, 0x18, {0xad2}}, @wrmsr={0x1e, 0x20, {0xa9a, 0x1de7}}, @cpuid={0x14, 0x18, {0x0, 0x800000}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @code={0xa, 0x3e, {"d1c666ba2000ecc402a5babfc12300003e0f01c8f22ed9f5400f01f8650faeeec482b8f2d3f4b91c0800000f32"}}, @code={0xa, 0x43, {"40dcab87371b44b9470800000f32410f01c9b9120400000f3245deea660f3837c60f1cef2e360f01cf66b886008ee80f01c4"}}, @code={0xa, 0x74, {"0f015906f30f2b090f71e1000f08c74424003b010000c7442402f8000000ff1c24c7442400d7000000c7442402459d5836ff2c24f0430fc0580066450f6c12c74424005b000000c74424021f440000c7442406000000000f011424470fc09747f10000"}}, @rdmsr={0x32, 0x18}, @cpuid={0x14, 0x18, {0xff, 0x6}}, @wr_crn={0x46, 0x20}, @wr_crn={0x46, 0x20, {0x8, 0xd19}}, @wr_crn={0x46, 0x20, {0x8, 0x2}}], 0x2e5}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x8000000, 0x9, 0xfd, 0xfa, 0x1, 0xf9, 0xe, 0xef, 0xc, 0x10}, {0xf000, 0x8000000, 0x9, 0x9d, 0xb, 0xf9, 0x5, 0xff, 0x5, 0x4, 0x0, 0x2}, {0xdddd0000, 0x0, 0xc, 0x4f, 0xb, 0xf8, 0x7, 0x80, 0xcb, 0xe, 0x8, 0x9}, {0xeeef0000, 0x2000, 0x0, 0x2, 0x7, 0x86, 0x7, 0x5, 0x5f, 0x3a, 0x4, 0xfa}, {0x80a0000, 0xf000, 0xd, 0x0, 0x0, 0x1, 0x9, 0x3, 0x7, 0x8, 0x0, 0xd0}, {0x8080000, 0xeeee0000, 0xa, 0x3, 0x2, 0x0, 0x9, 0x4a, 0x5, 0x4, 0xc3, 0x1}, {0x4000, 0x6000, 0xe, 0x1, 0x0, 0x7f, 0x1, 0x6, 0xfb, 0x99, 0x7}, {0x6000, 0x8000000, 0xc, 0x19, 0x1, 0x6, 0x3, 0x1, 0x2, 0x9, 0x4, 0x3}, {0x10000, 0x8}, {0xffff1000, 0x2}, 0x2, 0x0, 0x6000, 0x8, 0x6, 0x7801, 0xffff1000, [0x4, 0x4, 0x80000001, 0x5]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r3, &(0x7f0000000540)=@name, &(0x7f0000000580)=0x10) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000005c0)={0x2, 0x0, [{0x80000016, 0x3, 0xc6, 0x1, 0xea}, {0x7, 0x2, 0xe00, 0x3, 0x66e}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x4, 0x6, {{0x25, 0x4, 0x3, 0x9, 0x94, 0x65, 0x0, 0x2, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x16, 0x1, [{0x5, 0x4, "a74f"}, {0x0, 0xc, "a90cc2920bc6d886468f"}]}, @ssrr={0x89, 0xf, 0xc3, [@loopback, @private=0xa010101, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0x2, [{@private=0xa010100, 0x2d}]}, @end, @timestamp={0x44, 0x8, 0xe4, 0x0, 0x5, [0x6]}, @timestamp_prespec={0x44, 0x44, 0xe6, 0x3, 0x1, [{@broadcast, 0xb4b1}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x6}, {@private=0xa010102, 0x2}, {@multicast2, 0x19}]}]}}}}}) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x198, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x198}}, 0x40) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000a40)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a80)=0x2c) r8 = syz_open_dev$loop(&(0x7f0000000ac0), 0x8, 0x2800) ioctl$BLKALIGNOFF(r8, 0x127a, &(0x7f0000000b00)) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x38) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000cc0)={0x2, 'netdevsim0\x00', {0x7ff}, 0x2fe8}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000d00)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000dc0)={'ipvlan1\x00', 0x0}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000e00)={0x0, @initdev, @multicast1}, &(0x7f0000000e40)=0xc) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001400)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000000e80)={0x520, r11, 0x582, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r6}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xb, 0x5, 0x0, 0x8a}, {0x3, 0x6, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x36}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x4004}, 0x4006004) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r14, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r15, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40015) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003600)={&(0x7f00000015c0)={0x201c, 0x1, 0x6, 0x401, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0x7}, [@typed={0x1004, 0x148, 0x0, 0x0, @binary="6f5df4552d111b27504d5fd9d65ff0fd0bf2b202a9029c69276ba9c44b45065a680b63063be6153641882390bb5dcd0fe6bc0380abaf0ebf68cb08cd951baf52e961652a9e05ca140edd5e003da04acacf12a6ad4482452d7669f10924f4714593364b93af6ef50781ad7f096bfd460c98a8d9f7107bcda10f9e9862bf79c34c843e741e4f0cd223ecb86b9f05650432e7b4fc590108b16132303b8fe982dea61858243038ee741d89f2ae1fdee888a83febf1f2f3993fd8efd4360f925595e08bfe4e64b1f41812eacc9c9dedca1e3dcc3a7258b6724f9995bef0a88294b59dd81366c95a4cf196d4c635ce0a462cdc0f766810043b750028c354991ed29fdabe1a7439f8d75351c4a50e971236d572072c32ea1ff40bf2b1da03e0753e342aca3b28edb1d9df008f1cfcfc98f5259105213b2b7c4f47874e86a3065d980166927a20f38f8849bd8d4c1f8fbd61621e1c9a5f1b932c9b25199a6aa5411972de47178c49ad2aee353e74876f494e5c03e5f7b4074fcea08193ab1870f7bd9bc86fc29be0476083f38d8181edcf2f2cc87ac26956c245ff7af4dc9c8334d6783287935cfa513c5b49e99811a42ecf9ba7935eb5311bdd385c49e584720750bc9a6850cf5f985c60f59383929b5048ed70f12a980b2e6a31203186e0d1adcbb86f234a3f3da9bc8a4db8f4df1dd44fea0466eb951a0fa90a918d21c0689e8090e5f400157bcde0e60545de0200d37f59febc1777fbb23efa415257ae993f8f2702ebf6ce1b931975f461578abdbe265d5416c81ae4aaec5dc3cbdd94681ff779b1f91000fd4374b0c4c96ba74bdb7a5a04a781ab9aee8fb6f9e2d5331bfe3362d27c10f08d2dae53eb727973410531177ed1f91a354c499316a0e738d3b44fa9c50f49fdf0ed6405e209b63bd3cdc5cc8285724346905620ebbe954f17087e811529e0ed075c8c590d5852ddd9237ea148442e40a17d9669d2b3daa236989f142edddff1659f11e4ba09c8efef6f4e5d54424248e0db66fe6f932ce55214139571af6648e817008d1ed89d26e636b2fe9f231fa341455a1ebd7ef484c9a0b3f5035d8a1bcd0883c794833b419e512628d0d1e5f208140cb8d6da7ced95566860e4fc0a7c29efca50e50eeef49b645ecdf43c5e4e858ee2b20ab352000c5173c336677d9275319b83328900ab9fae4cd3892762200438b875d8871d04c51e7b54181e1cbaa37142e07b9ef06d4551d4a66afeaffa0f8139a105c67659e980395ce1b9f9e7cb0e2b4a23329de3d1c9dae1aee74a747a4035ec5369acbd986ccf2b5efca566d2cfd913ad38de250d786b9d9db088fb8034f7b273a7c3f81ef2965de860d078edcb6ccca7463a4aeb84f5a3fa2592e64133409278652139e6ac0b17cc17dd238f405e598bf11519b58140db103319bc0b2d177b82fb74205abcafe48633801af47da1a407569098b2983b5a886112bc37ab41df107a08ad49ef0dc09120a1458b6575024c596d173ede43d9510e9516aa9321ea816ceec0a1671ccdf03e7c9bf84119306bff926fd45c3b782921fc97a11f3c2c10544a69491f3f32c7893ddeeee41fbebbb78a1dd845777a113096176de26c8433d24c8aadd579d79161cdcb8d28f62d025c5133170fde8d72a9d4de91b76cee1500c70503c8428bdbbee747b8eef0f9b5bf10f89912c6d3d3e0a740556185d3f6836bf92440da3d1aaea016282e88e325ec1b04fd500a142ee27a06c4375f826d8f7e0dff3b2ebab2432382d4a538239b2fa0f506ab798e9c3f5a23b3e6604a1821412c2234035605f0212019988724d4d4d84e43d95df729b47421988be77357e1f8c63152ac69386853775b4890fbe8d96af71d984c6203d4688120f264e595783fbf2c5173b588b8577d2eab203fc31f93d4f65365bcf010e1bee1525fd6af5f835b0f88523fd5b43dcaa024e6d1b04b96e8ba70481004ad7c46f2fa9df69937a51f7341a55c761cacbf073732519222c6e8ee0ba36d13f0af525970db01e1545d5e858bd314f5f03c49102d3a9e7815ab66b44f9cccb33ddfeb807064c881d2c4d6161467def2ef9b4bb298420071e7f1b04bf9e6453bc9a8af9761cf8daa9c46058436acebce28ca4615ef8183b50b7350d7d91ddca2fcb89dc20a918c8d48ec3861d5d7d88b41a52df28df90e82f7464ea58dd2a1068eeca155104bfbcc97ccf741da364657fa2d61ed04588eb9922ce44b27f6a78fca4e94ab9cda08600a1250a428af1979e0f8f8c27f4cefd7ab92f5416d2d83e8a17463ab4527a33b383fed91a638ebef712bd53b82f7672c3ff736f34ae3dba0e8707475e104f64cb8f9dfd8c831da30a5f308ab68fce950064fe3fdb71bf76b0c3257522922b4be80e2684f0bd894ab908ba89472a1460173c332bac104fd36f187dd684c594bf2c27ef586f4816455f11bcdcf9f2f1f800bef9c1b8e8e790e8807082e1e1c76d3be719e86c4d078a6099436d88e8fd2eafbcf5d1562c41f95a2065bfd81de96837c1176181a65f89b8944708cb203464b9e40854b28a9aab83382fb8f7860f092edf06b8f80caec4fa7a415d0ddf470e7e89cca474bee6429d200f1994d87c51e38a02b1f79e2a8ebb34c2339e3bf7637000018fc1db64b59d403abdf23c9651118d7b52945c4337409c28efc336afc77138683c7ef9d61a06392c36122f64e4825062989a0b41b43f460ccbd05dcedd0b6af1678242a34ae992713fa104d92628fc67b34716ca3afc28a61037368e6d35155d9bbb4c7c9a58d4e6dfbf44950a684cfd3ba0c00dab174bb28024f1e099788ab3965cf048511d2370ec76c95c857252b63dec1ea0595bb470f406070ae989aa65fa92932e468565beea6b3907126475955e9e877b910d1ec1689381f56ac2fe3c5c5b4e618367a74c4e1f17b84180f74579ab3069b9a547e3493d179d2d7839e3c6476c506b5f7563b779f6b9e0c2ded2001f437bd8cf31815e01bd03cd1918877043c5684a5a3500f2ecb704cbe243962eed3f6418dff01f639d8324b5c57677c42fbe6cac160ab189f472e3693440ac85dfd36f55bcdc580c8b9b1b0e1750951507f4844e692880b68980e3cf8e207543f273ea414a692e99247ff243df48408e962f55545242636a72b16a31f133fe77ff4a0b73ad0638af0f25b75909ebac31d9de8a0c222e9310907456ac29068830196a9352b04dae377c456e5cfa608291af9b95512c813993863152e2f7a02f66a82bdde74f4feef6048fa91e4ea791416ede5aeab98af5563e28412192b246aba47183c09524844631011fb9008ac90e5282c1524a25dac52af474c904822240134ee6b0f4a2d2fca06725599dc8b0283c514cc5f934f1697beb153b8e207a1916935f20de914dcc13111bceafeaa848a987eaf740ffa906e9ac8c4394dc3f6fd0de7357265757bf593b7161f2f0f52134b625fc85cbe5fcd4f7ed0e981a028cb322833f733b6c2ef280e463df8fb0471f67397781852710d5cac113d15a9ae4dad95695f08b2226911278eb7a59606d61d55411bcd94c4ade741a49a96c74464d2b92b9422eea637e5f4152172a7e0a82bcb57ce5218d5f3c557b87596223d9a879d68189c29160da149e9808554bdab324b626bc361f9e3aa98a115b3be342116c7972267c0b2a482ec1b9bc4648a39becd2a0e41600fb1f9d96820bc6b8b51d02ec1d16bb19d0dc25ee0e637a8cc4d331857c26b38d4e35a77999cf33174ebfb7f249e4caad84fb7155e839ca7cd5678826b6d82aef5cd3db62acc5f56443790341903f3438d62e76ca048d789276cc2149d2dc8a0ec1b6031c4440c5010464a08ef52e0729f7a9e8b4f6171f9a46522b6cdd64742e48d5f75cc6a765bead8683800967a0e8c4a3fa80869a492eca9347856ca0a2051699847bad2c16df3030c13b10ee04d5c7d5e972219a4e818c3ac16a0bd1d2e573e4522ecf828c6e708e6d0dffe613cab1cf3e995adfa9e0b9f90dce38d3ed2d042234568fcbf6cd4b24be98633cf4e52eb3e1f293fd077dcd209b789b90b98c9b9eaecaeac04486520e2f3f82fe824d8d407dfa80e29e586850b254089e405e90023f18e5be82e124e0b128d4bc05b991dddeb5c8416084761d0a92bbc4ea20ebad3ca2e89a70661156fb48cbdb5c61106de39473279ef3c6d64a658bb60a0963daa34fde86afb8a5b5b2e24e75bf76bf38db6cba0d00fd4d65b176882a1f7095e2cf1443169138b0e9a14c4b6eb2404159f1c60cb14fbe5825617ad0f900b7c261303e1562c9b8ffa9169eabb3f8616e520af66eae213813f666bdb0ecd401bacfc2e80a4b9cdb44bebdf0dd373df1d7f4c8b5fe5f32c38dd7b7d48f750d34907c90427aa57a8ecb835f93beb3f613ce169b1fc0e92c543f1078d0553c893fb392de3babf0714dbae8b354baca7b1cfaead000e2053e5f091ec39c24b47be179d2cbf553f3066800e23733eddb3fb138a4a0c7113afa6d9459a6e7d51adba3f43b67f0110424a2a5e2968cb927c004790a7ee65f3ed313f20e299c2cd1ec5770be0475a039e04410c9b2577c46cfeae599b8a1a35903649be74b3f08f1f30dac56b2752bfd244fbcf557fb6b52d7a46c1748a74e0d93769039105814664e1f241cccae8bf21593376b66f1ba0531e6d6492b34cb8df5308520e2e97b25c2ca17716e5f4733bf25acc4855bebc806dbab9384b90f29d5e32d602b9b65415576d7df419f6d640de05a0157c13c306dd1d89b0d16dcb3d435220308bc3460c91cad5292484bd7c86c94f05b99be5a125105ad04ffc5ea71fd887c42bf269dafff015d19af937e63aedd661cb382487f3da0a87c16d4fde3c0511ea06007daf843d36cfb20931808358252e20a24c9f00a57e63dfbed1871e1c3315b221d72b46b9317d559b693c53522114dbc9abf2f6997feb895583e9258a4c32dbaf5bca56ffd14b29e60363a38554d001ffb0eab84db8b0c8ab69c81aa6cc78813c04573b35198ba3131ce63b4dd8b71ec3360d76e7d07b14fc61af5dc6971c0f2b7c41ea5b18988f9bb6b46aaf63803216f2aac7202f2de285c4830fc8b5e3b0d860b38acbe6ab7c7dfa05286dcdeac66fa179196d0d9955e40ad126605bb7c28ca4ce8203318d91279966cc3de48a1a4703cc2276eb85900f66d1fdc530bbe1c76926bdd10c8951f3b52c5b6bc467d2fe6649f87e3ca03080ed641e186954aac389f7d1fba30eae6cc4f8caf43a0a26f140deec66a6e8ccc19cf7c37560b233746ae09a39d3611d9ec5e663cda868615fc988fbf567328b76ee4f2ce53e5bd72611690993c63f40c886e96a33adc070b86256dde049debd3d95aa3de820c34e52ac6a29fc0337b2d9eeb3f278cf344314b8059ecbdc08f097004d265c2f727aebe1fb8482c717d5179b66f16a61bd94d3977aef43f7a3b2c52cedfe29231770c13522858d8b5680a158097edf1e359a6605daf94b3f70205d57316e2bfed26c0dd4826b5b3ad782150664049c17cbd263dfc23ce696e4d94a07ec6e1e4c1321cda42f6e998dd079044a582cc90d85799d48d6e0760958194391145e326d7d1d2714bdb67573559606c1cb69bf2de5686dc966155bab757b79a9084beb25c6ce6dfdd1a8c290ca6c8a3d22c1137b1a4e19158ff0f50a225d7c46e5bfea92d35bca3ac87910c6022bc25d293d03460a93fbae0444141a87ac8fa6c2ef7b1eb3c1ee68e79413b0fce7eebd1903621740659bf1ad10a75fe2f683600dcf268e82551b3ffebfd04932a35ad354a047700b3b25de"}, @nested={0x1004, 0x83, 0x0, 0x1, [@generic="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"]}]}, 0x201c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 10m12.444446659s ago: executing program 39 (id=9679): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000"], 0x7c}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 9m24.382395623s ago: executing program 40 (id=10104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, 0x0, 0x200002e6) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x8, 0x6, 0x700, 0x8, 0x100020}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x1a}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) 9m5.874915313s ago: executing program 41 (id=10455): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000003340)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r3, &(0x7f0000000380)="240000001e005f0214ff53c2ffccfff881ff0600000000000000000008000900ab336d61290dc3110c5d07e1bc3c1b889140301ab7fbee70fb1f2ebce39d68903458b1be896ee5da6c806adf7193716a19e481e937a9013a84f5da4c19ce11ede275c1d4c8769fb021f05f2b4a7f0812526eab2d7b362d7a81e41dc1da3afd17b70f23ef52686870be196d555bc98a141916378b4973c968bd51a3dfaf350688f5ce1654f6af3185049a26b102722f6ea145ad80c45c3dc87058e7da78aebdcbe72a9f2e4156722eccd6d392426e4be778797d6792f5cc451e9209621503394dade89d38a69f2b33011b", 0xea) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x19}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x88d4}, 0x40000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x464, 0x100, 0x70bd2c, 0x25dfdbfe, "ba46552ceb2a7e892a36d3596ec7cd77824b13f5097b3de854fe5c97a2fdd119d21418ba852d2785e1df04608864dc58a9b9427f13d280794bf4ce29b40dba0b18c7d7e60fff88105b767dd70ac5dec81d9dfddd874954e94a9a08368c98301f4d153aab2e784281ffab202629d62d4fd5b187caa4ff0a45f9510cf355e5e3", ["", "", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x40004}, 0x40050) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x48010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 6m54.938232159s ago: executing program 42 (id=12228): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0x20008010) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m34.004939305s ago: executing program 43 (id=12293): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008) (async, rerun: 32) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r3 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xf8, 0x0, 0x1, [@generic="e02b4221d3c744305fd369f30020dc8fcc58a362542a963097bf883548fe5ae164e5e6f4e0fb772aa1dc9e0330c9c8d1a98a1e02167abc021907e655c6053ebde9f7c472a7"]}]}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x2}, 0x800, 0x0, 0x1, 0x8, 0x6109, 0x3}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x430, 0x0, 0x130, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3f5e, 0x4, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x10, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) (async) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, r5, &(0x7f0000000100)=0x5, 0x81) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x10000, 0xd000, 0xc, 0x3, 0x81, 0x1, 0x6, 0x81, 0x3, 0x1, 0x97, 0x5}, {0x80a0000, 0x4000, 0xf, 0x64, 0x8, 0x8, 0x5, 0xf, 0x7, 0xfa, 0x4}, {0x4000, 0x4000, 0x10, 0x1, 0x7f, 0xf4, 0x2, 0x5, 0xcc, 0x0, 0xfa, 0x1}, {0x66eef000, 0x1000, 0x4, 0x5, 0xa1, 0x4d, 0x0, 0xad, 0xfc, 0xe8, 0x9, 0xf}, {0xd000, 0x9a072e4e954d7c76, 0xa, 0x5, 0x0, 0x0, 0x2b, 0xd8, 0x6a, 0x10, 0x80, 0x2}, {0xd000, 0xfffe6000, 0x1c, 0xff, 0x3, 0x6, 0x80, 0x7, 0x0, 0xff, 0x6, 0x2d}, {0x3000, 0xeeee0000, 0x8, 0x1f, 0x9, 0x5, 0x7f, 0x3, 0x6, 0xa6, 0x8, 0x8}, {0x1, 0x6000, 0x10, 0x3, 0x4, 0x46, 0x0, 0x4, 0x6, 0x4, 0x7, 0x1}, {0x0, 0xb}, {0xeeee8000, 0x8001}, 0x4, 0x0, 0x100000, 0x400, 0x7, 0xe900, 0x0, [0x3, 0x7fffffffffffffff, 0x100000000, 0xda35]}) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) 5m16.869404125s ago: executing program 7 (id=13314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd42037", 0x6e}], 0x1}}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='fuseblk\x00', &(0x7f0000000340)='\x10~\x04)qfssebl\x06k', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000000)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='{}\x00', &(0x7f00000001c0)='],/(^+\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) close_range(r0, 0xffffffffffffffff, 0x0) 5m16.786924237s ago: executing program 7 (id=13315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000007c0)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000100)=0xffff, 0x4) (async, rerun: 64) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000200)="c1", 0x1}], 0x1) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x0, 0x0) (async) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x38, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000010000, 0x8000000000000006, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffffc, 0x0, 0x68ff, 0x9, 0x0, 0x5], 0x1, 0x202}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 5m16.785045327s ago: executing program 7 (id=13316): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1b42, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x8003) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="66e625", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000007580)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x100, 0xe, 0x6, 0x7, 0xffffffff, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0xfffffffffffffffe, 0x6, {0x1, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0xfffffffffffffffe, 0x1, 0x1, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000007640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002040)=ANY=[@ANYBLOB="1030a9cb6d2684426a80bf70403ced033865e96c90459d658671c05f590e0d65", @ANYRES64=r2], 0x10) r3 = userfaultfd(0x80000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x654e9316b2da8cd8, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$BLKZEROOUT(r10, 0x127f, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x800) sendto(r7, &(0x7f0000000040)="de8269af", 0x4, 0x4000000, &(0x7f0000000080)=@in6={0xa, 0x4e24, 0x25be, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x80) sendfile(r4, r0, 0x0, 0x2fe4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @broadcast}) 5m16.663615109s ago: executing program 7 (id=13317): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000400)={[{@uid={'uid', 0x3d, r0}}], [{@obj_role={'obj_role', 0x3d, '9p\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'mountinfo\x00'}}]}) 5m7.146980634s ago: executing program 7 (id=13425): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x3}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30080068}, 0x4000810) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 5m6.997252107s ago: executing program 7 (id=13426): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="470f38f1bd080000002e460f35450f01c965360fc734a20f01cb470f060fc759223e0f7fcd0fdfb5a30000000f01f8", 0x2f}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000002200)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', r8, 0x700, 0x8000, 0x7, 0x2, {{0x2b, 0x4, 0x1, 0x7, 0xac, 0x68, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, {[@cipso={0x86, 0x19, 0x3, [{0x7, 0x11, "cb48a8dc0fff9556efbf75a45034f8"}, {0x5, 0x2}]}, @generic={0x89, 0x12, "0000fdffffff00000000004400000000"}, @noop, @timestamp_prespec={0x44, 0x4, 0xf1, 0x3, 0x8}, @rr={0x7, 0x17, 0x8e, [@broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @generic={0x94, 0x8, "6d3deaa30871"}, @rr={0x7, 0x17, 0x88, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0xb8, 0x0, 0xd, [0x0, 0x2, 0xa5c6, 0x319, 0xffffffff, 0xbd, 0x3, 0x200, 0x3]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x3000000, @mcast2, 0x2db}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r10 = socket(0x10, 0x3, 0x0) bind$bt_hci(r10, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 5m6.937009398s ago: executing program 44 (id=13426): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="470f38f1bd080000002e460f35450f01c965360fc734a20f01cb470f060fc759223e0f7fcd0fdfb5a30000000f01f8", 0x2f}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000002200)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', r8, 0x700, 0x8000, 0x7, 0x2, {{0x2b, 0x4, 0x1, 0x7, 0xac, 0x68, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, {[@cipso={0x86, 0x19, 0x3, [{0x7, 0x11, "cb48a8dc0fff9556efbf75a45034f8"}, {0x5, 0x2}]}, @generic={0x89, 0x12, "0000fdffffff00000000004400000000"}, @noop, @timestamp_prespec={0x44, 0x4, 0xf1, 0x3, 0x8}, @rr={0x7, 0x17, 0x8e, [@broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @generic={0x94, 0x8, "6d3deaa30871"}, @rr={0x7, 0x17, 0x88, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x28, 0xb8, 0x0, 0xd, [0x0, 0x2, 0xa5c6, 0x319, 0xffffffff, 0xbd, 0x3, 0x200, 0x3]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x2c}}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x3000000, @mcast2, 0x2db}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r10 = socket(0x10, 0x3, 0x0) bind$bt_hci(r10, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 4m36.857792483s ago: executing program 8 (id=13830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x8, 0x1, 0xe}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/185, 0xb9, 0x2, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 4m36.846257863s ago: executing program 8 (id=13831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20048000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) flock(r2, 0x8) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) stat(&(0x7f0000004b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000020c0)="bbf73d0c1e2044a11659f21eff48036983349dc43874210e104912bffb8f598101112dcc8dcf8700a489490d63", 0x2d}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) 4m36.714671786s ago: executing program 8 (id=13834): keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8120c2, 0x62) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60015}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x40, 0x6, 0xa8, {0xa8, 0x2, "74f880ed3af007d3d98a102ba95216e11825cf99f4740df849c29f4cfe7cc657f2843ea928040b08ef5db9779929b9c5b9d804bc0a935fd68b0d72d93f54f4899b64a2c3f338f40b6163d153b15020ed23fd931eb8fead5f4ec30881f4a6fd901f4fdbd00b2e2b75ae01d5f624a914d76dbe3518dba8b32a73eb38ac51c3526c1e0dd85a7dacb5550c0485350189c64948de725099b49f0856814129cf6b9c95feae57c1bdb2"}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x6, 0xf, "77271e35", "98971ba0"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8f, 0x8, 0x9, 0x9, 0x8, 0x6, 0x8}}}, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x20, 0x9, 0x6, "4d44f47e16b6"}, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a2ca"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x1a, 0x2}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x6d}, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r2}, @fd}, 0x0}}], 0x0, 0x0, 0x0}) 4m35.005398399s ago: executing program 8 (id=13854): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x1050404, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x40000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000000), 0x81, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0xfffffe35, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x48}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)}}], 0x1, 0x10140, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816"], 0x65) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x41) mknodat$loop(r4, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 4m34.822959612s ago: executing program 8 (id=13856): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xb8) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xb8) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) (async) 4m34.776486973s ago: executing program 8 (id=13860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) write$tun(r1, &(0x7f00000001c0)={@void, @val={0x1, 0x4, 0xbd, 0xe8, 0xd, 0xe}, @x25={0x2, 0x1, 0x1f, "a6ee3f4b2332d6d320897105928dd8506fd3dd2553861c860200fe204edf52f20c0740244778553e9caf5f4556c4e57daace44b9fc3185fa873aaa332a6748151d64f14002f9437671273cf5c846aac37e87a9a8c3fa515ea253fa850ed6f298"}}, 0x6d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xdffffffc, &(0x7f0000000300)=""/206, 0xce, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffff29, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 4m34.708549015s ago: executing program 45 (id=13860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x0) write$tun(r1, &(0x7f00000001c0)={@void, @val={0x1, 0x4, 0xbd, 0xe8, 0xd, 0xe}, @x25={0x2, 0x1, 0x1f, "a6ee3f4b2332d6d320897105928dd8506fd3dd2553861c860200fe204edf52f20c0740244778553e9caf5f4556c4e57daace44b9fc3185fa873aaa332a6748151d64f14002f9437671273cf5c846aac37e87a9a8c3fa515ea253fa850ed6f298"}}, 0x6d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xdffffffc, &(0x7f0000000300)=""/206, 0xce, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffff29, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 3m38.182071683s ago: executing program 9 (id=14447): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000500)={0xda, 0x0, 0x5}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x1d4051, r0, 0x22e7c000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000500)={0xda, 0x0, 0x5}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x1d4051, r0, 0x22e7c000) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) (async) 3m38.029753907s ago: executing program 9 (id=14449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x5}) 3m37.910684939s ago: executing program 9 (id=14452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) fsopen(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 3m37.806152941s ago: executing program 9 (id=14454): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 3m37.702383763s ago: executing program 9 (id=14456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) ioctl$RTC_PIE_ON(r2, 0x7005) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="640f226436260f01c4f00fbb2ac4e17c2e39b804fe00000f23c80f21f835080040000f23f8c744240076000000c744240238520000c7442406000000000f011424c4c1adfcab7a00000066baf80cb8fa267483ef66bafc0c66b8000066ef66baf80cb8281c5b88ef66bafc0ced0f789700000000", 0x74}], 0x0, 0x6c, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r6, 0x40044591, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m37.577417835s ago: executing program 9 (id=14459): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) 3m37.552763006s ago: executing program 46 (id=14459): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) 2m47.735071344s ago: executing program 4 (id=14959): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}, {@nfs_export_on}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) 2m47.615012517s ago: executing program 4 (id=14960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)=0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x2, 0xffff, {{0x12, 0x4, 0x3, 0x1c, 0x48, 0x68, 0x0, 0x48, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@generic={0xc0, 0x4, "f710"}, @ssrr={0x89, 0xf, 0x61, [@dev={0xac, 0x14, 0x14, 0x38}, @empty, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xcd, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x9}, {@private=0xa010102, 0x8}]}, @end, @end]}}}}}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x1}) 2m47.602860917s ago: executing program 4 (id=14961): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f0000008900)={0x27, 0x4c21, 0x1, @local, 0xc}, 0x1c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 2m46.707238844s ago: executing program 4 (id=14967): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0xffffffffffffff38, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000011e, 0x2100, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x1, 0xffffffff9084adc4, 0x0, 0x0, 0xa0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff040000000000"], 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={0x0}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r1, 0xffffffffffffffff, 0x0) 2m46.521342288s ago: executing program 4 (id=14970): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380)="05030006", 0x4, 0x0, &(0x7f0000000a80)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @random="0c5d4f602aff"}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r4, &(0x7f0000000300)) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000180)={'bridge_slave_1\x00', 0x120}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) (async) r8 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) (async) ioctl$TIOCGPTPEER(r7, 0x5441, 0x401) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f00000005c0)={0x4e00, 0x85, 0x730, 0xbdff, 0x15, "feeeff000000001b"}) (async) write$binfmt_aout(r9, &(0x7f0000000240)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) (async) r10 = syz_open_pts(r9, 0x8182) r11 = dup3(r10, r9, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x17) (async) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000740)=0xe) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m46.285177883s ago: executing program 4 (id=14971): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x870a}, {r2, 0xa21c}], 0x2, 0x0, 0x0, 0x45) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m46.230977084s ago: executing program 47 (id=14971): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x870a}, {r2, 0xa21c}], 0x2, 0x0, 0x0, 0x45) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m44.937612549s ago: executing program 5 (id=14982): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0xeeee0000, 0x108000, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) sendto$inet6(r4, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00020c0000000c0006d2"], 0x0, 0x0, 0x0}, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="2f615bb1320b8b64975f73392e832bcae1fa08983876eb1201f7d237ba2f1fc10afb8ce292e53b3df1700c3c36023639ac2e638a69a0a600220c1ec6e4b9bfa06c0053e90a81c3e22655c4ef78c8e5ab97f8688ab6d8c1a6389e9deb8b6ac6ed20df3c95ac080bb7203fc5c41a6a6b575d1011e22c4386242092cc763883229d1e390a31fd3aa2eb7a6ef6f88896d9049edc56381432d2202494b0afca2c89cc684271313a8cbe9196e131041094cb54c2320b8a0c7942d644d724167f91bd3012d29de8c46f9bd666944b5001c9", 0xce, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x101}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x3, {{0xa, 0x4e24, 0xa77, @remote, 0xf}}, 0x1, 0x2, [{{0xa, 0x4e23, 0xfa6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, {{0xa, 0x4e20, 0x2, @empty, 0x5}}]}, 0x190) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x40, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0xec, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m44.178952614s ago: executing program 5 (id=14988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) setresuid(0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdfffffffcde7edd340000000e000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0xa, 0x2e, 0xf, 0x6, 0xfffffffe, 0xfe3, 0x0, 0x151}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000200), 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/216, 0xd8}], 0x5, &(0x7f0000000500)=""/204, 0xcc}, 0xe}, {{&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/207, 0xcf}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/1, 0x1}], 0x3}, 0x8}], 0x2, 0x40002040, 0x0) (async) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000200), 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/216, 0xd8}], 0x5, &(0x7f0000000500)=""/204, 0xcc}, 0xe}, {{&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/207, 0xcf}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/1, 0x1}], 0x3}, 0x8}], 0x2, 0x40002040, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 2m44.028960356s ago: executing program 5 (id=14989): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8930, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x6000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x29, 0x1c000, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x2b, 0x3, 0x400, 0x4, 0x4, 0xf9e9, 0x80000000, 0x0, 0x0, 0x40, 0x9}}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 2m43.200211702s ago: executing program 5 (id=14995): select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2710}) syslog(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4040, 0x85) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0x84}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5489, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) chdir(&(0x7f00000001c0)='./bus\x00') stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000340)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x3040}, {0xffffffffffffffff, 0x2000}, {r0, 0x126}, {}], 0x4, 0x0, 0x0, 0x0) close(r1) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)) 2m42.30104537s ago: executing program 5 (id=15000): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x2, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) fallocate(r2, 0x0, 0x3, 0x10) chdir(0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2000002) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2000002) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xdffffffc, &(0x7f0000000300)=""/206, 0xce, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xdffffffc, &(0x7f0000000300)=""/206, 0xce, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 2m42.190441462s ago: executing program 5 (id=15001): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xfffd, 0x8, 0x1, 0x9d3}, 'syz0\x00', 0x21}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000140)=0x7fffffff, 0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) close_range(r2, r1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xc08c0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'team_slave_1\x00', 0x1}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000280)='syz0\x00') ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000002c0)={0xb, 0x3, 0x480}) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000300)={{r1}, "e6c3fa4a64b7475a3a8813f604cccfc8b9cd26ffa5a93f907e761e192a6df5a5170245688cf88a036527d2df89ae8d09695de31d28abda8978bd2851947b822d4091174ec19b127e1e23499cf87a96955802be3da32a4ab974a78040e84913fb794f3c9ad233868d00ac7b03b47f2945d7229af869012977d24fc98574738f3adb553989c37b271c043a98e563646e692f7173e48853d6c4e99f318c99afd9ed101bf6bbc8f624af572488a16a2c00b8b3c8db0b044ff696005725082a8563a2a869c125db97b8cb5c919da54f5b951fa9ea9f9729b42eb1be8b1566025704e59853ae90bd3bb466010dcdbb380df73f4ca117766b401305e3eeb83f7f56e46a5d79536a07a2ab37ea0d8590eeaa1400df2557c256a4d1ce81b897a98c7c615f81922ecc6fc80b37a96a3ddcfb0d09693bd3b721bdc291a4bc21fbb15a90db72a9df9b28fef9f1c8c7c111e618fdb16ebbe7a5112dd9c5b5a6560abfec0314a9bdacf27d3e8eb742a6faca77a761a2c48b3345d6061fd3774506e5a40bc9a32e400b8b3cd614081e923f88fed7c62a61f92acb4429a3413e48c0625c87db026435e537946ddc34ee0df110ae3fbbed54c0420b8f8ce1fcbb41acfb23c616439b4bdcbafff1b3defd79b9d8fcc346854220c4c12ab8f1589b3204e1e16cc5537114b163992d1cb12375b0f2f5b94e49e9eab50145e4f417efb78d7870247184f4dbc131808c093898684fc7e113eaa68e67c596480fc75d453cfad3d0c52b88272833dcc178f7db15804dd44fada209c2c84f40669945cf49b3af017f68244443d4ffd796d5a8ff5e867e0ff51c63ccb0efd18d3310e72091cfc425cea55c509832b63109c97533ff3db94c0f8bbbcbce77e3ab98267d1f35b9c514f4e59c07b9c6d09cd1cf9022389e18e56f5399d20c8b2328b4e8b19d81dbbb911c7959f36af210788ce03b225f62925d5bd71d715a67f323dbbfb895a9968e32f9f752b667a3fcdddec2126efd67bdafb0a2ef5c1abee5d423011a2bb14d423e4d6f528060985a4d85a6df0e5cd5cbe94445da2f82e28896eced04e19bc3a63d8ba4933b5a05e071ca3b08a36e133f2fe39d252a37bdb7cc35cf82a038f08e57f166768c4ff828eb72dfc892bad6daa0232c5b4a3212c7ca0676a7a899a196b4d6a6b288a11677dffea14dabd057806b3a8c606390e5ec7542d6e9ade24d3ebe8f4c01cd2a2a423c94d5bc1f0a9f55541479b95d2fbd897887ae9a44b4b8d462d98bed1a4c60a5b01b6132b5c8a0f7a20f01ef06438d7ef259946034de5a9aca40ff2e0c7cec274c26aeda7a6542eda2a9192bc8af519722a666a5f0c8b56c514a5eecc72e075a70616a76fb3ca46105da5b9a16419be9d3e3fe968ab4034d61bb79451e9c264a22ab380a38bdf0d54015139ab37a8b639f7628e71e571d38277120473f64681a1d04c821f3ef8dd3557c4692e7fb9d116ffdac38c4e51b0e63f5f9e0c1751477b6bee8ae8019f1c88b1a38ecb9ad13b953a4643763c5beb8bb0ce97fcc5fe37560f82227ca1e4a938c6d25ef9b725717bcc3f2b83d625ecff18fab10543f51166c014c0e8116321420d179f28f35f0c18a4b5c33015c0573261a3f02e185639a4bf17e89b0c5028c23107b94afe39ca10c4a60307b6978a2760a344633da426414c80193bebb5d6a90e6a3ccdffb4d795b5d0ece6c4a2968bb470569c3fa6583a0eb1c99a42e82027cdd052aba3e12b3f297df8aacb502b955eb766254dd1237bba27320ce29cde9bcb4544c52aac04eff0b5dd68b147981f2ba6f0704a68a03f07fb24a4780e97a93fe8e92a2a6588bf6dcbd5dcb897dc0cc4dcffdfa8bf87aef32101a352ba2cabe06e555fa7f5be99bb8d9145fcd5c2f16fb6db84d5107603ef98372943991a7fc01e71902afe87a624efc03c38dc4871e30016049a052c8e2f8cc962750a28db28eb4d54811f61e4b3b84ec4671a58a0687470641875ddc346a14efedd836a59652758a35f34c2ea0c1992723515cb663cac20336c55a7b9fae980c01d2e9e3dc036a97d618c6b8a6eab1af760bf91bf9dce771f7093d890e30192dd80b9f7e7c350162998184de0a4f86604e5d03e5db07ca20771ae4c3ce54c994524dada4c857db7da6e15c05904f02a8ff29c49729bce360c83fd20d75ade5d73bce011b2a0ce637b7563dacaa5624a213fded3bc5f1eb56c0a901c9ed6053b99a6fea839a28e7e63e9574cb5dedc89acf38790485384c04f221ca7d94d3c312d14fa39d452a952033d8b5a6d767e1a2cab171b9191d49277d6aca057e2a6feff250611a0465c3e85ce7b1c1c68e30907b435f0583ac6e754a5d89addc34e90405383a31a43e7300b35541b18098a277b5ab90f2b280d242ea1969ad26c3e964466de4e82488ba5e758edd173f9167d56e5fa1db738714bfd7282e32baf3f933c6a8201aec73cf77a6e7cbc8d56b631a89dd7fc598bc38e3e8fd1ccfd089d8362550e926f5579c7a0413bbf00d2f8445fdcbef23affd9d0e57e84670cd92e3c1635c93547ecc89c25b15b82d6a847b51216537bd632f76aa311cd9de98c6f0c9d195ff6a19cb1ba595d35cf361cdeb006e9c28406e118b3cc451cc2f6ed10e97c49d2236b9da859faeb370c988f2a94f264bd09657b4319ac7bddca52589b22823b42c04b8a8afecced6f6c0e13b883a7970102e67d362bd745561a1f4d6a966bb1e0d1e0c680269f5a5462466b64849d26267502c12f7c152bab680aa040b36b146538df39999d4f2d293cbfb23c7acf10af5031825e904fec857c00f0b288f2511ed5469285d5dd0ce467a6e3edf40a56c3226a2347a11ff04c3ff32e95a51f3c08315170e476dd7342bbd9069b1fc8881074df1b85ad3405e8f5a9fa53c8617e7aecb261a9574271ea1ed5b7f4259cd5d788d31663e80cb999fc75d83b2545dc0e3b3f365920f2bb6fbe42e1f263e26d47adb71e4ec93bf7a962b472a623d4d1b41f198498e311e20565d7f707a0ec088354bf29c3a4dde81c0e5766dc9e51d2866fba23eebe8f0046a86fc4a2cc52510eff2f6a3fe7095cf9fe42135f422aa64f3ab564fbaa152e821bf8fbc70799e35229357586df58abf23dbf829c81a9876ffac7bc1332a9907618ee78ba6d5e822006caa3cc1173fbcd811f66b13b9fc5325f969dc0e45ebb08a1d4f409ba4d285167000d89da8ba597b23af5843e578e09dd76515352d6741b54397d46110fc83b23596ea51328641e2528079cdf76a6d692cd5ab16d0611e76ceec067aabe6b9c322533bd96c9c55515be055b20802ed78650101dde46896617432c19e3b32dc857c702b487b0c4785cb6d07554c8f10fb6f320e5ef0a67a6ba35bcc7060083c3ff0ee3558e61a649023f06232dd6b54dcb3187c5e966397ae2b69f2bfeb4a54e5ca2b19e81c05cae3034cec13fd5a257a09bd12489443f2c300b20c3563bfd2a562bce18b7ef21f188f909e543416c06bdb6edcf71ba8fa89accda278ef66690c5760ac5cfae875ad87189ab4c9891526b8155a288fed367cba4d7ea68d290d818ccdcb99829b4c517ef3f9a657c2dfa323d90241934e007ee1d9f8a11647e030c9ea5cd688e81dc16047a20b12575011a6cf2fbf43051a0ddd754726bf025f718251beaf1498b8de85da1495a0bcd40d2c4ab198aa3ae3d0c09abf95577435141a997b13dde82b96945e8d1292fcb5f29d8bb89920b0380516341f03dece975dec288de19e4f35d40a4998538748b708660a83aa7f05bb52eca232bbff3be3e10e1956fc2a30025e0caf1c471cab2e08d82fbe2913d200ae1122732b3ad2d400eceda9a5070ed91e0b2b144a837f00c43dac4b12aa9e497d97000aac15bc4b0c5e78a829d69c69e0001a97879517cc64af954c954cff52fcaad1445fd9da79071d5b13cabe5e8c1a9def42a150f11db9d8db876dec6bbc0be13b6372458de573fa7c46f7cc5371dc760ba2133a8c468dab8b1d86708f49aba9ecee78f33457bdbbe29046feffdd2c0349890122122759da5e60049ac522d52ec676b86726d3450e05e8595204b6068018dda50e38120d7930cfa87a1e9e6f2d69bf9e0f16aeeb8888ddeb2062928a859002166d4c37c333973e5e43bcc504c111c44339410bd95ca1e4f046d556173241553bbdedb448e20ff73b64c0927791cd4e5879f831ab79047839365b58cc1c1878bfbb4bcd4433fb4b994b81797d7ad79b7553bfbef1b27304312d0e2f6d6df932e8176999ff24dad63f8d6d4b954af2d982d2eafd9690c97d689b16e2564997e542bafe5483c42fa3a80eb1218dccaa25a66023967f75b96706600b834b9c7f8f988905f8c1e1d67462a0c6dc1da918839179a4999eee58e7176fe63dd1c343a0b702085b0fd2160b1f34347c977981ef162b3094b326a6f7e2a0e716a1c9276cce7b47caf61e10467ba7538298e078baf4ecee68dbf7d607579097dffeb7d075d1f5602754bab74720f03a6f7000cdb6c218cdbdba14f24753f6fc9b4bdfd5a664ff0d4e38240d398e2b2aa616b1f2d6adb0f301cee25e22d424905626d51fe0e0542feacf36329d98ea6e616f013b1c568d52a8b96dc1ddeae8815684c6122b23bd0ac825fb361d8437e8611b109fb43124fb4ba8187bd7006f90cc57446639f52e00f3d6c54ef2913b9cc5f478bcc220158fff41706dd4aab7e8d02cb8e1f4a82561e7d42bc1cc11a5a9891a4ba62ca455d51256398a004aff09a6dd37419f19a9460949333aee3416c1e3e7a208a279917c0f786ae6e0ca7ec04f1a87bc223f0748e96c8fae13e34d5cf2f8dc2d9ab15b61bbc472650812cf182ff8a4828bf480337c1467145d77e7da4388eaa54868064d1de3374bfe4620ce6672b989cfd9d43f26971874f7e21819d2ca11558e0e8bd2525c3d0c668c92e131262f8f98e5e5c2007bfeb1069df2c2ff849094bdeff7031a7357131dbefa7cf9e7ff035289a2c515dc51ac1f20a7ad8617958a566464c8e424c6df2664598dff945d66da721fd8432db80fb73cc102075e2593beb3ee60ab6cda3e8828ed9468e10cf07c7d6be2d4323cbc07202c31654b0454564768e4529a472ff3f920d517f6137e8f430defd4363010ca8eb84a9ef1cf11c37204a7dc9912b1a38a4af9172c7e884b5d77e6ffd4a70e8fef7ca04e1cc4ac6283639ec75f25f7b473efd0a88f786bc523b753229d9be6c8a8d9ac36d911281405991ad26a6d4f2ccc5e24ab06cc8a5c4b71615df0f9436b327a9c66e0f4a89ffb0969f34c3e105797c92fba9bf17d230a5655c9716d84880ee0147a119ee98385d44e9ef85106099734d2c1b7540566b34f1e58d52a9e340ef86aedf9b4b5c56a56607f2ace99ff161d43f865ed3cef5572b3010932006e518effa4b18734138a6620a6268bdbe4dbcc1829dd7d057312e2d92fe29e78d672964e03691d294709d0149c41f419a6efa283b52c5e2f77135230094ed065b32ae182f12796c8afb33e5897ecb207103a1e84a2e3570906f272f77da2e70442df2610ed90e841a960ec76276f417cb946d74ccd06fdb95488e54b73f220f2085a1d78ebf435a4101bf8c9a95c289c31c8b280896d1bb141be4ba26305a45c83428e410c4e0f6f04edc781dac8d7da0de9f3cab7ed9c17e8a743f2d582fb51f4a4f3bc2896c88c2f7e6b11193bd775975726100d1e942ade04b95063050cae7df071775bab5c9d6e6c006d02902029e454dd5edda683848e9aaa7cf8989fc57b1830ef0d0aba7c4a7a28c50f"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x25, 0x4000, 0x27, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x1, 0x8, 0x1}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000013c0)={@mcast1, r5}, 0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001400), 0x2200, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001440)={0x3, 0x4, 0x1, 0x7, 0x16, "7bd4c65581d666c9898941e67b99ff9b4c460b"}) sendmsg(r1, &(0x7f0000001a80)={&(0x7f0000001480)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, 0x4}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001500)="7bdc141d7e2736b8e8e0cd5d5efbd38b5b5ff1433fd14f237f98039dc936a9f75c4448eb8bff87de86a0cff1377dc29da76d15aed1c4bcc4a4", 0x39}, {&(0x7f0000001540)="5eeeabe12aaca95f83f2bfd7ed44896ed277262acb2f3cdc89eab832d9094a4f10be87ed2a5791968e8887a709078edd4087d19b49580d5c939d82a1fca1ef32a8122ae14410eb65025fcdea299fce82ff02d0b7e2c37e77f70e23c86e8f29df029d7ed2383e692d69f601d16753ed7786b620d63ecdab205c06c722782776a2b9b2e27d2d496db534c96285d1953de2ca237af9260dde293656cc80bbb9f2fc3597fe8fada0d65647e435ee888097b9fe73ed820ae25c6190814412aaa8af7bead7525368d0f18ccb05d088677a1981905f2dd97c091d216b8e963aa6af61a72535d6e1754e2aa830dce9", 0xeb}, {&(0x7f0000001640)="8bd920c4879d9c50007082548bb65cf2b2e92c0ff35af5cd7d22cd65ef9bc85d3eabf16b9d29d19b24050bdf8f2e44eeb18cfff3a00b7ea88e19830d6e47cd838642e8b08402065a479ea04804d22132cc9e1c55205e9c7d18332fd3bd9b9b49088cd880a5a2b8e3dc881f749ac2553f9c1b0af5bf0689d154b47a647ed6b23e751acef0b1b920d567037821aa96ad448a4247b3aeeae3f6afc16fea7703f104a9fdf2b61c254f696e507daadf1f7b24b3a13aab93a72a9a9cd023b7bb8c94fe799c", 0xc2}], 0x3, &(0x7f0000001780)=[{0xc0, 0x1d, 0x1a, "3a16cc6002462c30b575af5557c97d3c7b2162e549e4f3cfcda255f747a714a7b8af8bac42e862b67b75b729fb9c9f6bff901024c9db848411ceddd499754c8111ec4c1084e33b9d2e80619f4faf11caf82b6741140f1e12e7e8f97c46a51806e6b9a32c4298780e124b1087d27efc6b70ebcdead230eedfd021507891a7e0474e45d29d28278a73f123041cdff3c7cbb12be9f7ec986189e335677a8461cf4f6243607adf4c8807dfae6e"}, {0x48, 0x10a, 0x6, "9757dffc8d86d955dddb10b16cf58c00c8b49d3c22caca184ff742f152425ff18c74a4e13652101d9761363bcf71b04b9508be"}, {0xf0, 0x10c, 0x3, "467f2a1cbedd7c3adf3318d9de5147642a74a08a986c3e3395f7c6a6575b73d22724be53a7572e6237d4f7c6aa30562c48cfb5890cb06d787141cd2286e1e5e179c2a31ba977ab4e278b493f4156d7f559b764041ccbcc51c11c7f2ede727ccd55978de34caa6b38f2a217e2bb85f66c129d76992c697958aa1f212123072531c37c3f286fba71455db4f44a95191ca9d30bfcb16aa94115002f433048bec72729df837c26db50130f39e99548d4f84fe78761bfc88e26d317ae336b74674e3f0a0d9076b96bad61333b9e33c4de30eb0d7a64db663f75375d58e33558500d"}, {0x20, 0x11c, 0x401, "d3b6c04f4412c3efe64b0eeb475a65"}, {0x30, 0x10c, 0x7ff, "316891d8ab6ceb9854ee40e2ca680ec021e414dab4f2e180dbbd5519ca"}, {0x90, 0x118, 0x1, "5d246135faae010b674bda3daeea190c196b68be56059d9c0557a29545d80d2ec2016d1db07e7a2d906259bc9941edd89ac8b945abd37e1381c74258fc00c2026fde92041e6b4050056c443b8161c1ffbfc7dad1afb4671a2633bb9e27e36de1fd1ff3daa63de685588f0d7f487edb8a4cb0551d94cf4c0a647cb2fd877a"}, {0x18, 0x6, 0xfffffffd, "9948a8c10b"}], 0x2f0}, 0x50880) r7 = syz_open_dev$loop(&(0x7f0000001ac0), 0x8000000000000001, 0x101000) ioctl$BLKCRYPTOPREPAREKEY(r7, 0xc040128b, &(0x7f0000001bc0)={&(0x7f0000001b00)="9f451c6eae7e160af314e793348510b287723ece33d315caf6c9f8e1c9ee47", 0x1f, &(0x7f0000001b40)=""/125, 0x7d}) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000001c00)={'ipvlan1\x00', 0x600}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c80)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000001d80)=0xe8) r9 = getegid() chown(&(0x7f0000001c40)='./file0\x00', r8, r9) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000021c0)=@filter={'filter\x00', 0xe, 0x3, 0x382, [0x0, 0x200000001e00, 0x200000001e30, 0x200000001f66], 0x0, &(0x7f0000001dc0), &(0x7f0000001e00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x5, 0x8847, 'veth0\x00', 'pimreg\x00', 'macvlan1\x00', 'veth1\x00', @remote, [0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xb6, 0x106, [], [@common=@ERROR={'ERROR\x00', 0x20, {"72989403f50f3ede9819e7fe4168f18419d6b248dbc34acf36a32a2b1d67"}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x8}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x9, 0x5, 0x9300, 'netdevsim0\x00', 'wg0\x00', 'pimreg0\x00', 'ip6gretap0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8}}, {0x9, 0x4, 0xf8, 'veth1_to_bond\x00', 'geneve1\x00', 'team_slave_1\x00', 'bond0\x00', @random="995a11c82dc9", [0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x11e, 0x14e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x226, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', {0x5}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}]}]}, 0x3fa) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002340)={r7, 0x9, 0xfffffffffffffffa, 0x6}) close_range(r4, r10, 0x2) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000002380)) epoll_create(0x0) 2m42.095066674s ago: executing program 48 (id=15001): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0xfffd, 0x8, 0x1, 0x9d3}, 'syz0\x00', 0x21}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000140)=0x7fffffff, 0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) close_range(r2, r1, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xc08c0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'team_slave_1\x00', 0x1}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000280)='syz0\x00') ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000002c0)={0xb, 0x3, 0x480}) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000300)={{r1}, "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"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x25, 0x4000, 0x27, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x1, 0x8, 0x1}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000013c0)={@mcast1, r5}, 0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001400), 0x2200, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000001440)={0x3, 0x4, 0x1, 0x7, 0x16, "7bd4c65581d666c9898941e67b99ff9b4c460b"}) sendmsg(r1, &(0x7f0000001a80)={&(0x7f0000001480)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, 0x4}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001500)="7bdc141d7e2736b8e8e0cd5d5efbd38b5b5ff1433fd14f237f98039dc936a9f75c4448eb8bff87de86a0cff1377dc29da76d15aed1c4bcc4a4", 0x39}, {&(0x7f0000001540)="5eeeabe12aaca95f83f2bfd7ed44896ed277262acb2f3cdc89eab832d9094a4f10be87ed2a5791968e8887a709078edd4087d19b49580d5c939d82a1fca1ef32a8122ae14410eb65025fcdea299fce82ff02d0b7e2c37e77f70e23c86e8f29df029d7ed2383e692d69f601d16753ed7786b620d63ecdab205c06c722782776a2b9b2e27d2d496db534c96285d1953de2ca237af9260dde293656cc80bbb9f2fc3597fe8fada0d65647e435ee888097b9fe73ed820ae25c6190814412aaa8af7bead7525368d0f18ccb05d088677a1981905f2dd97c091d216b8e963aa6af61a72535d6e1754e2aa830dce9", 0xeb}, {&(0x7f0000001640)="8bd920c4879d9c50007082548bb65cf2b2e92c0ff35af5cd7d22cd65ef9bc85d3eabf16b9d29d19b24050bdf8f2e44eeb18cfff3a00b7ea88e19830d6e47cd838642e8b08402065a479ea04804d22132cc9e1c55205e9c7d18332fd3bd9b9b49088cd880a5a2b8e3dc881f749ac2553f9c1b0af5bf0689d154b47a647ed6b23e751acef0b1b920d567037821aa96ad448a4247b3aeeae3f6afc16fea7703f104a9fdf2b61c254f696e507daadf1f7b24b3a13aab93a72a9a9cd023b7bb8c94fe799c", 0xc2}], 0x3, &(0x7f0000001780)=[{0xc0, 0x1d, 0x1a, "3a16cc6002462c30b575af5557c97d3c7b2162e549e4f3cfcda255f747a714a7b8af8bac42e862b67b75b729fb9c9f6bff901024c9db848411ceddd499754c8111ec4c1084e33b9d2e80619f4faf11caf82b6741140f1e12e7e8f97c46a51806e6b9a32c4298780e124b1087d27efc6b70ebcdead230eedfd021507891a7e0474e45d29d28278a73f123041cdff3c7cbb12be9f7ec986189e335677a8461cf4f6243607adf4c8807dfae6e"}, {0x48, 0x10a, 0x6, "9757dffc8d86d955dddb10b16cf58c00c8b49d3c22caca184ff742f152425ff18c74a4e13652101d9761363bcf71b04b9508be"}, {0xf0, 0x10c, 0x3, "467f2a1cbedd7c3adf3318d9de5147642a74a08a986c3e3395f7c6a6575b73d22724be53a7572e6237d4f7c6aa30562c48cfb5890cb06d787141cd2286e1e5e179c2a31ba977ab4e278b493f4156d7f559b764041ccbcc51c11c7f2ede727ccd55978de34caa6b38f2a217e2bb85f66c129d76992c697958aa1f212123072531c37c3f286fba71455db4f44a95191ca9d30bfcb16aa94115002f433048bec72729df837c26db50130f39e99548d4f84fe78761bfc88e26d317ae336b74674e3f0a0d9076b96bad61333b9e33c4de30eb0d7a64db663f75375d58e33558500d"}, {0x20, 0x11c, 0x401, "d3b6c04f4412c3efe64b0eeb475a65"}, {0x30, 0x10c, 0x7ff, "316891d8ab6ceb9854ee40e2ca680ec021e414dab4f2e180dbbd5519ca"}, {0x90, 0x118, 0x1, "5d246135faae010b674bda3daeea190c196b68be56059d9c0557a29545d80d2ec2016d1db07e7a2d906259bc9941edd89ac8b945abd37e1381c74258fc00c2026fde92041e6b4050056c443b8161c1ffbfc7dad1afb4671a2633bb9e27e36de1fd1ff3daa63de685588f0d7f487edb8a4cb0551d94cf4c0a647cb2fd877a"}, {0x18, 0x6, 0xfffffffd, "9948a8c10b"}], 0x2f0}, 0x50880) r7 = syz_open_dev$loop(&(0x7f0000001ac0), 0x8000000000000001, 0x101000) ioctl$BLKCRYPTOPREPAREKEY(r7, 0xc040128b, &(0x7f0000001bc0)={&(0x7f0000001b00)="9f451c6eae7e160af314e793348510b287723ece33d315caf6c9f8e1c9ee47", 0x1f, &(0x7f0000001b40)=""/125, 0x7d}) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000001c00)={'ipvlan1\x00', 0x600}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c80)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000001d80)=0xe8) r9 = getegid() chown(&(0x7f0000001c40)='./file0\x00', r8, r9) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000021c0)=@filter={'filter\x00', 0xe, 0x3, 0x382, [0x0, 0x200000001e00, 0x200000001e30, 0x200000001f66], 0x0, &(0x7f0000001dc0), &(0x7f0000001e00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x5, 0x8847, 'veth0\x00', 'pimreg\x00', 'macvlan1\x00', 'veth1\x00', @remote, [0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xb6, 0x106, [], [@common=@ERROR={'ERROR\x00', 0x20, {"72989403f50f3ede9819e7fe4168f18419d6b248dbc34acf36a32a2b1d67"}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0x8}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x9, 0x5, 0x9300, 'netdevsim0\x00', 'wg0\x00', 'pimreg0\x00', 'ip6gretap0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8}}, {0x9, 0x4, 0xf8, 'veth1_to_bond\x00', 'geneve1\x00', 'team_slave_1\x00', 'bond0\x00', @random="995a11c82dc9", [0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x11e, 0x14e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x226, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00', {0x5}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}]}]}, 0x3fa) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002340)={r7, 0x9, 0xfffffffffffffffa, 0x6}) close_range(r4, r10, 0x2) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000002380)) epoll_create(0x0) 2m34.219085017s ago: executing program 1 (id=15074): socket$nl_audit(0x10, 0x3, 0x9) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff", 0xe, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x6], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000098a3b32ccf064f11e343a3efd3b900fedbdf250e00000008000300442e31cc59e08e03955f7bf35009c92e80a47ecba73e6a8892c0bb9116ade6257876b81067de5f7fe1b6a29a9b5e10e2177763d425d5a27e9172502b05bf33a2b77c9eaea01cb0a2644e13ba9adabdba7ee8de4b171d73", @ANYRES32=0x0, @ANYBLOB="0c009900000000002a00000029000e000723d5b8bf7b2e2e4bcc258fe77cb3fc70490da57f352cdfdb51b2d837ee0e6b2e8020a155000000"], 0x54}}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = socket$key(0xf, 0x3, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0xfffffffa, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x400009, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x4, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0x9, 0x4, 0x8, 0x1, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffff9, 0xfffffffd, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x5bb, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) r11 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1000000239000100a6bd7000ffdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 2m33.982710802s ago: executing program 1 (id=15078): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f00000042c0)) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x4}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2m33.882536824s ago: executing program 1 (id=15081): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) 2m33.742932097s ago: executing program 1 (id=15083): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x14, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r7, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r7, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)=ANY=[], 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01009300"}) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[], 0x4fc}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 2m33.635058009s ago: executing program 1 (id=15085): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x821000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@verity_on}, {@index_off}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f00000029c0)={0x2020}, 0x2020) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000200), 0x1041, &(0x7f0000000240)={'trans=xen,', {[{@cache_mmap}, {@privport}, {@cache_fscache}, {@cache_readahead}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\xa5\\))'}}, {@appraise}]}}) 2m33.521893201s ago: executing program 1 (id=15087): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10052, r0, 0xb728a000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 2m33.447955292s ago: executing program 49 (id=15087): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10052, r0, 0xb728a000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) clock_gettime(0x6, &(0x7f0000000040)) 22.702673246s ago: executing program 3 (id=16770): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 22.623030368s ago: executing program 3 (id=16772): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000013c00)) syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x105002) (async) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x105002) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000340)=0x6) (async) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000340)=0x6) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="94c504ae8462c5d0a8ecfbdcf9a38e21c1e3c984f578b9d9acb74c545a34681ca0833c19e3120bca8e33066f72efe99fe4b85103a6dc6a7d8a3d5c01205987ce51da2298a954d144c225eaadfd22ea646b31650074f759f1fecab2217faf0f9256661ea49ee134eac1782601990553b95c9169a1100a026b4ba0", @ANYRES16=r2, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x8881) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r3, 0x5bc7000) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000380)=""/131) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000380)=""/131) 22.580750709s ago: executing program 3 (id=16774): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x4000c0, 0x94) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x800) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x2, 0x5, 0x8000000000000000, 0x1000000100000000, 0xfffffffffffffffd, 0x2ad, 0x0, 0x7]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f0000000000)=0x9) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="ba2100ed670f01c566b80500000066b9020000000f01d9f30f51fb9a6ed409010ff83ea59565260f01c9ee0ffc7f0066b8000000000f23c00f21f86635030009000f23f8", 0x44}], 0x1, 0x0, &(0x7f0000000140)=[@efer={0x2, 0x8800}], 0x1) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendfile(r9, r0, 0x0, 0x7ffff000) 22.466963211s ago: executing program 3 (id=16775): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d07389632a97a72304fe544d7ffcccc000000000000004ae5a9b61769853b9267b964f5b351da0298fdcad9f4bda6e601096f"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x1805406, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_pidfd_open(0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) sendfile(r0, r1, 0x0, 0xc) 21.883002353s ago: executing program 3 (id=16785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x290041, 0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x2000002b) (async, rerun: 32) mmap(&(0x7f0000651000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfdc4b000) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xe}, 0x2) (async) accept4(r3, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80, 0x800) (async) setsockopt$sock_int(r3, 0x1, 0x21, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x3000002, @mcast2, 0x1}, 0x1c) (async, rerun: 64) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) (rerun: 64) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 21.770993055s ago: executing program 3 (id=16788): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x189a01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r6) recvmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/4100, 0x1004}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f00000003c0)=""/148, 0x94}], 0x5}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'veth0_vlan\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0xffdd) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="4031025a665079b4"], 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x0, 0x2010, 0xffffffffffffffff, 0xffffc000) 9.180124136s ago: executing program 2 (id=16822): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000005c0)=0x8000000000000001, 0x8) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) 9.179577557s ago: executing program 6 (id=16823): syz_io_uring_setup(0x214a, &(0x7f0000000440)={0x0, 0x28cc, 0x2, 0x20, 0x23d}, 0x0, 0x0) 9.179099067s ago: executing program 0 (id=16824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200010001001a00002b0000", 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5a000a00bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605197f71174aa951f3", 0xb8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="b6a1", 0x2}], 0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 7.50305448s ago: executing program 2 (id=16825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$FIONCLEX(r0, 0x5450) socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, r0, 0x0) 7.50213722s ago: executing program 6 (id=16826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) (async) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 7.50161378s ago: executing program 0 (id=16827): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x505000, 0x158) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x61) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100)=0x4, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x18420004, 0xfffd, 0xfffe, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x7}}, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000240)='./file0\x00', 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x30, r1, 0x3a1e8000) read$FUSE(r4, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f00000022c0)={0x18, 0x0, r6, {0x10000}}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002340), r4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x28, r9, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000804) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r5) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000002680)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x148, r10, 0x208, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff833}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @local, 0x8}}}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000026c0)={0x0, {}, 0x0, {}, 0x1, 0x9, 0x12, 0x14, "72ec45791e1df5c997c2a9c9eeb7f6f8a56415185eb9584875db002b8d524f58ab50d36e90685217c152b8e482b7cf7a5deda7824804f43039fec7bcdd9d2549", "0a1e9467c9fcdeebcc37738c463cf09389c6226ea590aa6b647d23a5ea941087", [0x3, 0x136]}) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x7, &(0x7f0000002780), 0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x5, 0x110, r1, 0x9f477000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000027c0)={0x0, 0x0}) ptrace$PTRACE_SETSIGMASK(0x420b, r12, 0x8, &(0x7f0000002840)={[0x8]}) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f0000002880)={[0x1]}) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000002b40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002900)={0x1ec, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x1d8, 0x4, 0x0, 0x1, [{0x120, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x110, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_BITWISE_DATA={0x104, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x31, 0x1, "d375901c2f4498028b57cdff6b16c3cf72cf9744ed28f693d44268636df0fa9f0220ed773914e25be771a368f7"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x51df1dacf2b3071a}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000041}, 0x40) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000002b80)) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000002bc0), &(0x7f0000002c00)=0xc) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r11, 0xf507, 0x0) 5.815584764s ago: executing program 2 (id=16828): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r4, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r5, 0xffffffffffffffff, 0x0) 5.813750064s ago: executing program 6 (id=16829): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\b'], 0x16c}}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, r4}) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x2) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) (async) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x2}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) (async, rerun: 32) sendmsg(0xffffffffffffffff, 0x0, 0x4000) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = getpid() capget(&(0x7f0000002580)={0x19980330, r8}, &(0x7f00000025c0)={0x0, 0x2, 0x0, 0x4, 0x1, 0x101}) (async) mlockall(0x7) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5.812816754s ago: executing program 0 (id=16830): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) r2 = dup(r1) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000000)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.98607444s ago: executing program 2 (id=16831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setrlimit(0x7, &(0x7f0000000080)={0x6, 0xfff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendto$inet6(r2, &(0x7f0000000200)="2d1dce2bc50a25112559c96918069f18e22406f15523ada7bd5c1cac91b8059965b168e69d37a3f4e02170520ff05d88e1dc4769b05e2b72408608c713d3bbc7dd1b2fde0fa9d0c1e1dccaa4ea6e810f920c1d4084dfd8908f16fa886f05b6a5f982079bf3a57038df8c35e33cbb1adae7f8c93415bff054301584c4c360d76059f2a0c3a3e5655b8293a1fb3e5007a11c9fe113e08409cb7825d02f6691c7ad2d43095733ecb6fa96c555f3b87f8c4d98967566f00c0dd2a0cfe27dfa4f5a0c0dae8e8f51df5c98201138a0179f63d2047d3162", 0xd4, 0x4000880, &(0x7f0000000180)={0xa, 0x4e24, 0x6, @loopback, 0x8}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x4, 0x0, &(0x7f0000000ac0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f"}) r3 = socket(0x10, 0x803, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}, @increfs, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) 3.942990851s ago: executing program 6 (id=16832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x6, 0xd0, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x1, 0x10, 0xaa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x2, 0x1, "046381d35a4f1e93"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x8, 0x0, "ed"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x3, '\n'}, @as_header={0x7, 0x24, 0x1, 0xba, 0x6, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x40, 0x10, 0x9, {0x7, 0x25, 0x1, 0x0, 0x8, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x10, 0x4, 0x0, 0x1, "fff2ca6f5adb5907"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0x7, 0x7f, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x3, 0x3, 0x8, "", "1aef"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x6, 0x8, {0x7, 0x25, 0x1, 0x1, 0x12, 0x5}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x3, 0x8c, 0xac, 0xff, 0x7}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44e}}, {0xec, &(0x7f0000000500)=@string={0xec, 0x3, "d95f7615cb01f5b74f44491648bbba76047be3f474877669ada9a9f083a8bb0960abe47bab6159a911e17c59b4d5fbd2e130b2913436e759c83834f71ab99ac34969ce28a5f3cdbfc8d67f68652340a2bf439b7b13e20b32565695ab8144259923acbc30d92c14a2ab61807c2e76653f3789d1b88e8196612adb9b9d24b97f7ca9e8c75ff89ca7ad4b9fa60712502ad55e244a4ec88170af8623fda63aead6430331d4e9696f02fb83b06e1959df490aaa1377f5042be85cd0c1a4591bded46935bf4b4cb0561b2316597b381c1934c82b0334210ee8c626fe9499fce7672b889694ad05861cebcaf45b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x43f}}, {0x66, &(0x7f0000000640)=@string={0x66, 0x3, "f3b6993386362a1d5cc38bd6c0f7ac6098f2aab94dc7c8aa59507802598670832cd6ce593cc184d6ab35e021032f694d5796f4b90b2720ab24be82ca5ab612af3b2d2fda56c80fc26dfc36dc1ba88651e3a961162af0835c2ae6cb7e98782f8cd4081c95"}}, {0xf7, &(0x7f00000006c0)=@string={0xf7, 0x3, "ddeef2fb41bda99ffa657027052916dae918a90a1aff2763c75ee54a64b00013c81c8ccae0de7c66dc713c15c1569c066c12cd2000150fa5ff2601e47684c40e853ac661ed919153806379f57dd9ff42f31679f6ea68f1ce52fc1daf5ba2429399bcb5988565b743ef77c1789ec9cc2a50fe819c359cf0443959d127cf79f9129c2f744f45a203592e7fd5a2799dd79842649e0b90de778836dbd74ff70efa3b9c185c6804657ab32c43b7491857428033ef0be80b9ae95766a7aa656298d323d6593219621066a8900e605ba9de46e59b4b94f0b321e30bcb6197de2ff42b224ae2eed14d97cd15b2af02839fca832fb1f926f261"}}, {0xfd, &(0x7f00000007c0)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x44d}}, {0xf2, &(0x7f0000000980)=@string={0xf2, 0x3, "ba87ba1d9ec2edbd0ab16101742d6a81dff719b16531710750e5942263de4537f340e6993f3d0edb14c2b4363ac3ac9153aea47aa035018db0e82e087167878132c2c4f4c5aef8bdc5d6cf99f46906f702474ff5cad47b11fafaba4dc7a68686f4a440c01f85a16e02f5febf38b6d9073d8521de354d275c645647c24d2b9de1c45f9c2665cd7ac3bee12f15b3b1c9ef5e731be75f0bd237bef26a6ffdf4f04f5eae5b41512f61a4d782aa21ab48f67ac4563c80dbe6c8a075a169e8e8ace48700fbdfb138144c80dbd275a3256f5d87156a05e4f325ff2a5d4ca4d09f96914e386052a2093ec927aca4311c962e2989"}}]}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf25010000000000000001410000001800170000001a000000066574683a6772653000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2010}, 0x80) ppoll(&(0x7f0000000100)=[{r0, 0x870a}, {r1, 0xa21c}], 0x2, 0x0, 0x0, 0x45) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.942863541s ago: executing program 0 (id=16833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x42}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = inotify_init1(0x800) close(r1) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xc00) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 2.045461419s ago: executing program 2 (id=16834): syz_io_uring_setup(0x214a, &(0x7f0000000440)={0x0, 0x28cc, 0x2, 0x2000, 0x23d}, 0x0, 0x0) 2.041957799s ago: executing program 6 (id=16835): r0 = syz_open_pts(0xffffffffffffffff, 0xa0140) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) r1 = fsopen(&(0x7f0000000040)='romfs\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_fw={0x6030000000140000, &(0x7f0000000080)=0xfffffffffffffffd}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x10002, 0x0, [0xd8d, 0x0, 0x2, 0x3cc8, 0x9, 0x8, 0x1, 0x3a]}) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000180)=[@cpuid={0x14, 0x18, {0x2, 0xfffffff9}}, @cpuid={0x14, 0x18, {0x9, 0x9}}, @rdmsr={0x32, 0x18, {0xb7e}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @cpuid={0x14, 0x18, {0x800, 0x9}}, @code={0xa, 0x79, {"66ba2000b800000100ef66b80a018ed80f78f0400f008661210000f30f01ea440f01f848b800800000000000000f23d80f21f835000000000f23f8c744240022000000c744240243000000ff2c24c4c1ef5982faffffffb9d9090000b87e000000ba000000000f30"}}, @cpuid={0x14, 0x18, {0x3, 0x66}}, @cpuid={0x14, 0x18, {0x4, 0x2}}, @code={0xa, 0x57, {"0f20e035200000000f22e066baf80cb89c3ac188ef66bafc0ced66440f139a2b0b0a8166ba430066edc4c1f5760cee66b822000f00d0c4c299041341f8360f01ca1de1923a80"}}, @wr_crn={0x46, 0x20, {0x2, 0x8947}}, @cpuid={0x14, 0x18, {0x4, 0x9b2}}, @wrmsr={0x1e, 0x20, {0xaee, 0xffffffffffffff49}}], 0x1d8}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000003c0)="66b9660200000f32baf80c66b892655e8466efbafc0cb063ee66b8000000800f23c80f21f86635080050000f23f8ba210066ed670f01c5660f73d81c660f388049200f38c835f3dca209002e2ef30f09", 0x50}], 0x1, 0x20, &(0x7f0000000480)=[@cstype0={0x4, 0xc}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f00000004c0)={0x1, 0x4000}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "99ba2d6886daabbb5cb60a32e3a633de771fc78e7ab9f0db8f959b05839a92b6d2ce4fcee614c4ff787b61d6df4caf54fd1a64dcf5b43f065b0894e139cf708ca5305b08481baffe8e6969901ebf53b6d84fec95d170d416"}, 0x69) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000580)=0x20000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000005c0)={0xff, "80d8059053db66f077aec25cbb037f12992cf37572e487134f6d0b6ca91bbe9684984bd67ca94f4e4813dac8d58a39531b1c615c5f583cb654d0aebf1e2130bd2703338a7b913c6f34aea1c8703b8e05138e63d27df26b1036888fbe9932a2b52257d703459065c7ddc83362932e970fd6e5eb9feb73816501a911bd2f00dde9b0536df942c6ae4c887289433a62e5b9cb17c71f0a0136b959641e2767b32cad6d8cefedecf33f5d38f41fcfafc040fda0a24320114244733dc4b888f5234c20cbea19eef922970b126a95fd89049dc88e9ccc0a635987759a38d866c247e1d46108d33e0141de7322e5f6adc688ea6099322a493f85d34c1406e19bdc6ab49eeebf7ffcbcb276530fd0113507a070e9359ae869e14715b634d2dc1bbcfd2ff8641c0506d5d15ebcc6a0d23c306c2a374a14a6c542224d6d67299076b8785affaf3a995ba6ca3764557340b08f5c62d13885cf392e603beeed97229839a899b9aa07911abb7961eba1229626abacc30a45ee37261f75cbb96d22fec403be3e38a1e650835bb9e95668da03220d2ae426844758ca2da3c257daca008ef46f728d648fba6351ce0050e818c1c25f5f9d10632b8a5680865bd40b94063c4d07ab8921845eb1e8f99262776b3562007d41afd5443dc09fbceb9a48b4e7e85622bfcb31147677c5bf1091a87edf0b443a67a963dbc2c41a91d77a79a57f8964995639"}) syz_open_dev$evdev(&(0x7f0000000800), 0x10, 0x80040) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x802000, 0x40) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000880)=0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f00000008c0)={0x401, 0x3}) bind$inet6(r3, &(0x7f0000000900)={0xa, 0x4e20, 0x1000, @local}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) gettid() r8 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f0000000940)={0x7, 0x3}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000980)={0x2, 0x0, @pic={0x39, 0x9, 0xf4, 0x4, 0x2, 0x40, 0xf9, 0x9, 0x5, 0x8, 0x2, 0x4, 0xff, 0x6, 0x40, 0x57}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r10, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x6c}}]}, 0x50}}, 0x4805) 1.99900001s ago: executing program 0 (id=16836): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x428000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x10, r0, 0x4d45000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffb, @mcast2, 0x12}, 0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x43}, r4}}}], 0x28}}], 0x2, 0x4001c00) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x448c4) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="140048467d85e53029844a8a0aa8d146e8000001"], 0x14}, 0x1, 0x0, 0x0, 0x28802}, 0x80) (async) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r7, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00C'], 0x28}], 0x1}, 0x0) (async) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_DEV_CREATE(r10, 0x5501) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x6, 0x2, &(0x7f0000000080)) 2.60655ms ago: executing program 2 (id=16837): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='id_legacy\x00', 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "c35654047dcd7e64c2bd6d034b22982d0c3168570f6f2a20f73a87ea95c2aa928d4bed2230c1960412ea34708b5d4cbc0f7b74620d90aca5e526da050ccd0a44", 0x3a}, 0x48, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40982, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100025d7550406d04a1086402010203010902"], 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x30) 1.64456ms ago: executing program 6 (id=16838): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000006200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000400)=""/165, 0xa5}], 0x6, &(0x7f00000005c0)=""/223, 0xdf}, 0x9}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)=""/142, 0x8e}, {&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000540)=""/39, 0x27}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x9, &(0x7f0000000d40)=""/67, 0x43}, 0x6}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000dc0)=""/209, 0xd1}, {&(0x7f0000000ec0)=""/103, 0x67}, {&(0x7f0000000f40)=""/150, 0x96}, {&(0x7f0000001000)=""/39, 0x27}, {&(0x7f0000001040)}], 0x5, &(0x7f0000001100)=""/42, 0x2a}, 0x7dce94db}, {{&(0x7f0000002180)=@nfc, 0x80, &(0x7f0000002700)=[{&(0x7f0000002200)=""/150, 0x96}, {&(0x7f00000022c0)=""/147, 0x93}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/178, 0xb2}, {&(0x7f0000002500)=""/96, 0x60}, {&(0x7f0000002580)=""/93, 0x5d}, {&(0x7f0000002600)=""/79, 0x4f}, {&(0x7f0000002680)=""/90, 0x5a}], 0x8, &(0x7f0000002780)=""/80, 0x50}, 0x80000000}, {{&(0x7f0000002800)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002880)=""/142, 0x8e}, {&(0x7f0000002940)=""/99, 0x63}, {&(0x7f00000029c0)=""/101, 0x65}, {&(0x7f0000002a40)=""/101, 0x65}, {&(0x7f0000002ac0)=""/68, 0x44}, {&(0x7f0000002b40)=""/57, 0x39}, {&(0x7f0000002b80)=""/115, 0x73}, {&(0x7f0000002c00)=""/8, 0x8}], 0x8, &(0x7f0000002cc0)=""/45, 0x2d}, 0x8}, {{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000002d00)=""/101, 0x65}, {&(0x7f0000002d80)=""/241, 0xf1}, {&(0x7f0000002e80)=""/88, 0x58}, {&(0x7f0000002f00)=""/60, 0x3c}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/117, 0x75}, {&(0x7f0000004fc0)=""/4096, 0x1000}], 0x8, &(0x7f0000006040)=""/7, 0x7}}], 0x6, 0x63, &(0x7f0000006240)={r2, r3+10000000}) 0s ago: executing program 0 (id=16839): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x46}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) syz_io_uring_setup(0x214a, &(0x7f0000000440)={0x0, 0x28cc, 0x2, 0x2, 0x23d}, 0x0, 0x0) kernel console output (not intermixed with test programs): 26353][ T8075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.736322][ T8075] usb 6-1: config 0 descriptor?? [ 1278.832648][T13255] overlayfs: failed to clone upperpath [ 1278.872274][T13253] cgroup: Unknown subsys name 'obj_type' [ 1278.893484][T13257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13257 comm=syz.6.14855 [ 1279.154849][ T8075] konepure 0003:1E7D:2DB4.0068: unknown main item tag 0x0 [ 1279.162123][ T8075] konepure 0003:1E7D:2DB4.0068: unknown main item tag 0x0 [ 1279.171285][ T8075] konepure 0003:1E7D:2DB4.0068: item fetching failed at offset 2/4 [ 1279.179992][ T8075] konepure 0003:1E7D:2DB4.0068: parse failed [ 1279.186369][ T8075] konepure 0003:1E7D:2DB4.0068: probe with driver konepure failed with error -22 [ 1279.417589][T13248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1279.417623][T13248] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 1279.427352][T13248] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:294 [ 1279.441062][ T8075] usb 6-1: USB disconnect, device number 30 [ 1279.746071][T13294] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1279.765343][T13294] rust_binder: 1412: no such ref 3 [ 1279.772269][T13294] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 1279.772297][T13294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1279.781782][T13294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1412 [ 1279.919550][T13309] netlink: 'syz.6.14873': attribute type 4 has an invalid length. [ 1280.019978][T13312] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1280.343739][T13332] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 1280.763104][T13339] overlayfs: failed to clone upperpath [ 1280.794036][ T36] kauditd_printk_skb: 514 callbacks suppressed [ 1280.794055][ T36] audit: type=1400 audit(8000022932.954:236966): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1280.835068][ T36] audit: type=1400 audit(8000022932.974:236967): avc: denied { create } for pid=13343 comm="syz.6.14883" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1280.857864][ T36] audit: type=1400 audit(8000022932.984:236968): avc: denied { create } for pid=13343 comm="syz.6.14883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1280.877880][ T36] audit: type=1400 audit(8000022932.984:236969): avc: denied { ioctl } for pid=13343 comm="syz.6.14883" path="socket:[219252]" dev="sockfs" ino=219252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1280.925806][ T36] audit: type=1400 audit(8000022932.984:236970): avc: denied { sys_module } for pid=13343 comm="syz.6.14883" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1280.954280][ T36] audit: type=1400 audit(8000022932.994:236971): avc: denied { read write open } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1280.981073][ T36] audit: type=1400 audit(8000022932.994:236972): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1397 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1281.007944][ T36] audit: type=1400 audit(8000022933.043:236973): avc: denied { create } for pid=13345 comm="syz.6.14885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1281.023903][T13352] overlayfs: failed to clone upperpath [ 1281.030465][ T36] audit: type=1400 audit(8000022933.043:236974): avc: denied { write } for pid=13345 comm="syz.6.14885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1281.056052][ T36] audit: type=1400 audit(8000022933.043:236975): avc: denied { read } for pid=13345 comm="syz.6.14885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1281.080350][T13352] 9pnet_fd: Insufficient options for proto=fd [ 1281.347619][T13375] fuse: Bad value for 'group_id' [ 1281.353815][T13375] fuse: Bad value for 'group_id' [ 1281.360466][T13375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=13375 comm=syz.6.14893 [ 1281.464535][T13381] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14892'. [ 1281.561338][T13384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1281.561373][T13384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 1281.633581][T13387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 1281.814843][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14899'. [ 1282.889939][T32121] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1282.914877][T13412] tipc: Started in network mode [ 1282.919941][T13412] tipc: Node identity 4, cluster identity 4711 [ 1282.926128][T13412] tipc: Node number set to 4 [ 1283.050013][T32121] usb 6-1: Using ep0 maxpacket: 32 [ 1283.057898][T32121] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1283.066342][T32121] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1283.075623][T32121] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1283.084890][T32121] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1283.094759][T32121] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1283.104500][T32121] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1283.117505][T32121] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1283.126588][T32121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.138524][T32121] usb 6-1: config 0 descriptor?? [ 1283.358875][T32121] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1283.369806][T13425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1283.385011][T32121] usb 6-1: USB disconnect, device number 31 [ 1283.415037][T32121] usblp0: removed [ 1283.885535][T32121] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1284.036487][T32121] usb 6-1: Using ep0 maxpacket: 32 [ 1284.044148][T32121] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1284.053599][T32121] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1284.062242][T32121] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1284.071257][T32121] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1284.080934][T32121] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1284.090622][T32121] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1284.103679][T32121] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1284.112764][T32121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.122735][T32121] usb 6-1: config 0 descriptor?? [ 1284.542534][T32121] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1284.566577][T32121] usb 6-1: USB disconnect, device number 32 [ 1284.579292][T32121] usblp0: removed [ 1284.765476][T13451] syzkaller0: left promiscuous mode [ 1284.772502][T13451] syzkaller0: left allmulticast mode [ 1284.913360][T13460] syz_tun: tun_net_xmit 42 [ 1284.967582][T13463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13463 comm=syz.4.14922 [ 1284.995248][T13463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13463 comm=syz.4.14922 [ 1285.695023][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 1285.708468][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 1285.870814][ T36] kauditd_printk_skb: 696 callbacks suppressed [ 1285.870833][ T36] audit: type=1400 audit(8000022938.010:237672): avc: denied { read write } for pid=5284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1285.904629][ T36] audit: type=1400 audit(8000022938.010:237673): avc: denied { read write open } for pid=5284 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1285.944005][ T36] audit: type=1400 audit(8000022938.010:237674): avc: denied { ioctl } for pid=5284 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1285.997074][ T36] audit: type=1400 audit(8000022938.040:237675): avc: denied { create } for pid=13502 comm="syz.4.14932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1286.045716][ T36] audit: type=1400 audit(8000022938.040:237676): avc: denied { write } for pid=13502 comm="syz.4.14932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1286.069570][ T36] audit: type=1400 audit(8000022938.040:237677): avc: denied { read } for pid=13502 comm="syz.4.14932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1286.090351][ T36] audit: type=1400 audit(8000022938.040:237678): avc: denied { read } for pid=13502 comm="syz.4.14932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1286.112314][ T36] audit: type=1400 audit(8000022938.090:237679): avc: denied { read write } for pid=5284 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1286.138257][ T36] audit: type=1400 audit(8000022938.090:237680): avc: denied { read write open } for pid=5284 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1286.163510][ T36] audit: type=1400 audit(8000022938.090:237681): avc: denied { ioctl } for pid=5284 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1286.926106][T13524] loop7: detected capacity change from 0 to 16384 [ 1287.719735][T28903] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1287.719774][ T496] Bluetooth: hci0: command 0x1003 tx timeout [ 1288.536025][T13569] syzkaller0: entered promiscuous mode [ 1288.544314][T13569] syzkaller0: entered allmulticast mode [ 1288.561956][T13573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=13573 comm=syz.6.14953 [ 1288.645410][T13576] rust_binder: Failed copying into alloc: EFAULT [ 1288.645436][T13576] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 1288.651913][T13576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1288.661311][T13576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1348 [ 1289.183459][T13591] overlayfs: conflicting options: nfs_export=on,index=off [ 1289.245745][T13593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1289.499420][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14962'. [ 1290.156573][T13610] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1290.174193][T13610] usb usb8: usbfs: process 13610 (syz.5.14966) did not claim interface 0 before use [ 1290.205440][T13610] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1290.401786][ T61] rust_binder: 0: removing orphan mapping 0:4232 [ 1290.589273][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1290.597101][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1290.604773][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1290.612596][ T61] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1290.621578][ T61] rtc rtc0: __rtc_set_alarm: err=-22 [ 1290.772337][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.779541][T13621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.786614][T13621] bridge_slave_0: entered allmulticast mode [ 1290.793381][T13621] bridge_slave_0: entered promiscuous mode [ 1290.800722][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.807767][T13621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.814906][T13621] bridge_slave_1: entered allmulticast mode [ 1290.821823][T13621] bridge_slave_1: entered promiscuous mode [ 1290.923782][ T36] kauditd_printk_skb: 381 callbacks suppressed [ 1290.923800][ T36] audit: type=1400 audit(8000022943.030:238063): avc: denied { create } for pid=13625 comm="syz.5.14973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1290.950463][ T36] audit: type=1400 audit(8000022943.030:238064): avc: denied { ioctl } for pid=13625 comm="syz.5.14973" path="socket:[220631]" dev="sockfs" ino=220631 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1290.988334][ T36] audit: type=1400 audit(8000022943.089:238065): avc: denied { create } for pid=13621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1291.010136][ T36] audit: type=1400 audit(8000022943.089:238066): avc: denied { write } for pid=13621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1291.030073][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.032335][ T36] audit: type=1400 audit(8000022943.089:238067): avc: denied { read } for pid=13621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1291.038070][T13621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.060504][ T36] audit: type=1400 audit(8000022943.089:238068): avc: denied { read } for pid=13621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1291.066119][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.088917][ T36] audit: type=1400 audit(8000022943.089:238069): avc: denied { write } for pid=13621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1291.093797][T13621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.116082][ T36] audit: type=1400 audit(8000022943.099:238070): avc: denied { ioctl } for pid=13625 comm="syz.5.14973" path="socket:[220631]" dev="sockfs" ino=220631 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1291.151264][ T36] audit: type=1400 audit(8000022943.099:238071): avc: denied { create } for pid=13625 comm="syz.5.14973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1291.173969][ T36] audit: type=1400 audit(8000022943.099:238072): avc: denied { write } for pid=13625 comm="syz.5.14973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1291.195521][T21007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.203492][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.212123][T21007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.219174][T21007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.229776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.236855][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.314832][T13621] veth0_vlan: entered promiscuous mode [ 1291.350649][T13621] veth1_macvtap: entered promiscuous mode [ 1291.810702][T13648] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 1291.810728][T13648] rust_binder: Error while translating object. [ 1291.814906][T13650] binder: Unknown parameter '' [ 1291.819562][T13648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1291.830561][T13648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 1292.069805][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.083259][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.100846][T13651] bridge_slave_0: entered allmulticast mode [ 1292.109289][T13651] bridge_slave_0: entered promiscuous mode [ 1292.115601][T13663] netlink: 'syz.3.14983': attribute type 4 has an invalid length. [ 1292.127802][T13665] netlink: 'syz.3.14983': attribute type 4 has an invalid length. [ 1292.137298][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.147839][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.154980][T13651] bridge_slave_1: entered allmulticast mode [ 1292.161606][T13651] bridge_slave_1: entered promiscuous mode [ 1292.182799][T13668] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1292.203514][T13668] rust_binder: 1352: no such ref 2 [ 1292.209897][T13668] rust_binder: inc_ref_done called when no active inc_refs [ 1292.315589][T13675] netlink: 'syz.3.14986': attribute type 4 has an invalid length. [ 1292.334160][T13675] netlink: 'syz.3.14986': attribute type 4 has an invalid length. [ 1292.402625][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.409746][T13651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.417073][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.424132][T13651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.468928][T26202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.476229][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.497476][T26202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.504551][T26202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.515754][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.522850][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.601003][T13651] veth0_vlan: entered promiscuous mode [ 1292.628835][T32121] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1292.639625][T13651] veth1_macvtap: entered promiscuous mode [ 1292.759909][T13686] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14988'. [ 1292.789888][T32121] usb 4-1: Using ep0 maxpacket: 16 [ 1292.833499][T32121] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1292.846983][T13691] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1292.849998][T32121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.894788][T32121] usb 4-1: Product: syz [ 1292.899002][T32121] usb 4-1: Manufacturer: syz [ 1292.930464][T32121] usb 4-1: SerialNumber: syz [ 1292.948562][T32121] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1292.959249][T32121] r8152-cfgselector 4-1: config 0 descriptor?? [ 1292.968646][T32121] hub 4-1:0.0: bad descriptor, ignoring hub [ 1292.972931][T13695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13695 comm=syz.6.14990 [ 1292.974648][T32121] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1292.987701][T13695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13695 comm=syz.6.14990 [ 1293.169550][T32121] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1293.182120][T32121] r8152-cfgselector 4-1: bad CDC descriptors [ 1293.204065][T32121] r8152-cfgselector 4-1: USB disconnect, device number 62 [ 1293.838281][T13712] netlink: 'syz.5.14995': attribute type 4 has an invalid length. [ 1294.152649][T13717] 9pnet_fd: Insufficient options for proto=fd [ 1294.159518][ T490] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1294.214138][T13722] Invalid ELF header len 1 [ 1294.330321][ T490] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1294.342319][ T490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1294.353267][ T490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1294.363086][ T490] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1294.376044][ T490] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1294.385158][ T490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.394974][ T490] usb 4-1: config 0 descriptor?? [ 1294.608723][ T490] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0 [ 1294.619004][ T490] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving [ 1294.632513][ T490] plantronics 0003:047F:FFFF.0069: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1294.650850][ T13] bridge_slave_1: left allmulticast mode [ 1294.656555][ T13] bridge_slave_1: left promiscuous mode [ 1294.690569][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.716044][ T13] bridge_slave_0: left allmulticast mode [ 1294.730819][ T13] bridge_slave_0: left promiscuous mode [ 1294.736496][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.869154][ T490] usb 4-1: USB disconnect, device number 63 [ 1294.921313][ T13] veth1_macvtap: left promiscuous mode [ 1294.927410][ T13] veth0_vlan: left promiscuous mode [ 1295.081521][T13734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1295.081568][T13734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 1295.126876][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.144483][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.152702][T13728] bridge_slave_0: entered allmulticast mode [ 1295.160477][T13728] bridge_slave_0: entered promiscuous mode [ 1295.169293][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.177137][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.186173][T13728] bridge_slave_1: entered allmulticast mode [ 1295.194112][T13728] bridge_slave_1: entered promiscuous mode [ 1295.327388][T13739] kvm: pic: single mode not supported [ 1295.327408][T13739] kvm: pic: level sensitive irq not supported [ 1295.332914][T13739] kvm: pic: non byte read [ 1295.353525][T13739] kvm: pic: non byte read [ 1295.358242][T13739] kvm: pic: non byte read [ 1295.364148][T13739] kvm: pic: single mode not supported [ 1295.364163][T13739] kvm: pic: level sensitive irq not supported [ 1295.374926][T13739] kvm: pic: non byte read [ 1295.396656][T13743] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 1295.401655][T13739] kvm: pic: non byte read [ 1295.527584][T13751] syzkaller0: entered promiscuous mode [ 1295.533187][T13751] syzkaller0: entered allmulticast mode [ 1295.589381][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.596515][T13728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.603824][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.610924][T13728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.666725][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.695776][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.870841][T21007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.877967][T21007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.914789][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.921912][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.963024][ T36] kauditd_printk_skb: 720 callbacks suppressed [ 1295.963045][ T36] audit: type=1400 audit(8000022948.041:238793): avc: denied { mount } for pid=13770 comm="syz.6.15014" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1295.965906][T13771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1295.969322][ T36] audit: type=1400 audit(8000022948.041:238794): avc: denied { map } for pid=13770 comm="syz.6.15014" path="socket:[221845]" dev="sockfs" ino=221845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1296.041316][T13771] rust_binder: 31: no such ref 1 [ 1296.044522][ T36] audit: type=1400 audit(8000022948.041:238795): avc: denied { ioctl } for pid=13770 comm="syz.6.15014" path="/dev/binderfs/binder0" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1296.073217][ T36] audit: type=1400 audit(8000022948.091:238796): avc: denied { sys_module } for pid=13728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1296.108073][ T36] audit: type=1400 audit(8000022948.091:238797): avc: denied { sys_module } for pid=13728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1296.138109][ T36] audit: type=1400 audit(8000022948.101:238798): avc: denied { sys_module } for pid=13728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1296.175078][ T36] audit: type=1400 audit(8000022948.111:238799): avc: denied { sys_module } for pid=13728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1296.201507][T13777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 1296.261688][T13728] veth0_vlan: entered promiscuous mode [ 1296.262860][ T36] audit: type=1400 audit(8000022948.111:238800): avc: denied { sys_module } for pid=13728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1296.311368][T13780] overlayfs: overlapping lowerdir path [ 1296.314180][ T36] audit: type=1400 audit(8000022948.111:238801): avc: denied { read } for pid=13772 comm="syz.3.15015" name="binder0" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1296.343484][T13780] rust_binder: Failed copying into alloc: EFAULT [ 1296.343508][T13780] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 1296.351680][T13728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.353190][T13780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1296.388458][T13780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:57 [ 1296.425291][T13728] veth1_macvtap: entered promiscuous mode [ 1296.621993][T13794] binder: Unknown parameter 'smackfsdef' [ 1296.710730][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15024'. [ 1296.946264][T13806] rust_binder: Error in use_page_slow: ESRCH [ 1296.946289][T13806] rust_binder: use_range failure ESRCH [ 1296.967690][T13806] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 1296.975487][T13806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1296.993571][T13806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:69 [ 1297.190040][T13818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1297.219209][T13818] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15029'. [ 1297.262178][T13823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1297.262213][T13823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 1297.955638][T13852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1297.970217][T13852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 1298.182830][T13856] rust_binder: Write failure EFAULT in pid:78 [ 1298.206129][T13861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1298.212286][T13861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1372 [ 1299.063502][ T443] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1299.122486][T13884] rust_binder: Read failure Err(EAGAIN) in pid:89 [ 1299.128208][T13884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 1299.234392][ T443] usb 7-1: Using ep0 maxpacket: 32 [ 1299.252366][ T443] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1299.261200][ T443] usb 7-1: config 0 has no interface number 0 [ 1299.267380][ T443] usb 7-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 1299.277426][ T443] usb 7-1: config 0 interface 214 has no altsetting 0 [ 1299.287299][ T443] usb 7-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1299.296718][ T443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.304772][ T443] usb 7-1: Product: syz [ 1299.308979][ T443] usb 7-1: Manufacturer: syz [ 1299.313576][ T443] usb 7-1: SerialNumber: syz [ 1299.320264][ T443] usb 7-1: config 0 descriptor?? [ 1299.327258][T13873] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1299.539399][T13873] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1300.425592][T13899] rust_binder: 13899 RLIMIT_NICE not set [ 1300.433442][T32121] rust_binder: 13898: removing orphan mapping 0:1192 [ 1300.713033][T13912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13912 comm=syz.1.15056 [ 1300.725906][T13912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13912 comm=syz.1.15056 [ 1300.883044][T13919] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1300.883570][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1300.909554][T13919] SELinux: failed to load policy [ 1300.913868][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1300.928368][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1300.943049][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1300.954568][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 1300.965491][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 1300.986814][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 1300.999842][ T36] kauditd_printk_skb: 760 callbacks suppressed [ 1300.999861][ T36] audit: type=1400 audit(8000022953.055:239548): avc: denied { read } for pid=13921 comm="syz.1.15059" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1301.018085][T13922] input: syz0 as /devices/virtual/input/input116 [ 1301.035958][ T36] audit: type=1400 audit(8000022953.055:239549): avc: denied { read open } for pid=13921 comm="syz.1.15059" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1301.043568][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 1301.092239][ T36] audit: type=1400 audit(8000022953.055:239550): avc: denied { read write } for pid=13921 comm="syz.1.15059" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.114108][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1301.135186][ T36] audit: type=1400 audit(8000022953.055:239551): avc: denied { read write open } for pid=13921 comm="syz.1.15059" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.160397][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1301.171387][ T36] audit: type=1400 audit(8000022953.055:239552): avc: denied { read write } for pid=13921 comm="syz.1.15059" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.195585][ T36] audit: type=1400 audit(8000022953.055:239553): avc: denied { read write open } for pid=13921 comm="syz.1.15059" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.220538][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1301.221016][ T36] audit: type=1400 audit(8000022953.055:239554): avc: denied { ioctl } for pid=13921 comm="syz.1.15059" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.231677][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1301.256870][ T36] audit: type=1400 audit(8000022953.055:239555): avc: denied { ioctl } for pid=13921 comm="syz.1.15059" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.275388][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1301.294202][ T36] audit: type=1400 audit(8000022953.055:239556): avc: denied { ioctl } for pid=13921 comm="syz.1.15059" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1301.305659][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1301.329632][ T36] audit: type=1400 audit(8000022953.115:239557): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=1531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1301.363619][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1301.365130][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1301.375781][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1301.393231][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1301.404821][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1301.415935][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1301.427212][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1301.438455][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1301.449691][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1301.460844][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1301.495968][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1301.514825][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1301.540436][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1301.556653][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1301.566302][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1301.576268][ T31] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 1301.587320][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1301.595970][ T31] usb 2-1: config 0 has no interface number 0 [ 1301.603813][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1301.624620][ T443] ax88179_178a 7-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1301.624726][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=b7.96 [ 1301.642519][T13928] 9pnet_fd: Insufficient options for proto=fd [ 1301.653257][ T443] ax88179_178a 7-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.6-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 6a:a8:48:66:bf:2c [ 1301.668398][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.688731][ T31] usb 2-1: Product: syz [ 1301.689823][ T443] usb 7-1: USB disconnect, device number 101 [ 1301.692932][ T31] usb 2-1: Manufacturer: syz [ 1301.708184][ T31] usb 2-1: SerialNumber: syz [ 1301.710995][ T443] ax88179_178a 7-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.6-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1301.715058][ T31] usb 2-1: config 0 descriptor?? [ 1301.901741][T13933] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49021 sclass=netlink_xfrm_socket pid=13933 comm=syz.6.15063 [ 1301.925741][T13094] udevd[13094]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1301.964919][T13938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1301.992812][T13940] overlayfs: workdir and upperdir must be separate subtrees [ 1302.008085][ T443] usb 2-1: USB disconnect, device number 28 [ 1302.191682][T13950] syzkaller0: entered promiscuous mode [ 1302.200573][T13952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13952 comm=syz.3.15065 [ 1302.202349][T13950] syzkaller0: entered allmulticast mode [ 1302.249450][T13952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13952 comm=syz.3.15065 [ 1302.305905][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15069'. [ 1302.538827][T26202] syzkaller0: tun_net_xmit 76 [ 1302.543726][T26202] syzkaller0: tun_net_xmit 48 [ 1302.586859][ T443] syzkaller0: tun_net_xmit 76 [ 1302.621300][T13970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1302.621381][T13970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 1302.733227][T13975] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15074'. [ 1302.967854][T13985] rust_binder: Write failure EFAULT in pid:56 [ 1303.224188][ T443] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1303.390114][ T443] usb 7-1: Using ep0 maxpacket: 8 [ 1303.402829][ T443] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1303.424055][ T443] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1303.441876][ T443] usb 7-1: can't read configurations, error -61 [ 1303.507741][T26202] bridge_slave_1: left allmulticast mode [ 1303.519231][T26202] bridge_slave_1: left promiscuous mode [ 1303.525673][ T31] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1303.541911][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.559365][T26202] bridge_slave_0: left allmulticast mode [ 1303.565059][T26202] bridge_slave_0: left promiscuous mode [ 1303.574254][T26202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.581535][ T443] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1303.686438][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1303.694539][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.706849][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1303.716812][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1303.726714][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1303.746707][ T443] usb 7-1: Using ep0 maxpacket: 8 [ 1303.759674][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1303.764553][ T443] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1303.768825][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1303.781629][ T443] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1303.784544][ T31] usb 4-1: SerialNumber: syz [ 1303.792262][T26202] veth1_macvtap: left promiscuous mode [ 1303.805536][T14004] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1303.814223][ T443] usb 7-1: can't read configurations, error -61 [ 1303.820672][T26202] veth0_vlan: left promiscuous mode [ 1303.822792][T14004] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1303.833759][ T443] usb usb7-port1: attempt power cycle [ 1303.844910][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 1303.853372][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1303.971717][T14015] syzkaller0: entered promiscuous mode [ 1303.977256][T14015] syzkaller0: entered allmulticast mode [ 1304.032068][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.039159][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.046371][T14013] bridge_slave_0: entered allmulticast mode [ 1304.053640][T14013] bridge_slave_0: entered promiscuous mode [ 1304.053775][T14004] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1304.062873][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.067323][T14004] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1304.074922][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.088747][T14013] bridge_slave_1: entered allmulticast mode [ 1304.095228][T14013] bridge_slave_1: entered promiscuous mode [ 1304.178791][ T443] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1304.210065][ T443] usb 7-1: Using ep0 maxpacket: 8 [ 1304.219101][ T443] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1304.231196][ T443] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1304.239290][ T443] usb 7-1: can't read configurations, error -61 [ 1304.270109][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.277204][T14013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.284516][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.291571][T14013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.365723][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.372998][ T443] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1304.381229][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.398800][T26202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.405892][T26202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.420711][ T443] usb 7-1: Using ep0 maxpacket: 8 [ 1304.434254][ T443] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1304.447593][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.450121][ T443] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1304.454669][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.471254][ T443] usb 7-1: can't read configurations, error -61 [ 1304.478124][ T443] usb usb7-port1: unable to enumerate USB device [ 1304.499994][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1304.531212][ T31] usb 4-1: USB disconnect, device number 64 [ 1304.641821][T14013] veth0_vlan: entered promiscuous mode [ 1304.657160][T14030] rust_binder: Error while translating object. [ 1304.657209][T14030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1304.664364][T14030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1402 [ 1304.702989][T14013] veth1_macvtap: entered promiscuous mode [ 1304.920933][T14044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14044 comm=syz.2.15088 [ 1304.944953][T14044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=14044 comm=syz.2.15088 [ 1305.100616][ T383] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1305.123424][ T383] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1305.130981][ T383] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1305.149389][ T383] hid-generic 0003:0004:0000.006A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1305.190971][T14050] __vm_enough_memory: pid: 14050, comm: syz.3.15097, bytes: 18014402804453376 not enough memory for the allocation [ 1305.363556][T14059] 9pnet_fd: Insufficient options for proto=fd [ 1305.675777][ T61] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1305.736090][ T31] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1305.828544][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.839500][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.849301][ T61] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1305.862308][ T61] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1305.871432][ T61] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.881130][ T61] usb 4-1: config 0 descriptor?? [ 1305.901944][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 1305.911528][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.922826][ T31] usb 3-1: config 0 descriptor?? [ 1306.045464][ T36] kauditd_printk_skb: 919 callbacks suppressed [ 1306.045485][ T36] audit: type=1400 audit(8000022958.071:240477): avc: denied { read } for pid=14067 comm="syz.6.15103" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1306.094221][ T36] audit: type=1400 audit(8000022958.071:240478): avc: denied { read open } for pid=14067 comm="syz.6.15103" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1306.121195][ T36] audit: type=1400 audit(8000022958.081:240479): avc: denied { ioctl } for pid=14067 comm="syz.6.15103" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1306.146680][ T36] audit: type=1400 audit(8000022958.081:240480): avc: denied { mounton } for pid=14067 comm="syz.6.15103" path="/38/bus" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1306.169422][ T36] audit: type=1400 audit(8000022958.101:240481): avc: denied { unlink } for pid=14067 comm="syz.6.15103" name="#197" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1306.192311][ T36] audit: type=1400 audit(8000022958.111:240482): avc: denied { mount } for pid=14067 comm="syz.6.15103" name="/" dev="overlay" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1306.215857][ T36] audit: type=1400 audit(8000022958.111:240483): avc: denied { write } for pid=14067 comm="syz.6.15103" name="netstat" dev="proc" ino=4026533746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1306.239615][ T36] audit: type=1400 audit(8000022958.111:240484): avc: denied { write } for pid=14067 comm="syz.6.15103" path="/proc/120/net/netstat" dev="proc" ino=4026533746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1306.264309][ T36] audit: type=1400 audit(8000022958.111:240485): avc: denied { create } for pid=14067 comm="syz.6.15103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1306.284556][ T36] audit: type=1400 audit(8000022958.111:240486): avc: denied { setopt } for pid=14067 comm="syz.6.15103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1306.339929][ T31] wacom 0003:056A:0044.006B: Unknown device_type for 'HID 056a:0044'. Assuming pen. [ 1306.350111][ T61] plantronics 0003:047F:FFFF.006C: No inputs registered, leaving [ 1306.351496][ T31] wacom 0003:056A:0044.006B: hidraw1: USB HID v1.01 Device [HID 056a:0044] on usb-dummy_hcd.2-1/input0 [ 1306.373411][ T61] plantronics 0003:047F:FFFF.006C: hiddev96,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1306.388215][ T31] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0044.006B/input/input117 [ 1306.548706][ T61] usb 3-1: USB disconnect, device number 92 [ 1306.629647][ T490] usb 4-1: USB disconnect, device number 65 [ 1307.051623][T14075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14075 comm=syz.6.15104 [ 1307.064507][T14075] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=14075 comm=syz.6.15104 [ 1307.441654][T14091] virtiofs: Unknown parameter 'always' [ 1307.451668][T14091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1307.451705][T14091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 1307.573528][T32121] rust_binder: 14092: removing orphan mapping 0:4232 [ 1307.845650][ T61] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1308.006695][ T61] usb 4-1: Using ep0 maxpacket: 8 [ 1308.031292][ T61] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1308.048096][ T61] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 1308.061371][ T61] usb 4-1: config 6 has no interface number 0 [ 1308.068345][ T61] usb 4-1: config 6 interface 248 has no altsetting 0 [ 1308.079763][ T61] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1308.089319][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.110045][ T61] usb 4-1: Product: syz [ 1308.118631][ T61] usb 4-1: Manufacturer: syz [ 1308.125975][T14112] pim6reg1: entered promiscuous mode [ 1308.127653][ T61] usb 4-1: SerialNumber: syz [ 1308.132814][T14112] pim6reg1: entered allmulticast mode [ 1308.358994][ T61] ums-karma 4-1:6.248: USB Mass Storage device detected [ 1308.433241][ T61] usb 4-1: USB disconnect, device number 66 [ 1308.585083][T21007] syzkaller0: tun_net_xmit 76 [ 1308.591066][T21007] syzkaller0: tun_net_xmit 48 [ 1308.596060][T14126] syzkaller0: create flow: hash 2956008892 index 1 [ 1308.607068][T14126] syzkaller0: delete flow: hash 2956008892 index 1 [ 1308.637048][T14124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1308.637075][T14124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1421 [ 1308.780344][T21007] syzkaller0: tun_net_xmit 76 [ 1308.798845][T14132] syzkaller0: create flow: hash 2956008892 index 1 [ 1308.809758][T21007] syzkaller0: tun_net_xmit 48 [ 1308.814607][ T61] syzkaller0: tun_net_xmit 76 [ 1308.830032][T14132] syzkaller0: delete flow: hash 2956008892 index 1 [ 1309.037112][T14146] syzkaller0: create flow: hash 2956008892 index 1 [ 1309.041302][ T334] syzkaller0: tun_net_xmit 76 [ 1309.051919][ T334] syzkaller0: tun_net_xmit 48 [ 1309.059564][T14146] syzkaller0: delete flow: hash 2956008892 index 1 [ 1309.219238][T14160] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1309.312356][ T61] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1309.475885][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 1309.497683][ T61] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1309.514969][ T61] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1309.542591][ T61] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1309.586217][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1309.613498][ T61] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1309.643601][ T61] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1309.669833][ T61] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1309.690737][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.717260][ T61] usb 3-1: config 0 descriptor?? [ 1309.777669][T14188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1309.844067][ T31] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1309.853509][ T31] hid-generic 0000:0000:0000.006D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1309.919166][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15142'. [ 1309.946967][ T61] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1309.963595][T14193] netlink: 'syz.0.15141': attribute type 4 has an invalid length. [ 1309.974635][T14193] netlink: 'syz.0.15141': attribute type 4 has an invalid length. [ 1309.989574][ T61] usb 3-1: USB disconnect, device number 93 [ 1310.029045][ T61] usblp0: removed [ 1310.160582][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.180073][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.410034][ T31] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 1310.427092][ T31] hid-generic 0000:0000:0000.006E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1310.547953][ T490] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1310.599477][T14220] rust_binder: Error while translating object. [ 1310.599528][T14220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1310.605748][T14220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:55 [ 1310.718231][ T490] usb 7-1: Using ep0 maxpacket: 8 [ 1310.806338][ T490] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1310.838519][ T490] usb 7-1: config 179 has no interface number 0 [ 1310.858319][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1310.892827][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1310.925458][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1310.967819][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1310.999596][T14229] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1311.013093][ T490] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1311.026672][T14229] rust_binder: Write failure EINVAL in pid:151 [ 1311.026749][ T490] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1311.063076][ T490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.080171][ T36] kauditd_printk_skb: 806 callbacks suppressed [ 1311.080190][ T36] audit: type=1400 audit(8000022963.089:241293): avc: denied { map } for pid=14230 comm="syz.2.15150" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1311.103475][T14210] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1311.180173][ T36] audit: type=1400 audit(8000022963.109:241294): avc: denied { ioctl } for pid=14209 comm="syz.6.15144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.217232][T14241] incfs: Options parsing error. -22 [ 1311.228016][T14241] incfs: mount failed -22 [ 1311.250482][ T36] audit: type=1400 audit(8000022963.109:241295): avc: denied { ioctl } for pid=14209 comm="syz.6.15144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.286026][ T36] audit: type=1400 audit(8000022963.109:241296): avc: denied { ioctl } for pid=14209 comm="syz.6.15144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.311390][ T36] audit: type=1400 audit(8000022963.109:241297): avc: denied { read } for pid=14230 comm="syz.2.15150" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1311.335670][ T36] audit: type=1400 audit(8000022963.129:241298): avc: denied { ioctl } for pid=14209 comm="syz.6.15144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.361532][ T36] audit: type=1400 audit(8000022963.129:241299): avc: denied { ioctl } for pid=14209 comm="syz.6.15144" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.388465][ T36] audit: type=1400 audit(8000022963.139:241300): avc: denied { read write } for pid=14235 comm="syz.3.15151" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.431858][ T36] audit: type=1400 audit(8000022963.139:241301): avc: denied { read write open } for pid=14235 comm="syz.3.15151" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1311.506907][ T36] audit: type=1400 audit(8000022963.139:241302): avc: denied { read write } for pid=14235 comm="syz.3.15151" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1312.003703][ T61] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1312.174369][ T61] usb 4-1: Using ep0 maxpacket: 8 [ 1312.182886][ T61] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1312.193025][ T61] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 1312.201333][ T61] usb 4-1: config 6 has no interface number 0 [ 1312.207525][ T61] usb 4-1: config 6 interface 248 has no altsetting 0 [ 1312.217486][ T61] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1312.226652][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.234711][ T61] usb 4-1: Product: syz [ 1312.238935][ T61] usb 4-1: Manufacturer: syz [ 1312.243579][ T61] usb 4-1: SerialNumber: syz [ 1312.726517][T14273] netlink: 288 bytes leftover after parsing attributes in process `syz.2.15164'. [ 1313.065966][T14281] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 1313.261239][T14292] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1313.300274][ T490] usb 7-1: USB disconnect, device number 106 [ 1313.300318][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1313.314741][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1313.380835][T14297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1313.380889][T14297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:173 [ 1313.429388][T14299] netlink: 'syz.0.15172': attribute type 4 has an invalid length. [ 1313.456345][T14299] netlink: 'syz.0.15172': attribute type 4 has an invalid length. [ 1314.013766][ T31] hid-generic 0003:0004:0000.006F: unknown main item tag 0x0 [ 1314.029817][ T31] hid-generic 0003:0004:0000.006F: unknown main item tag 0x0 [ 1314.050514][ T31] hid-generic 0003:0004:0000.006F: unknown main item tag 0x0 [ 1314.072729][ T31] hid-generic 0003:0004:0000.006F: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 1314.256545][T14307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1314.265128][T14308] rust_binder: 14308 RLIMIT_NICE not set [ 1314.308761][ T497] rust_binder: 14306: removing orphan mapping 0:1192 [ 1314.479530][T14314] bpf: Bad value for 'uid' [ 1314.504155][ T61] ums-karma 4-1:6.248: USB Mass Storage device detected [ 1314.517278][T14313] rust_binder: 14312 RLIMIT_NICE not set [ 1314.522654][T14313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.537687][T14313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.636385][ T61] usb 4-1: USB disconnect, device number 67 [ 1314.650417][T12919] udevd[12919]: setting mode of /dev/bus/usb/004/067 to 020664 failed: No such file or directory [ 1314.672119][T12919] udevd[12919]: setting owner of /dev/bus/usb/004/067 to uid=0, gid=0 failed: No such file or directory [ 1314.850965][T14325] netlink: 'syz.3.15181': attribute type 6 has an invalid length. [ 1314.920853][ T31] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 1314.930094][ T31] hid-generic 0000:0000:0000.0070: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1315.209258][T14336] fido_id[14336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1315.348668][T14345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1315.348708][T14345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 1315.395662][T14344] overlay: ./file0 is not a directory [ 1315.746856][T14353] input: syz1 as /devices/virtual/input/input122 [ 1316.133095][ T36] kauditd_printk_skb: 624 callbacks suppressed [ 1316.133115][ T36] audit: type=1400 audit(8000022968.118:241927): avc: denied { execmem } for pid=14364 comm="syz.3.15192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1316.183228][ T36] audit: type=1400 audit(8000022968.168:241928): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1316.233130][ T36] audit: type=1400 audit(8000022968.168:241929): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1316.266097][ T36] audit: type=1400 audit(8000022968.168:241930): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1316.306886][ T36] audit: type=1400 audit(8000022968.208:241931): avc: denied { read write } for pid=14366 comm="syz.2.15193" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1316.330503][ T36] audit: type=1400 audit(8000022968.208:241932): avc: denied { read write open } for pid=14366 comm="syz.2.15193" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1316.356994][ T36] audit: type=1400 audit(8000022968.248:241933): avc: denied { read write } for pid=14366 comm="syz.2.15193" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1316.381254][ T36] audit: type=1400 audit(8000022968.248:241934): avc: denied { read write open } for pid=14366 comm="syz.2.15193" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1316.413596][ T36] audit: type=1400 audit(8000022968.248:241935): avc: denied { read write } for pid=14366 comm="syz.2.15193" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.440066][ T36] audit: type=1400 audit(8000022968.248:241936): avc: denied { read write open } for pid=14366 comm="syz.2.15193" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.531993][ T31] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1316.627108][T14382] fuse: Bad value for 'fd' [ 1316.633724][T14382] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15197'. [ 1316.644869][T14382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1316.653661][T14382] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1316.663269][T14382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1316.695286][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1316.706233][ T31] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1316.716247][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.727003][ T31] usb 3-1: config 0 descriptor?? [ 1316.743850][T14367] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1316.796661][T14387] overlayfs: failed to clone upperpath [ 1317.157716][ T31] hid-generic 0003:04F3:0755.0071: unknown main item tag 0x0 [ 1317.165232][ T31] hid-generic 0003:04F3:0755.0071: unknown main item tag 0x0 [ 1317.172654][ T31] hid-generic 0003:04F3:0755.0071: unknown main item tag 0x0 [ 1317.180096][ T31] hid-generic 0003:04F3:0755.0071: unknown main item tag 0x0 [ 1317.187556][ T31] hid-generic 0003:04F3:0755.0071: unknown main item tag 0x0 [ 1317.196741][ T31] hid-generic 0003:04F3:0755.0071: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1317.533080][ T31] rust_binder: 0: removing orphan mapping 0:4248 [ 1317.625297][T14399] netlink: 'syz.0.15203': attribute type 2 has an invalid length. [ 1318.047909][ T490] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1318.099453][T14427] netlink: 'syz.0.15210': attribute type 4 has an invalid length. [ 1318.112915][T14427] netlink: 'syz.0.15210': attribute type 4 has an invalid length. [ 1318.163616][T14429] input: syz1 as /devices/virtual/input/input123 [ 1318.208470][ T490] usb 7-1: Using ep0 maxpacket: 8 [ 1318.219974][ T490] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1318.238430][ T490] usb 7-1: config 179 has no interface number 0 [ 1318.248781][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1318.268963][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1318.291805][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1318.303151][ T490] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1318.315505][ T490] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1318.328827][ T490] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1318.338131][ T490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.349693][T14409] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1318.439346][ T31] usb 3-1: reset full-speed USB device number 94 using dummy_hcd [ 1318.783098][ T490] usb 7-1: USB disconnect, device number 107 [ 1318.789284][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1318.789329][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1318.982468][T14459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14459 comm=syz.3.15221 [ 1318.996077][T14459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14459 comm=syz.3.15221 [ 1319.089236][T14462] 9pnet_fd: Insufficient options for proto=fd [ 1319.115305][T14464] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 1319.140430][T14464] rust_binder: Write failure EINVAL in pid:1486 [ 1319.516616][T14482] can0: slcan on ttyS3. [ 1319.627314][T14482] can0 (unregistered): slcan off ttyS3. [ 1319.804736][T14490] fuse: Bad value for 'group_id' [ 1319.824590][T14490] fuse: Bad value for 'group_id' [ 1320.105551][T14502] sit0: entered promiscuous mode [ 1320.127066][T14502] netlink: 'syz.2.15234': attribute type 1 has an invalid length. [ 1320.155609][T14502] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15234'. [ 1320.164856][T32121] usb 3-1: USB disconnect, device number 94 [ 1320.183761][T14509] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1320.256527][T14509] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1320.276632][T14512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15238'. [ 1320.403021][T14520] overlayfs: conflicting options: metacopy=off,verity=require [ 1320.456889][ T61] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1320.623994][ T61] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1320.652626][ T61] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.673836][ T61] usb 7-1: config 220 has no interface number 2 [ 1320.687747][ T61] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1320.728687][T14531] rust_binder: Error while translating object. [ 1320.728732][T14531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1320.734989][ T61] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1320.772419][T14531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 1320.782525][ T61] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1320.834823][ T61] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1320.855626][ T61] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1320.885116][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.918684][ T61] usb 7-1: Product: syz [ 1320.923571][ T61] usb 7-1: Manufacturer: syz [ 1320.943712][ T61] usb 7-1: SerialNumber: syz [ 1321.109892][T14553] overlayfs: failed to resolve './file1': -2 [ 1321.167043][ T36] kauditd_printk_skb: 952 callbacks suppressed [ 1321.167062][ T36] audit: type=1400 audit(8000022973.129:242889): avc: denied { ioctl } for pid=14508 comm="syz.6.15239" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.190766][ T61] usb 7-1: selecting invalid altsetting 0 [ 1321.262184][ T61] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1321.265941][ T36] audit: type=1400 audit(8000022973.129:242890): avc: denied { map } for pid=14508 comm="syz.6.15239" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.268588][ T61] usb 7-1: No valid video chain found. [ 1321.299213][ T61] usb 7-1: USB disconnect, device number 108 [ 1321.338280][ T36] audit: type=1400 audit(8000022973.129:242891): avc: denied { read } for pid=14508 comm="syz.6.15239" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.340895][T14561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.368925][T14561] IPv6: NLM_F_CREATE should be set when creating new route [ 1321.376181][T14561] IPv6: NLM_F_CREATE should be set when creating new route [ 1321.406161][ T36] audit: type=1400 audit(8000022973.139:242892): avc: denied { read } for pid=14508 comm="syz.6.15239" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.451235][ T497] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 1321.499580][ T36] audit: type=1400 audit(8000022973.139:242893): avc: denied { read open } for pid=14508 comm="syz.6.15239" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1321.524013][ T497] hid-generic 0000:0000:0000.0072: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1321.567946][T14564] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.593742][ T36] audit: type=1400 audit(8000022973.139:242894): avc: denied { search } for pid=14554 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1321.596751][T14564] audit: audit_lost=493 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.638111][T14572] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.651186][ T36] audit: type=1400 audit(8000022973.139:242895): avc: denied { search } for pid=14554 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1321.741193][T14570] fido_id[14570]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1321.771728][ T383] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1321.818599][T14578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1321.843313][T14581] rust_binder: Error in use_page_slow: ESRCH [ 1321.843337][T14581] rust_binder: use_range failure ESRCH [ 1321.860570][T14581] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 1321.891768][T14581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1321.899840][T14581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1493 [ 1321.936776][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 1321.967097][ T383] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.008902][ T383] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1322.035403][ T383] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1322.050690][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1322.059526][ T383] usb 3-1: SerialNumber: syz [ 1322.075346][ T383] usb 3-1: bad CDC descriptors [ 1322.285195][T14598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14598 comm=syz.0.15259 [ 1322.285621][ T383] usb 3-1: USB disconnect, device number 95 [ 1322.574812][T14604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 1322.948128][T14623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1322.957426][T14623] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 1322.966889][T14623] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:154 [ 1323.128207][T14633] rust_binder: Write failure EFAULT in pid:162 [ 1323.410196][T14644] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1323.562918][T14649] random: crng reseeded on system resumption [ 1323.610739][T14649] rust_binder: 176: no such ref 0 [ 1323.616401][T14649] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 1323.625715][T14649] rust_binder: Write failure EINVAL in pid:176 [ 1323.651646][T14651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14651 comm=syz.6.15277 [ 1323.698010][T14653] can0: slcan on ttyS3. [ 1323.713291][T14651] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1323.732143][T14651] rust_binder: Write failure EINVAL in pid:228 [ 1323.760236][T14652] can0 (unregistered): slcan off ttyS3. [ 1324.080634][T14673] overlayfs: failed to clone upperpath [ 1324.199629][T14682] 9pnet_fd: Insufficient options for proto=fd [ 1324.280521][ T497] usb 7-1: new low-speed USB device number 109 using dummy_hcd [ 1324.431009][ T497] usb 7-1: Invalid ep0 maxpacket: 32 [ 1324.561512][ T497] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 1324.712835][T14690] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1324.712847][ T497] usb 7-1: Invalid ep0 maxpacket: 32 [ 1324.712956][ T497] usb usb7-port1: attempt power cycle [ 1324.841699][T14692] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1324.896295][T14697] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 1324.896324][T14697] rust_binder: Error while translating object. [ 1324.909601][T14697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1324.916519][T14697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 1325.093289][ T497] usb 7-1: new low-speed USB device number 111 using dummy_hcd [ 1325.154628][ T497] usb 7-1: Invalid ep0 maxpacket: 32 [ 1325.274699][T14712] tmpfs: Unknown parameter 'nr_¹œode Ì–' [ 1325.289063][T14712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 1325.293975][ T497] usb 7-1: new low-speed USB device number 112 using dummy_hcd [ 1325.325628][ T497] usb 7-1: Invalid ep0 maxpacket: 32 [ 1325.331612][ T497] usb usb7-port1: unable to enumerate USB device [ 1325.410923][T14716] rust_binder: Error while translating object. [ 1325.410950][T14716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1325.417720][T14716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:202 [ 1325.875961][ T497] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1326.039064][ T497] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1326.050760][ T497] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1326.061807][ T497] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1326.073135][ T497] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1326.082215][ T497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.093527][T14728] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1326.310827][ T36] kauditd_printk_skb: 820 callbacks suppressed [ 1326.310846][ T36] audit: type=1400 audit(8000022978.261:243662): avc: denied { read } for pid=14727 comm="syz.2.15304" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1326.340076][ T36] audit: type=1400 audit(8000022978.261:243663): avc: denied { read open } for pid=14727 comm="syz.2.15304" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1326.364165][ T36] audit: type=1400 audit(8000022978.261:243664): avc: denied { ioctl } for pid=14727 comm="syz.2.15304" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1326.389177][ T36] audit: type=1400 audit(8000022978.271:243665): avc: denied { append } for pid=14727 comm="syz.2.15304" name="pfkey" dev="proc" ino=4026533596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1326.412422][ T36] audit: type=1400 audit(8000022978.271:243666): avc: denied { read write } for pid=14727 comm="syz.2.15304" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1326.435944][ T36] audit: type=1400 audit(8000022978.271:243667): avc: denied { read write open } for pid=14727 comm="syz.2.15304" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1326.460536][ T36] audit: type=1400 audit(8000022978.271:243668): avc: denied { read } for pid=14727 comm="syz.2.15304" dev="nsfs" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1326.482237][ T36] audit: type=1400 audit(8000022978.271:243669): avc: denied { read open } for pid=14727 comm="syz.2.15304" path="net:[4026533450]" dev="nsfs" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1326.508191][ T36] audit: type=1400 audit(8000022978.271:243670): avc: denied { create } for pid=14727 comm="syz.2.15304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1326.528786][ T36] audit: type=1400 audit(8000022978.271:243671): avc: denied { setopt } for pid=14727 comm="syz.2.15304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1327.109562][T14757] rust_binder: Write failure EFAULT in pid:241 [ 1327.204784][T14764] fuse: Unknown parameter '7RG|‚u2´{ˆ¹ÈÒLÅTÎ×^bº}Œ¿Š|OzOG¤‰ÿ„6 ‹ë€PNé‚%2´ÏS3lÈB&‹aß·ƒTÌ`…¡Ï<ÛøXÚö2t?ç€5B1hó' [ 1327.501361][ T443] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1327.641842][ T443] usb 7-1: device descriptor read/64, error -71 [ 1327.882608][ T443] usb 7-1: device descriptor read/64, error -71 [ 1328.123440][ T443] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1328.263879][ T443] usb 7-1: device descriptor read/64, error -71 [ 1328.504628][ T443] usb 7-1: device descriptor read/64, error -71 [ 1328.615510][ T443] usb usb7-port1: attempt power cycle [ 1328.656267][ T497] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1328.664533][ T497] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input125 [ 1328.695347][ T497] usb 3-1: USB disconnect, device number 96 [ 1328.695394][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1328.727651][T14774] loop2: detected capacity change from 0 to 7 [ 1328.784049][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15319'. [ 1328.794163][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15319'. [ 1328.966133][ T443] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1328.988176][T14787] syz.3.15323: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 1328.996586][ T443] usb 7-1: device descriptor read/8, error -71 [ 1329.005347][T14787] CPU: 1 UID: 0 PID: 14787 Comm: syz.3.15323 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 1329.005386][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1329.005403][T14787] Call Trace: [ 1329.005412][T14787] [ 1329.005423][T14787] __dump_stack+0x21/0x30 [ 1329.005464][T14787] dump_stack_lvl+0x10c/0x190 [ 1329.005498][T14787] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1329.005541][T14787] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1329.005581][T14787] dump_stack+0x19/0x20 [ 1329.005620][T14787] warn_alloc+0x1bc/0x2a0 [ 1329.005652][T14787] ? stack_depot_save_flags+0x38/0x800 [ 1329.005679][T14787] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1329.005717][T14787] ? __cfi_warn_alloc+0x10/0x10 [ 1329.005749][T14787] ? kasan_save_track+0x4f/0x80 [ 1329.005774][T14787] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 1329.005816][T14787] ? xskq_create+0x68/0x2a0 [ 1329.005843][T14787] ? xsk_init_queue+0xb6/0x120 [ 1329.005868][T14787] ? xsk_setsockopt+0x43f/0x6f0 [ 1329.005893][T14787] ? do_sock_setsockopt+0x26a/0x400 [ 1329.005917][T14787] ? __x64_sys_setsockopt+0x1b8/0x250 [ 1329.005943][T14787] ? x64_sys_call+0x2adc/0x2ee0 [ 1329.005979][T14787] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1329.006016][T14787] __vmalloc_node_range_noprof+0x135/0x1420 [ 1329.006057][T14787] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 1329.006095][T14787] ? avc_has_perm+0x1f2/0x220 [ 1329.006129][T14787] ? kasan_save_alloc_info+0x40/0x50 [ 1329.006162][T14787] ? __kasan_kmalloc+0x96/0xb0 [ 1329.006194][T14787] vmalloc_user_noprof+0x77/0x90 [ 1329.006227][T14787] ? xskq_create+0xdb/0x2a0 [ 1329.006252][T14787] xskq_create+0xdb/0x2a0 [ 1329.006278][T14787] xsk_init_queue+0xb6/0x120 [ 1329.006304][T14787] xsk_setsockopt+0x43f/0x6f0 [ 1329.006328][T14787] ? __cfi_xsk_setsockopt+0x10/0x10 [ 1329.006354][T14787] ? do_futex+0x309/0x500 [ 1329.006380][T14787] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 1329.006411][T14787] ? security_socket_setsockopt+0x33/0xd0 [ 1329.006437][T14787] ? __cfi_xsk_setsockopt+0x10/0x10 [ 1329.006462][T14787] do_sock_setsockopt+0x26a/0x400 [ 1329.006487][T14787] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 1329.006516][T14787] __x64_sys_setsockopt+0x1b8/0x250 [ 1329.006545][T14787] x64_sys_call+0x2adc/0x2ee0 [ 1329.006581][T14787] do_syscall_64+0x58/0xf0 [ 1329.006622][T14787] ? clear_bhb_loop+0x50/0xa0 [ 1329.006654][T14787] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1329.006684][T14787] RIP: 0033:0x7f57bcf8ebe9 [ 1329.006707][T14787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.006729][T14787] RSP: 002b:00007f57bde5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1329.006757][T14787] RAX: ffffffffffffffda RBX: 00007f57bd1c5fa0 RCX: 00007f57bcf8ebe9 [ 1329.006776][T14787] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1329.006793][T14787] RBP: 00007f57bd011e19 R08: 0000000000000004 R09: 0000000000000000 [ 1329.006810][T14787] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.006828][T14787] R13: 00007f57bd1c6038 R14: 00007f57bd1c5fa0 R15: 00007ffe7dee71c8 [ 1329.006851][T14787] [ 1329.010321][T14787] Mem-Info: [ 1329.179567][ T443] usb 7-1: device descriptor read/8, error -71 [ 1329.203462][T14787] active_anon:49035 inactive_anon:336 isolated_anon:0 [ 1329.203462][T14787] active_file:21797 inactive_file:7757 isolated_file:0 [ 1329.203462][T14787] unevictable:16362 dirty:43 writeback:0 [ 1329.203462][T14787] slab_reclaimable:5872 slab_unreclaimable:96667 [ 1329.203462][T14787] mapped:30625 shmem:32895 pagetables:1195 [ 1329.203462][T14787] sec_pagetables:0 bounce:0 [ 1329.203462][T14787] kernel_misc_reclaimable:0 [ 1329.203462][T14787] free:1327121 free_pcp:2547 free_cma:0 [ 1329.373026][T14787] Node 0 active_anon:196140kB inactive_anon:1344kB active_file:87188kB inactive_file:31028kB unevictable:65448kB isolated(anon):0kB isolated(file):0kB mapped:122500kB dirty:172kB writeback:0kB shmem:131580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8120kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no [ 1329.408125][T14787] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5740kB free_cma:0kB [ 1329.439351][T14787] lowmem_reserve[]: 0 3921 3921 [ 1329.444419][T14787] Normal free:2346960kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:196040kB inactive_anon:1344kB active_file:87188kB inactive_file:31028kB unevictable:65448kB writepending:172kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5496kB local_pcp:2252kB free_cma:0kB [ 1329.477591][T14787] lowmem_reserve[]: 0 0 0 [ 1329.482673][T14787] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 1329.498378][ T443] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1329.507182][T14801] rust_binder: Write failure EINVAL in pid:232 [ 1329.507192][T14787] Normal: 2*4kB (UM) 1071*8kB (ME) 290*16kB (UM) 87*32kB (UME) 784*64kB (UME) 812*128kB (UME) 261*256kB (UME) 107*512kB (UME) 25*1024kB (UME) 9*2048kB (ME) 491*4096kB (UM) = 2346880kB [ 1329.551910][T14787] 79339 total pagecache pages [ 1329.556738][ T443] usb 7-1: device descriptor read/8, error -71 [ 1329.571945][T14787] 532 pages in swap cache [ 1329.576383][T14787] Free swap = 53872kB [ 1329.582655][T14787] Total swap = 124996kB [ 1329.586896][T14787] 2097051 pages RAM [ 1329.591663][T14787] 0 pages HighMem/MovableOnly [ 1329.596396][T14787] 351533 pages reserved [ 1329.609157][T14787] 0 pages cma reserved [ 1329.616015][T14787] Memory allocations: [ 1329.620954][T14787] 0 B 0 init/main.c:1370 func:do_initcalls [ 1329.633894][T14787] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 1329.647291][T14805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1329.648170][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15327'. [ 1329.664734][T14787] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 1329.673143][T14787] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 1329.682576][T14787] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 1329.691832][T14787] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 1329.703012][ T443] usb 7-1: device descriptor read/8, error -71 [ 1329.709681][T14787] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 1329.717846][T14787] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 1329.727071][T14787] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 1329.736648][T14787] 0 B 0 init/initramfs.c:101 func:find_link [ 1329.744802][T14808] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1329.819389][ T443] usb usb7-port1: unable to enumerate USB device [ 1330.344576][T14816] overlay: Unknown parameter 'euid' [ 1330.460876][T14826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 1330.801931][T32121] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1330.962431][T32121] usb 3-1: Using ep0 maxpacket: 16 [ 1330.976470][T32121] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1330.985110][T32121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.003381][T32121] usb 3-1: config 0 has no interface number 0 [ 1331.055615][T32121] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1331.087776][T32121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.126190][T32121] usb 3-1: Product: syz [ 1331.130423][T32121] usb 3-1: Manufacturer: syz [ 1331.163035][T32121] usb 3-1: SerialNumber: syz [ 1331.183353][T32121] usb 3-1: config 0 descriptor?? [ 1331.201598][T32121] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1331.229104][T32121] usb 3-1: No valid video chain found. [ 1331.409144][T14829] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15335'. [ 1331.431789][T32121] usb 3-1: USB disconnect, device number 97 [ 1331.473081][ T36] kauditd_printk_skb: 378 callbacks suppressed [ 1331.473101][ T36] audit: type=1400 audit(8000022983.395:244050): avc: denied { read write } for pid=14836 comm="syz.6.15337" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.505571][T14839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.525843][ T36] audit: type=1400 audit(8000022983.434:244051): avc: denied { read write open } for pid=14836 comm="syz.6.15337" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.553217][T14839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.571390][ T36] audit: type=1400 audit(8000022983.434:244052): avc: denied { ioctl } for pid=14836 comm="syz.6.15337" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.584367][ T443] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1331.617344][ T36] audit: type=1400 audit(8000022983.434:244053): avc: denied { ioctl } for pid=14836 comm="syz.6.15337" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1332.074782][ T36] audit: type=1400 audit(8000022983.993:244054): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1332.166167][ T36] audit: type=1400 audit(8000022983.993:244055): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1332.196811][ T36] audit: type=1400 audit(8000022984.003:244056): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1332.228065][ T36] audit: type=1400 audit(8000022984.053:244057): avc: denied { read write } for pid=14840 comm="syz.2.15338" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1332.303610][ T36] audit: type=1400 audit(8000022984.053:244058): avc: denied { read write open } for pid=14840 comm="syz.2.15338" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1332.354844][ T36] audit: type=1400 audit(8000022984.072:244059): avc: denied { map } for pid=14840 comm="syz.2.15338" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1333.178958][T14847] rust_binder: 1523: no such ref 5 [ 1333.184743][T14847] rust_binder: Write failure EINVAL in pid:1523 [ 1333.772227][T14878] overlayfs: failed to clone upperpath [ 1334.262050][T14898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1334.264397][T14897] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 1334.657346][T14925] rust_binder: 14920 RLIMIT_NICE not set [ 1334.692989][T14931] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1334.756126][T14933] 9p filesystem being mounted at /89/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1334.798945][T14920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1334.798992][T14920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1530 [ 1334.875278][ T497] rust_binder: 14919: removing orphan mapping 0:4248 [ 1334.923725][T14940] rust_binder: Write failure EFAULT in pid:1533 [ 1335.214883][T14954] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 336, limit: 1176, size: 18446744073709551401) [ 1335.221291][T14954] rust_binder: Error while translating object. [ 1335.234583][T14954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1335.241585][T14954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1540 [ 1335.427770][T14963] 9pnet: Could not find request transport: xen [ 1335.606736][ T443] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1335.680174][T14984] overlayfs: failed to resolve './file0': -2 [ 1335.789469][ T443] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.813167][ T443] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1335.825361][T14990] kvm: kvm [14989]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1335.835344][T14990] kvm: kvm [14989]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x8 [ 1335.847069][ T443] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1335.857244][ T443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1335.866234][ T443] usb 7-1: SerialNumber: syz [ 1336.095715][T14959] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1336.148600][T14959] fuse: Unknown parameter 'õ' [ 1336.160057][ T443] usb 7-1: 0:2 : does not exist [ 1336.173393][ T443] usb 7-1: unit 5: unexpected type 0x09 [ 1336.181336][T15014] fuse: Unknown parameter 'ÿ' [ 1336.198794][ T31] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 1336.210347][ T443] usb 7-1: USB disconnect, device number 118 [ 1336.219033][ T31] hid-generic 0000:0000:0000.0073: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1336.343794][T12919] udevd[12919]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1336.442792][T15020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1336.458715][T15020] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1336.467493][T15018] fido_id[15018]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1336.509728][ T36] kauditd_printk_skb: 538 callbacks suppressed [ 1336.509748][ T36] audit: type=1400 audit(8000022988.430:244598): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1336.558748][ T36] audit: type=1400 audit(8000022988.459:244599): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1336.585422][ T36] audit: type=1400 audit(8000022988.459:244600): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1336.614485][ T36] audit: type=1400 audit(8000022988.529:244601): avc: denied { create } for pid=15021 comm="syz.2.15399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1336.651382][ T36] audit: type=1400 audit(8000022988.529:244602): avc: denied { write } for pid=15021 comm="syz.2.15399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1336.739621][ T36] audit: type=1400 audit(8000022988.529:244603): avc: denied { read } for pid=15021 comm="syz.2.15399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1336.742641][T15026] can0: slcan on ttyS3. [ 1336.788426][T15030] netlink: 140 bytes leftover after parsing attributes in process `syz.3.15404'. [ 1336.799661][T15030] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15404'. [ 1336.809331][ T36] audit: type=1400 audit(8000022988.529:244604): avc: denied { read write } for pid=5737 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1336.879261][T15040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1336.880050][ T36] audit: type=1400 audit(8000022988.529:244605): avc: denied { read } for pid=15021 comm="syz.2.15399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1336.936076][ T36] audit: type=1400 audit(8000022988.529:244606): avc: denied { read write open } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1336.977075][ T36] audit: type=1400 audit(8000022988.529:244607): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1397 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1337.060597][T32121] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 1337.167244][T15040] rust_binder: Error in use_page_slow: ESRCH [ 1337.167270][T15040] rust_binder: use_range failure ESRCH [ 1337.173430][T15040] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 1337.178991][T15040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1337.187115][T15040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1563 [ 1337.197479][T15040] rust_binder: 1563: no such ref 1 [ 1337.212070][T15040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1563 [ 1337.223766][T32121] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1337.244582][T32121] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1337.256673][T32121] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1337.264335][T32121] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1337.274259][T32121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.291753][T32121] usb 3-1: config 0 descriptor?? [ 1337.312478][T15026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1337.361393][ T443] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1337.521607][T15063] fuse: Unknown parameter 'À}0x0000000000000005' [ 1337.529202][ T443] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.548599][T32121] usb 3-1: string descriptor 0 read error: -71 [ 1337.557294][ T443] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1337.572239][T32121] usbhid 3-1:0.0: can't add hid device: -71 [ 1337.578341][T32121] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1337.586196][ T443] usb 7-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1337.593816][T32121] usb 3-1: USB disconnect, device number 98 [ 1337.626294][ T443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.644118][T15026] can0 (unregistered): slcan off ttyS3. [ 1337.656096][ T443] usb 7-1: config 0 descriptor?? [ 1337.767079][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15412'. [ 1338.389107][T15122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1338.433929][T15120] netlink: 'syz.3.15423': attribute type 4 has an invalid length. [ 1338.455577][T15122] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 1338.596209][T14072] usb 7-1: USB disconnect, device number 119 [ 1338.696037][T15137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1338.846354][T15148] syzkaller0: entered promiscuous mode [ 1338.858385][T15148] syzkaller0: entered allmulticast mode [ 1339.124884][T15164] pim6reg1: entered promiscuous mode [ 1339.130332][T15164] pim6reg1: entered allmulticast mode [ 1339.490482][ T334] syzkaller0: tun_net_xmit 76 [ 1339.496223][ T334] syzkaller0: tun_net_xmit 48 [ 1339.506283][T15180] syzkaller0: create flow: hash 2956008892 index 1 [ 1339.517427][T14072] syzkaller0: tun_net_xmit 76 [ 1339.524711][T15180] syzkaller0: delete flow: hash 2956008892 index 1 [ 1339.664205][T15189] netlink: 240 bytes leftover after parsing attributes in process `syz.6.15449'. [ 1339.808740][T15189] binder: Bad value for 'max' [ 1340.224973][ T497] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1340.392015][ T497] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1340.404061][ T497] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1340.414998][ T497] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1340.425527][ T497] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1340.438490][ T497] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1340.447588][ T497] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.457319][ T497] usb 7-1: config 0 descriptor?? [ 1340.578797][T15235] overlayfs: failed to resolve './file1': -2 [ 1340.870930][T15212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.879835][T15212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.974442][ T497] usbhid 7-1:0.0: can't add hid device: -71 [ 1340.983918][ T497] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1340.992797][ T497] usb 7-1: USB disconnect, device number 120 [ 1341.533427][ T36] kauditd_printk_skb: 1107 callbacks suppressed [ 1341.533446][ T36] audit: type=1400 audit(8000022993.436:245715): avc: denied { read } for pid=15244 comm="syz.6.15467" name="binder1" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.565883][ T36] audit: type=1400 audit(8000022993.436:245716): avc: denied { read open } for pid=15244 comm="syz.6.15467" path="/dev/binderfs/binder1" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.578178][T15246] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15466'. [ 1341.594043][ T36] audit: type=1400 audit(8000022993.436:245717): avc: denied { read } for pid=15244 comm="syz.6.15467" name="binder1" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.603991][T15243] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15466'. [ 1341.624015][ T36] audit: type=1400 audit(8000022993.436:245718): avc: denied { read open } for pid=15244 comm="syz.6.15467" path="/dev/binderfs/binder1" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.690337][ T36] audit: type=1400 audit(8000022993.466:245719): avc: denied { create } for pid=15242 comm="syz.3.15466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1341.713465][ T36] audit: type=1400 audit(8000022993.466:245720): avc: denied { write } for pid=15242 comm="syz.3.15466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1341.737213][ T36] audit: type=1400 audit(8000022993.466:245721): avc: denied { nlmsg_write } for pid=15242 comm="syz.3.15466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1341.759200][ T36] audit: type=1400 audit(8000022993.466:245722): avc: denied { create } for pid=15242 comm="syz.3.15466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1341.783487][ T496] Bluetooth: hci0: command 0x1003 tx timeout [ 1341.797226][T28903] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1341.803363][ T36] audit: type=1400 audit(8000022993.476:245723): avc: denied { create } for pid=15242 comm="syz.3.15466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1341.837603][ T36] audit: type=1400 audit(8000022993.476:245724): avc: denied { write } for pid=15242 comm="syz.3.15466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1342.372045][T15263] overlayfs: failed to clone upperpath [ 1342.673039][T15273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1342.691448][T15273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1342.921074][T15290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1342.926892][T15290] netlink: 'syz.2.15480': attribute type 4 has an invalid length. [ 1342.942587][T15290] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.15480'. [ 1343.107825][T15299] fuse: Unknown parameter '' [ 1343.205165][T15303] rust_binder: Write failure EFAULT in pid:351 [ 1343.307429][ T497] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1343.467781][ T497] usb 3-1: Using ep0 maxpacket: 32 [ 1343.486121][ T497] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.506701][ T497] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1343.523134][T15307] netlink: 269 bytes leftover after parsing attributes in process `syz.3.15487'. [ 1343.532497][T15308] netlink: 269 bytes leftover after parsing attributes in process `syz.3.15487'. [ 1343.549464][ T497] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1343.579125][ T497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1343.587171][ T497] usb 3-1: SerialNumber: syz [ 1343.619811][ T497] cdc_acm 3-1:1.0: Zero length descriptor references [ 1343.636785][ T497] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1343.825836][T15293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 1343.842869][T15322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1343.860605][T15322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:353 [ 1343.913762][T15327] netlink: 'syz.3.15494': attribute type 16 has an invalid length. [ 1343.949683][T15327] netlink: 'syz.3.15494': attribute type 3 has an invalid length. [ 1343.975277][T15327] netlink: 'syz.3.15494': attribute type 1 has an invalid length. [ 1343.993333][T15327] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.15494'. [ 1344.310188][T15348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1344.311289][T15345] overlayfs: failed to resolve './file1': -2 [ 1344.313467][T15348] rust_binder: Error in use_page_slow: ESRCH [ 1344.323963][T15348] rust_binder: use_range failure ESRCH [ 1344.330097][T15348] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 1344.335682][T15348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1344.343690][T15348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1594 [ 1344.537031][T15358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1344.971594][T14072] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1345.134211][T14072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1345.145667][T14072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.155772][T14072] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1345.168621][T14072] usb 7-1: New USB device found, idVendor=056a, idProduct=003b, bcdDevice= 0.00 [ 1345.177694][T14072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.187671][T14072] usb 7-1: config 0 descriptor?? [ 1345.599149][T15368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.609978][T14072] wacom 0003:056A:003B.0074: Unknown device_type for 'HID 056a:003b'. Ignoring. [ 1345.619256][T15368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.641026][T14072] usb 7-1: USB disconnect, device number 121 [ 1345.892986][T32121] usb 3-1: USB disconnect, device number 99 [ 1346.096562][T15390] usb usb8: usbfs: process 15390 (syz.2.15514) did not claim interface 0 before use [ 1346.137026][T15390] overlay: filesystem on ./bus not supported as upperdir [ 1346.414338][T15395] netlink: 'syz.2.15516': attribute type 4 has an invalid length. [ 1346.563205][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 1346.563225][ T36] audit: type=1400 audit(8000022998.443:246293): avc: denied { read write } for pid=15402 comm="syz.2.15518" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1346.597549][ T36] audit: type=1400 audit(8000022998.443:246294): avc: denied { read write open } for pid=15402 comm="syz.2.15518" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1346.623570][ T36] audit: type=1400 audit(8000022998.483:246295): avc: denied { create } for pid=15402 comm="syz.2.15518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1346.675826][ T36] audit: type=1400 audit(8000022998.483:246296): avc: denied { ioctl } for pid=15402 comm="syz.2.15518" path="/dev/binderfs/binder1" dev="binder" ino=27 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1346.709997][ T36] audit: type=1400 audit(8000022998.523:246297): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.736198][ T36] audit: type=1400 audit(8000022998.523:246298): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.773421][ T36] audit: type=1400 audit(8000022998.523:246299): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.841568][ T36] audit: type=1400 audit(8000022998.553:246300): avc: denied { read } for pid=15404 comm="syz.2.15519" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1346.898845][T15414] __vm_enough_memory: pid: 15414, comm: syz.2.15521, bytes: 18014402804453376 not enough memory for the allocation [ 1346.916782][ T36] audit: type=1400 audit(8000022998.553:246301): avc: denied { read open } for pid=15404 comm="syz.2.15519" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1346.955432][ T36] audit: type=1400 audit(8000022998.573:246302): avc: denied { relabelfrom } for pid=15404 comm="syz.2.15519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1347.062323][T15418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1347.064259][T15418] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 1347.337364][T15432] /dev/loop0: Can't lookup blockdev [ 1347.628090][T15451] binder: Bad value for 'stats' [ 1347.728347][T14072] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1347.816640][T15468] overlayfs: failed to clone upperpath [ 1347.878681][T14072] usb 3-1: Invalid ep0 maxpacket: 16 [ 1347.910522][T15476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1347.936625][T15478] netlink: 'syz.3.15548': attribute type 4 has an invalid length. [ 1347.964598][T15476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1606 [ 1348.009020][T14072] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1348.169377][T14072] usb 3-1: Invalid ep0 maxpacket: 16 [ 1348.189507][T14072] usb usb3-port1: attempt power cycle [ 1348.530248][T14072] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1348.580880][T14072] usb 3-1: Invalid ep0 maxpacket: 16 [ 1348.710673][T14072] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1348.735137][T14072] usb 3-1: Invalid ep0 maxpacket: 16 [ 1348.741447][T14072] usb usb3-port1: unable to enumerate USB device [ 1349.859354][T15557] rust_binder: 432: no such ref 0 [ 1349.864491][T15557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 1349.901663][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.924760][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.989626][T15563] fuse: Bad value for 'user_id' [ 1349.994588][T15563] fuse: Bad value for 'user_id' [ 1350.134009][ T497] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 1350.274330][ T497] usb 7-1: device descriptor read/64, error -71 [ 1350.515633][ T497] usb 7-1: device descriptor read/64, error -71 [ 1350.786358][ T497] usb 7-1: new full-speed USB device number 124 using dummy_hcd [ 1350.866225][T14072] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1350.904937][T15587] rust_binder: 1641: no such ref 3 [ 1350.925801][ T497] usb 7-1: device descriptor read/64, error -71 [ 1351.026032][T14072] usb 3-1: Using ep0 maxpacket: 32 [ 1351.035266][T14072] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1351.044617][T14072] usb 3-1: config 0 has no interface number 0 [ 1351.054904][T14072] usb 3-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 1351.065894][T14072] usb 3-1: config 0 interface 214 has no altsetting 0 [ 1351.078156][T14072] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1351.087800][T14072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.095882][T14072] usb 3-1: Product: syz [ 1351.100698][T14072] usb 3-1: Manufacturer: syz [ 1351.106967][T14072] usb 3-1: SerialNumber: syz [ 1351.113514][T14072] usb 3-1: config 0 descriptor?? [ 1351.122773][T15565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1351.176370][ T497] usb 7-1: device descriptor read/64, error -71 [ 1351.204245][T15598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1351.210598][T15598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1652 [ 1351.287128][ T497] usb usb7-port1: attempt power cycle [ 1351.339128][T14072] ax88179_178a 3-1:0.214: probe with driver ax88179_178a failed with error -71 [ 1351.349652][T14072] usb 3-1: USB disconnect, device number 104 [ 1351.568135][T15616] netlink: 'syz.2.15590': attribute type 29 has an invalid length. [ 1351.577084][T15616] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.15590'. [ 1351.589108][ T36] kauditd_printk_skb: 795 callbacks suppressed [ 1351.589125][ T36] audit: type=1400 audit(8000023003.471:247098): avc: denied { ioctl } for pid=15558 comm="syz.6.15572" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1351.643363][ T36] audit: type=1400 audit(8000023003.521:247099): avc: denied { read } for pid=15615 comm="syz.2.15590" dev="nsfs" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1351.665243][ T497] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 1351.666497][ T36] audit: type=1400 audit(8000023003.521:247100): avc: denied { read open } for pid=15615 comm="syz.2.15590" path="net:[4026533450]" dev="nsfs" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1351.701433][ T497] usb 7-1: device descriptor read/8, error -71 [ 1351.712506][ T36] audit: type=1400 audit(8000023003.521:247101): avc: denied { create } for pid=15615 comm="syz.2.15590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1351.737664][ T36] audit: type=1400 audit(8000023003.571:247102): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.764673][ T36] audit: type=1400 audit(8000023003.571:247103): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.795501][ T36] audit: type=1400 audit(8000023003.571:247104): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1351.821558][ T36] audit: type=1400 audit(8000023003.581:247105): avc: denied { ioctl } for pid=15558 comm="syz.6.15572" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1351.847080][ T36] audit: type=1400 audit(8000023003.581:247106): avc: denied { ioctl } for pid=15558 comm="syz.6.15572" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1351.850069][ T497] usb 7-1: device descriptor read/8, error -71 [ 1351.873143][ T36] audit: type=1400 audit(8000023003.581:247107): avc: denied { ioctl } for pid=15558 comm="syz.6.15572" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1352.118536][ T497] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 1352.141369][ T497] usb 7-1: device descriptor read/8, error -71 [ 1352.271108][ T497] usb 7-1: device descriptor read/8, error -71 [ 1352.379960][ T497] usb usb7-port1: unable to enumerate USB device [ 1353.125682][T15646] syzkaller0: entered promiscuous mode [ 1353.131271][T15646] syzkaller0: entered allmulticast mode [ 1353.373289][T15653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1353.373324][T15653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 1354.255123][ T329] rust_binder: 15655: removing orphan mapping 0:24 [ 1354.410371][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15685 comm=syz.0.15615 [ 1354.430851][ T2529] Bluetooth: hci0: Frame reassembly failed (-84) [ 1354.438450][ T2529] Bluetooth: hci0: Frame reassembly failed (-84) [ 1354.494580][T15697] netlink: 'syz.3.15619': attribute type 16 has an invalid length. [ 1354.502679][T15697] netlink: 'syz.3.15619': attribute type 3 has an invalid length. [ 1354.512061][T15697] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.15619'. [ 1355.411296][T15707] netlink: 'syz.3.15622': attribute type 4 has an invalid length. [ 1356.338886][T15717] tmpfs: Bad value for 'huge' [ 1356.457903][T28903] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1356.537429][T15722] rust_binder: Error while translating object. [ 1356.537465][T15722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1356.544460][T15722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417 [ 1356.555384][T15722] rust_binder: 417: no such ref 1 [ 1356.569678][T15722] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1356.628960][ T36] kauditd_printk_skb: 268 callbacks suppressed [ 1356.628979][ T36] audit: type=1400 audit(8000023008.500:247376): avc: denied { read } for pid=15729 comm="syz.2.15631" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.651332][T15730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1356.658379][ T36] audit: type=1400 audit(8000023008.500:247377): avc: denied { read open } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.689593][ T36] audit: type=1400 audit(8000023008.500:247378): avc: denied { ioctl } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.716138][ T36] audit: type=1400 audit(8000023008.530:247379): avc: denied { map } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.718329][T15732] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1356.741166][ T36] audit: type=1400 audit(8000023008.530:247380): avc: denied { read } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.773486][ T36] audit: type=1400 audit(8000023008.530:247381): avc: denied { ioctl } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.800517][ T36] audit: type=1400 audit(8000023008.580:247382): avc: denied { ioctl } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1356.826373][ T36] audit: type=1400 audit(8000023008.580:247383): avc: denied { call } for pid=15729 comm="syz.2.15631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1356.845746][ T36] audit: type=1400 audit(8000023008.610:247384): avc: denied { ioctl } for pid=15729 comm="syz.2.15631" path="/dev/binderfs/binder1" dev="binder" ino=27 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1357.386334][ T36] audit: type=1400 audit(8000023009.249:247385): avc: denied { create } for pid=15733 comm="syz.6.15632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1357.474202][T15739] 9pnet: p9_errstr2errno: server reported unknown error 2ê“’Û°|sdK [ 1357.474202][T15739] ŽNšâÝ÷Ho" ¯×hb [ 1357.682800][T15753] pim6reg1: entered promiscuous mode [ 1357.688212][T15753] pim6reg1: entered allmulticast mode [ 1357.905179][T15758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1357.907606][T15758] rust_binder: 1668: no such ref 3 [ 1357.920218][T15758] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 1357.928867][T15758] rust_binder: Write failure EINVAL in pid:1668 [ 1357.964340][T15760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1358.044612][T15766] rust_binder: Write failure EFAULT in pid:1676 [ 1358.053526][T15766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1358.569143][T15785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1358.577688][T15785] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 1358.624536][T15789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1358.688393][T15790] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1358.948364][T15792] netlink: 'syz.6.15648': attribute type 64 has an invalid length. [ 1358.964358][T15792] netlink: 5 bytes leftover after parsing attributes in process `syz.6.15648'. [ 1359.715301][T15808] usb usb7: usbfs: process 15808 (syz.2.15654) did not claim interface 0 before use [ 1359.725111][T15810] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 1359.732432][T15810] rust_binder: Write failure EINVAL in pid:440 [ 1359.882574][T15819] netlink: 'syz.2.15657': attribute type 13 has an invalid length. [ 1359.973779][T15819] rust_binder: Error while translating object. [ 1359.973833][T15819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 1359.980105][T15819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:446 [ 1361.384656][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 1361.423946][T15887] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 1361.462709][T15892] overlayfs: failed to clone upperpath [ 1361.558664][T15906] 9pnet_fd: Insufficient options for proto=fd [ 1361.668588][ T36] kauditd_printk_skb: 507 callbacks suppressed [ 1361.668607][ T36] audit: type=1400 audit(8000023013.530:247893): avc: denied { create } for pid=15911 comm="syz.3.15689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1361.778082][ T36] audit: type=1400 audit(8000023013.630:247894): avc: denied { execute } for pid=15917 comm="syz.3.15692" path="/262/cpu.stat" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1361.802282][ T36] audit: type=1400 audit(8000023013.630:247895): avc: denied { execute } for pid=15917 comm="syz.3.15692" path="/262/cpu.stat" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1361.826768][ T36] audit: type=1400 audit(8000023013.640:247896): avc: denied { execute } for pid=15917 comm="syz.3.15692" path="/262/cpu.stat" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1361.848217][T15923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1361.850099][ T36] audit: type=1400 audit(8000023013.640:247897): avc: denied { execute } for pid=15917 comm="syz.3.15692" path="/262/cpu.stat" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1361.856732][T15923] audit: audit_lost=512 audit_rate_limit=0 audit_backlog_limit=64 [ 1361.880503][ T36] audit: type=1400 audit(8000023013.640:247898): avc: denied { execute } for pid=15917 comm="syz.3.15692" path="/262/cpu.stat" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1361.891383][T15923] audit: backlog limit exceeded [ 1361.913228][ T36] audit: type=1400 audit(8000023013.640:247899): avc: denied { execute } for pid=15917 comm="syz.3.15692" path="/262/cpu.stat" dev="tmpfs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1361.932582][T15923] netlink: 92 bytes leftover after parsing attributes in process `syz.3.15693'. [ 1362.158884][ T383] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 1362.168046][ T383] hid-generic 0000:0000:0000.0075: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1362.558555][T15955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1362.568392][T15955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1362.576517][T15955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1698 [ 1362.852949][T15971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1362.864270][T15973] rust_binder: 1703: no such ref 3 [ 1362.920987][T15979] veth1: entered allmulticast mode [ 1363.424486][T15984] overlayfs: failed to clone upperpath [ 1363.431651][T28903] Bluetooth: hci0: command 0x1003 tx timeout [ 1363.437692][ T496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1363.603443][T15991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15991 comm=syz.2.15716 [ 1363.696676][T15994] 9p filesystem being mounted at /165/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1363.710358][T15972] veth1: left allmulticast mode [ 1363.740274][T15999] netlink: 1072 bytes leftover after parsing attributes in process `syz.6.15718'. [ 1363.760559][T15999] netlink: 280 bytes leftover after parsing attributes in process `syz.6.15718'. [ 1364.258662][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15726'. [ 1364.269325][T16016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16016 comm=syz.2.15726 [ 1364.285685][T16016] rust_binder: 488: no such ref 1 [ 1365.141698][T16036] overlayfs: failed to clone upperpath [ 1365.141701][T16037] overlayfs: failed to clone upperpath [ 1365.304696][T16048] netlink: 'syz.6.15740': attribute type 4 has an invalid length. [ 1365.312674][T16048] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.15740'. [ 1365.347330][T16051] devpts: called with bogus options [ 1365.379366][T16051] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1365.390015][T16056] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 1365.398104][T16050] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1365.623740][T16072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1365.832320][T16083] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 1366.077346][T16105] 9pnet_fd: Insufficient options for proto=fd [ 1366.227086][T16110] loop2: detected capacity change from 0 to 7 [ 1366.647504][ T443] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1366.718416][ T36] kauditd_printk_skb: 913 callbacks suppressed [ 1366.718434][ T36] audit: type=1400 audit(8000023018.571:248810): avc: denied { ioctl } for pid=16119 comm="syz.2.15760" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1366.770263][ T36] audit: type=1400 audit(8000023018.621:248811): avc: denied { create } for pid=16124 comm="syz.3.15762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1366.790060][ T36] audit: type=1400 audit(8000023018.621:248812): avc: denied { connect } for pid=16124 comm="syz.3.15762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1366.809993][ T36] audit: type=1400 audit(8000023018.621:248813): avc: denied { create } for pid=16124 comm="syz.3.15762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1366.818505][ T443] usb 3-1: Invalid ep0 maxpacket: 9 [ 1366.829762][ T36] audit: type=1400 audit(8000023018.641:248814): avc: denied { getopt } for pid=16124 comm="syz.3.15762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1366.854719][ T36] audit: type=1400 audit(8000023018.641:248815): avc: denied { create } for pid=16124 comm="syz.3.15762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1366.875493][ T36] audit: type=1400 audit(8000023018.641:248816): avc: denied { bind } for pid=16124 comm="syz.3.15762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1366.914155][ T36] audit: type=1400 audit(8000023018.641:248817): avc: denied { name_bind } for pid=16124 comm="syz.3.15762" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1366.955468][ T36] audit: type=1400 audit(8000023018.641:248818): avc: denied { node_bind } for pid=16124 comm="syz.3.15762" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1366.978098][ T443] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1367.008146][ T36] audit: type=1400 audit(8000023018.641:248819): avc: denied { ioctl } for pid=16124 comm="syz.3.15762" path="socket:[234099]" dev="sockfs" ino=234099 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1367.138372][ T443] usb 3-1: Invalid ep0 maxpacket: 9 [ 1367.143736][ T443] usb usb3-port1: attempt power cycle [ 1367.243276][T14072] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 1367.257466][T14072] hid-generic 0000:0000:0000.0076: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1367.488998][ T443] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1367.516981][ T443] usb 3-1: Invalid ep0 maxpacket: 9 [ 1367.532440][T16171] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 1367.651064][ T443] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1367.680652][ T443] usb 3-1: Invalid ep0 maxpacket: 9 [ 1367.689372][ T443] usb usb3-port1: unable to enumerate USB device [ 1367.853399][T16182] rust_binder: Write failure EFAULT in pid:1720 [ 1367.961720][T16186] binder: Bad value for 'max' [ 1368.197276][T16205] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1368.204521][T16205] rust_binder: 1726: no such ref 1 [ 1368.733348][T16258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15808'. [ 1368.800181][T16258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1368.802069][T16258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1735 [ 1368.815063][T16263] overlayfs: failed to clone upperpath [ 1369.269042][T16279] rust_binder: Write failure EFAULT in pid:1742 [ 1369.359382][T16282] FAULT_INJECTION: forcing a failure. [ 1369.359382][T16282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.378923][T16282] CPU: 1 UID: 0 PID: 16282 Comm: syz.0.15818 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 1369.378984][T16282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1369.378998][T16282] Call Trace: [ 1369.379006][T16282] [ 1369.379016][T16282] __dump_stack+0x21/0x30 [ 1369.379052][T16282] dump_stack_lvl+0x10c/0x190 [ 1369.379082][T16282] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1369.379114][T16282] ? check_stack_object+0x107/0x140 [ 1369.379136][T16282] dump_stack+0x19/0x20 [ 1369.379165][T16282] should_fail_ex+0x3d9/0x530 [ 1369.379187][T16282] should_fail+0xf/0x20 [ 1369.379206][T16282] should_fail_usercopy+0x1e/0x30 [ 1369.379230][T16282] _copy_from_user+0x22/0xb0 [ 1369.379256][T16282] do_sys_poll+0x246/0x1190 [ 1369.379288][T16282] ? is_bpf_text_address+0x17b/0x1a0 [ 1369.379312][T16282] ? poll_select_finish+0x600/0x600 [ 1369.379342][T16282] ? kernel_text_address+0xa9/0xe0 [ 1369.379370][T16282] ? __kernel_text_address+0x11/0x40 [ 1369.379397][T16282] ? unwind_get_return_address+0x51/0x90 [ 1369.379436][T16282] ? __kasan_check_write+0x18/0x20 [ 1369.379469][T16282] ? proc_fail_nth_write+0x17e/0x210 [ 1369.379499][T16282] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1369.379533][T16282] ? set_user_sigmask+0xc8/0x1c0 [ 1369.379563][T16282] ? __cfi_set_user_sigmask+0x10/0x10 [ 1369.379591][T16282] ? __fget_files+0x2c5/0x340 [ 1369.379616][T16282] __se_sys_ppoll+0x200/0x260 [ 1369.379644][T16282] ? __x64_sys_ppoll+0xf0/0xf0 [ 1369.379672][T16282] ? __cfi_ksys_write+0x10/0x10 [ 1369.379694][T16282] __x64_sys_ppoll+0xc3/0xf0 [ 1369.379721][T16282] x64_sys_call+0xd20/0x2ee0 [ 1369.379753][T16282] do_syscall_64+0x58/0xf0 [ 1369.379785][T16282] ? clear_bhb_loop+0x50/0xa0 [ 1369.379815][T16282] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1369.379842][T16282] RIP: 0033:0x7f3215f8ebe9 [ 1369.379860][T16282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.379879][T16282] RSP: 002b:00007f3216e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1369.379904][T16282] RAX: ffffffffffffffda RBX: 00007f32161c5fa0 RCX: 00007f3215f8ebe9 [ 1369.379921][T16282] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1369.379944][T16282] RBP: 00007f3216e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.379959][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.379974][T16282] R13: 00007f32161c6038 R14: 00007f32161c5fa0 R15: 00007ffc58c05248 [ 1369.379993][T16282] [ 1369.876399][T16298] netlink: 'syz.0.15823': attribute type 1 has an invalid length. [ 1369.884438][T16298] netlink: 'syz.0.15823': attribute type 2 has an invalid length. [ 1370.193633][T14072] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1370.374631][T14072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1370.413984][T14072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.462288][T14072] usb 3-1: New USB device found, idVendor=24b8, idProduct=0040, bcdDevice= 0.00 [ 1370.494118][T14072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.537334][T14072] usb 3-1: config 0 descriptor?? [ 1370.927728][T16324] rust_binder: 1758: no such ref 1 [ 1370.976301][T14072] hid-generic 0003:24B8:0040.0077: item fetching failed at offset 3/7 [ 1370.984769][T14072] hid-generic 0003:24B8:0040.0077: probe with driver hid-generic failed with error -22 [ 1371.239331][ T383] usb 3-1: USB disconnect, device number 109 [ 1371.747269][ T36] kauditd_printk_skb: 679 callbacks suppressed [ 1371.747289][ T36] audit: type=1400 audit(8000023023.582:249499): avc: denied { read write } for pid=16338 comm="syz.0.15837" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1371.806339][ T36] audit: type=1400 audit(8000023023.622:249500): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1371.876435][ T36] audit: type=1400 audit(8000023023.622:249501): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1371.942290][ T36] audit: type=1400 audit(8000023023.622:249502): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1371.996620][ T36] audit: type=1400 audit(8000023023.742:249503): avc: denied { read } for pid=16344 comm="syz.2.15839" dev="nsfs" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1372.038514][ T36] audit: type=1400 audit(8000023023.742:249504): avc: denied { read open } for pid=16344 comm="syz.2.15839" path="net:[4026533450]" dev="nsfs" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1372.079228][ T36] audit: type=1400 audit(8000023023.742:249505): avc: denied { create } for pid=16344 comm="syz.2.15839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1372.100717][ T36] audit: type=1400 audit(8000023023.752:249506): avc: denied { bind } for pid=16344 comm="syz.2.15839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1372.121824][ T36] audit: type=1400 audit(8000023023.752:249507): avc: denied { getopt } for pid=16344 comm="syz.2.15839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1372.154690][T16345] 9pnet_fd: Insufficient options for proto=fd [ 1372.164725][ T36] audit: type=1400 audit(8000023023.752:249508): avc: denied { read write } for pid=16344 comm="syz.2.15839" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1372.291690][T16359] incfs: Options parsing error. -22 [ 1372.296972][T16359] incfs: mount failed -22 [ 1372.348665][ T12] syzkaller0: tun_net_xmit 76 [ 1372.353583][ T12] syzkaller0: tun_net_xmit 48 [ 1372.354376][T16359] syzkaller0: create flow: hash 2956008892 index 1 [ 1372.376596][T16359] syzkaller0: delete flow: hash 2956008892 index 1 [ 1372.429050][T16369] overlayfs: failed to clone upperpath [ 1372.766464][T16405] overlayfs: failed to resolve './file0': -2 [ 1372.828674][T16400] rust_binder: Write failure EFAULT in pid:1772 [ 1372.993227][T16421] overlayfs: missing 'lowerdir' [ 1373.258693][ T383] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1373.408935][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 1373.422252][ T383] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1373.431428][ T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.439488][ T383] usb 3-1: Product: syz [ 1373.443732][ T383] usb 3-1: Manufacturer: syz [ 1373.448338][ T383] usb 3-1: SerialNumber: syz [ 1373.456375][ T383] usb 3-1: config 0 descriptor?? [ 1373.473241][ T383] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1373.483126][ T383] usb 3-1: Detected FT4233HP [ 1373.504766][T16456] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 1373.877578][ T383] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1373.896489][ T383] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1373.909840][ T383] usb 3-1: USB disconnect, device number 110 [ 1373.923145][ T383] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1373.932814][ T383] ftdi_sio 3-1:0.0: device disconnected [ 1374.676588][T16517] netlink: 'syz.2.15896': attribute type 4 has an invalid length. [ 1374.684599][T16517] netlink: 'syz.2.15896': attribute type 6 has an invalid length. [ 1374.696884][T16517] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.15896'. [ 1374.726918][T16517] 9pnet_fd: Insufficient options for proto=fd [ 1375.112627][T16536] binder: Bad value for 'defcontext' [ 1375.290656][T16543] rust_binder: Error in use_page_slow: ESRCH [ 1375.290680][T16543] rust_binder: use_range failure ESRCH [ 1375.297519][T16543] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 1375.303334][T16543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1375.311471][T16543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1798 [ 1375.322166][T16544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1798 [ 1376.246484][T14072] hid-generic 0000:0000:0000.0078: unknown main item tag 0x0 [ 1376.265467][T14072] hid-generic 0000:0000:0000.0078: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1377.045002][ T36] kauditd_printk_skb: 492 callbacks suppressed [ 1377.045020][ T36] audit: type=1400 audit(8000023028.874:250001): avc: denied { create } for pid=16604 comm="syz.3.15922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1377.071215][ T36] audit: type=1400 audit(8000023028.874:250002): avc: denied { create } for pid=16604 comm="syz.3.15922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1377.091747][ T36] audit: type=1400 audit(8000023028.874:250003): avc: denied { write } for pid=16604 comm="syz.3.15922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1377.112209][ T36] audit: type=1400 audit(8000023028.874:250004): avc: denied { nlmsg_write } for pid=16604 comm="syz.3.15922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1377.133194][ T36] audit: type=1400 audit(8000023028.874:250005): avc: denied { connect } for pid=16604 comm="syz.3.15922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1377.800070][ T36] audit: type=1400 audit(8000023029.623:250006): avc: denied { create } for pid=16609 comm="syz.3.15923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1377.845036][ T36] audit: type=1400 audit(8000023029.663:250007): avc: denied { read write } for pid=14013 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1377.914262][ T36] audit: type=1400 audit(8000023029.663:250008): avc: denied { read write open } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1377.940927][ T36] audit: type=1400 audit(8000023029.663:250009): avc: denied { ioctl } for pid=14013 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1377.968952][ T36] audit: type=1400 audit(8000023029.703:250010): avc: denied { read write } for pid=16615 comm="syz.2.15925" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1377.973797][T16626] fuse: Unknown parameter 'gb Õ;FÏou00000000000000000000' [ 1378.163592][T16647] veth0_to_team: entered promiscuous mode [ 1378.169418][T16647] veth0_to_team: entered allmulticast mode [ 1378.928348][T16656] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 1378.941519][T16656] 9pnet_fd: Insufficient options for proto=fd [ 1379.579100][T16675] netlink: 'syz.6.15944': attribute type 4 has an invalid length. [ 1379.587057][T16675] netlink: 17 bytes leftover after parsing attributes in process `syz.6.15944'. [ 1381.044745][T16710] fuse: Bad value for 'fd' [ 1381.088837][T16714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:580 [ 1381.304710][T16729] /dev/loop0: Can't lookup blockdev [ 1381.445600][T16744] tipc: Enabling of bearer rejected, failed to enable media [ 1381.527895][T16755] overlayfs: failed to clone lowerpath [ 1382.094521][ T36] kauditd_printk_skb: 350 callbacks suppressed [ 1382.094540][ T36] audit: type=1400 audit(8000023033.917:250361): avc: denied { create } for pid=16761 comm="syz.6.15974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1382.121995][ T36] audit: type=1400 audit(8000023033.917:250362): avc: denied { write } for pid=16761 comm="syz.6.15974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1382.143509][ T36] audit: type=1400 audit(8000023033.917:250363): avc: denied { read } for pid=16761 comm="syz.6.15974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1382.165484][ T36] audit: type=1400 audit(8000023033.917:250364): avc: denied { read } for pid=16761 comm="syz.6.15974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1382.187927][ T36] audit: type=1400 audit(8000023033.987:250365): avc: denied { ioctl } for pid=16758 comm="syz.2.15973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1382.213259][ T36] audit: type=1400 audit(8000023034.016:250366): avc: denied { create } for pid=16767 comm="syz.6.15976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1382.233575][ T36] audit: type=1400 audit(8000023034.016:250367): avc: denied { setopt } for pid=16767 comm="syz.6.15976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1382.253781][ T36] audit: type=1400 audit(8000023034.016:250368): avc: denied { create } for pid=16767 comm="syz.6.15976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1382.274394][ T36] audit: type=1400 audit(8000023034.026:250369): avc: denied { setopt } for pid=16767 comm="syz.6.15976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1382.294476][T32121] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1382.302182][ T36] audit: type=1400 audit(8000023034.056:250370): avc: denied { ioctl } for pid=16758 comm="syz.2.15973" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1382.452384][T32121] usb 3-1: device descriptor read/64, error -71 [ 1382.641224][T16804] netlink: 80 bytes leftover after parsing attributes in process `syz.6.15989'. [ 1382.692713][T32121] usb 3-1: device descriptor read/64, error -71 [ 1382.744048][T16813] overlayfs: failed to resolve './file0': -2 [ 1382.793040][T16815] input: syz1 as /devices/virtual/input/input130 [ 1382.856506][T16819] tmpfs: Bad value for 'mode' [ 1382.933060][T32121] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1382.945662][T16821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1383.073315][T32121] usb 3-1: device descriptor read/64, error -71 [ 1383.313670][T32121] usb 3-1: device descriptor read/64, error -71 [ 1383.423822][T32121] usb usb3-port1: attempt power cycle [ 1383.618797][T16830] rust_binder: 16828 RLIMIT_NICE not set [ 1383.620171][T16828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1383.625989][T16828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1825 [ 1383.640857][ T31] rust_binder: 16827: removing orphan mapping 0:4248 [ 1383.764212][T32121] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1383.787365][T32121] usb 3-1: device descriptor read/8, error -71 [ 1383.927146][T32121] usb 3-1: device descriptor read/8, error -71 [ 1384.164716][T32121] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1384.187879][T32121] usb 3-1: device descriptor read/8, error -71 [ 1384.317894][T32121] usb 3-1: device descriptor read/8, error -71 [ 1384.425601][T32121] usb usb3-port1: unable to enumerate USB device [ 1384.437935][T16851] 9pnet_fd: Insufficient options for proto=fd [ 1384.565966][T16859] netlink: 'syz.3.16009': attribute type 4 has an invalid length. [ 1384.690732][T16871] netlink: 'syz.6.16014': attribute type 4 has an invalid length. [ 1384.698696][T16871] netlink: 'syz.6.16014': attribute type 21 has an invalid length. [ 1384.706637][T16871] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.16014'. [ 1384.717139][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16014'. [ 1384.919033][T16884] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1385.051892][T16899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16899 comm=syz.6.16024 [ 1385.090310][T16898] input: syz1 as /devices/virtual/input/input131 [ 1385.136115][T16898] rust_binder: Write failure EINVAL in pid:1841 [ 1385.322455][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16028'. [ 1385.469940][T16923] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1385.601846][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16033'. [ 1385.610877][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16033'. [ 1385.705876][T16935] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 1385.786891][T14072] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1385.950556][T14072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.961747][T14072] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1385.975999][T14072] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1385.989052][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.996245][T14072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.005255][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.013988][T14072] usb 3-1: Product: syz [ 1386.019016][T16939] bridge_slave_0: entered allmulticast mode [ 1386.025080][T14072] usb 3-1: Manufacturer: syz [ 1386.035187][T14072] usb 3-1: SerialNumber: syz [ 1386.040976][T16939] bridge_slave_0: entered promiscuous mode [ 1386.055442][T16939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.071094][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.085512][T16939] bridge_slave_1: entered allmulticast mode [ 1386.092906][T16939] bridge_slave_1: entered promiscuous mode [ 1386.244638][T26202] bridge_slave_1: left allmulticast mode [ 1386.250399][T26202] bridge_slave_1: left promiscuous mode [ 1386.256464][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.260073][T14072] usb 3-1: 0:2 : does not exist [ 1386.269900][T26202] bridge_slave_0: left allmulticast mode [ 1386.276068][T26202] bridge_slave_0: left promiscuous mode [ 1386.281993][T26202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.292389][T14072] usb 3-1: cannot find UAC_HEADER [ 1386.300518][T14072] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1386.314103][T14072] usb 3-1: USB disconnect, device number 115 [ 1386.367340][T26202] bridge0 (unregistering): left allmulticast mode [ 1386.415650][T12919] udevd[12919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1386.474038][T26202] tipc: Left network mode [ 1386.478086][T16957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16042'. [ 1386.484913][T16939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.494557][T16939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.501889][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.508990][T16939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.592008][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.599448][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.614175][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.621787][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.635172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.642264][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.751139][T16939] veth0_vlan: entered promiscuous mode [ 1386.799257][T16939] veth1_macvtap: entered promiscuous mode [ 1386.962302][T16981] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 1386.975336][T16981] rust_binder: Write failure EINVAL in pid:597 [ 1386.984076][T16985] fuse: Unknown parameter 'ædCÉGOdl"ž¼ˆ¥ú¸' [ 1387.112436][ T36] kauditd_printk_skb: 631 callbacks suppressed [ 1387.112455][ T36] audit: type=1400 audit(8000023038.930:251002): avc: denied { read write open } for pid=16990 comm="syz.0.16052" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.170659][ T36] audit: type=1400 audit(8000023038.930:251003): avc: denied { read write } for pid=16990 comm="syz.0.16052" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.195383][ T36] audit: type=1400 audit(8000023038.930:251004): avc: denied { read write open } for pid=16990 comm="syz.0.16052" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.223124][ T36] audit: type=1400 audit(8000023038.930:251005): avc: denied { read write } for pid=16990 comm="syz.0.16052" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.291645][ T36] audit: type=1400 audit(8000023038.930:251006): avc: denied { read write open } for pid=16990 comm="syz.0.16052" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.331831][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16054'. [ 1387.344180][ T36] audit: type=1400 audit(8000023038.930:251007): avc: denied { read write } for pid=16990 comm="syz.0.16052" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.402446][T17001] netlink: 108 bytes leftover after parsing attributes in process `syz.3.16054'. [ 1387.421711][ T36] audit: type=1400 audit(8000023038.930:251008): avc: denied { read write open } for pid=16990 comm="syz.0.16052" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.480084][ T36] audit: type=1400 audit(8000023038.930:251009): avc: denied { read write } for pid=16990 comm="syz.0.16052" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.546364][ T36] audit: type=1400 audit(8000023038.930:251010): avc: denied { read write open } for pid=16990 comm="syz.0.16052" path="/dev/binderfs/binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.572938][ T36] audit: type=1400 audit(8000023038.940:251011): avc: denied { read write } for pid=16990 comm="syz.0.16052" name="binder1" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.626398][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16060'. [ 1387.727514][T17025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1387.728327][T17025] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 1387.765337][T17025] rust_binder: Read failure Err(EAGAIN) in pid:608 [ 1388.020903][T17052] overlayfs: failed to resolve './file1': -2 [ 1388.111711][T17059] 9pnet_fd: Insufficient options for proto=fd [ 1388.229241][T17069] futex_wake_op: syz.6.16078 tries to shift op by -1; fix this program [ 1388.240162][T17069] overlayfs: failed to clone upperpath [ 1388.250397][T17069] overlayfs: failed to clone upperpath [ 1388.460916][T17080] overlayfs: failed to clone upperpath [ 1389.013499][T17108] overlayfs: failed to clone upperpath [ 1389.041180][ T443] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 1389.067934][ T443] hid-generic 0000:0000:0000.0079: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1389.233547][T17111] fido_id[17111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1389.287103][T17121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17121 comm=syz.6.16095 [ 1389.305265][T17123] 9pnet_fd: Insufficient options for proto=fd [ 1389.412267][T17125] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 1389.431153][T17127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16098'. [ 1389.612777][T17141] netlink: 112 bytes leftover after parsing attributes in process `syz.3.16103'. [ 1389.640536][T17139] kvm: kvm [17137]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 1389.662012][T17139] kvm: kvm [17137]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 1390.024805][T17152] IPv6: NLM_F_CREATE should be specified when creating new route [ 1390.136183][T17159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1390.544265][T17197] rust_binder: 17189 RLIMIT_NICE not set [ 1390.544688][T17197] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 1390.572968][T17197] rust_binder: Write failure EINVAL in pid:40 [ 1390.748875][T17218] overlayfs: failed to clone upperpath [ 1391.474464][T17234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1391.703684][T17244] rust_binder: Error while translating object. [ 1391.710394][T17244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1391.718027][T17244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:654 [ 1392.126080][ T36] kauditd_printk_skb: 669 callbacks suppressed [ 1392.126102][ T36] audit: type=1400 audit(8000023043.934:251666): avc: denied { ioctl } for pid=17267 comm="syz.2.16143" path="/dev/binderfs/binder0" dev="binder" ino=26 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1392.168992][T17268] rust_binder: Error while translating object. [ 1392.169064][T17268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1392.184965][T17268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:659 [ 1392.195435][ T36] audit: type=1400 audit(8000023043.934:251667): avc: denied { set_context_mgr } for pid=17267 comm="syz.2.16143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1392.226147][ T36] audit: type=1400 audit(8000023043.934:251668): avc: denied { create } for pid=17267 comm="syz.2.16143" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1392.278645][ T36] audit: type=1400 audit(8000023043.934:251669): avc: denied { map } for pid=17267 comm="syz.2.16143" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=238821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1392.313534][ T36] audit: type=1400 audit(8000023043.934:251670): avc: denied { read write } for pid=17267 comm="syz.2.16143" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=238821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1392.341702][ T36] audit: type=1400 audit(8000023043.944:251671): avc: denied { create } for pid=17267 comm="syz.2.16143" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1392.363835][ T36] audit: type=1400 audit(8000023043.944:251672): avc: denied { map } for pid=17267 comm="syz.2.16143" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=238822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1392.388686][ T36] audit: type=1400 audit(8000023043.944:251673): avc: denied { read write } for pid=17267 comm="syz.2.16143" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=238822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1392.414861][ T36] audit: type=1400 audit(8000023043.944:251674): avc: denied { create } for pid=17267 comm="syz.2.16143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1392.436555][ T36] audit: type=1400 audit(8000023043.944:251675): avc: denied { create } for pid=17267 comm="syz.2.16143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1392.588868][T17288] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 1392.661117][T17288] rust_binder: Read failure Err(EAGAIN) in pid:53 [ 1393.531675][T17321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1393.599856][T17323] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 336, limit: 1176, size: 18446744073709551401) [ 1393.606538][T17323] rust_binder: Error while translating object. [ 1393.622088][T17323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1393.629483][T17323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 1393.647957][T17321] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 1394.157972][T17351] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 1394.166032][T17351] rust_binder: Error while translating object. [ 1394.178230][T17351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1394.184542][T17351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 1394.295109][T17362] bridge0: entered allmulticast mode [ 1394.340090][T17362] bridge0: left allmulticast mode [ 1394.382324][T17365] syzkaller0: entered promiscuous mode [ 1394.389347][T17365] syzkaller0: entered allmulticast mode [ 1394.417644][T17368] 9pnet_fd: Insufficient options for proto=fd [ 1394.497380][T17376] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1394.505712][T17376] rust_binder: Write failure EINVAL in pid:86 [ 1394.597767][T14072] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1394.760279][T14072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.771262][T14072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.781094][T14072] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1394.790229][T14072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.800002][T14072] usb 3-1: config 0 descriptor?? [ 1395.212966][T14072] hid-led 0003:04D8:F372.007A: unknown main item tag 0x0 [ 1395.220188][T14072] hid-led 0003:04D8:F372.007A: unknown main item tag 0x0 [ 1395.227321][T14072] hid-led 0003:04D8:F372.007A: unknown main item tag 0x0 [ 1395.237660][T14072] hid-led 0003:04D8:F372.007A: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 1395.288104][T14072] hid-led 0003:04D8:F372.007A: Greynut Luxafor initialized [ 1395.425030][T17366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.443802][T17366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.470906][T17366] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 1395.479409][T17366] rust_binder: Write failure EINVAL in pid:677 [ 1395.480197][ T329] usb 3-1: USB disconnect, device number 116 [ 1395.496518][ T31] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 1395.505800][ T31] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 1395.515099][ T31] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 1395.524111][ T31] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 1395.533375][ T31] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 1395.542914][ T31] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 1395.553078][ T31] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 1395.562870][ T31] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 1395.583805][ T31] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 1395.595821][T17386] SELinux: failed to load policy [ 1395.601211][ T31] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 1395.619771][ T31] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 1395.631301][ T31] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 1395.640909][ T31] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 1395.653073][ T31] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 1395.663407][ T31] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 1395.677097][ T31] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 1395.688581][ T31] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 1395.712634][ T31] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 1395.800837][T17398] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16190'. [ 1395.893154][T17407] overlayfs: failed to clone upperpath [ 1396.067451][T17413] netlink: 'syz.2.16196': attribute type 4 has an invalid length. [ 1396.688377][ T329] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1396.828378][ T329] usb 3-1: device descriptor read/64, error -71 [ 1397.068387][ T329] usb 3-1: device descriptor read/64, error -71 [ 1397.179087][ T36] kauditd_printk_skb: 491 callbacks suppressed [ 1397.179108][ T36] audit: type=1400 audit(8000023048.990:252167): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.212350][ T36] audit: type=1400 audit(8000023049.020:252168): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.279112][ T36] audit: type=1400 audit(8000023049.090:252169): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.338412][ T329] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1397.349847][ T36] audit: type=1400 audit(8000023049.160:252170): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.375318][ T36] audit: type=1400 audit(8000023049.160:252171): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.403969][ T36] audit: type=1400 audit(8000023049.180:252172): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.430016][ T36] audit: type=1400 audit(8000023049.210:252173): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.456233][ T36] audit: type=1400 audit(8000023049.210:252174): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.490486][ T36] audit: type=1400 audit(8000023049.210:252175): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.538379][ T329] usb 3-1: device descriptor read/64, error -71 [ 1397.548102][ T36] audit: type=1400 audit(8000023049.210:252176): avc: denied { ioctl } for pid=17421 comm="syz.2.16199" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.778416][ T329] usb 3-1: device descriptor read/64, error -71 [ 1397.889432][ T329] usb usb3-port1: attempt power cycle [ 1398.228935][ T329] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1398.267487][ T329] usb 3-1: device descriptor read/8, error -71 [ 1398.401256][ T329] usb 3-1: device descriptor read/8, error -71 [ 1398.638381][ T329] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1398.661297][ T329] usb 3-1: device descriptor read/8, error -71 [ 1398.791384][ T329] usb 3-1: device descriptor read/8, error -71 [ 1398.898996][ T329] usb usb3-port1: unable to enumerate USB device [ 1399.050753][T17455] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16211'. [ 1399.345649][T17472] overlayfs: failed to clone upperpath [ 1399.569383][T17475] rust_binder: Write failure EFAULT in pid:691 [ 1399.575028][T17475] rust_binder: Write failure EFAULT in pid:691 [ 1399.646902][T17484] fuse: Bad value for 'user_id' [ 1399.659897][T17484] fuse: Bad value for 'user_id' [ 1400.071540][T17517] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1400.077536][T17517] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1400.110475][T17517] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1400.138062][T17519] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1400.148583][T17517] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1400.180273][T17526] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16233'. [ 1400.192963][T17526] fuse: Unknown parameter 'æd' [ 1400.243205][T17529] __vm_enough_memory: pid: 17529, comm: syz.2.16235, bytes: 18014402804453376 not enough memory for the allocation [ 1400.469323][T17557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1400.484762][T17557] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 1400.644093][T17568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 1400.749999][T17583] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 1400.812445][T17591] binder: Unknown parameter 'uid' [ 1400.885973][T17595] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1401.573203][T17629] overlayfs: failed to clone upperpath [ 1401.743150][T17641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1401.747156][T17641] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 1401.822676][T17644] overlayfs: failed to clone upperpath [ 1402.128407][T14072] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1402.199054][ T36] kauditd_printk_skb: 764 callbacks suppressed [ 1402.199069][ T36] audit: type=1400 audit(8000023054.010:252941): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.278536][T14072] usb 3-1: Using ep0 maxpacket: 16 [ 1402.284390][ T36] audit: type=1400 audit(8000023054.090:252942): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.286824][T14072] usb 3-1: config 0 has no interfaces? [ 1402.311018][ T36] audit: type=1400 audit(8000023054.090:252943): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.315937][T14072] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1402.341463][ T36] audit: type=1400 audit(8000023054.090:252944): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.349898][T14072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.376172][ T36] audit: type=1400 audit(8000023054.090:252945): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.409118][ T36] audit: type=1400 audit(8000023054.090:252946): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.436262][ T36] audit: type=1400 audit(8000023054.120:252947): avc: denied { ioctl } for pid=17642 comm="syz.2.16273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1402.436543][T14072] usb 3-1: config 0 descriptor?? [ 1402.498372][ T36] audit: type=1400 audit(8000023054.230:252948): avc: denied { create } for pid=17651 comm="syz.6.16276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1402.530045][T17654] netlink: 68 bytes leftover after parsing attributes in process `syz.6.16277'. [ 1402.534051][ T36] audit: type=1400 audit(8000023054.230:252949): avc: denied { setopt } for pid=17651 comm="syz.6.16276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1402.560833][ T36] audit: type=1400 audit(8000023054.240:252950): avc: denied { setopt } for pid=17651 comm="syz.6.16276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1402.637135][T17661] 8021q: VLANs not supported on xfrm0 [ 1403.876435][T17727] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.16303'. [ 1404.025152][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16306'. [ 1404.088541][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16308'. [ 1404.837415][ T31] usb 3-1: USB disconnect, device number 121 [ 1404.875430][T17764] veth1: entered allmulticast mode [ 1404.950614][T17768] syzkaller0: entered promiscuous mode [ 1404.956178][T17768] syzkaller0: entered allmulticast mode [ 1405.946524][T17809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17809 comm=syz.6.16332 [ 1406.163477][T17821] x_tables: unsorted entry at hook 2 [ 1406.627905][T17848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=17848 comm=syz.6.16347 [ 1406.696152][T21007] syzkaller0: tun_net_xmit 76 [ 1406.704070][T21007] syzkaller0: tun_net_xmit 48 [ 1406.718508][ T383] syzkaller0: tun_net_xmit 76 [ 1407.078456][ T383] syzkaller0: tun_net_xmit 76 [ 1407.225455][ T36] kauditd_printk_skb: 279 callbacks suppressed [ 1407.225476][ T36] audit: type=1400 audit(8000023059.030:253230): avc: denied { mounton } for pid=17861 comm="syz.0.16353" path="/51/bus" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1407.264522][ T36] audit: type=1400 audit(8000023059.040:253231): avc: denied { mounton } for pid=17861 comm="syz.0.16353" path="/51/file0" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1407.299159][ T36] audit: type=1400 audit(8000023059.040:253232): avc: denied { read } for pid=17861 comm="syz.0.16353" dev="nsfs" ino=4026533660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1407.322331][ T36] audit: type=1400 audit(8000023059.040:253233): avc: denied { read } for pid=17861 comm="syz.0.16353" dev="nsfs" ino=4026533660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1407.345128][ T36] audit: type=1400 audit(8000023059.040:253234): avc: denied { read } for pid=17861 comm="syz.0.16353" dev="nsfs" ino=4026533660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 1407.370180][ T36] audit: type=1400 audit(8000023059.050:253235): avc: denied { read } for pid=17861 comm="syz.0.16353" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1407.398208][ T36] audit: type=1400 audit(8000023059.050:253236): avc: denied { create } for pid=17861 comm="syz.0.16353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1407.423103][ T36] audit: type=1400 audit(8000023059.050:253237): avc: denied { create } for pid=17861 comm="syz.0.16353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1407.446870][ T36] audit: type=1400 audit(8000023059.090:253238): avc: denied { create } for pid=17865 comm="syz.3.16354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 1407.467652][ T36] audit: type=1400 audit(8000023059.100:253239): avc: denied { read write } for pid=16939 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1407.612130][T17887] syzkaller0: entered promiscuous mode [ 1407.617681][T17887] syzkaller0: entered allmulticast mode [ 1408.301440][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16377'. [ 1408.930849][T17964] can0: slcan on ttyS3. [ 1408.962116][T17963] can0 (unregistered): slcan off ttyS3. [ 1412.228915][ T36] kauditd_printk_skb: 6286 callbacks suppressed [ 1412.228934][ T36] audit: type=1400 audit(8000023064.040:259526): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1412.276225][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1412.283090][ T148] audit: audit_lost=519 audit_rate_limit=0 audit_backlog_limit=64 [ 1412.288109][T16939] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1412.298585][ T148] audit: backlog limit exceeded [ 1412.303782][ T36] audit: type=1400 audit(8000023064.040:259527): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1412.307623][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1412.328352][T16939] audit: audit_lost=520 audit_rate_limit=0 audit_backlog_limit=64 [ 1412.341286][T16939] audit: backlog limit exceeded [ 1412.352743][ T148] audit: audit_lost=521 audit_rate_limit=0 audit_backlog_limit=64 [ 1413.204157][T18098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18098 comm=syz.3.16433 [ 1413.942750][T18115] pim6reg1: entered promiscuous mode [ 1413.948281][T18115] pim6reg1: entered allmulticast mode [ 1414.255935][T18127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16443'. [ 1414.618214][T18155] netlink: 'syz.2.16451': attribute type 4 has an invalid length. [ 1414.838417][ T496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1414.844828][T28903] Bluetooth: hci0: command 0x1003 tx timeout [ 1415.625357][T18194] netlink: 'syz.6.16465': attribute type 4 has an invalid length. [ 1416.562918][T18248] netlink: 25 bytes leftover after parsing attributes in process `syz.0.16483'. [ 1416.819262][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16489'. [ 1417.238567][ T36] kauditd_printk_skb: 7673 callbacks suppressed [ 1417.238586][ T36] audit: type=1400 audit(8000023069.050:267200): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1417.257030][T18280] syzkaller0: entered promiscuous mode [ 1417.292779][T18280] syzkaller0: entered allmulticast mode [ 1417.303328][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1417.310135][ T36] audit: type=1400 audit(8000023069.050:267201): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1417.311314][ T148] audit: audit_lost=522 audit_rate_limit=0 audit_backlog_limit=64 [ 1417.341510][ T148] audit: backlog limit exceeded [ 1417.370171][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1417.378405][ T36] audit: type=1400 audit(8000023069.050:267202): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1417.389135][ T148] audit: audit_lost=523 audit_rate_limit=0 audit_backlog_limit=64 [ 1417.414107][ T148] audit: backlog limit exceeded [ 1417.421144][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.326924][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16526'. [ 1420.802092][T18429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16546'. [ 1422.104502][T18507] syzkaller0: entered promiscuous mode [ 1422.110132][T18507] syzkaller0: entered allmulticast mode [ 1422.248688][ T36] kauditd_printk_skb: 7721 callbacks suppressed [ 1422.248705][ T36] audit: type=1400 audit(8000023074.060:274922): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1422.278431][ T36] audit: type=1400 audit(8000023074.060:274923): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1422.324771][ T36] audit: type=1400 audit(8000023074.060:274924): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1422.326708][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1422.360682][T18512] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1422.367340][T18512] audit: audit_lost=525 audit_rate_limit=0 audit_backlog_limit=64 [ 1422.368707][T18513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1422.376507][ T36] audit: type=1400 audit(8000023074.060:274925): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1422.381908][ T148] audit: audit_lost=526 audit_rate_limit=0 audit_backlog_limit=64 [ 1422.403849][T18512] audit: backlog limit exceeded [ 1423.194505][T18581] netlink: 'syz.0.16600': attribute type 4 has an invalid length. [ 1424.434320][T18626] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16616'. [ 1424.584597][T18635] pim6reg1: entered promiscuous mode [ 1424.603928][T18635] pim6reg1: entered allmulticast mode [ 1425.839130][T18689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=102 sclass=netlink_audit_socket pid=18689 comm=syz.3.16636 [ 1426.005399][T18699] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16640'. [ 1426.077895][T18711] bond_slave_0: entered promiscuous mode [ 1426.090197][T18711] bond_slave_0: entered allmulticast mode [ 1426.239576][T18717] syzkaller0: entered promiscuous mode [ 1426.245084][T18717] syzkaller0: entered allmulticast mode [ 1426.604085][T18742] syzkaller0: entered promiscuous mode [ 1426.614038][T18742] syzkaller0: entered allmulticast mode [ 1427.259423][ T36] kauditd_printk_skb: 8547 callbacks suppressed [ 1427.259440][ T36] audit: type=1400 audit(8000023079.060:283461): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1427.292951][ T36] audit: type=1400 audit(8000023079.070:283462): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1427.296215][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1427.322171][ T148] audit: audit_lost=531 audit_rate_limit=0 audit_backlog_limit=64 [ 1427.330777][ T148] audit: backlog limit exceeded [ 1427.337727][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1427.347081][T14013] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1427.356707][ T148] audit: audit_lost=532 audit_rate_limit=0 audit_backlog_limit=64 [ 1427.368338][T14013] audit: audit_lost=533 audit_rate_limit=0 audit_backlog_limit=64 [ 1427.374382][ T148] audit: backlog limit exceeded [ 1427.434903][T18769] can0: slcan on ttyS3. [ 1427.619242][T18773] can0 (unregistered): slcan off ttyS3. [ 1428.758381][ T496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1428.765009][T32127] Bluetooth: hci0: command 0x1003 tx timeout [ 1429.964065][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16697'. [ 1429.978180][ T2529] Bluetooth: hci0: Frame reassembly failed (-84) [ 1430.438446][T28903] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1431.616345][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16720'. [ 1432.038382][ T496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1432.268462][ T36] kauditd_printk_skb: 10312 callbacks suppressed [ 1432.268481][ T36] audit: type=1400 audit(8000023084.080:293774): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1432.311777][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.318399][ T148] audit: audit_lost=534 audit_rate_limit=0 audit_backlog_limit=64 [ 1432.321848][ T36] audit: type=1400 audit(8000023084.080:293775): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1432.326267][ T148] audit: backlog limit exceeded [ 1432.359123][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.373182][T18970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1432.379831][ T148] audit: audit_lost=535 audit_rate_limit=0 audit_backlog_limit=64 [ 1432.383253][ T36] audit: type=1400 audit(8000023084.080:293776): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1432.387853][T18970] audit: audit_lost=536 audit_rate_limit=0 audit_backlog_limit=64 [ 1432.502535][T18979] netlink: 'syz.6.16736': attribute type 7 has an invalid length. [ 1432.515160][T18979] netlink: 'syz.6.16736': attribute type 5 has an invalid length. [ 1432.528296][T18979] netlink: 17 bytes leftover after parsing attributes in process `syz.6.16736'. [ 1433.564522][T19032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16756'. [ 1433.630294][T19034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19034 comm=syz.0.16757 [ 1433.644983][T19034] netlink: 'syz.0.16757': attribute type 12 has an invalid length. [ 1434.324094][T19076] netlink: 'syz.2.16773': attribute type 4 has an invalid length. [ 1434.334747][T19076] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.16773'. [ 1434.498699][ T12] syzkaller0: tun_net_xmit 76 [ 1434.503566][ T12] syzkaller0: tun_net_xmit 48 [ 1436.028476][ T2529] bridge_slave_1: left allmulticast mode [ 1436.034256][ T2529] bridge_slave_1: left promiscuous mode [ 1436.048915][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.062159][ T2529] bridge_slave_0: left allmulticast mode [ 1436.068160][ T2529] bridge_slave_0: left promiscuous mode [ 1436.080076][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.210840][ T2529] veth1_macvtap: left promiscuous mode [ 1436.216465][ T2529] veth0_vlan: left promiscuous mode [ 1437.278546][ T36] kauditd_printk_skb: 8997 callbacks suppressed [ 1437.278565][ T36] audit: type=1400 audit(8000023089.090:302646): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1437.306838][ T36] audit: type=1400 audit(8000023089.090:302647): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1437.316968][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1437.328962][ T36] audit: type=1400 audit(8000023089.090:302648): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1437.335803][ T148] audit: audit_lost=579 audit_rate_limit=0 audit_backlog_limit=64 [ 1437.356659][ T36] audit: type=1400 audit(8000023089.090:302649): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1437.363643][ T148] audit: backlog limit exceeded [ 1437.385564][ T36] audit: type=1400 audit(8000023089.090:302650): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1437.391897][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1437.411422][ T36] audit: type=1400 audit(8000023089.090:302651): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1438.236444][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16802'. [ 1438.246789][T19171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19171 comm=syz.0.16802 [ 1440.020199][T19189] netlink: 'syz.0.16808': attribute type 4 has an invalid length. [ 1442.288612][ T36] kauditd_printk_skb: 12592 callbacks suppressed [ 1442.288630][ T36] audit: type=1400 audit(8000023094.100:314963): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1442.316990][ T36] audit: type=1400 audit(8000023094.100:314964): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1442.326985][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1442.339005][ T36] audit: type=1400 audit(8000023094.100:314965): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1442.344823][ T148] audit: audit_lost=674 audit_rate_limit=0 audit_backlog_limit=64 [ 1442.366673][ T36] audit: type=1400 audit(8000023094.100:314966): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1442.373691][ T148] audit: backlog limit exceeded [ 1442.395615][ T36] audit: type=1400 audit(8000023094.100:314967): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1442.402124][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1442.421721][ T36] audit: type=1400 audit(8000023094.100:314968): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1447.298575][ T36] kauditd_printk_skb: 12975 callbacks suppressed [ 1447.298595][ T36] audit: type=1400 audit(8000023099.110:327810): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1447.326759][ T36] audit: type=1400 audit(8000023099.110:327811): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1447.333490][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1447.347995][ T36] audit: type=1400 audit(8000023099.110:327812): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1447.356351][ T148] audit: audit_lost=720 audit_rate_limit=0 audit_backlog_limit=64 [ 1447.375599][ T36] audit: type=1400 audit(8000023099.110:327813): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1447.384519][ T148] audit: backlog limit exceeded [ 1447.404552][ T36] audit: type=1400 audit(8000023099.110:327814): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1447.412838][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1447.430543][ T36] audit: type=1400 audit(8000023099.110:327815): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1451.217681][T19252] syzkaller0: entered promiscuous mode [ 1451.223686][T19252] syzkaller0: entered allmulticast mode [ 1452.308646][ T36] kauditd_printk_skb: 12451 callbacks suppressed [ 1452.308663][ T36] audit: type=1400 audit(8000023104.120:340163): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1452.337517][ T36] audit: type=1400 audit(8000023104.120:340164): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1452.343093][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1452.359594][ T36] audit: type=1400 audit(8000023104.120:340165): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1452.365456][ T148] audit: audit_lost=756 audit_rate_limit=0 audit_backlog_limit=64 [ 1452.387303][ T36] audit: type=1400 audit(8000023104.120:340166): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1452.394294][ T148] audit: backlog limit exceeded [ 1452.416152][ T36] audit: type=1400 audit(8000023104.120:340167): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1452.422670][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1452.442322][ T36] audit: type=1400 audit(8000023104.120:340168): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1456.930341][T19275] can0: slcan on ptm0. [ 1457.048390][T19273] can0 (unregistered): slcan off ptm0. [ 1457.239409][ T334] bridge_slave_1: left allmulticast mode [ 1457.245095][ T334] bridge_slave_1: left promiscuous mode [ 1457.268398][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.279632][ T334] bridge_slave_0: left allmulticast mode [ 1457.285301][ T334] bridge_slave_0: left promiscuous mode [ 1457.308450][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.318444][ T36] kauditd_printk_skb: 12285 callbacks suppressed [ 1457.318458][ T36] audit: type=1400 audit(8000023109.120:352341): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1457.367385][ T36] audit: type=1400 audit(8000023109.150:352342): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1457.397022][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1457.404026][ T148] audit: audit_lost=795 audit_rate_limit=0 audit_backlog_limit=64 [ 1457.413829][ T36] audit: type=1400 audit(8000023109.150:352343): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1457.435222][ T148] audit: backlog limit exceeded [ 1457.441260][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1457.447792][ T148] audit: audit_lost=796 audit_rate_limit=0 audit_backlog_limit=64 [ 1457.455857][ T148] audit: backlog limit exceeded [ 1457.461469][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1457.468899][ T334] veth1_macvtap: left promiscuous mode [ 1457.474407][ T334] veth0_vlan: left promiscuous mode [ 1457.820377][ T334] bridge_slave_1: left allmulticast mode [ 1457.826500][ T334] bridge_slave_1: left promiscuous mode [ 1457.832192][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.839831][ T334] bridge_slave_0: left allmulticast mode [ 1457.845488][ T334] bridge_slave_0: left promiscuous mode [ 1457.851237][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.001799][ T334] veth1_macvtap: left promiscuous mode [ 1458.007431][ T334] veth0_vlan: left promiscuous mode [ 1462.328415][ T36] kauditd_printk_skb: 12958 callbacks suppressed [ 1462.328432][ T36] audit: type=1400 audit(8000023114.140:365240): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1462.356747][ T36] audit: type=1400 audit(8000023114.140:365241): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1462.364010][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.379374][ T36] audit: type=1400 audit(8000023114.140:365242): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1462.384674][ T148] audit: audit_lost=818 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.406528][ T36] audit: type=1400 audit(8000023114.140:365243): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1462.413498][ T148] audit: backlog limit exceeded [ 1462.435268][ T36] audit: type=1400 audit(8000023114.140:365244): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 1462.443222][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.461638][ T36] audit: type=1400 audit(8000023114.140:365245): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0