last executing test programs: 2m54.663567486s ago: executing program 0 (id=1): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x2000000, @empty, 0x3}}}, 0x88) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000500)=""/72) mremap(&(0x7f0000ff6000/0x4000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 2m54.588582793s ago: executing program 0 (id=8): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m54.293014922s ago: executing program 0 (id=10): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x9}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) unshare(0x26040000) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x102, 0x112) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000240)="0f01c93e660fe7150fc75fd467f20f2aa6af6ce3963e36676436660f38827e210f013c66b80500000066b96f0000000f01d967673e653666660f3adf2ed0d9f3440f20c0663509000000440f22c0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xee01, 0xee01]) fchown(r3, r9, r10) (async, rerun: 32) sendfile(r8, r8, 0x0, 0x7ffff000) (rerun: 32) 2m39.316717401s ago: executing program 32 (id=10): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r0, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x9}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) unshare(0x26040000) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x102, 0x112) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000240)="0f01c93e660fe7150fc75fd467f20f2aa6af6ce3963e36676436660f38827e210f013c66b80500000066b96f0000000f01d967673e653666660f3adf2ed0d9f3440f20c0663509000000440f22c0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xee01, 0xee01]) fchown(r3, r9, r10) (async, rerun: 32) sendfile(r8, r8, 0x0, 0x7ffff000) (rerun: 32) 57.475661332s ago: executing program 2 (id=2179): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155e, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x9, 0xa2bd, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1ff, 0x9, 0xd, 0x4, 0xb3f3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0xfffffffe, 0x91, 0x8, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x374, 0x5, 0x1, 0x9, 0xffffffff, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x1, 0x0, 0xfffffff8, 0x401, 0x46, 0xf3, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x106, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x9, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x102, 0x7ba00, 0x8, 0x3437, 0x3, 0x9, 0x6, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x5d2a0, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x4, 0x10001, 0x1, 0x8, 0x1], [0xa7f2, 0x1, 0x5, 0x1afa, 0xbfc, 0x2000008, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x101, 0x81, 0x3, 0x9d86, 0xd, 0x3, 0x8, 0xffff, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100, 0x8e3f, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'vlan1\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x2b5, 0x4, 0x1, [0x10000]}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0) pread64(r9, &(0x7f0000000780)=""/131, 0x83, 0x302a4edd) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r10, r0, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 57.332543706s ago: executing program 2 (id=2187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 57.244709475s ago: executing program 2 (id=2188): socket(0x1f, 0xe, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0]) syz_usb_connect(0x3, 0x88, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x86, 0xa5, 0xb5, 0x8, 0x403, 0xfad0, 0x142, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x6, 0x3, 0xa0, 0x6, [{{0x9, 0x4, 0xda, 0x58, 0x7, 0xa1, 0x82, 0xe0, 0x4c, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x5, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xa, 0x0, 0x80}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xfc, 0x80, 0x66}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x2, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xda, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x1, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x1, 0xf0, 0x8}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0x16, 0x7, 0x0, 0x72, 0x1b, 0xc0, 0x4}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2f, 0x9, 0x3}, @generic={0x3, 0x10, 0x4}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x407}}]}) (async) syz_usb_connect(0x3, 0x88, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x86, 0xa5, 0xb5, 0x8, 0x403, 0xfad0, 0x142, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x6, 0x3, 0xa0, 0x6, [{{0x9, 0x4, 0xda, 0x58, 0x7, 0xa1, 0x82, 0xe0, 0x4c, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x5, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xa, 0x0, 0x80}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xfc, 0x80, 0x66}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x2, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xda, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x1, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x1, 0xf0, 0x8}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0x16, 0x7, 0x0, 0x72, 0x1b, 0xc0, 0x4}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2f, 0x9, 0x3}, @generic={0x3, 0x10, 0x4}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x407}}]}) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='incremental-fs\x00', 0x200000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x11, 0x4, 0x8, 0xa, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback, 0x28, 0x8, 0x1c}, @sadb_address={0x3, 0x7, 0xff, 0x20, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}]}, 0x50}}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0xe, 0x8, 0x650, 0x0, 0x7, 0x8, 0x2a11, 0x7f, 0x4, 0x5, 0x1, 0xa, 0x8, 0xb, 0x9, 0x9], 0xeeee0000, 0x292005}) 55.88306874s ago: executing program 2 (id=2218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x9b01, 0x500) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) listxattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000400)=""/77, 0x4d) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents(r2, &(0x7f0000000180)=""/134, 0x86) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) syz_io_uring_setup(0x4d31, &(0x7f00000001c0)={0x0, 0xda44, 0x800, 0x800005, 0x212}, &(0x7f0000000140), &(0x7f0000000080)) ftruncate(r3, 0x3) capget(&(0x7f0000002040)={0x19980330}, 0x0) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa", 0xc01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x9b01, 0x500) (async) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) (async) listxattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000400)=""/77, 0x4d) (async) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) getdents(r2, &(0x7f0000000180)=""/134, 0x86) (async) memfd_secret(0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) (async) syz_io_uring_setup(0x4d31, &(0x7f00000001c0)={0x0, 0xda44, 0x800, 0x800005, 0x212}, &(0x7f0000000140), &(0x7f0000000080)) (async) ftruncate(r3, 0x3) (async) capget(&(0x7f0000002040)={0x19980330}, 0x0) (async) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa", 0xc01) (async) 55.840599824s ago: executing program 2 (id=2220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f00000003c0)={0x4, 0x99a4c651afb955fc}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2c41c0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ff5b34000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) accept(r7, &(0x7f0000000280)=@can, &(0x7f0000000000)=0x80) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x5, 0x2, 0x9, '\x00', 0x8}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close_range(r0, r0, 0x0) 55.772757771s ago: executing program 2 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4ff}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x10, 0xbe, "2eb27209d4a42c3246719cfe"}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x26}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x408c0}, 0x404c891) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=0x60) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa062}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe01}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x10000004) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000480)={0x28, 0x0, 0x2711}, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r1, 0x220, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2e2f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000600)={[0xfa06, 0xe0, 0x62, 0xffffffffffffc2ca, 0x4, 0x1, 0x8, 0x6, 0x8001, 0x6, 0x0, 0x7, 0x4c21, 0x7, 0x1ff, 0x9], 0x80a0000}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x83430350}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000840)={0xf97cff8c, 0x8, 'SE Linux', "1b3334de3c49f172a9ed31593eb08a219492ac3d241b0fb0e66100c24aadc554d75be04f38917cf390179fdae9f22033a4420e3647c5d8e03bb3e75cac4535ed4eaafb8f70c5b00488dad3acb1162dd3d3bacfd19c187e0186ce4ad7bc4d60f5d60dc0304946b7323d28bf17585c0901dc473179de4857e7f58cda0747b2bd34debbeb01e893"}, 0x96) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000900)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5e, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x11) userfaultfd(0x80000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b40)={@loopback, 0x0}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xdcaf5d8fa959c7fe}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x7c, r10, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f00)={&(0x7f0000000d00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x17c, r10, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}]}, 0x17c}}, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) fcntl$lock(r0, 0x5, &(0x7f0000000f40)={0x2, 0x1, 0x1, 0x22}) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000f80)) 55.683038249s ago: executing program 33 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4ff}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x10, 0xbe, "2eb27209d4a42c3246719cfe"}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x26}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x408c0}, 0x404c891) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000240)=""/96, &(0x7f00000002c0)=0x60) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa062}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe01}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x10000004) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000480)={0x28, 0x0, 0x2711}, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r1, 0x220, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2e2f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000600)={[0xfa06, 0xe0, 0x62, 0xffffffffffffc2ca, 0x4, 0x1, 0x8, 0x6, 0x8001, 0x6, 0x0, 0x7, 0x4c21, 0x7, 0x1ff, 0x9], 0x80a0000}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x83430350}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000840)={0xf97cff8c, 0x8, 'SE Linux', "1b3334de3c49f172a9ed31593eb08a219492ac3d241b0fb0e66100c24aadc554d75be04f38917cf390179fdae9f22033a4420e3647c5d8e03bb3e75cac4535ed4eaafb8f70c5b00488dad3acb1162dd3d3bacfd19c187e0186ce4ad7bc4d60f5d60dc0304946b7323d28bf17585c0901dc473179de4857e7f58cda0747b2bd34debbeb01e893"}, 0x96) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000900)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5e, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x11) userfaultfd(0x80000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b40)={@loopback, 0x0}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xdcaf5d8fa959c7fe}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x7c, r10, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f00)={&(0x7f0000000d00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x17c, r10, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}]}, 0x17c}}, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) fcntl$lock(r0, 0x5, &(0x7f0000000f40)={0x2, 0x1, 0x1, 0x22}) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000f80)) 4.34947227s ago: executing program 1 (id=3074): io_setup(0x5, &(0x7f0000000440)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') write$P9_RLOCK(r3, &(0x7f0000000600)={0x8, 0x35, 0x2, 0x2}, 0x8) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) (async) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) syz_usb_connect$uac1(0x6, 0xac, &(0x7f0000000240)=ANY=[], 0x0) (async) r4 = syz_usb_connect$uac1(0x6, 0xac, &(0x7f0000000240)=ANY=[], 0x0) io_pgetevents(r0, 0xff, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f00000000c0)={0x77359400}, &(0x7f0000000580)={&(0x7f00000003c0)={[0x5]}, 0x8}) syz_usb_control_io(r4, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f402c30ca86fc6400d5a98ec000000000000000000"], 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$wireguard(0xfffffffffffffffc, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 3.742795309s ago: executing program 1 (id=3082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x100000000}, @uexit={0x0, 0x18, 0x8000000000000000}], 0x30}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0xfffffff7) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x5411, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x50}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000820}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xa8) close_range(r0, 0xffffffffffffffff, 0x0) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) 3.727540571s ago: executing program 1 (id=3083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x3, 0x80, 0x2, 0x8, 0x7f, 0x2000000a, 0x20000000, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x7, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x5, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x940, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x1, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xffc, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0xa, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0xffffffff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x800002, 0xfffffffb, 0x3, 0x3, 0x101, 0x10000, 0x9, 0x7ffd, 0xffff, 0xa620, 0x8000001, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x9, 0x7e, 0x100, 0x9602, 0x7, 0x3, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x100, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40850) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x50, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 640.975777ms ago: executing program 3 (id=3147): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = dup(r1) listen(r2, 0xb1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) dup(r1) (async) listen(r2, 0xb1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async) 623.220058ms ago: executing program 3 (id=3148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) socket$inet6(0xa, 0x5, 0xffffa254) 583.866242ms ago: executing program 3 (id=3149): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') getdents64(r6, &(0x7f0000000080)=""/38, 0x26) getdents64(r6, &(0x7f0000000040)=""/22, 0x16) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x3}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x7, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0x9, 0x3, 0x8, '\x00', 0x6}, {0xf, 0x3, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x4, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="100006000000000020"], 0x54, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r7, 0x0, 0xee01) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 581.858652ms ago: executing program 3 (id=3151): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xa1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10010, r1, 0xffffa000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace(0x10, r2) 532.864117ms ago: executing program 3 (id=3153): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000480)=0xfffffbff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0xffff050c, 0x7d79) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x200, 0x1, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r4 = dup(r3) prctl$PR_SET_KEEPCAPS(0x8, 0x3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r2, r5, &(0x7f00000001c0), 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)=ANY=[@ANYBLOB="6ea8efba7b55a30837819903fa0efe768073ee50380de3f5f63d1e0b", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',noxattr,k']) fcntl$addseals(r5, 0x409, 0x8) fallocate(r5, 0x3, 0x2009140, 0x8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000000c0)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="020a3f000700000026bd7000fedbdf2505001a0000000000000000000000000000000000fe8000000000000000000000000000142d0b9c"], 0x38}}, 0x400c800) close_range(r1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r10, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) epoll_create(0x4) 467.640053ms ago: executing program 5 (id=3155): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x1, 0x1) getdents64(r1, &(0x7f00000020c0)=""/54, 0x36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x800000000001, 0x7da2, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000001000000000000000000000000000000001000", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dff0f000300", "f4bd000000801900", [0x4, 0x2000000000001]}}) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, r0) (async) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x1) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efivarfs\x00', 0x200000, 0x0) 426.964728ms ago: executing program 5 (id=3156): r0 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x40081271, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x8, 0xb, 0x8d5, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x65, 0x0, 0xf0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0x23, 0xf8, [@broadcast, @private=0xa010101, @remote, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xc, "5d29bdf5646154d1d9ad"}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@remote, r1}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = dup(r3) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x15d7cc7b, 0x5, 0xf, 0x8, 0x1a, "93fc000000010000000000002000"}) write$UHID_INPUT(r4, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) shutdown(r0, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000600), 0x0, 0xff, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 425.997927ms ago: executing program 5 (id=3157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, 0x0) (async) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) (rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 394.867871ms ago: executing program 5 (id=3158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) tee(r0, r1, 0xbfff, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ce"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="94916f155b78040e73bbd2eed7619e2ca7fc35c9213632cadc2b30ad4df16e2c275baa57e8e5f9d0c1c377553309280202007282ab79d781b502c126b8ea142b37134afe00000000c7701b5d08fc3b1bc94384739ba0f95d194e3404b7bed38c032e2e49bf35e3b5614977fe8e7b052d52754053de285bd4d182c4276df4db93da87e0d3ac53cf4605ed29bd846ef4dd456dbdec139e09d1bde17974c404e5d23ba63c7e08c9b58946701322fa51d398866c849636ede66cdf6b13dc8928d03a821f9226a749f0cd521680c64916b7a4dbaeeba64d57695511f925", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="739d"]) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000200)=ANY=[], 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = gettid() fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x2, r7}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/64, 0x40, 0x2, 0x40}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, 0x0, 0x804) r11 = socket(0x2, 0x3, 0x5) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x200000, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x3]}}, 0x5c) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000001100)=ANY=[@ANYBLOB="010000000000000059020000000000000028"]) r15 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) sendmmsg$inet6(r15, 0x0, 0x0, 0x20044000) 394.388961ms ago: executing program 3 (id=3159): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @loopback, 0x8}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d727185d78b952de7b9f470625b973a5", 0x10}, {0x0}], 0x2}}], 0x2, 0x4040005) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1}, 0x0) r6 = fcntl$dupfd(r1, 0x0, r1) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000f1b5b2ee8e9b855fc849938afa12baaa78cf988c3eb637695886da105bd7a3f842f8f6433e2c13855f6d704408674d672f893a4c402ab3c26706c19e7ab3795cd23790bff03664e78fddd943e478c3e55622fa02e7d174676bd1755e468fff5a7244403480d37e78a5fcb8f3d4feed6e318f8c11de34ec348543191eecdb37ea8d1e270000000000000000", @ANYRES16=r7, @ANYBLOB="000128bd7000ffdbdf2569000000"], 0x14}}, 0x4801) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="3c1f0000", @ANYRES16=r7, @ANYBLOB="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"], 0x1f3c}, 0x1, 0x0, 0x0, 0x842}, 0x40880) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) setuid(0xee01) 394.133581ms ago: executing program 5 (id=3160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000)=0x14, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) 336.830096ms ago: executing program 5 (id=3161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000003c0)=""/4107, 0x100b}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x18c0}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904"], 0x0) r4 = dup3(r3, r0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x18, 0x0}, 0x5b4}], 0x1, 0xc040) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) sendmmsg$inet6(r2, &(0x7f0000000000), 0x0, 0x20000001) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x116, 0x1}, @flat=@weak_binder={0x77622a85, 0x130b, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x22}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xe}, 0x2) accept4(r6, &(0x7f0000000100)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80, 0x800) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 212.942729ms ago: executing program 1 (id=3164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="3a7be668"]) read$FUSE(r1, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x220200, 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) (async) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xb0, 0x0, 0x1, [{{0xffffffffffffffff, 0x2, 0xb, 0x96a, 0x80000001, 0xffffffff, {0x5, 0x8, 0x1, 0x7d, 0x9, 0x5, 0x1000, 0xc, 0x18000400, 0x8000, 0x9, r3, r4, 0x19, 0x80}}, {0x1, 0xac4, 0x2, 0x80000001, '..'}}]}, 0x0, 0x0, 0x0}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r6, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 134.073646ms ago: executing program 4 (id=3165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000200)={0x100020, 0x1000f3, 0x40000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de231001c0"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x55, 0x0, &(0x7f0000000200)="6cc2517326f0186a72032c7b632d4693f6e6c9fe72ca2b3f10c526bb82d4a3786efb2df7fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e0800000000000000df"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000200)={0x100020, 0x1000f3, 0x40000}, 0x20) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de231001c0"]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x55, 0x0, &(0x7f0000000200)="6cc2517326f0186a72032c7b632d4693f6e6c9fe72ca2b3f10c526bb82d4a3786efb2df7fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e0800000000000000df"}) (async) 131.784057ms ago: executing program 1 (id=3166): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x22803, 0x0) ioctl$RTC_WKALM_RD(r1, 0x40187014, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @loopback, 0x3000000}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 131.509057ms ago: executing program 4 (id=3167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0xfffffffffffffffd}) 97.92399ms ago: executing program 1 (id=3168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x500}) getrandom(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xa3b, 0x7, 0x6, 0x7fffffff, 0x7, 0xf, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x800000080000001, 0x3, 0x6, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0xa0810}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x4000, 0xa, 0x81, 0x7, 0xf8, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x10000, 0x3, 0x2, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x0, 0xdddd0000, 0x8, 0x5, 0x1, 0x7, 0x6, 0x9, 0x0, 0xa7, 0x8, 0xf}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x2000, 0xeeef0000, 0x10, 0x3, 0x15, 0x5, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x4}, {0x80a0000, 0x80a0000, 0xb, 0x2, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x1}, {0x1000, 0x1, 0xc, 0x5, 0x0, 0x5, 0x4, 0x7d, 0x3, 0xf7, 0xb, 0x70}, {0x0, 0x1, 0x3, 0x5, 0x7c, 0x7, 0x1, 0x7f, 0x2, 0x8, 0xf0, 0x9}, {0xd000, 0x30}, {0x2000, 0x8}, 0x80000031, 0x0, 0x6000, 0x2024, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x60, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000100)=0x8000009, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r8, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x30}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x49}, 0x4000080) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r5, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 96.96334ms ago: executing program 4 (id=3169): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x880, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x6, 0x1ff, 0x1, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r5, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r6, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 78.697422ms ago: executing program 4 (id=3170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f0000000400)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/57, 0x39}], 0x1}, 0x7612}], 0x1, 0x2061, &(0x7f0000000440)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x448c4) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x28802}, 0x80) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) 1.00866ms ago: executing program 4 (id=3171): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2a402, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x10, 0x14}, 0x18) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x3) (async) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) close(r1) 0s ago: executing program 4 (id=3172): r0 = fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x9, 0x100, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x64, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x24, 0x5c, 0x1, 0xa, [{@rand_addr=0x64010101, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xffffe2e2}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4e94}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8005}, 0x2000c814) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000240)=[@in_dx={0x82, 0x20, {0xa52d}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) inotify_init1(0x80800) socketpair(0x1d, 0x5, 0x80000000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r3, &(0x7f0000002380)=[{&(0x7f0000000300)="2b214610ef161a13f75b3e3edb8f55aa2da70cb891ba67ac8ce744d38e800dcf0b9680cb3141dd541dd39deca691ce78243c162d779336a07e25cbd8898e7332704c54c88877276189e6aebbe1a4aefd", 0x50}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f6b4357592b68123f4c573a75034a0ded46875f11523a3dc51aec95b6fafdf82e622cbe45501876ecf558b3f02b60e48261b767527135a30b7dc00131b58c643e13512598dba98cf173525a6a7f93a1a7b485967f3a3ff7ecab72d4dccd2a16c93d7bc048cfd20d943a7943d1a193a63ea22cd9af95471092fb988ed3da10079354dad5593b349d3f29d514af0e28627e9a9ca80f76fd3ecb9629a7e8496eda0e7e3275ce4780180792472a252759edecb62f9814651efcdccc301ce5524c7b1a38a527f08dddc6e4fedaa6a6df84622ca5d472c6799fdbed1f240f63983c5480d424470720a6d0dd7f8613177a2303c9761e62ae2fc27f077c177519a9edaa1534b2a781abe50e8a0992ce759134853b77487875fec3ca3bbbf634e3ddd670270d9129054164f34a192bfb2fdcfe596633f52e96d3b0ee5dc9e036778907c478c5d882eb5ff57918d21655c8d30774243f0aa248b408d9938c87ce9c9d9a29a35d9ff2461104a25bfae0bcd7be61e3003abbe079d18fc3d41a5cb8208fa4495e0ec66bb2ecd3f70ef5babf9c797705f147105adccb1cf70662ec21553d3428e6e2b7a8c7e4a93fa04914edec56dc8ba00e72be527fb7c42f173841e197344a7111fd452755f3c57a2a1df5fa58073c6047a1cc502b2a7b7e855b5cc34ebe12c10aaead53c500c782897d73f25483ff269059bc9a84afeb497b92c981084207ecb43de871b54c35ba99e395ccd8740aa7a6793f203622f121bc95d3046ac0a545a5032af37e8571247c35dc0e1e1c3f30865a0a73a6753d8287bba0276b1ecf50dfb8c6ea86d572e73f0d087fbd3e72bbc8e977fd9b20b546a025b24f4acd86ef679663dda0c64825eac6fcc1e69b77603abca154704ed9bd4890a7b7d5a690552ce8f14082586cb92cde5cd3817426ab157628dce89fef64df06fc6518ddb519526ca92686580e6a68cd56a0e8dedbed6c8936e2f7dc85eb132df1bb067d95b92bdebb7e248d5c0e985b09e3854d72fc9deb9cda6e7686b102a8e1d00a6f9a813b1d0af794c859a55399fa5afbb13cad6db2ae144103cc6dac3165bd612e826d691618042a9ca77d8095b7f0eae62ece0c5c424d80a21901faa6d8f809439e335cde69bd0e0d07fffc634cb288ccfd4b2a17c994835a6290487b99743a729d0354dd512b2a7742ad08aac32a4a6ed8457f4266e6bcf5dcfefeb416b26d5743b77e706b23e299baced96eab4373dff90e37e01c62917b01f41c2faacaa856c2850153c1f2b97388e2e933b084a62f1cc45a5b7fd4f170b636a96345e5db55fcfc83a85178d251a8c17b24cfcf7c8cf1f42404a56d2f6feb9ae22769e43b1282397d5ecf47f7aa2880dbdff5a01cf98dc0751c589d0df851666b507b9997ceab81c2f99e89ae65758c7bb2356b470050e1a185f9d6049bdecc9174ef278f24981f55168a82cd80a415729a1dbc99fcde90e0277887bbfebbceb5c2875f35356730bb4173a831461c331ff091310f35a3d5d5293e94d7797b8d4b49369b70ab9e07f9c77b9e955adcfc0dcc7dee0829993d6d1177d5cb05b0be3fd23bcb6c524b9c7357b41c22e2b066e29470ff36680efa20ada0a146d3cb6764bc73161429259e1152d38af802af7e39f82db8e6d79748df0bd76867f6f610ae895b1b93757fec8d114606aa7457f543b1e303145e11c5e60b95fca9879858f73d741a9d036c698a97d256336785d651eee9408fb282cce62ea34f86c15761118387cb46ad5eaab9765cdaf56aa18e34c8240d1dce79c0f7ebd687199dca548368274e490c19b34e5aac702e02f63789e825d8065b01f4988bf9825f537bb7336445243a2fb60a7faba59d0507fd5419bfb61caca821f52c481be21ec8072eec01c09b90a9c6eef2e010d35d312ecf2745a4224cad490bbaa7ebcc9261c8892d6389df1c8a9702538515a26272834153f7d316b18b1057e8c5a544ce4bf4ab1dbb9c7a42c49b6bd88a5aaeae5ec3b7daa16f0be301744fb5daf766e56aa2e7e9c37c682b73eaec26303701efba940ebb61a3a58a7bbaff3ee407f30c876356a95a64406a68158036512f7896545671b79270f7fa96019449970a73d1356ba1f5fcb991a742478410b8216cc31fa430a4d2083dea5371a906395b5e5baba15ae18aae0f530acafd694964b8e8b26f45795337a3db4af04db7e3b7dbe009ade85ee3cc50fa98947f4367d3e12c87d447872914621db7f02b16c838a385667e68a495495ddb4829f4fecad1ca47845472e1116d07abe18b6864fcb6256f2bfdb044166d2346d4ccae12452aa94d36874b134b2013dbfb2b8729cc1cd1912e313903db47084c18cbdba96c6de68aea7f149bbeec9bbfe6aa7085172f322819ec1f01013cdfa781096e0721799cb1b256a0b467b17491c4b1480d9e0602179068d3d0f73d1007d6083e56e3003ae5bcfe45fb2a599aa87962362de6f2665c51cbbb2e3aa88511103412f72d21f28670a395aa23a590793e9b269ff8108953b92052ca0ffdaba36a4ffeba5c3005c2b390e50cc49db26d64c0b0f90f461e30710b5672fd7dc4a747a48ad59a49eb4365dfffd748244c137d558aadf6b75aa283f8f5cb1ef45b1f7c62b9a163a33e0e36e4b320c8a2671c550921e0d541eb6801d8e7eb086fa613b5a4c9c3117cd4386553879869fe738e48c9553a0bd789fcb8fdbabf686f6a4381f59b22cf5921e98e725ae8c9e7e3a07e1df823c54e7cae92095b166c4a8d3576d5ad50a5ea7c7346e90354a533798ce08cc405e2ee1c0e8a4b84143e46de0f38c704cd133078749ad1cccbb40dfe9b183df0f3fc37ce76da681c0187a49c6f43d53ac08885a0b52019a66c8d369b96855fe9fdfe84075d29689d69169bc114541ab156c6f9f043f7c7ebb47db588176e697ee2b24f3c8d261a4a4f7114f82a72f507022877dc7296e2c2f8f3e5686aa8ebfe21d00e1b20af17d5ec80d9db9e6b017632cf637a6a56c4adc7d34cdeae811578e2fcb1fed9af91d64dcec7f561e752727b458e2aadc757523b12bc4ae104035cbd7aed5cddd65da26b64cae90c12c81ccd0dfcf411c10084e3c3da8d1233ad0c636b62ee8857e716f03217c33bda631cb2f59f8600f304ea7c8363f67ec0ef3a9a06cb59a870f73d19c1d87a4e498eaf19309c3b5285c56ecf344212c92abfe0c0e9e4d196a5d3e59802bc5a0766f3e75d51d2b2a8e5ff03cafe23548309b46a51efbaadcaa13f1aa7996cde1c9ff3670b778b45c9a3da1d051a9b2d85c5ac285f6cc90190bccba8d2f18dbd6e2f9cb061e2fd34f98b7c0564990bcd618ca912ee048ed42e4e5210fda178f6789ecbd32b43c2848bd444b1f98221530a2981916e4358b7339aa98eadb57ef048fe8fdfc522f284b27a949eaadb81256a32984b71b163ceaba92dca4fa8e75382958ed8e6f76620c2bdc624fa9fa0ee56619d66138468af880ac6cb93d81ee9f984fd5e70069971257d1b17ef92a9341834fc43e204d0f797d9dafff2ec3977bc138aa24c06eaf3cf0bf89fa7183556c317aeb8aae0ba88e4404074c72e9e8594bec5e2a02a0bde6018f0bcbf7ff66cd8155f17acabde8154a2410560157b68cb58a715003c6c2df4a3a493bfeb12e9ce9963f959f98389c00537ee4b4be89a665cda793b9fe53dac7279875cd0e028c59c1080bc99a1641f61977d8d09256b0146c7699b63b543f437e4be9e343d0f8bc888c9c1af5b2fbdf471add8955335b724dae85868439cbefb766e0c534d866ea26d6292146f8fbaccb4d40fbfd3aba85f39aa73f98dd6559e7c26be3501520c6e93b0a8f51296dfda93a2a5d47b4f4957d7c025770ed2f64ca88e9ee0b6cd7b1efdd04b32057310b74358d6b7980b1b6ab76799703f7eceef3c1612af272a8bbf60482d3953b8da1cbe63f461f141799b246bc6a7e4dc59f4c5343891abb0c941cb395e03188436572fe0fed74322373b32020d3c21df84599ccd98d40bea29ba83311bcb96049efbe0ce55886561234d388d39e624d61f9573f7229d5eb1c5263dab5320618be37058019a093af78fc9737de28f5c5a5a0e75526bb06da874c5a1195956117fe533429c57fb0249af7f2f94315cf514c3880176b873b2e90b634d3a552179d4497aa4496f8a00aba5fb52cf458f49690b26c2296d1b7d4538417217aef2cdbc24a7bf79c8372b79e0c841bef47b89ae6b149c9d34c7277568daf946137e3e326dafdb56440dd0ffbbfaeec3033db6b7edb545fe3457dcf23da3b629190d4eeb27fcb98bcf09f2b9c01a88573f936a16769041a903a54057a316f137f02f476cd710b0591c478ba545c6903b3fe7743e01416f1f83980b5b67338f1416ee33c9b96f598fa9c25bb7fdb45cdf37f6cf5510978b87d69aef2878c205e36df46f1916500a3b15c122e3709b08ddd56efec194e43d17818066031cded11019c110a10c9b13e567e71938f11bdaa155b584162399c702776ad4c0e31378798db4e6c52a0b765cb2a10e2935e5dc88ca3a6f1646b301f12a4fa2d637c68c0f68f6e368caa2a45f2292868e9bffbb1d8b6446c1e409664dadf546b7426982136e5f9b3792dcb27522980ceeaa43b341be571aed3dd41dd7a991943f92195d80d762bd6174a28955be08037551774e2a22a6e3a489a41377b0c05bff2853cb314c422a39f10a42e77d7ee499bf8ae726befef24db98faf5f39c314f6b443a6db7d456a94e554aa35c71ba316c61e9b2894466cf2b8f5856c3ed0fce7676dfc7a089bbf9971cefb8fe9d7ec68c3ad3dcc8b42c0b90deb8432dcc181fc354bc456e0edf32518c4c53beec4a2ad4e4ee0ee5c4b90a50a9968acb973c132e3845cf67cebca230204581c8adccbf81e1b90a26fb29af65a9df298fa0162d34f73813fa93bb64286aec49bfa5537329fbb347e9eb5514d673ff5100f803afb443d1904639cd43bf53695be48b04ee62671fdc36053646ecf94437ae8e5811841e77e0873283b5457d21d7d61ba3d3a3af4e8a30020cbb89836cbf6713b5d4bc6d38efd2ce053085c391ddbaeec4a4cc76a12cfacc5e0855e9da787bea4f45d64a8d10aa4ed215ffd94e5f36d1ac2c0e19306aa0923fd484a3b42de9da41de0ca8c37b425d32194ef62714466219abcf1ffb53c0d72b23639b3680f253a2f8f7fc4e52debd2bfa7d9ce34908a6866c7b2c577044e551bf47687d458c3ea2019d0dd5307dc80154a045429127f152bcef7306394fd4c40daba9d9c3eb77a0544ca240f0e96cedba14664d9186a1cf4d37e5841569e980d4b26c3b6462c6068441170db5e3fbf565de87b156cf718b93c171eee6ec9f7a2f7c5bc491d291d812209aefb8b8857289e6a35f0f62bf70eb6fe2e604832d24e721769d347cd14906500c7044199f389965b4c95ee88f7b9e93b81e10a5173b24701b276cbd0e5939cb6598d711f480d73621102ca2fcb839e9117fa8f61bfca6f340b7c8f84f15a64ea4f13ee0cc69571fad390f0e6a1297f5818b65a5b0977ab3902ea3204c220b310cd21018e37bca3408caae57e19d3ef1a66eb941cee107927792d7e63af5f2b1b5990f449b8fa014910cd9b647700f6287bf5f74e3982ce3f89b057f36bfc932cf3ba6c20bce5c2a9b61d760693d2d8e1f7f09a515787d98cdaa7b5d9ec092a1f42af224481cd260ffbffa51adf1db683026f27a9d05450f74127ded0c85b9cc064156b5a941ab50c2dd8c3f9f515af3d9a515b3e134d733c5cdeeaf78eca4e2a7f5e1983e914d510ebf5cdad0457302045359", 0x1000}], 0x3, 0x5, 0x0) process_madvise(r0, &(0x7f00000033c0)=[{&(0x7f00000023c0)="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", 0x1000}], 0x1, 0x17, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440), r5) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x2c, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000003540)={0x0, 0x1, {0x12, 0x9, 0xb, 0x1, 0xa, 0x3d, 0x1, 0x14f, 0x1}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000003580), 0x10040, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000035c0), 0x40400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000003600)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003640)={'wlan1\x00'}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000003680)={'vlan1\x00', 0x4}) read(r0, &(0x7f00000036c0)=""/9, 0x9) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0xc004) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x20000000) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000003900)={0x1, 0x1, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003940)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4011) openat$procfs(0xffffffffffffff9c, &(0x7f0000003a80)='/proc/slabinfo\x00', 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003ac0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r8, &(0x7f0000007b80)={0x28, 0xfffffffffffffffe, r9, {{0x3, 0x9dd}}}, 0x28) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered blocking state [ 142.078439][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.085599][ T6548] bridge_slave_1: entered allmulticast mode [ 142.092160][ T6548] bridge_slave_1: entered promiscuous mode [ 142.155824][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.162974][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.170326][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.177392][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.181882][ T6575] rust_binder: Write failure EFAULT in pid:55 [ 142.205119][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.223322][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.233348][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.240493][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.250018][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.257478][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.284516][ T6548] veth0_vlan: entered promiscuous mode [ 142.297671][ T6548] veth1_macvtap: entered promiscuous mode [ 142.338875][ T6581] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.351294][ T6581] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 142.362193][ T6581] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.374000][ T6581] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 142.383994][ T6581] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.392047][ T6581] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 142.400827][ T6581] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 142.412819][ T6581] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 142.443316][ T36] audit: type=1400 audit(137.156:690): avc: denied { lock } for pid=6595 comm="syz.2.2103" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.629863][ T36] audit: type=1326 audit(137.334:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.2.2104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7faf38efc9 code=0x0 [ 142.660250][ T1510] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.684966][ T6602] rust_binder: Error while translating object. [ 142.685012][ T6602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 142.691436][ T6602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 142.832869][ T1510] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 142.850439][ T1510] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 142.859092][ T1510] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.869544][ T1510] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.878959][ T1510] usb 4-1: config 0 has no interface number 0 [ 142.885364][ T1510] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 142.895677][ T1510] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 142.906960][ T1510] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.917111][ T1510] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.930544][ T1510] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 142.940549][ T1510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.950085][ T1510] usb 4-1: config 0 descriptor?? [ 142.956873][ T1510] usb 4-1: MIDIStreaming interface descriptor not found [ 143.170530][ T6590] rust_binder: Write failure EFAULT in pid:8 [ 143.170799][ T6590] rust_binder: Write failure EFAULT in pid:8 [ 143.182646][ T31] usb 4-1: USB disconnect, device number 5 [ 143.304672][ T6616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44570 sclass=netlink_route_socket pid=6616 comm=syz.4.2109 [ 143.334882][ T6618] vlan0: entered allmulticast mode [ 143.340974][ T6618] veth0_vlan: entered allmulticast mode [ 143.353855][ T6618] vlan0: left allmulticast mode [ 143.358851][ T6618] veth0_vlan: left allmulticast mode [ 143.425518][ T6627] rust_binder: Got transaction with invalid offset. [ 143.425604][ T6627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.433060][ T6627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 143.515367][ T36] audit: type=1400 audit(138.169:692): avc: denied { map } for pid=6630 comm="syz.1.2115" path="pipe:[2851]" dev="pipefs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.756616][ T36] audit: type=1400 audit(138.385:693): avc: denied { create } for pid=6651 comm="syz.3.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.796010][ T6656] IPv6: Can't replace route, no match found [ 143.811224][ T36] audit: type=1400 audit(138.441:694): avc: denied { ioctl } for pid=6651 comm="syz.3.2121" path="socket:[24173]" dev="sockfs" ino=24173 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.914950][ T6659] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 143.922442][ T6659] rust_binder: Write failure EINVAL in pid:15 [ 144.476845][ T6696] netlink: 'syz.2.2137': attribute type 4 has an invalid length. [ 144.491533][ T6696] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2137'. [ 144.501150][ T6696] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 144.509071][ T6696] netlink: 'syz.2.2137': attribute type 2 has an invalid length. [ 144.517556][ T6696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.517582][ T6696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 144.606215][ T6700] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 144.665895][ T36] audit: type=1400 audit(139.248:695): avc: denied { getattr } for pid=6706 comm="syz.2.2141" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 144.665933][ T6707] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.833156][ T36] audit: type=1400 audit(139.398:696): avc: denied { unmount } for pid=6119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 144.879711][ T6718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.879850][ T6718] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 144.962092][ T36] audit: type=1400 audit(139.520:697): avc: denied { listen } for pid=6723 comm="syz.2.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.972802][ T6732] loop2: detected capacity change from 0 to 7 [ 144.992678][ T36] audit: type=1400 audit(139.549:698): avc: denied { execute } for pid=6723 comm="syz.2.2147" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 145.335563][ T36] audit: type=1400 audit(139.868:699): avc: denied { map } for pid=6765 comm="syz.3.2161" path="/11/bus/bus" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 145.608732][ T6766] rust_binder: 38: no such ref 0 [ 145.613810][ T6766] rust_binder: 38: no such ref 16385 [ 145.619277][ T6766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 145.879325][ T6791] fuse: Bad value for 'group_id' [ 145.893492][ T6791] fuse: Bad value for 'group_id' [ 146.116794][ T6816] kvm: emulating exchange as write [ 146.210547][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2178'. [ 146.238061][ T6819] rust_binder: Write failure EFAULT in pid:42 [ 146.328217][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 146.344104][ T6851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37889 sclass=netlink_route_socket pid=6851 comm=syz.4.2185 [ 146.393746][ T6855] rust_binder: Error while translating object. [ 146.393778][ T6855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 146.400080][ T6855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:128 [ 146.410189][ T6857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.440000][ T6861] binder: Unknown parameter '0x0000000000000000' [ 146.448010][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.457123][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.465126][ T6862] incfs: Error accessing: /dev/md0. [ 146.470476][ T6862] incfs: mount failed -2 [ 146.475766][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.484328][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.484915][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.493481][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.699904][ T514] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.775080][ T6882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6882 comm=syz.1.2196 [ 146.787906][ T6882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6882 comm=syz.1.2196 [ 146.859823][ T514] usb 3-1: Using ep0 maxpacket: 8 [ 146.866255][ T514] usb 3-1: config 6 has an invalid interface number: 218 but max is 1 [ 146.874757][ T514] usb 3-1: config 6 has an invalid interface number: 22 but max is 1 [ 146.883423][ T514] usb 3-1: config 6 has no interface number 0 [ 146.889869][ T514] usb 3-1: config 6 has no interface number 1 [ 146.896085][ T514] usb 3-1: config 6 interface 218 altsetting 88 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.906085][ T514] usb 3-1: config 6 interface 218 altsetting 88 has an invalid descriptor for endpoint zero, skipping [ 146.922410][ T6886] kvm: kvm [6885]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000d) [ 146.930871][ T514] usb 3-1: config 6 interface 218 altsetting 88 bulk endpoint 0x7 has invalid maxpacket 64 [ 146.941241][ T514] usb 3-1: config 6 interface 218 altsetting 88 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 146.952601][ T514] usb 3-1: config 6 interface 218 altsetting 88 has a duplicate endpoint with address 0x1, skipping [ 146.963564][ T514] usb 3-1: config 6 interface 218 altsetting 88 bulk endpoint 0x6 has invalid maxpacket 8 [ 146.973534][ T514] usb 3-1: config 6 interface 218 has no altsetting 0 [ 146.980353][ T514] usb 3-1: config 6 interface 22 has no altsetting 0 [ 146.988734][ T514] usb 3-1: New USB device found, idVendor=0403, idProduct=fad0, bcdDevice= 1.42 [ 146.997921][ T514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.005979][ T514] usb 3-1: Product: syz [ 147.010191][ T514] usb 3-1: Manufacturer: syz [ 147.014799][ T514] usb 3-1: SerialNumber: syz [ 147.020722][ T6887] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 147.020747][ T6887] rust_binder: Error while translating object. [ 147.022155][ T6861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.029910][ T6887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.035903][ T6861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.043602][ T6887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 147.270089][ T514] ftdi_sio 3-1:6.218: FTDI USB Serial Device converter detected [ 147.287387][ T514] usb 3-1: Detected SIO [ 147.291603][ T514] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 147.299580][ T514] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 147.309968][ T514] ftdi_sio 3-1:6.22: FTDI USB Serial Device converter detected [ 147.317901][ T514] usb 3-1: Detected SIO [ 147.322657][ T514] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 147.332770][ T514] usb 3-1: USB disconnect, device number 7 [ 147.342095][ T514] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 147.352227][ T514] ftdi_sio 3-1:6.218: device disconnected [ 147.359445][ T514] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 147.369265][ T514] ftdi_sio 3-1:6.22: device disconnected [ 147.571584][ T6889] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2199'. [ 147.807955][ T6938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.817751][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 147.817772][ T36] audit: type=1400 audit(142.194:707): avc: denied { append } for pid=6942 comm="syz.2.2218" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 147.854852][ T6943] overlay: filesystem on ./bus not supported as upperdir [ 147.864582][ T6949] rust_binder: 49: no such ref 6 [ 147.869597][ T6949] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 147.938816][ T46] bridge_slave_1: left allmulticast mode [ 147.946821][ T46] bridge_slave_1: left promiscuous mode [ 147.952640][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.968853][ T46] bridge_slave_0: left allmulticast mode [ 147.979172][ T46] bridge_slave_0: left promiscuous mode [ 148.000319][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.102969][ T6957] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 148.113805][ T6957] overlayfs: missing 'lowerdir' [ 148.155134][ T46] veth1_macvtap: left promiscuous mode [ 148.160791][ T46] veth0_vlan: left promiscuous mode [ 148.264290][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.271599][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.278824][ T6960] bridge_slave_0: entered allmulticast mode [ 148.285127][ T6960] bridge_slave_0: entered promiscuous mode [ 148.292509][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.299621][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.306827][ T6960] bridge_slave_1: entered allmulticast mode [ 148.313438][ T6960] bridge_slave_1: entered promiscuous mode [ 148.383775][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.390918][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.398290][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.405398][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.437988][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.445456][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.458873][ T36] audit: type=1400 audit(142.804:708): avc: denied { accept } for pid=6993 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 148.479568][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.486731][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.507443][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.514616][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.540259][ T6960] veth0_vlan: entered promiscuous mode [ 148.556958][ T6960] veth1_macvtap: entered promiscuous mode [ 148.604741][ T7006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 148.604778][ T7006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:2 [ 148.710536][ T7017] binder: Bad value for 'stats' [ 148.728182][ T7015] FAT-fs (rnullb0): bogus number of reserved sectors [ 148.735078][ T7015] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 148.742322][ T36] audit: type=1400 audit(143.057:709): avc: denied { write } for pid=7016 comm="syz.3.2242" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.742757][ T7018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.776131][ T7018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 149.228269][ T7036] overlayfs: failed to clone lowerpath [ 149.353586][ T7038] overlayfs: failed to clone lowerpath [ 149.771707][ T7042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 149.852742][ T36] audit: type=1400 audit(144.108:710): avc: denied { mounton } for pid=7048 comm="syz.3.2251" path="/19/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 149.853434][ T7052] FAT-fs (rnullb0): bogus number of reserved sectors [ 149.890738][ T7052] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 149.919247][ T7055] netlink: 'syz.5.2253': attribute type 11 has an invalid length. [ 149.927138][ T7055] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2253'. [ 149.952780][ T7060] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.960813][ T7060] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 149.969558][ T7060] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.977969][ T7060] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 150.091719][ T7071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 150.091765][ T7071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67 [ 150.266508][ T7089] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2261'. [ 150.284975][ T7090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 150.285871][ T36] audit: type=1326 audit(144.521:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.1.2261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f577418efc9 code=0x0 [ 150.569034][ T466] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 150.718264][ T466] usb 6-1: device descriptor read/64, error -71 [ 150.974044][ T466] usb 6-1: device descriptor read/64, error -71 [ 151.100606][ T7112] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 151.122406][ T36] audit: type=1400 audit(145.300:712): avc: denied { validate_trans } for pid=7113 comm="syz.3.2269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.161748][ T7118] overlayfs: failed to resolve './file1/file0': -2 [ 151.240655][ T466] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 151.389757][ T466] usb 6-1: device descriptor read/64, error -71 [ 151.645539][ T466] usb 6-1: device descriptor read/64, error -71 [ 151.767600][ T466] usb usb6-port1: attempt power cycle [ 151.813396][ T7140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 151.813435][ T7140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 151.863429][ T7146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.125198][ T466] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 152.158316][ T466] usb 6-1: device descriptor read/8, error -71 [ 152.297000][ T466] usb 6-1: device descriptor read/8, error -71 [ 152.551579][ T466] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 152.574070][ T466] usb 6-1: device descriptor read/8, error -71 [ 152.712544][ T466] usb 6-1: device descriptor read/8, error -71 [ 152.816904][ T7189] rust_binder: Error while translating object. [ 152.816947][ T7189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.823254][ T7189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 152.833309][ T466] usb usb6-port1: unable to enumerate USB device [ 153.556792][ T7226] input: syz1 as /devices/virtual/input/input14 [ 153.608584][ T7236] rust_binder: Error while translating object. [ 153.608622][ T7236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 153.614885][ T7236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:55 [ 153.737826][ T7246] rust_binder: Write failure EFAULT in pid:65 [ 153.881914][ T36] audit: type=1400 audit(147.889:713): avc: denied { load_policy } for pid=7260 comm="syz.5.2318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 153.889781][ T7261] SELinux: failed to load policy [ 153.917768][ T7263] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2319'. [ 154.065450][ T466] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 154.226093][ T466] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.236466][ T466] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.247416][ T466] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.256880][ T466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.265121][ T466] usb 4-1: Product: syz [ 154.269438][ T466] usb 4-1: Manufacturer: syz [ 154.274077][ T466] usb 4-1: SerialNumber: syz [ 154.395460][ T7311] rust_binder: 91: no such ref 6 [ 154.400865][ T7311] rust_binder: 91: no such ref 3 [ 154.405934][ T7311] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 154.499780][ T7257] incfs: Options parsing error. -22 [ 154.505131][ T7257] incfs: mount failed -22 [ 154.630279][ T7317] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 154.662254][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 154.723574][ T466] usb 4-1: 0:2 : does not exist [ 154.832789][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 154.839021][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.850235][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.860069][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.872929][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 154.882052][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.891378][ T10] usb 6-1: config 0 descriptor?? [ 154.930793][ T7329] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2344'. [ 154.972881][ T7334] overlayfs: failed to clone upperpath [ 154.980536][ T7336] overlay: ./bus is not a directory [ 155.016054][ T7342] overlay: Unknown parameter 'appraise_type' [ 155.069427][ T7352] netlink: 'syz.4.2351': attribute type 11 has an invalid length. [ 155.077383][ T7352] netlink: 'syz.4.2351': attribute type 1 has an invalid length. [ 155.085964][ T7352] netlink: 3593 bytes leftover after parsing attributes in process `syz.4.2351'. [ 155.110605][ T7356] overlayfs: failed to clone upperpath [ 155.158417][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.168040][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.297208][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2359'. [ 155.307410][ T7377] tc_dump_action: action bad kind [ 155.326109][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.337067][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.346668][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 155.354048][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 155.366042][ T10] usb 6-1: USB disconnect, device number 6 [ 155.371075][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'. [ 155.505327][ T7387] 9pnet_fd: Insufficient options for proto=fd [ 155.711355][ T31] usb 4-1: USB disconnect, device number 6 [ 155.806473][ T7405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 155.806511][ T7405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:136 [ 155.818030][ T7405] rust_binder: Write failure EFAULT in pid:136 [ 155.842976][ T7411] rust_binder: Write failure EFAULT in pid:138 [ 155.849896][ T36] audit: type=1400 audit(149.737:714): avc: denied { read } for pid=7412 comm="syz.4.2373" laddr=172.20.20.10 lport=13 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.896741][ T7415] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.905826][ T36] audit: type=1400 audit(149.775:715): avc: denied { search } for pid=7414 comm="syz.3.2375" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.951695][ T36] audit: type=1400 audit(149.775:716): avc: denied { write } for pid=7414 comm="syz.3.2375" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 155.993313][ T7421] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 156.000753][ T36] audit: type=1400 audit(149.859:717): avc: denied { bind } for pid=7417 comm="syz.5.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.181802][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.189070][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.196333][ T7425] bridge_slave_0: entered allmulticast mode [ 156.203805][ T7425] bridge_slave_0: entered promiscuous mode [ 156.210672][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.217807][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.225211][ T7425] bridge_slave_1: entered allmulticast mode [ 156.232221][ T7425] bridge_slave_1: entered promiscuous mode [ 156.239445][ T31] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 156.337730][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.344870][ T7425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.352270][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.359368][ T7425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.417529][ T31] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 156.433379][ T31] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 156.442100][ T7425] veth0_vlan: entered promiscuous mode [ 156.471445][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 156.474785][ T7425] veth1_macvtap: entered promiscuous mode [ 156.489113][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.729810][ T31] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 156.739667][ T7471] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 156.739693][ T7471] rust_binder: Read failure Err(EFAULT) in pid:12 [ 156.751542][ T31] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input15 [ 156.788880][ T31] usb 6-1: USB disconnect, device number 7 [ 156.941674][ T7487] syz.4.2394 (7487): /proc/7485/oom_adj is deprecated, please use /proc/7485/oom_score_adj instead. [ 157.084317][ T36] audit: type=1400 audit(150.901:718): avc: denied { getopt } for pid=7499 comm="syz.1.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.448925][ T7527] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 216) [ 157.448946][ T7527] rust_binder: Error while translating object. [ 157.459692][ T7527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.465982][ T7527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 157.577416][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2409'. [ 157.603224][ T7533] rust_binder: got new transaction with bad transaction stack [ 157.603263][ T7533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 157.715010][ T6196] bridge_slave_1: left allmulticast mode [ 157.729900][ T6196] bridge_slave_1: left promiscuous mode [ 157.735731][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.743946][ T6196] bridge_slave_0: left allmulticast mode [ 157.763641][ T6196] bridge_slave_0: left promiscuous mode [ 157.769366][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.927572][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.934733][ T7542] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.942311][ T7542] bridge_slave_0: entered allmulticast mode [ 157.948749][ T7542] bridge_slave_0: entered promiscuous mode [ 157.956103][ T6196] veth1_macvtap: left promiscuous mode [ 157.961657][ T6196] veth0_vlan: left promiscuous mode [ 158.019887][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.044268][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.053088][ T36] audit: type=1400 audit(151.811:719): avc: denied { read write } for pid=7550 comm="syz.4.2415" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.058080][ T7542] bridge_slave_1: entered allmulticast mode [ 158.076910][ T36] audit: type=1400 audit(151.811:720): avc: denied { open } for pid=7550 comm="syz.4.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.108797][ T36] audit: type=1400 audit(151.811:721): avc: denied { ioctl } for pid=7550 comm="syz.4.2415" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.114426][ T7542] bridge_slave_1: entered promiscuous mode [ 158.234120][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.241211][ T7542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.248580][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.255657][ T7542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.282588][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.290042][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.300240][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.307380][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.307535][ T31] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 158.321941][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.329240][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.357270][ T7542] veth0_vlan: entered promiscuous mode [ 158.368842][ T7542] veth1_macvtap: entered promiscuous mode [ 158.452579][ T7589] 9pnet_fd: Insufficient options for proto=fd [ 158.467148][ T466] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 158.478774][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.489920][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.500606][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 158.510279][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.518362][ T31] usb 5-1: SerialNumber: syz [ 158.525971][ T31] usb 5-1: 0:2 : does not exist [ 158.530960][ T31] usb 5-1: unit 208 not found! [ 158.608109][ T7615] netlink: 'syz.1.2434': attribute type 5 has an invalid length. [ 158.637818][ T466] usb 6-1: Using ep0 maxpacket: 16 [ 158.645603][ T466] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 158.655011][ T466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.663638][ T466] usb 6-1: Product: syz [ 158.667859][ T466] usb 6-1: Manufacturer: syz [ 158.672518][ T466] usb 6-1: SerialNumber: syz [ 158.677758][ T466] usb 6-1: config 0 descriptor?? [ 158.684368][ T466] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 158.692219][ T466] usb 6-1: Detected FT4233HP [ 158.741640][ T36] audit: type=1400 audit(152.449:722): avc: denied { mounton } for pid=7550 comm="syz.4.2415" path="/11/file0" dev="ramfs" ino=28556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 158.744140][ T31] usb 5-1: USB disconnect, device number 7 [ 158.911279][ T466] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 158.921880][ T466] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 158.931923][ T466] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 158.942178][ T466] usb 6-1: USB disconnect, device number 8 [ 158.949319][ T466] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 158.959479][ T466] ftdi_sio 6-1:0.0: device disconnected [ 158.989691][ T7632] rust_binder: Error while translating object. [ 158.989729][ T7632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.995933][ T7632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 159.080460][ T7638] binder: Bad value for 'defcontext' [ 159.135841][ T7643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2443'. [ 159.145145][ T7643] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2443'. [ 159.154196][ T7643] netlink: 'syz.3.2443': attribute type 4 has an invalid length. [ 159.242342][ T36] audit: type=1326 audit(152.918:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.3.2444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa19cd8efc9 code=0x7ffe0000 [ 159.302079][ T36] audit: type=1326 audit(152.974:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.1.2447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577418efc9 code=0x0 [ 159.332066][ T7639] rust_binder: Error while translating object. [ 159.332114][ T7639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.338363][ T7639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 159.432819][ T7667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 159.534124][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.551461][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.559236][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.566953][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.574468][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.582066][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.589656][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.597482][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.605365][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.613636][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.621353][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.629000][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.637935][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.646504][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.654033][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.661715][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.669259][ T514] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 159.686576][ T7675] SELinux: failed to load policy [ 159.692453][ T514] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v7fffff.ff Device [syz0] on syz1 [ 159.717541][ T7676] fido_id[7676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.748831][ T7678] rust_binder: Error while translating object. [ 159.748896][ T7678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.755282][ T7678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 159.948281][ T7685] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2456'. [ 159.989881][ T7690] rust_binder: 25: no such ref 0 [ 159.994982][ T7690] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 160.002331][ T7690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 160.058968][ T7692] rust_binder: Write failure EFAULT in pid:27 [ 160.084258][ T7694] rust_binder: Write failure EINVAL in pid:29 [ 160.117893][ T7696] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 160.131426][ T7696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 160.197517][ T7702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 160.211844][ T7702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:152 [ 160.254129][ T36] audit: type=1400 audit(153.865:725): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=572 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.284396][ T36] audit: type=1400 audit(153.865:726): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=572 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.316113][ T36] audit: type=1400 audit(153.865:727): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=572 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.481742][ T466] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 160.653261][ T466] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 160.661438][ T466] usb 4-1: config 0 has no interface number 0 [ 160.673447][ T466] usb 4-1: config 0 interface 41 has no altsetting 0 [ 160.692528][ T466] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 160.705408][ T466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.724305][ T466] usb 4-1: Product: syz [ 160.728572][ T466] usb 4-1: Manufacturer: syz [ 160.733198][ T466] usb 4-1: SerialNumber: syz [ 160.748924][ T466] usb 4-1: config 0 descriptor?? [ 161.440872][ T514] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 161.613145][ T514] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.618913][ T466] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 161.654134][ T514] usb 6-1: not running at top speed; connect to a high speed hub [ 161.662807][ T514] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 161.675471][ T514] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 161.684485][ T514] usb 6-1: config 17 has no interface number 0 [ 161.702946][ T514] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 161.714177][ T514] usb 6-1: config 17 interface 8 has no altsetting 0 [ 161.727672][ T514] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 161.743433][ T514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.758182][ T514] usb 6-1: Product: syz [ 161.768721][ T514] usb 6-1: Manufacturer: syz [ 161.776165][ T514] usb 6-1: SerialNumber: syz [ 161.858545][ T36] audit: type=1400 audit(155.376:728): avc: denied { map } for pid=7710 comm="syz.3.2464" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.876755][ T7749] 8021q: VLANs not supported on lo [ 161.881058][ T466] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 161.896944][ T466] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 161.907022][ T466] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 161.916925][ T466] usb 4-1: USB disconnect, device number 7 [ 162.007537][ T7732] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 162.015172][ T7732] SELinux: failed to load policy [ 162.074403][ T514] usb 6-1: selecting invalid altsetting 0 [ 162.080541][ T514] usb 6-1: 8:6 : no UAC_FORMAT_TYPE desc [ 162.081765][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.086224][ T514] usb 6-1: selecting invalid altsetting 0 [ 162.093452][ T514] usb 6-1: USB disconnect, device number 9 [ 162.251260][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 162.257581][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.265944][ T10] usb 5-1: config 179 has no interface number 0 [ 162.272271][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 162.283553][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 162.295063][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.306384][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.316548][ T10] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.329907][ T10] usb 5-1: config 179 interface 65 has no altsetting 0 [ 162.337565][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 162.346651][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.358618][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input17 [ 162.427717][ T36] audit: type=1400 audit(155.911:729): avc: denied { create } for pid=7752 comm="syz.3.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 162.657269][ T7771] binder: Bad value for 'defcontext' [ 162.681860][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.691652][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.701465][ T36] audit: type=1400 audit(156.164:730): avc: denied { watch watch_reads } for pid=7758 comm="syz.3.2482" path="/17/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.742905][ T466] usb 5-1: USB disconnect, device number 8 [ 162.749192][ T466] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 162.933486][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 163.071669][ T10] usb 4-1: device descriptor read/64, error -71 [ 163.295241][ T7781] cgroup: Bad value for 'name' [ 163.301344][ T7781] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 163.308755][ T7781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 163.340313][ T10] usb 4-1: device descriptor read/64, error -71 [ 163.604637][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 163.621856][ T7777] incfs_lookup_dentry err:-103 [ 163.621908][ T7778] overlayfs: statfs failed on './file0' [ 163.626949][ T7777] incfs: Can't find or create .index dir in ./file0 [ 163.639219][ T7777] incfs: mount failed -103 [ 163.660555][ T7792] netlink: 'syz.5.2493': attribute type 27 has an invalid length. [ 163.753825][ T10] usb 4-1: device descriptor read/64, error -71 [ 163.935045][ T649] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 164.009750][ T10] usb 4-1: device descriptor read/64, error -71 [ 164.096210][ T649] usb 6-1: config index 0 descriptor too short (expected 33298, got 18) [ 164.104713][ T649] usb 6-1: config 31 has too many interfaces: 167, using maximum allowed: 32 [ 164.113594][ T649] usb 6-1: config 31 has an invalid descriptor of length 112, skipping remainder of the config [ 164.124076][ T649] usb 6-1: config 31 has 0 interfaces, different from the descriptor's value: 167 [ 164.133607][ T649] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 164.142745][ T10] usb usb4-port1: attempt power cycle [ 164.148454][ T649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.372817][ T7792] rust_binder: inc_ref_done called when no active inc_refs [ 164.373432][ T649] usb 6-1: string descriptor 0 read error: -71 [ 164.403706][ T649] usb 6-1: USB disconnect, device number 10 [ 164.489506][ T7805] rust_binder: Error in use_page_slow: ESRCH [ 164.489529][ T7805] rust_binder: use_range failure ESRCH [ 164.502092][ T7805] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 164.502131][ T7805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.502158][ T7805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:85 [ 164.520542][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 164.557405][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.588241][ T7807] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.692981][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.719042][ T7811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.719079][ T7811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 164.947681][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 164.991474][ T10] usb 4-1: device descriptor read/8, error -71 [ 165.130431][ T10] usb 4-1: device descriptor read/8, error -71 [ 165.224739][ T649] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 165.246192][ T10] usb usb4-port1: unable to enumerate USB device [ 165.384625][ T649] usb 6-1: Using ep0 maxpacket: 8 [ 165.390993][ T649] usb 6-1: config 0 has an invalid interface number: 194 but max is 0 [ 165.399455][ T649] usb 6-1: config 0 has no interface number 0 [ 165.408078][ T649] usb 6-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=b7.96 [ 165.417219][ T649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.425314][ T649] usb 6-1: Product: syz [ 165.429531][ T649] usb 6-1: Manufacturer: syz [ 165.434156][ T649] usb 6-1: SerialNumber: syz [ 165.439519][ T649] usb 6-1: config 0 descriptor?? [ 165.455467][ T2604] udevd[2604]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.544060][ T7815] rust_binder: 95: no such ref 0 [ 165.549386][ T7815] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 165.556906][ T7815] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 165.587723][ T7818] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 165.588172][ T36] audit: type=1400 audit(158.875:731): avc: denied { read write } for pid=7816 comm="syz.4.2500" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.614856][ T7821] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 165.626567][ T36] audit: type=1400 audit(158.875:732): avc: denied { open } for pid=7816 comm="syz.4.2500" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.661966][ T514] usb 6-1: USB disconnect, device number 11 [ 165.671859][ T36] audit: type=1326 audit(158.951:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7760 comm="syz.1.2483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577418efc9 code=0x7fc00000 [ 165.722152][ T36] audit: type=1400 audit(158.997:734): avc: denied { sys_module } for pid=7832 comm="syz.1.2504" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 165.747993][ T7835] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 165.748020][ T7835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 165.756069][ T7835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:109 [ 165.804004][ T7837] devtmpfs: Unknown parameter 'fuse' [ 165.862274][ T7839] rust_binder: Write failure EFAULT in pid:113 [ 165.898104][ T7846] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 165.904334][ T7846] rust_binder: Error while translating object. [ 165.915199][ T7846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.921634][ T7846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 165.969596][ T7851] rust_binder: Write failure EFAULT in pid:125 [ 165.985885][ T7855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.996975][ T7858] rust_binder: Error while translating object. [ 166.003686][ T7858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.011737][ T7858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 166.021735][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.038989][ T7860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.039012][ T7860] rust_binder: Read failure Err(EFAULT) in pid:57 [ 166.043423][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.061310][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.074097][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.081719][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.089316][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.102237][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.109814][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.117364][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.124933][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.132475][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.139964][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.147556][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.155096][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.160995][ T7868] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2518' sets config #0 [ 166.162588][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.179419][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.187024][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.194559][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.202113][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.209668][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.224296][ T7871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.224536][ T7871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.230905][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.246151][ T7871] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 166.246882][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.263487][ T36] audit: type=1400 audit(159.485:735): avc: denied { append } for pid=7872 comm="syz.5.2520" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.285000][ T7875] input: syz1 as /devices/virtual/input/input19 [ 166.285852][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.306057][ T36] audit: type=1400 audit(159.485:736): avc: denied { ioctl } for pid=7872 comm="syz.5.2520" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.325037][ T7875] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 166.328907][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.343614][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.343929][ T7875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 166.351348][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.363478][ T36] audit: type=1400 audit(159.598:737): avc: denied { mounton } for pid=7878 comm="syz.5.2523" path="/57/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 166.369393][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.391010][ T36] audit: type=1400 audit(159.598:738): avc: denied { remount } for pid=7878 comm="syz.5.2523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.404380][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.433484][ T7885] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 166.435965][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.441035][ T7885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 166.448591][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.465384][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.472971][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.482582][ T36] audit: type=1400 audit(159.720:739): avc: denied { watch } for pid=7887 comm="syz.4.2526" path="/48/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.486564][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.512036][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.515057][ T7888] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.519786][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.534579][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.538801][ T7888] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.542336][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.550037][ T36] audit: type=1400 audit(159.757:740): avc: denied { mounton } for pid=7887 comm="syz.4.2526" path="/48/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.557107][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.588184][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.595741][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.603704][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.611271][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.618791][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.626337][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.633843][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.641343][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.648901][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.656433][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.663992][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.670627][ T7897] rust_binder: 152: no such ref 0 [ 166.671507][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.679383][ T7897] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 166.684078][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.691728][ T7897] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 166.698812][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.698844][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.698868][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.698893][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.737626][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.745212][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.752837][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.760377][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.767792][ T7902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.767939][ T7902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.768060][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.774934][ T7902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 166.783886][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.808098][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.815649][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.823168][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.830712][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.842279][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.849885][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.857477][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.864986][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.875030][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.888892][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.896485][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.904029][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.911594][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.919119][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.920098][ T7911] kvm: pic: non byte read [ 166.926766][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.932497][ T7911] kvm: pic: level sensitive irq not supported [ 166.938505][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.944850][ T7911] kvm: pic: non byte read [ 166.952440][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.971354][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.979003][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.986536][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 166.994111][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.001723][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.013108][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.020682][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.028257][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.035776][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.044135][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.053270][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.063320][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.067955][ T7920] rust_binder: Error while translating object. [ 167.070893][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.071652][ T7920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 167.077117][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.085565][ T7920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 167.094041][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.094074][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.094098][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.094123][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.094148][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.131303][ T7922] binder: Unknown parameter 'uid<18446744073709551615' [ 167.133317][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.141499][ T7922] binder: Unknown parameter 'uid<18446744073709551615' [ 167.148314][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.177070][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.184603][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.192184][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.199729][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.207287][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.214809][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.222365][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.229903][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.237436][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.245012][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.252596][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.260122][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.267860][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.275595][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.283504][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.291021][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.298710][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.306281][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.313920][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.321457][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.329031][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.336587][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.344112][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.351675][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.359219][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.366741][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.374512][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.382126][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.389698][ T514] hid-generic 0000:10000:0007.0007: unknown main item tag 0x0 [ 167.398044][ T514] hid-generic 0000:10000:0007.0007: hidraw0: HID v9.40 Device [syz1] on syz1 [ 167.430612][ T7927] fido_id[7927]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 167.446533][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.456660][ T7933] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 167.590961][ T649] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 167.612261][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 167.618649][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 167.631970][ T9] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.643122][ T9] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 167.657487][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.664777][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 167.674126][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.683486][ T9] usb 5-1: config 0 descriptor?? [ 167.752022][ T649] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.764624][ T649] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.773649][ T649] usb 6-1: config 1 has no interface number 0 [ 167.780012][ T649] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.802759][ T649] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.812214][ T649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.820705][ T649] usb 6-1: Product: syz [ 167.825092][ T649] usb 6-1: Manufacturer: syz [ 167.830036][ T649] usb 6-1: SerialNumber: syz [ 167.841803][ T649] usb 6-1: selecting invalid altsetting 1 [ 167.879777][ T7962] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4239396641 (542642770048 ns) > initial count (193160305408 ns). Using initial count to start timer. [ 167.899084][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 167.907967][ T7962] kvm: kvm [7961]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 167.945275][ T7974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2557'. [ 167.970652][ T7979] fuse: Unknown parameter '0x0000000000000003' [ 168.068691][ T649] cdc_ncm 6-1:1.1: bind() failure [ 168.083462][ T649] usb 6-1: USB disconnect, device number 12 [ 168.129042][ T9] sony 0003:054C:024B.0008: item fetching failed at offset 5/7 [ 168.142904][ T9] sony 0003:054C:024B.0008: parse failed [ 168.149328][ T9] sony 0003:054C:024B.0008: probe with driver sony failed with error -22 [ 168.344080][ T7924] sit0: entered promiscuous mode [ 168.350868][ T7924] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 168.359032][ T7924] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2537'. [ 168.368933][ T7924] binder: Bad value for 'stats' [ 168.376131][ T31] usb 5-1: USB disconnect, device number 9 [ 168.382139][ T514] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.551277][ T514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.562870][ T514] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.571994][ T514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.580003][ T514] usb 4-1: Product: syz [ 168.584194][ T514] usb 4-1: Manufacturer: syz [ 168.588802][ T514] usb 4-1: SerialNumber: syz [ 168.594453][ T514] usb 4-1: config 0 descriptor?? [ 168.602080][ T514] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 168.623818][ T2359] udevd[2359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.243088][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.402922][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 169.409492][ T9] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 169.417873][ T9] usb 5-1: config 0 has no interface number 0 [ 169.423987][ T9] usb 5-1: config 0 interface 230 has no altsetting 0 [ 169.432486][ T9] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 169.441596][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.449637][ T9] usb 5-1: Product: syz [ 169.453837][ T9] usb 5-1: Manufacturer: syz [ 169.458478][ T9] usb 5-1: SerialNumber: syz [ 169.464154][ T9] usb 5-1: config 0 descriptor?? [ 169.470202][ T9] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 169.478409][ T9] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 170.021144][ T514] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 170.181076][ T514] usb 6-1: Using ep0 maxpacket: 16 [ 170.187796][ T514] usb 6-1: unable to get BOS descriptor or descriptor too short [ 170.196434][ T514] usb 6-1: config 9 has an invalid interface number: 63 but max is 1 [ 170.204704][ T514] usb 6-1: config 9 has an invalid interface number: 159 but max is 1 [ 170.212893][ T514] usb 6-1: config 9 has no interface number 0 [ 170.219028][ T514] usb 6-1: config 9 has no interface number 1 [ 170.225157][ T514] usb 6-1: config 9 interface 63 has no altsetting 0 [ 170.233400][ T514] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 170.242505][ T514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.250541][ T514] usb 6-1: Product: syz [ 170.254704][ T514] usb 6-1: Manufacturer: syz [ 170.259347][ T514] usb 6-1: SerialNumber: syz [ 170.518580][ T8048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8048 comm=syz.5.2580 [ 170.545086][ T8072] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2589'. [ 170.552276][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.564521][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.754813][ T514] usb 6-1: USB disconnect, device number 13 [ 170.771320][ T8062] udevd[8062]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.386035][ T1510] usb 4-1: USB disconnect, device number 12 [ 171.545391][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 171.568895][ T8092] loop7: detected capacity change from 0 to 16384 [ 171.632122][ T8092] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 171.642835][ T8092] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 171.652805][ T8092] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.662333][ T8092] Buffer I/O error on dev loop7, logical block 1472, async page read [ 171.677334][ T8091] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.687110][ T8091] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 171.695609][ T8091] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 171.704067][ T8091] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 171.712501][ T8091] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 171.720910][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 171.721311][ T8091] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 171.727263][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.734680][ T8091] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 171.744556][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.753507][ T8091] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 171.762021][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 171.770579][ T8091] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 171.779457][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.788033][ T8091] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 171.796701][ T10] usb 6-1: config 0 descriptor?? [ 171.816415][ T8091] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.829400][ T8091] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.842519][ T8091] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.855729][ T8091] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.868738][ T8091] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.881843][ T8091] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 171.932926][ T9] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 171.947011][ T9] usb 5-1: USB disconnect, device number 10 [ 171.969939][ T8101] netlink: 'syz.3.2600': attribute type 33 has an invalid length. [ 171.980819][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 172.023691][ T8079] rust_binder: 218: no such ref 4294967295 [ 172.030479][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.030687][ T8103] rust_binder: 218: no such ref 4294967295 [ 172.041283][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.053111][ T31] usb 6-1: USB disconnect, device number 14 [ 172.238155][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.259468][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.399255][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.410829][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.421757][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 172.426916][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 172.436812][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.449789][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.459027][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.467621][ T9] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 172.476131][ T10] usb 4-1: config 0 descriptor?? [ 172.481196][ T9] usb 5-1: config 0 has no interface number 0 [ 172.487376][ T9] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 172.497444][ T9] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 172.509915][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 172.519045][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.527098][ T9] usb 5-1: Product: syz [ 172.531527][ T9] usb 5-1: Manufacturer: syz [ 172.536397][ T9] usb 5-1: SerialNumber: syz [ 172.542053][ T9] usb 5-1: config 0 descriptor?? [ 172.544148][ T8106] 9pnet: p9_errstr2errno: server reported unknown error [ 172.554507][ T8077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.561800][ T8077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.581036][ T8110] 9pnet_fd: Insufficient options for proto=fd [ 172.626683][ T8114] binder: Bad value for 'defcontext' [ 172.711410][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.720032][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.787562][ T514] usb 5-1: USB disconnect, device number 11 [ 172.909872][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 172.947245][ T8101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 172.948363][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 172.963515][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.972194][ T10] usb 4-1: USB disconnect, device number 13 [ 173.072138][ T9] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 173.081508][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.089518][ T9] usb 6-1: Product: syz [ 173.093979][ T9] usb 6-1: Manufacturer: syz [ 173.098598][ T9] usb 6-1: SerialNumber: syz [ 173.104408][ T9] usb 6-1: config 0 descriptor?? [ 173.235130][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 173.235148][ T36] audit: type=1326 audit(166.043:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8129 comm="syz.1.2611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f577418efc9 code=0x0 [ 173.359824][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 173.369688][ T9] usb 6-1: USB disconnect, device number 15 [ 173.387497][ T8062] udevd[8062]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.449194][ T8140] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 173.461810][ T8143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.860940][ T8167] binder: Bad value for 'max' [ 173.950519][ T8170] 9pnet: Could not find request transport: fBV8\0Pd [ 174.096980][ T8175] loop7: detected capacity change from 0 to 16384 [ 174.115126][ T8175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 174.136444][ T8175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 174.739763][ T8227] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 174.739789][ T8227] rust_binder: Read failure Err(EFAULT) in pid:247 [ 174.741620][ T8229] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2644'. [ 174.770796][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2644'. [ 174.793902][ T8234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.793934][ T8234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.898287][ T8243] overlayfs: failed to clone upperpath [ 174.915036][ T8249] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 174.915067][ T8249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 174.923397][ T8249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:230 [ 175.260099][ T8268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.353673][ T8275] rust_binder: Error while translating object. [ 175.371048][ T8275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.377968][ T8275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 175.555687][ T8288] rust_binder: Write failure EFAULT in pid:118 [ 175.585134][ T8289] rust_binder: Write failure EFAULT in pid:118 [ 175.613698][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2664'. [ 175.661404][ T8293] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2664'. [ 175.679259][ T8297] input: syz1 as /devices/virtual/input/input20 [ 175.688034][ T8293] netlink: 'syz.5.2664': attribute type 4 has an invalid length. [ 175.814318][ T8300] fuse: Bad value for 'user_id' [ 175.821645][ T8300] fuse: Bad value for 'user_id' [ 175.876640][ T8302] overlayfs: failed to clone upperpath [ 176.528522][ T8352] usb usb7: usbfs: process 8352 (syz.4.2682) did not claim interface 0 before use [ 176.672895][ T8371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 176.672929][ T8371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:126 [ 176.724823][ T8375] rust_binder: 285: no such ref 1 [ 176.739380][ T8378] rust_binder: 285: no such ref 1 [ 176.740068][ T8375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 176.745174][ T8378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 176.862699][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2696'. [ 177.531029][ T8434] input: syz1 as /devices/virtual/input/input21 [ 178.096771][ T8469] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.298846][ T8488] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 178.308724][ T8490] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 178.334936][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 178.378243][ T8503] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 178.399450][ T36] audit: type=1400 audit(170.894:784): avc: denied { relabelto } for pid=8500 comm="syz.5.2737" name="file0" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fonts_t:s0" [ 178.457042][ T36] audit: type=1400 audit(170.922:785): avc: denied { associate } for pid=8500 comm="syz.5.2737" name="file0" dev="tmpfs" ino=546 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fonts_t:s0" [ 178.531472][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 178.559275][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 178.576539][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 178.597770][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.613585][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.623005][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.631099][ T10] usb 4-1: Product: я [ 178.654678][ T10] usb 4-1: Manufacturer: ꩥ䈃鞍꯯ḡᖅ큯出纷ი柸틱謌敞㐛⛃쪁診켳쳃⎰헒봛儍ͥ㱅뎉鹚스停㷮᾵╏쓅釟㠧줏뱾逵뾺韬晑較Ⱉ룳䩿ᡪ䅕ꓒⱽ帄햨푪璅꽢쟶䕮څ峹數셑ᢠ졢놱ᒆꅺ㣽祭ꊁ壊⍩䪿飯殱쯐Ḽɵⱳ᩷玮㻏颜䬣朤帗Ơ삎谑卂坃쮯悬帏렠牄ᦅᒰ槟 [ 178.707549][ T10] usb 4-1: SerialNumber: ъ [ 179.059738][ T514] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 179.151941][ T10] usb 4-1: 0:2 : does not exist [ 179.162323][ T10] usb 4-1: USB disconnect, device number 14 [ 179.189541][ T8062] udevd[8062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 179.212226][ T8529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 179.246914][ T514] usb 6-1: unable to get BOS descriptor or descriptor too short [ 179.290179][ T514] usb 6-1: config 64 has an invalid interface number: 43 but max is 0 [ 179.315540][ T514] usb 6-1: config 64 has an invalid descriptor of length 162, skipping remainder of the config [ 179.325937][ T514] usb 6-1: config 64 has no interface number 0 [ 179.337016][ T514] usb 6-1: config 64 interface 43 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 179.356916][ T8548] overlayfs: failed to clone upperpath [ 179.362924][ T514] usb 6-1: config 64 interface 43 has no altsetting 0 [ 179.370400][ T8549] netlink: 'syz.1.2755': attribute type 8 has an invalid length. [ 179.387051][ T514] usb 6-1: string descriptor 0 read error: -22 [ 179.400663][ T514] usb 6-1: New USB device found, idVendor=0af0, idProduct=8120, bcdDevice=5e.47 [ 179.409998][ T514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.423489][ T514] usbhid 6-1:64.43: couldn't find an input interrupt endpoint [ 179.439179][ T8552] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 179.464592][ T8556] netlink: 'syz.1.2758': attribute type 27 has an invalid length. [ 179.487468][ T8556] sit0: left promiscuous mode [ 179.496522][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.503826][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.642614][ T8519] binder: Bad value for 'stats' [ 179.656749][ T514] usb 6-1: USB disconnect, device number 16 [ 179.704650][ T8576] loop2: detected capacity change from 0 to 7 [ 179.798927][ T8584] 9pnet_fd: Insufficient options for proto=fd [ 179.834489][ T8586] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2770'. [ 179.847807][ T8586] tc_dump_action: action bad kind [ 179.867370][ T8586] SELinux: security_context_str_to_sid (f dWf ggf) failed with errno=-22 [ 179.912335][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.919953][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.933774][ T8582] bridge_slave_0: entered allmulticast mode [ 179.942361][ T8582] bridge_slave_0: entered promiscuous mode [ 179.958982][ T8595] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 179.962023][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.973078][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.981942][ T8582] bridge_slave_1: entered allmulticast mode [ 179.988601][ T8582] bridge_slave_1: entered promiscuous mode [ 180.024688][ T8597] input: syz1 as /devices/virtual/input/input23 [ 180.026494][ T36] audit: type=1400 audit(172.414:786): avc: denied { mount } for pid=8596 comm="syz.3.2773" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.133145][ T8601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8601 comm=syz.4.2775 [ 180.153435][ T8601] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.190114][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.197218][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.204577][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.211658][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.247837][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.255990][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.266956][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.274078][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.286898][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.294013][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.338254][ T8582] veth0_vlan: entered promiscuous mode [ 180.354417][ T8582] veth1_macvtap: entered promiscuous mode [ 180.406053][ T8616] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 180.430342][ T36] audit: type=1326 audit(172.798:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8617 comm="syz.1.2765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac718efc9 code=0x0 [ 180.811688][ T36] audit: type=1400 audit(173.155:788): avc: denied { execute } for pid=8621 comm="syz.5.2780" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.045927][ T8626] rust_binder: Write failure EFAULT in pid:300 [ 181.058878][ T8629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2783'. [ 181.101123][ T36] audit: type=1404 audit(173.427:789): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 181.116237][ T36] audit: type=1404 audit(173.436:790): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 181.118186][ T8637] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.130945][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 181.145659][ T8637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.145962][ T8637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 181.146416][ T36] audit: type=1400 audit(173.464:791): avc: denied { mounton } for pid=8636 comm="syz.4.2785" path="/106/file0" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.186812][ T36] audit: type=1400 audit(173.464:792): avc: denied { mount } for pid=8636 comm="syz.4.2785" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.209904][ T36] audit: type=1400 audit(173.464:793): avc: denied { read } for pid=8636 comm="syz.4.2785" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.232214][ T6196] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.234255][ T36] audit: type=1400 audit(173.464:794): avc: denied { open } for pid=8636 comm="syz.4.2785" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.261142][ T36] audit: type=1400 audit(173.464:795): avc: denied { ioctl } for pid=8636 comm="syz.4.2785" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.299451][ T8641] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 181.372654][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 181.384308][ T8624] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.452144][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 181.468451][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 181.476538][ T9] usb 6-1: can't read configurations, error -71 [ 182.099367][ T8662] /dev/rnullb0: Can't open blockdev [ 182.212523][ T8666] rust_binder: Error while translating object. [ 182.212557][ T8666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 182.219031][ T8666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 182.374654][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 182.523822][ T9] usb 6-1: device descriptor read/64, error -71 [ 182.556014][ T403] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 182.694377][ T403] usb 2-1: device descriptor read/64, error -71 [ 182.779628][ T9] usb 6-1: device descriptor read/64, error -71 [ 182.897010][ T9] usb usb6-port1: attempt power cycle [ 182.950191][ T403] usb 2-1: device descriptor read/64, error -71 [ 183.206033][ T403] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 183.269992][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 183.292253][ T9] usb 6-1: device descriptor read/8, error -71 [ 183.355251][ T403] usb 2-1: device descriptor read/64, error -71 [ 183.397822][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.397834][ T375] Bluetooth: hci0: command 0x1003 tx timeout [ 183.441600][ T9] usb 6-1: device descriptor read/8, error -71 [ 183.611015][ T403] usb 2-1: device descriptor read/64, error -71 [ 183.696269][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 183.718686][ T9] usb 6-1: device descriptor read/8, error -71 [ 183.728320][ T403] usb usb2-port1: attempt power cycle [ 183.857197][ T9] usb 6-1: device descriptor read/8, error -71 [ 183.975256][ T9] usb usb6-port1: unable to enumerate USB device [ 183.984333][ T8694] binder: Bad value for 'defcontext' [ 184.005361][ T8696] binder: Bad value for 'max' [ 184.090626][ T403] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 184.113162][ T403] usb 2-1: device descriptor read/8, error -71 [ 184.198693][ T8714] netlink: 'syz.3.2814': attribute type 64 has an invalid length. [ 184.251656][ T403] usb 2-1: device descriptor read/8, error -71 [ 184.280733][ T8717] tmpfs: Unknown parameter '0x0000000000000000' [ 184.361640][ T8726] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 184.377631][ T8726] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=36593 sclass=netlink_xfrm_socket pid=8726 comm=syz.3.2818 [ 184.403409][ T8728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2819'. [ 184.412471][ T8728] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2819'. [ 184.421706][ T8728] netlink: 'syz.3.2819': attribute type 6 has an invalid length. [ 184.429524][ T8728] netlink: 'syz.3.2819': attribute type 5 has an invalid length. [ 184.437361][ T8728] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2819'. [ 184.463066][ T8731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8731 comm=syz.3.2820 [ 184.509094][ T403] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 184.539434][ T403] usb 2-1: device descriptor read/8, error -71 [ 184.688579][ T403] usb 2-1: device descriptor read/8, error -71 [ 184.804860][ T403] usb usb2-port1: unable to enumerate USB device [ 184.938616][ T8746] can0: slcan on ttyS3. [ 184.975955][ T8746] can0 (unregistered): slcan off ttyS3. [ 184.981779][ T8746] Falling back ldisc for ttyS3. [ 185.062924][ T8766] overlay: Unknown parameter 'subj_role' [ 185.252831][ T8790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:343 [ 185.253357][ T8790] rust_binder: Read failure Err(EFAULT) in pid:343 [ 185.295909][ T6195] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.347495][ T8800] fuse: Unknown parameter 'us r_id' [ 185.362869][ T36] kauditd_printk_skb: 110 callbacks suppressed [ 185.362888][ T36] audit: type=1400 audit(177.424:906): avc: denied { unmount } for pid=7425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 185.402764][ T8808] rust_binder: Write failure EFAULT in pid:348 [ 185.451087][ T8814] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 185.451698][ T36] audit: type=1400 audit(177.508:907): avc: denied { ioctl } for pid=8812 comm="syz.4.2841" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.491531][ T36] audit: type=1400 audit(177.508:908): avc: denied { remount } for pid=8812 comm="syz.4.2841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 185.571174][ T36] audit: type=1400 audit(177.621:909): avc: denied { read } for pid=8816 comm="syz.1.2842" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.594310][ T36] audit: type=1400 audit(177.630:910): avc: denied { ioctl } for pid=8816 comm="syz.1.2842" path="/7/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 185.619651][ T36] audit: type=1400 audit(177.630:911): avc: denied { setattr } for pid=8816 comm="syz.1.2842" path="pipe:[35785]" dev="pipefs" ino=35785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 185.663790][ T36] audit: type=1400 audit(177.705:912): avc: denied { map } for pid=8818 comm="syz.1.2843" path="socket:[35803]" dev="sockfs" ino=35803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 185.701685][ T8820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8820 comm=syz.1.2843 [ 185.714734][ T8826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8826 comm=syz.1.2843 [ 185.753795][ T36] audit: type=1400 audit(177.799:913): avc: denied { read write } for pid=8818 comm="syz.1.2843" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.780196][ T8820] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 185.785646][ T36] audit: type=1400 audit(177.799:914): avc: denied { open } for pid=8818 comm="syz.1.2843" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.835764][ T36] audit: type=1400 audit(177.818:915): avc: denied { mounton } for pid=8818 comm="syz.1.2843" path="/8/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.862470][ T8829] netlink: 'syz.4.2845': attribute type 16 has an invalid length. [ 185.879596][ T8829] netlink: 'syz.4.2845': attribute type 2 has an invalid length. [ 185.895477][ T8829] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.2845'. [ 186.328965][ T649] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 186.510155][ T8846] rust_binder: 28: no such ref 1 [ 187.110702][ T8858] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 187.110733][ T8858] rust_binder: Error while translating object. [ 187.122890][ T8858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.129151][ T8858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 187.339709][ T8870] rust_binder: Error while translating object. [ 187.348858][ T8870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 187.355152][ T8870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:376 [ 187.399499][ T8872] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.439890][ T8874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.469166][ T8878] rust_binder: Got transaction with invalid offset. [ 187.475746][ T8878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.482618][ T8878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 187.492095][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.501416][ T375] Bluetooth: hci0: command 0x1003 tx timeout [ 187.711147][ T8892] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2869'. [ 187.727478][ T8895] bridge0: port 3(syz_tun) entered blocking state [ 187.734317][ T8895] bridge0: port 3(syz_tun) entered disabled state [ 187.741531][ T8895] syz_tun: entered allmulticast mode [ 187.748402][ T8895] syz_tun: entered promiscuous mode [ 187.753814][ T8895] bridge0: port 3(syz_tun) entered blocking state [ 187.760401][ T8895] bridge0: port 3(syz_tun) entered forwarding state [ 187.831597][ T8900] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 187.831625][ T8900] rust_binder: Error while translating object. [ 187.840712][ T8900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.847184][ T8900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 187.961423][ T8905] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 188.055652][ T649] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 188.215577][ T649] usb 5-1: Invalid ep0 maxpacket: 32 [ 188.226232][ T649] usb usb5-port1: attempt power cycle [ 188.588608][ T649] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 188.621071][ T649] usb 5-1: Invalid ep0 maxpacket: 32 [ 188.648819][ T8931] cgroup: Name too long [ 188.769834][ T649] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 188.789020][ T8948] rust_binder: validate_parent_fixup: new_min_offset=5, sg_entry.length=0 [ 188.789045][ T8948] rust_binder: Error while translating object. [ 188.791553][ T649] usb 5-1: Invalid ep0 maxpacket: 32 [ 188.797726][ T8948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.804502][ T649] usb usb5-port1: unable to enumerate USB device [ 188.809217][ T8948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 189.186143][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'. [ 189.230180][ T8989] netlink: 37 bytes leftover after parsing attributes in process `syz.3.2890'. [ 189.310526][ T8995] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 189.672118][ T9013] serio: Serial port ptm0 [ 189.794618][ T9021] SELinux: Context ϧ-):E2q{Oؾ)đJu36ޢ{ is not valid (left unmapped). [ 190.473112][ T9045] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 190.552736][ T9048] __vm_enough_memory: pid: 9048, comm: syz.5.2908, bytes: 18014402804453376 not enough memory for the allocation [ 190.667061][ T649] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 190.749102][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 190.749121][ T36] audit: type=1326 audit(182.481:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9051 comm="syz.3.2910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa19cd8efc9 code=0x0 [ 190.782116][ T9054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 190.823175][ T36] audit: type=1400 audit(182.546:964): avc: denied { append } for pid=9062 comm="syz.4.2914" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.855573][ T649] usb 2-1: Using ep0 maxpacket: 32 [ 190.858965][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 190.874611][ T649] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.881597][ T649] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 190.890765][ T649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.900125][ T649] usb 2-1: config 0 descriptor?? [ 191.029462][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 191.035830][ T31] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.047138][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 191.053906][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 191.063006][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.072215][ T31] usb 6-1: config 0 descriptor?? [ 191.210703][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.334434][ T649] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 191.342298][ T649] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 191.349434][ T649] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 191.356513][ T649] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 191.363539][ T649] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 191.370592][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 191.376854][ T649] lenovo 0003:17EF:6009.0009: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 191.388459][ T9] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 191.398488][ T9] usb 5-1: config 0 has no interface number 0 [ 191.404701][ T9] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 191.416410][ T9] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 191.427507][ T9] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 191.438777][ T9] usb 5-1: config 0 interface 200 has no altsetting 0 [ 191.447048][ T9] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 191.456148][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.464188][ T9] usb 5-1: Product: syz [ 191.468396][ T9] usb 5-1: Manufacturer: syz [ 191.473026][ T9] usb 5-1: SerialNumber: syz [ 191.478584][ T9] usb 5-1: config 0 descriptor?? [ 191.483866][ T9065] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.508400][ T31] wacom 0003:056A:00EF.000A: hidraw1: USB HID v0.06 Device [HID 056a:00ef] on usb-dummy_hcd.5-1/input0 [ 191.548047][ T31] usb 2-1: USB disconnect, device number 33 [ 191.718716][ T9065] rust_binder: Error while translating object. [ 191.718768][ T9065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.722781][ T9050] __vm_enough_memory: pid: 9050, comm: syz.5.2909, bytes: 18014402804453376 not enough memory for the allocation [ 191.729709][ T9065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 191.736542][ T649] usb 6-1: USB disconnect, device number 21 [ 191.772924][ T36] audit: type=1400 audit(183.438:965): avc: denied { sqpoll } for pid=9081 comm="syz.3.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.834657][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input30 [ 191.850640][ T9] usb 5-1: USB disconnect, device number 16 [ 191.860800][ T9091] 9pnet_fd: p9_fd_create_tcp (9091): problem binding to privport [ 192.049136][ T36] audit: type=1400 audit(183.700:966): avc: denied { block_suspend } for pid=9094 comm="syz.3.2926" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.086777][ T36] audit: type=1400 audit(183.738:967): avc: denied { create } for pid=9097 comm="syz.3.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.106990][ T36] audit: type=1400 audit(183.747:968): avc: denied { append } for pid=9099 comm="syz.1.2928" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.131086][ T36] audit: type=1400 audit(183.747:969): avc: denied { setopt } for pid=9097 comm="syz.3.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.157188][ T36] audit: type=1400 audit(183.747:970): avc: denied { write } for pid=9097 comm="syz.3.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.198546][ T9111] SELinux: security_context_str_to_sid () failed with errno=-22 [ 192.226565][ T9113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.226668][ T9113] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 192.250352][ T9116] cgroup: No subsys list or none specified [ 192.281012][ T36] audit: type=1400 audit(183.916:971): avc: denied { mount } for pid=9118 comm="syz.1.2934" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.318040][ T36] audit: type=1400 audit(183.944:972): avc: denied { unmount } for pid=8582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.349196][ T9125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.349270][ T9125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 192.391839][ T9127] tmpfs: Unknown parameter 'nosWaP' [ 192.562243][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2940'. [ 192.573741][ T9137] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 192.585716][ T9137] rust_binder: Write failure EINVAL in pid:412 [ 192.603746][ T9140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 192.841604][ T9159] netlink: 'syz.1.2947': attribute type 4 has an invalid length. [ 192.842300][ T9160] binder: Unknown parameter '01777777777777777777777' [ 192.867091][ T9158] netlink: 'syz.1.2947': attribute type 4 has an invalid length. [ 193.193186][ T649] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 193.246938][ T9172] overlayfs: failed to clone upperpath [ 193.299567][ T9180] overlay: ./file0 is not a directory [ 193.354055][ T649] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.362441][ T649] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 193.372780][ T649] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 193.384159][ T649] usb 2-1: config 220 has no interface number 1 [ 193.390598][ T649] usb 2-1: config 220 interface 0 has no altsetting 0 [ 193.397436][ T649] usb 2-1: config 220 interface 76 has no altsetting 0 [ 193.405881][ T649] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.415112][ T649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.423185][ T649] usb 2-1: Product: syz [ 193.427406][ T649] usb 2-1: Manufacturer: syz [ 193.432083][ T649] usb 2-1: SerialNumber: syz [ 193.653941][ T649] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 193.660413][ T649] usb 2-1: No valid video chain found. [ 193.670079][ T649] usb 2-1: USB disconnect, device number 34 [ 194.203221][ T9203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.203875][ T9203] rust_binder: Error while translating object. [ 194.210457][ T9203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 194.216892][ T9203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 194.271953][ T9209] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 194.289077][ T9209] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 194.297661][ T9209] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 194.305619][ T9209] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 194.325838][ T9211] rust_binder: Write failure EFAULT in pid:140 [ 194.337102][ T9213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 194.429663][ T649] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 194.600095][ T649] usb 6-1: Using ep0 maxpacket: 16 [ 194.607362][ T649] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.618575][ T9233] rust_binder: Error while translating object. [ 194.618619][ T9233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.618938][ T649] usb 6-1: config 0 interface 0 has no altsetting 0 [ 194.625281][ T9233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 194.634416][ T649] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 194.660710][ T649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.673910][ T649] usb 6-1: config 0 descriptor?? [ 195.006655][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 195.113358][ T649] wacom 0003:056A:0094.000B: unknown main item tag 0x0 [ 195.120489][ T649] wacom 0003:056A:0094.000B: unknown main item tag 0x0 [ 195.127514][ T649] wacom 0003:056A:0094.000B: unknown main item tag 0x0 [ 195.134549][ T649] wacom 0003:056A:0094.000B: unknown main item tag 0x0 [ 195.141463][ T649] wacom 0003:056A:0094.000B: unknown main item tag 0x0 [ 195.148612][ T649] wacom 0003:056A:0094.000B: Using device in hidraw-only mode [ 195.156920][ T649] wacom 0003:056A:0094.000B: hidraw0: USB HID v0.08 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 195.204053][ T9255] incfs: Options parsing error. -22 [ 195.209534][ T9255] incfs: mount failed -22 [ 195.250993][ T9265] overlayfs: regular lower layers cannot follow data lower layers [ 195.283880][ T9270] tipc: Can't bind to reserved service type 2 [ 195.328015][ T9200] rust_binder: Write failure EFAULT in pid:396 [ 195.328454][ T649] usb 6-1: USB disconnect, device number 22 [ 195.638316][ T9317] netlink: 'syz.1.3002': attribute type 27 has an invalid length. [ 195.673806][ T9317] rust_binder: Error while translating object. [ 195.673866][ T9317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 195.681790][ T9317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:176 [ 195.755675][ T9320] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 195.881812][ T9358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9358 comm=syz.4.3016 [ 195.915145][ T9362] netlink: 'syz.4.3019': attribute type 32 has an invalid length. [ 196.099460][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 196.099480][ T36] audit: type=1400 audit(187.500:1007): avc: denied { connect } for pid=9387 comm="syz.5.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.113479][ T9388] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 196.188631][ T402] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 196.213801][ T36] audit: type=1400 audit(187.603:1008): avc: denied { create } for pid=9400 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.319967][ T9412] __vm_enough_memory: pid: 9412, comm: syz.5.3037, bytes: 18014402804453376 not enough memory for the allocation [ 196.348128][ T402] usb 2-1: device descriptor read/64, error -71 [ 196.603959][ T402] usb 2-1: device descriptor read/64, error -71 [ 196.689225][ T31] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 196.850206][ T31] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.853314][ T36] audit: type=1400 audit(188.204:1009): avc: denied { mounton } for pid=9441 comm="syz.4.3047" path="/189/file0" dev="tmpfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 196.861582][ T402] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 196.891775][ T31] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 196.903438][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.910084][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 196.919446][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.934482][ T31] usb 6-1: config 0 descriptor?? [ 196.940972][ T9420] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 196.955955][ T36] audit: type=1400 audit(188.307:1010): avc: denied { setopt } for pid=9449 comm="syz.3.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.062367][ T402] usb 2-1: device descriptor read/64, error -71 [ 197.318080][ T402] usb 2-1: device descriptor read/64, error -71 [ 197.377083][ T31] logitech 0003:046D:C24F.000C: unbalanced collection at end of report description [ 197.387012][ T31] logitech 0003:046D:C24F.000C: parse failed [ 197.393118][ T31] logitech 0003:046D:C24F.000C: probe with driver logitech failed with error -22 [ 197.435411][ T402] usb usb2-port1: attempt power cycle [ 197.797733][ T402] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 197.801696][ T9453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3051'. [ 197.820036][ T402] usb 2-1: device descriptor read/8, error -71 [ 197.843525][ T36] audit: type=1326 audit(189.142:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19cd8efc9 code=0x7fc00000 [ 197.866557][ T36] audit: type=1326 audit(189.142:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa19cd8efc9 code=0x7fc00000 [ 197.958681][ T402] usb 2-1: device descriptor read/8, error -71 [ 197.967641][ T9459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3053'. [ 198.224091][ T402] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 198.246558][ T402] usb 2-1: device descriptor read/8, error -71 [ 198.385076][ T402] usb 2-1: device descriptor read/8, error -71 [ 198.501285][ T402] usb usb2-port1: unable to enumerate USB device [ 199.047167][ T9486] netlink: 'syz.3.3063': attribute type 58 has an invalid length. [ 199.143430][ T36] audit: type=1400 audit(190.361:1013): avc: denied { associate } for pid=9494 comm="syz.1.3065" name="190" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 199.160939][ T9497] binder: Bad value for 'max' [ 199.186689][ T9499] sit0: entered promiscuous mode [ 199.193645][ T9499] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 199.202820][ T9499] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3067'. [ 199.212938][ T9499] 8021q: VLANs not supported on ip6gre0 [ 199.371986][ T9525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.373692][ T9524] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 199.668713][ T10] usb 6-1: USB disconnect, device number 23 [ 199.689773][ T9527] : renamed from bond_slave_0 [ 199.711587][ T9531] fuse: blksize only supported for fuseblk [ 199.824696][ T36] audit: type=1400 audit(190.999:1014): avc: denied { mounton } for pid=9534 comm="syz.5.3078" path="/" dev="ramfs" ino=40530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 199.845858][ T36] audit: type=1400 audit(190.999:1015): avc: denied { mount } for pid=9534 comm="syz.5.3078" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 200.105250][ T9553] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 200.105856][ T9553] @0: renamed from bond_slave_1 [ 200.203177][ T9556] overlayfs: failed to resolve './bus': -2 [ 200.285367][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 200.334520][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 200.358553][ T9564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=9564 comm=syz.5.3087 [ 200.384562][ T36] audit: type=1400 audit(191.515:1016): avc: denied { append } for pid=9565 comm="syz.5.3088" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.407838][ T9566] netlink: 'syz.5.3088': attribute type 6 has an invalid length. [ 200.415701][ T9566] netlink: 'syz.5.3088': attribute type 4 has an invalid length. [ 200.423503][ T9566] netlink: 'syz.5.3088': attribute type 6 has an invalid length. [ 200.431319][ T9566] netlink: 'syz.5.3088': attribute type 13 has an invalid length. [ 200.439153][ T9566] netlink: 'syz.5.3088': attribute type 15 has an invalid length. [ 200.446991][ T9566] netlink: 'syz.5.3088': attribute type 19 has an invalid length. [ 200.454886][ T9566] netlink: 3684 bytes leftover after parsing attributes in process `syz.5.3088'. [ 200.494373][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 200.500581][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.510473][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 200.519637][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.528777][ T31] usb 2-1: config 0 descriptor?? [ 200.973541][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 200.981869][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 200.989074][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 200.996309][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 201.003308][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 201.010613][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 201.017814][ T31] wacom 0003:056A:032B.000D: unknown main item tag 0x0 [ 201.030768][ T31] wacom 0003:056A:032B.000D: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.1-1/input0 [ 201.220861][ T9551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (17179869180 ns) > initial count (144 ns). Using initial count to start timer. [ 201.243538][ T8968] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.638568][ T9619] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.638594][ T9619] rust_binder: Read failure Err(EFAULT) in pid:466 [ 201.762611][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 201.762630][ T36] audit: type=1400 audit(192.810:1019): avc: denied { ioctl } for pid=9627 comm="syz.5.3111" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.820231][ T36] audit: type=1400 audit(192.866:1020): avc: denied { create } for pid=9630 comm="syz.4.3112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 201.927911][ T36] audit: type=1400 audit(192.970:1021): avc: denied { relabelfrom } for pid=9649 comm="syz.5.3118" name="NETLINK" dev="sockfs" ino=40920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 201.951482][ T36] audit: type=1400 audit(192.970:1022): avc: denied { relabelto } for pid=9649 comm="syz.5.3118" name="NETLINK" dev="sockfs" ino=40920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 202.003970][ T9658] loop2: detected capacity change from 0 to 7 [ 202.010496][ T2359] buffer_io_error: 1463 callbacks suppressed [ 202.010509][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.024707][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.032624][ T2359] loop2: unable to read partition table [ 202.038738][ T9658] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.047156][ T9658] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.055092][ T9658] loop2: unable to read partition table [ 202.060866][ T9658] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 202.061569][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.082702][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.093320][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.101345][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.109444][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.118609][ T2359] Buffer I/O error on dev loop2, logical block 0, async page read [ 202.334968][ T36] audit: type=1400 audit(193.345:1023): avc: denied { watch } for pid=9699 comm="syz.5.3134" path="/175/file0" dev="tmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.335765][ T9700] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3134'. [ 202.596777][ T8968] bridge_slave_1: left allmulticast mode [ 202.602559][ T8968] bridge_slave_1: left promiscuous mode [ 202.608296][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.616077][ T8968] bridge_slave_0: left allmulticast mode [ 202.621751][ T8968] bridge_slave_0: left promiscuous mode [ 202.627540][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.746555][ T8968] veth1_macvtap: left promiscuous mode [ 202.834028][ T9711] 9pnet_fd: p9_fd_create_unix (9711): problem connecting socket: ./file0: -111 [ 203.079996][ T36] audit: type=1400 audit(194.049:1024): avc: denied { execute_no_trans } for pid=9731 comm="syz.5.3146" path="/181/file1" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 203.118749][ T9744] fuse: Unknown parameter 'Fd' [ 203.302026][ T9767] fuse: Unknown parameter 'o[xsa' [ 203.340893][ T9773] netlink: 'syz.5.3161': attribute type 6 has an invalid length. [ 203.348699][ T9773] netlink: 3684 bytes leftover after parsing attributes in process `syz.5.3161'. [ 203.436158][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.437226][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 203.448640][ T36] audit: type=1400 audit(194.396:1025): avc: denied { create } for pid=9775 comm="syz.4.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.453016][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 203.479890][ T9777] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 203.488947][ T514] usb 2-1: USB disconnect, device number 39 [ 203.515637][ T9782] fuse: Bad value for 'group_id' [ 203.528838][ T9782] fuse: Bad value for 'group_id' [ 203.558866][ T36] audit: type=1400 audit(194.499:1026): avc: denied { write } for pid=9790 comm="syz.1.3166" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.644638][ T36] audit: type=1400 audit(194.574:1027): avc: denied { read } for pid=9799 comm="syz.4.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.721402][ T9795] ------------[ cut here ]------------ [ 203.726974][ T9795] WARNING: CPU: 0 PID: 9795 at arch/x86/kvm/vmx/vmx.c:6476 vmx_handle_exit+0x1309/0x1b40 [ 203.736964][ T9795] Modules linked in: [ 203.740899][ T9795] CPU: 0 UID: 0 PID: 9795 Comm: syz.1.3168 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 203.752507][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.762629][ T9795] RIP: 0010:vmx_handle_exit+0x1309/0x1b40 [ 203.768445][ T9795] Code: 00 e9 64 fe ff ff e8 56 81 57 00 48 89 df e8 0e e7 00 00 41 89 c6 e9 4f fe ff ff e8 41 81 57 00 e9 1a f5 ff ff e8 37 81 57 00 <0f> 0b 43 80 3c 2f 00 74 08 48 89 df e8 a6 ee ad 00 48 8b 3b 48 8d [ 203.788199][ T9795] RSP: 0018:ffffc9000159f428 EFLAGS: 00010283 [ 203.794321][ T9795] RAX: ffffffff812e7d79 RBX: ffff88810ffdc300 RCX: 0000000000080000 [ 203.802473][ T9795] RDX: ffffc90011221000 RSI: 0000000000000106 RDI: 0000000000000107 [ 203.810528][ T9795] RBP: ffffc9000159f510 R08: ffff88810ffdc4b7 R09: 1ffff11021ffb896 [ 203.818543][ T9795] R10: dffffc0000000000 R11: ffffed1021ffb897 R12: 0000000080000021 [ 203.826616][ T9795] R13: dffffc0000000000 R14: ffffc9000dd4a921 R15: 1ffff11021ffb860 [ 203.834654][ T9795] FS: 00007f6ac7f826c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 203.843668][ T9795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.850281][ T9795] CR2: 000000110c324a14 CR3: 0000000152b6a000 CR4: 00000000003526b0 [ 203.858423][ T9795] Call Trace: [ 203.861775][ T9795] [ 203.864780][ T9795] ? vmx_prepare_switch_to_guest+0x5a7/0x7c0 [ 203.870805][ T9795] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 203.875922][ T9795] ? kvm_inject_page_fault+0x320/0x380 [ 203.881441][ T9795] ? vmx_handle_exit_irqoff+0x4d/0x7a0 [ 203.887005][ T9795] vcpu_run+0x4bd0/0x7830 [ 203.891504][ T9795] ? signal_pending+0xc0/0xc0 [ 203.896263][ T9795] ? __kasan_check_write+0x18/0x20 [ 203.901442][ T9795] ? xfd_validate_state+0x68/0x150 [ 203.906639][ T9795] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 203.911979][ T9795] ? __kasan_check_write+0x18/0x20 [ 203.917197][ T9795] ? fpregs_mark_activate+0x69/0x160 [ 203.922526][ T9795] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 203.927996][ T9795] ? __kasan_check_read+0x15/0x20 [ 203.933117][ T9795] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 203.938842][ T9795] ? __cfi___futex_queue+0x10/0x10 [ 203.943998][ T9795] ? futex_wait_setup+0x1bc/0x260 [ 203.949212][ T9795] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 203.955255][ T9795] ? futex_unqueue+0x136/0x160 [ 203.960130][ T9795] ? __futex_wait+0x218/0x2a0 [ 203.964862][ T9795] ? should_fail+0xf/0x20 [ 203.969272][ T9795] ? ioctl_has_perm+0x1aa/0x4d0 [ 203.974168][ T9795] ? __asan_memcpy+0x5a/0x80 [ 203.978811][ T9795] ? ioctl_has_perm+0x3e0/0x4d0 [ 203.983771][ T9795] ? has_cap_mac_admin+0xd0/0xd0 [ 203.988754][ T9795] ? __kasan_check_write+0x18/0x20 [ 203.993962][ T9795] ? mutex_lock_killable+0x92/0x1c0 [ 203.999225][ T9795] ? __cfi_mutex_lock_killable+0x10/0x10 [ 204.004945][ T9795] ? futex_wait+0x29a/0x7a0 [ 204.009602][ T9795] ? __cfi_futex_wait+0x10/0x10 [ 204.014540][ T9795] kvm_vcpu_ioctl+0x96f/0xee0 [ 204.019261][ T9795] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 204.024563][ T9795] ? __ia32_sys_rt_sigreturn+0x687/0x7a0 [ 204.030341][ T9795] ? do_futex+0x309/0x500 [ 204.034758][ T9795] ? __cfi_do_futex+0x10/0x10 [ 204.039484][ T9795] ? __fget_files+0x2c5/0x340 [ 204.044252][ T9795] ? bpf_lsm_file_ioctl+0xd/0x20 [ 204.049241][ T9795] ? security_file_ioctl+0x34/0xd0 [ 204.054431][ T9795] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 204.059665][ T9795] __se_sys_ioctl+0x135/0x1b0 [ 204.064400][ T9795] __x64_sys_ioctl+0x7f/0xa0 [ 204.069074][ T9795] x64_sys_call+0x1878/0x2ee0 [ 204.073810][ T9795] do_syscall_64+0x58/0xf0 [ 204.078329][ T9795] ? clear_bhb_loop+0x50/0xa0 [ 204.083050][ T9795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.089112][ T9795] RIP: 0033:0x7f6ac718efc9 [ 204.093580][ T9795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.113283][ T9795] RSP: 002b:00007f6ac7f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.121777][ T9795] RAX: ffffffffffffffda RBX: 00007f6ac73e5fa0 RCX: 00007f6ac718efc9 [ 204.129835][ T9795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 204.137846][ T9795] RBP: 00007f6ac7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 204.145896][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.153927][ T9795] R13: 00007f6ac73e6038 R14: 00007f6ac73e5fa0 R15: 00007fffd8586b48 [ 204.162061][ T9795] [ 204.165110][ T9795] ---[ end trace 0000000000000000 ]---