last executing test programs: 5m38.924995973s ago: executing program 2 (id=3170): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400010025bd7000000000000b00"], 0x14}}, 0x24004084) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_clone(0x80, &(0x7f0000000040)="0abeac944a13b703d336e781b061bb8cff87191ef9a8dd6fad8e077a541184a4d80104d2f6db382f4ebb7f86631780838b2bd5768406743b89883a485aecbe2a359077126c7e", 0x46, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7710e2602741318c74a0e736a3b4f13d9545cdc0971d00b7240bde9794e7a157df0e25cc6b41e1356879686f6a34ece95aafd9e0ff08322c6357a29c7224cf2e3f6e6f5723feecfde247154b8157b3eef7ecff782566de3936b4e37f7ae4ffefcae742db25c26f3ce60f34820ebd7c338560efdd7f0e4ff412695fdcf2253e9cd939aa0c7a51e09887bcee0b") umount2(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001840)={[0x9]}, 0x8, 0x80000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="7c0000000001050500000000000000000a0000003c0001800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb14000400fc00000000000000000000000000000108000740000000032400068014000400200100000000000000000000000000010c000380060002004e210002"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'veth0\x00', 0x400}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x200}) fstat(r4, &(0x7f0000000080)) 5m38.846848753s ago: executing program 2 (id=3172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x9) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x40000, 0x37, 0x18}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/166) 5m38.839584023s ago: executing program 2 (id=3174): r0 = socket(0x11, 0xa, 0xffffffd) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000840)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="1ccc6928fd00d59bc7323db3f8147c47c92ec359e710199a4bd1422a3ad642ca563e72ab17e8dc3db673d424f059f13af45ef8c2b5d0c6ae44c0216d16ae7d6ce5c792f46ba7fc082ab19554077b40fee10f64b76fd56b65fddb50c0511dfad797f829bf98fc8cd656123055dc155e220389463a64e6a27b7ad9d198", 0x7c}, {&(0x7f0000000140)="ffe171a5a25dea1d8d724310333884bb66dd4c39064fab95bbfb3d299bced85d6267445bc640221234bcbf79bd84971b24975274f549", 0x36}, {&(0x7f0000000280)="3d65fd0a9877829af18dc36c8852b1a8f94c5d41cebdc1c56e20404adf7cedb91876f9e254333d0e591e0310ed867ac664b21f0615f1", 0x36}, {&(0x7f00000004c0)="6ab80ac1ecd9cf438c6ee2fdbed05075064f25ee09b7c4dd82695ad2fc1c63a0e5821c481b032f5d06f565a4475bbffacba81c8c40b22eef0f885e092d160384cc5deb3eee9e4bf0e9ebc7081b7fd37e5b9e9a062b02c6ec0b3b9eae572535ebb4cfaa0d3b3d5e6f4c9a8a0076e7a840e31fd62ec3a6d445d90d20479924a8f5dd6fbe34db3251b925ef3983338a8746a1592cb0dc5429a6dbbb383fc60e259182a4173b65644b61de2a5bf2200b56c403bb4ea42c2ca3b3855f570dd63a23475072502ddbbfbf52b2a54b554f0e13ec838cd724975a", 0xd6}, {&(0x7f00000002c0)="055c283ba5b38b0fafbd7937d8598bcd433b34e6c39f6987bd8f35c4536a4bb1e30e67740a19aa4abf060e738c731607f5b78a4dfcde182e29519bd3bbc35e19fc0bb62adf4b0c", 0x47}, {&(0x7f00000005c0)="b8d457814e414b68819664c71fc79e8cb0c38751efa3e825e971fc7b115e0bc5ef460de90b05f59a032306aebd0f257430fe12cec40cb98143395101ea065aaf9f473a3327cfa04720bdd3410254ddccaae3d70591acff939f7dbdb0d6033c06e6485ef2a5870348f68a647ae6688987a71019e9c48d4adf92746d7fe53e630ffd768b99eac848d2e7bc32f3ec247710bf376e8efdf73331", 0x98}, {&(0x7f00000003c0)="ed6529ba2a230f922a7e0345b17408add21c71100b4cbab115d283078161", 0x1e}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="f1bdc712d420e1dffaa05e3a862531b10da896c44a9d9b007cbff04ca0eba28e0c3bcb804ea7744db1e7c5d6715e0511002821a749328fc4794ea67294308d2373970a09f8285b24948239c4d1d8d0f336eb697d51ceab831926435cd2e860127e099d7d9fc8e8863c5827805599156ff94c6a0c719c2a0c0b8ba072dc18751ae66109ce555a33eeb7401389c707392c48b9560b17b6912a73433c217427857025e8ae12340b8611a3dafa3db77c7f1fc94799774d022ee60d760c8de846", 0xbe}], 0x9}, 0x400c1) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x4000040) r3 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0xfffffffffffffffd) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) 5m38.734929163s ago: executing program 2 (id=3175): r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40902, 0x0) mmap(&(0x7f0000a21000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r0, 0xfe221000) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_misc(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000b5c0), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x458002, 0xd2) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000357000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000000000/0x2000)=nil) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000480)={0x8000}) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x102080, &(0x7f0000000240)="7e59d06efbef0a342f29e1652ae52b24f75ed2325f29ba71f3c333e9f8aa6c412009eb9a0f9a9c4d3cf9be3fbd5572b2b359863f049fb0271ea516b67b22e126694ce2570d779eeaa6ed3fb65caa76fc3fcdf9d9581a89cf7cd832263d9179f3809e3e53c9262205e7225a8bcccb07118297c0208d3c13d326f7980d3e51a9b67406877ed215d04711d868b8749e97c4a962d34abe1a6005882ec6ec22052173f5f85487441f9d9a8cf06b3a98ce99fd5296ff0d75de8dcabbe21bcfb86da680f74eacd36262483f9cf4312cf26a169c3d", 0xd1, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000340)="3ec8e71a7762165c7e09e8d7734e8ac58bb595d0c6251340b2bec654615fca3ce0fd7ab2d5405ea4034098cf74c9633c3081992362c41f55439a0800b6038e5932318bf7c92b9d943d33f36c864dbfe64f2b31a97f8c63166f97ce3205a529e92492c82852cb84d7de2a9ae62e18f5") 5m38.586785445s ago: executing program 2 (id=3176): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r2, &(0x7f0000000300), 0x48) (async) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f806000100"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x890d, 0x0) (async) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 5m38.345541426s ago: executing program 2 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) (async) fcntl$setflags(r0, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xf8, 0xa0000) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x6, 0x8e, 0x3}) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001c}, 0x4080) userfaultfd(0x800) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x94, 0x2f, 0x3, 0x8, 0x9, 0x1, "b6553fa8a5328df67ed56486122a111cccb83136c07cfd7e161e0df3c661d3c30ffc3f141de438097a525caf1898576c4fd6f4e45b1a142e6904566873c04268a4cfa099649825b0d8e3b19374d02a08441bbd761ab6ab045dcc08cc704ec18781d6babcfa327f25279f2a3311fb4e6003f81ce17f5ff08c16c6db58596e700fbf569729d202e798f1de42d462a9511112cea755"}}, 0x1ac) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x313, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000700)={[0x8, 0x37, 0x2, 0x1000, 0x100000001, 0x5, 0x80, 0x5, 0x6, 0x2, 0x5affc6b5, 0x5, 0x2, 0x4, 0x7, 0xffffffffffffffff], 0x4, 0x86}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x58}}, 0x20048080) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2021000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x1a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "98aabede037ee6f3ebc5c690d4df3833"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x40000}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async, rerun: 64) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x88, 0x4, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x50, 0xc, "3e9d00bba6af919848e446d9b94183a934d248a0420d412132c303566848f8eface98fa04d877289b2da46def29347328ac8b8ca7e8de90e2c5f8573526eb9eb41803aad966015f523ce4ac9"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x44010}, 0x4000080) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c00)={'vxcan0\x00'}) (async) sendmsg$sock(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)="f22827ac70aa7c5d8d2dfedc5af2fa24eab277e8d30f818fadd3573b51bd659fab049ce3964d3abf22241ea79db408d31f4e0a94540ea22b59ffa9eefdf2e6860e228fcba905848e16731b4070e7badf118d7fac42a0aab9c94661281aca6e6301784ea6f7b5b18f4b57666b6f8b15065d7d6a2946bf55a94b8f7cbc6c2f31c2", 0x80}, {&(0x7f0000000cc0)="d51ab8ef06ded1c13ad747e0600ce6ed6d0acea8a1c25bb51058f404662d9220ea595b94c0d93cdf57fa9971fa88d0fd312f93ebee3a0320689c979565fe173c4710095db9b329a3c128f01bd9c2f63eaab708ec742416267725593ede587072132d42483883022e795d57c1e2d35fcd6fbb39e40a17a91c5306e882c57b07c88173ee142e3a905fbe491b14845b647bc3b0fc3fc8b0930fe34c3737a17fb7a31d41653839e3", 0xa6}, {&(0x7f0000000d80)="18e4f67c885d3115117598d7c2fc59792990c535063273913eef0d8a0a9489413e30fc57500e6f2c33ca068a65b4bef104fde28350518891a54a549c7f9dffad5a2ff7706f9a220c84fb349782371d2dfb446b4e3a4a1f64c523570b7a40ee1c8769e6abe7e39a292935b729766bd179e6774f334abd9ff0440ab8fc188d246279ef72efdb2e90d208506b3ffa0b44da0ac2eea9862a678fd45e528f8c6ddc3beeda359520a4c7cedf58eda4926c6a276b5cc36479050480cbeaccefcb8d5f1e66d142cd7fa5f7e59cdf1d8f17", 0xcd}], 0x3, &(0x7f0000000ec0)=[@mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0xbaf}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xc0}, 0x40010) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000fc0)={0x0, 0x0, "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", "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"}) (rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001fc0)={{r7, 0x0, 0x0, 0xffff, 0x0, 0x100000000, 0x2, 0xc2, 0x2, 0x4, 0x5, 0xc0f5, 0xced, 0x1, 0x100000000}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x30, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x19}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) (async, rerun: 64) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003140), 0x10601, 0x0) (rerun: 64) sendfile(r10, r2, &(0x7f0000003180)=0x2, 0x1) (async) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000003200), r0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000003300)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x80, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x805}, 0x10) 5m38.303108007s ago: executing program 32 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408d0}, 0x0) (async) fcntl$setflags(r0, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xf8, 0xa0000) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x6, 0x8e, 0x3}) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001c}, 0x4080) userfaultfd(0x800) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x94, 0x2f, 0x3, 0x8, 0x9, 0x1, "b6553fa8a5328df67ed56486122a111cccb83136c07cfd7e161e0df3c661d3c30ffc3f141de438097a525caf1898576c4fd6f4e45b1a142e6904566873c04268a4cfa099649825b0d8e3b19374d02a08441bbd761ab6ab045dcc08cc704ec18781d6babcfa327f25279f2a3311fb4e6003f81ce17f5ff08c16c6db58596e700fbf569729d202e798f1de42d462a9511112cea755"}}, 0x1ac) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x313, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000700)={[0x8, 0x37, 0x2, 0x1000, 0x100000001, 0x5, 0x80, 0x5, 0x6, 0x2, 0x5affc6b5, 0x5, 0x2, 0x4, 0x7, 0xffffffffffffffff], 0x4, 0x86}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x58}}, 0x20048080) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2021000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x1a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "98aabede037ee6f3ebc5c690d4df3833"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x40000}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async, rerun: 64) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x88, 0x4, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x50, 0xc, "3e9d00bba6af919848e446d9b94183a934d248a0420d412132c303566848f8eface98fa04d877289b2da46def29347328ac8b8ca7e8de90e2c5f8573526eb9eb41803aad966015f523ce4ac9"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x44010}, 0x4000080) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c00)={'vxcan0\x00'}) (async) sendmsg$sock(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)="f22827ac70aa7c5d8d2dfedc5af2fa24eab277e8d30f818fadd3573b51bd659fab049ce3964d3abf22241ea79db408d31f4e0a94540ea22b59ffa9eefdf2e6860e228fcba905848e16731b4070e7badf118d7fac42a0aab9c94661281aca6e6301784ea6f7b5b18f4b57666b6f8b15065d7d6a2946bf55a94b8f7cbc6c2f31c2", 0x80}, {&(0x7f0000000cc0)="d51ab8ef06ded1c13ad747e0600ce6ed6d0acea8a1c25bb51058f404662d9220ea595b94c0d93cdf57fa9971fa88d0fd312f93ebee3a0320689c979565fe173c4710095db9b329a3c128f01bd9c2f63eaab708ec742416267725593ede587072132d42483883022e795d57c1e2d35fcd6fbb39e40a17a91c5306e882c57b07c88173ee142e3a905fbe491b14845b647bc3b0fc3fc8b0930fe34c3737a17fb7a31d41653839e3", 0xa6}, {&(0x7f0000000d80)="18e4f67c885d3115117598d7c2fc59792990c535063273913eef0d8a0a9489413e30fc57500e6f2c33ca068a65b4bef104fde28350518891a54a549c7f9dffad5a2ff7706f9a220c84fb349782371d2dfb446b4e3a4a1f64c523570b7a40ee1c8769e6abe7e39a292935b729766bd179e6774f334abd9ff0440ab8fc188d246279ef72efdb2e90d208506b3ffa0b44da0ac2eea9862a678fd45e528f8c6ddc3beeda359520a4c7cedf58eda4926c6a276b5cc36479050480cbeaccefcb8d5f1e66d142cd7fa5f7e59cdf1d8f17", 0xcd}], 0x3, &(0x7f0000000ec0)=[@mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0xbaf}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xc0}, 0x40010) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000fc0)={0x0, 0x0, "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", "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"}) (rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001fc0)={{r7, 0x0, 0x0, 0xffff, 0x0, 0x100000000, 0x2, 0xc2, 0x2, 0x4, 0x5, 0xc0f5, 0xced, 0x1, 0x100000000}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x30, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x19}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000001) (async, rerun: 64) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003140), 0x10601, 0x0) (rerun: 64) sendfile(r10, r2, &(0x7f0000003180)=0x2, 0x1) (async) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000003200), r0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000003300)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x80, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x805}, 0x10) 2m29.069905703s ago: executing program 0 (id=5626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010000000000f43d153d000008001d8bb112ed56"], 0x28}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000040)={@private2, 0x60}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) splice(r2, 0x0, r3, 0x0, 0x714f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8000) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x3f5f41, 0x84) r9 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r9, 0x0, 0x19, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x14, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10"}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.909789264s ago: executing program 0 (id=5628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4a22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/133, 0x85, 0x2, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}, 0x400}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa0002, 0x0) write(r5, &(0x7f0000001c80)="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", 0x617) sync_file_range(r5, 0x0, 0x4, 0x3) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r7, r6, 0x0) recvmmsg$unix(r8, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r9, 0x5f7b1000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m28.413075207s ago: executing program 0 (id=5633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) io_setup(0xf0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe831cb58833da74d, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x2, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd2a, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close_range(r1, r0, 0x2) 2m28.312843048s ago: executing program 0 (id=5636): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2800c0, 0x0) mount$bind(0x0, &(0x7f0000001240)='./file2\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) clock_gettime(0xfffffffffffffffc, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x401070cd, 0x3) r3 = socket$tipc(0x1e, 0x2, 0x0) truncate(&(0x7f00000011c0)='./file2\x00', 0xfd9) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000040)={0x1, 0x2}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001200)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r4}, r5, 0xc, @unused=[0x1, 0x2, 0x1, 0x70], @name="0bc89454f5b83b54adf25eae6f5f2298d528479164203e62b0333a8a117089415ffdcc60125ed0eb5bff679266fdc77889d0ba3248fb0413f5b1b0e13b6c37d27e2430ad1459d53d53698b647bc0af5740e8d4877c328e2fa722cb52c0527610b80907323514dcfaa2adc1507048876055db639f99ad0de991900d60670c8c9c0e7a9cd768f188c9e8196ea447229e2d193106e7e867fefc1a8759e1eeb90c44488cdc9d898eaa5bb5a6332de5bb60593f574f5028c1b5a5ff80380f797d2de6c447efce09f0f7f9bef556d4dbc484e987714a54a41a3ab33601a6a0f06a8b187635b0ab2f09c498aafcf7b0fc6bf1cb61e637f264b256234e60e748ec951be856afc1701730dd2dfba892a6711cea0d0b82c0a825f7285cb8f839d851f49ec96b3c01f7ae4bb2010a37661142654f5a917a5467d76a48296b257510f3a6b11ecc2639cc73f97bd5c62a161c15ada8a76aa9e83ab2f147a8f3a25b2c11266624af132dfa433857d5d948e066d2340ffc5fc4282e2f69fb65f77b5e139916bb84b7fa7200fb33cf96128549bca5d6138b560263bf5f05dd77979164efe64d44d32ff4dee30e6cfe924c1df66313af63f6a795237b2bca8ec84ab2c12c682e8cd44ac2b32e8791f2bac3198eec503c6ad63ad0d9a6371f06bbf8a9b6dc36defeafc80abea1ca415cfe95158acf7235cac03a0982f7ede5d5d19d193fd1d85d7a86edae2f501079678ef2dfb178cf33460f7194c9d3332a66e38f6b7764d48b53f927b2c775c509fece4db807fd2bd59c540ec7a527c3f1375fd2f309ff4e383636d3ec864371e773b4d4d342bcdf260400eb3a79d25496ca05696704d845fcfeb470fefeddf3ed45f49b5150ca8b33bf3b4df6a5911a819b070913d3f1d75b766ff92c243a8c005456645f0dc511618f4554722cbbfc0047c548c2678428dca891af86af7718354330e023f6dfaf96a484bb037b5b169d9ca6b41870b6b58abf1b00afc8588f08c531760c033274f08fe1b0ae624ddc957a844bd079f6f8dcd87951d7a84297c0e9eed5664dfdfed40c18e1cef2a708c83d7686eff778887f79134c16a70c8598408a77d046258c39b7b9dd3dfe5811c51f670f2aee2af6fc1a0b566063d2c42a2424d9e63f52285975da6b72066c9000bc34cff459f768b7ee1289bf72d5308789e15bc9a3066b4004971d0bdeebf6c80ac214bb1b2e51fa0e5bb0acaa910232c3c5aefc0e76f5300a0a3731a723d41c4afeedd429a2bf2afd2b774eed53ddcc82a63e6f25155727b608ea4e94fca5d42ac07cda70006bc27f5b6b8d3fa0b478d60eef5edf7c32d184123b97c1616960dd36d23b4f080616bb5498e9fdbe946d7275ee957e42ebc5861fe028ddf7c28b6dbdacd5209d48307447dc22af5e80ab2c8c0a948d1ecc0c682f7cb4960747743781803a56344b43a83c0cc0b20014075b8a947c520a28eb7521a96f92d2d714608b3d38fdaf53190e017b906c86e9047fe2809e173f6661d355db30069bf2cae61cce8fc2753127093de52a13d1adecfe51495ac3cc2c3377291c0cb660ba065827fb9b9a7c63e5c6f2454c5cef645d56fca1c534eb62980a7ff0797fdebb681553312561e201482a31bdfea76c2cd3ea97b7f4d155785b7f0cf21d76b144142c5499486e744e8d5e89f4719105e31989fe93be964f2670c36a95e56094367f7d4075f33625783185f5113975b44faf5478882306db3bc651084a3e7a18402f757b89c287569e6135804b056269f816e1d21cb99a31fed775c9ba08deac5ec771744f7118b5fb749e17b62c2caf3c8ba518a5771a06cbefc86440881bc89db0ad0fa204330894e70775d071c821db9c45d798406b729fe3fbbfb0dedd481c6488cbb3fa940f1b3fdb242d84729e5bdcb9bc831c8cc14a3e3fea0bd7d11b9aeb63854041d24b4ca646c43fc3193cf8fb91cff841c027b51b9fa42f44a46eb583c4662790f02ae77da360e0544c4409e08def397078893b762395a3c46b376ce807ba8c11eb3a0c676e08cb65f2a639cef6881e3d4edab453247b95d35c87ceeddb9ebaafece84a35cb7317407662c6fa452c3c83692b55833bbc26b85c4ad099ad414cb2c6c60639f1c957389258e5c2d6b4ebaed7de7e546a20cedf01083e22d65eac8cba06f47d33e156f9a9922435d560d22eee4b877f87d9af778e950f1ac27854f57f201c8644614d3e47b03610259ca521471ece1b07e89dad698aac4859f1acb8ddb4a2142bd7e15f3c5ef448f0935f4019601c846f57d9c48bba12935e39f6da50d705f27b4cabbed7e622f575f802934bfb37c1c7ef33d296f0505987ce08f5f11440c41c1b359cca8e73356645043fcf578cbad37f90e7ef3e0eeffd5b7efce5aab144b408c0b69519246b3951144fdd186d84908a1582c5adad92f6f124b8b9b2c07b456ac8f2c2c1e525ea7c64ee9a4f8054b5bced971f32cbdc4e76529d656b747fb4f8bbcd24891dbb3164361e073e228545e3e7cde9d76d121770fd5a23266bdcde5e915fe5e421c7216a1c42dbe176b8e8c9c6b78ee011a2754b530953677c0c759812242bde4464924a9b5ad0bae66e8f8ea0c85787dfac8cae5e2c78e580049b52ed001761a18e1a75ab47eadb8b18dde5e0bf0b9b2665bd400478f515d5ba9b25840574c845b8ab03b110e01cc7ce57bbd4c6867596d00518fc359ce0e23f379860fcf3718c95311f0f746790f83b83cdf913e5e6f2fc00193f994feb9667df000303854b1ac7ab80780bbd2fe9f12fc0df92d22f0487f17a93e79b29bfb348d04e2ebebea93e62ee33e5df6fcd5f2075ae6d617745a98b120c541982cc23b4961039db281259cb87e6cb27a1e2971557bc270491712575bd75225814a5908e1148d97423a5639a36ad4c34d77990587431ede7b3d2fd65db19092b2517422bff093d1954db56ceb1cebd35a9eab7c99b516f6ffc78f2a6dffc6220d7f4d737e6c732203c4ab660775d360af639ea246a31ee08558378ecc601664ddf59bff934df89522fd0fbc6906ef2c37d955d944b9c129a83e20730fff83031fda30b30a4fa1b76bd85bb6caa3944546afbe927d545c986a0b9e587ddd7ed280aa52312652d3671d92fe38f5f5959fa6b6f05bfb8c58fbd98de7801a25ac8e3c322643dda7eb778f4257a80f30ddee2d2eb87a37ca2e41f0f17300d6ae424f92033ea7a551279fbd4adabef9051dcaba63d9fa3457dff77e9170fb54983cb75d9e6969fd60e524028fdab778a0d533bc699361ba3930e8721b59c55bfee67fef453bffa2066f4afccd8bc79c9cab458ab7accfe1996286fe53029cc214f3428a9299eb0856876f88cb7a957dcfd04a0435c39bb1eb3b1098d4f61265dd1815c76d21848b5ca17d32a1da4e20909dd48c4974188bfeb6d6a64d146461a9ac25a3f8a0af5a76fc8f0dfe87552cc5ac9eb186b329ad06c51a25669116acbd7b129d46f973c15d55d2b272fd45b3325c2c8b4228209f32538d1973fec2393d84f6ecf260b2b43bd39570350897cb2b33be5aa91791f12a1042c0ec52b927d29aabfc512231f04799655aba548501cdf4bb5f25bb6b77468f760edd0adc52f29a0c7420d1da0a649034a92b1c3902d5541fb5eca15567f68e08244b0ee250a71a87cfa79e10669d252cc3060178a88a4ced6cc537335a98dc76cf57664cf861ee43724cf2f620f527251823efbb0b3ec76d50a413ef66dac6d076ab22d67cdff561846d3ea4a04f827d4aff0e998d4aa0558d6062a8c7aa3b1caa5278380fc1235035f06c34092fc05c145baa0f815d7cf6b44f753a54616dfc468d28f554e2e7ba0dff0a31861028c8eec0dc988c802e2a763bf93016d03deb2aea01c9b5d9972a122731bb6e87c7768a293057d92869bcc032cba56c75558bd3a0b808975e3e43888b6c11e1a2e18c1b2c931d6cbc17e14baaf3af865ceff370f912c26280907565a166e1be5aadad190d05f0c1e88240c3748cdd56535069b290bb365ebf638041ec308f0d436e0d5a7be30e233e9547b68811d5ea84df261e3616d826ead9eee09b7cec94723899c19a165f42062ca8a74c37275e00fca5c6892f345347f624fbba1e01405c0ec9604152ab874203a1cb17cee8edd127f49894b46a9863ba9f9ac96014bf36f537ea362a14d4ab16ae07d2c05dcd7bb6ceaf26f87c14749007994e3a8d80ebd0f6c7c12296c5352cfbefd18abc1cc130b19dd4e34275a495f587a7b0849cc85d709d0538225a53ae1363863fbdba156e7db3ae8da201754e0db560d2261c68f4638a5b05d4de33ecefda3bb51918a6bd16f2bc434fdad7dea538452eb4fcec2f92766e3ec5f4bead2bb78dc1f62401d7c72117df4f3e46ef7f432427310939e8d0aecb388661926dbe39598e31a91d963ee9ad251ad0cdda81a8d8ba121d73ea39e072cb18961ba62904abf6f42313f84776cc666941ec12a0c97916319bee35a5c0e2c22219a757ac11ad1f75f7de6423047f33a34291c9d35969383586130deb0a9a0d6cf4d5511754d1fcbabd9badb48f40731286b2ee88eb0ad8f142e4a0cef29ed203aaebe1e0bbad3da16847cc4791eaa79f76ba96b1592e762b0baf4e7bb0ac7e608d15fa2355ea50782ec7d4f7c3153d37f37da3e403dfba48ed8a7182d96dbe1eff7e6c025d3aab36977a554ae0b3405ac7b5fdfaded46d4b39316fabd7cf44dfc008f254d1217545952ad75a7c7837e4af9be8bf42f949308dfb8861f0516fa8679803afa21ec983a66ec5bc7166d3cfd49fd5e649956b6fd48aa9b16b8cca81c6e8af263c9c78306efd775b22f3352d9936810bca6b9da54ec0c101448cbd3851d42cd62546567c84ec57f8368c1920d17d27a998422c1cb965dbbe9ef78d56e1e7e9806b6b3f22ba65392c2111623447ceb441a2d1be913ce6256f4e959fb518b35b85c5223226f23f8a675811d3354b9110edaac9be8dfd67012c98e4962ee18a6c61d92807640c23a3d710651706d447b594ecb60f0faf140fbf2ded2a01d30a2babc6d42d87b4945910a9c1e9d2838f86055087c82c1268611d1c135a158fe4a1ddcc59908a0c69f30d70cb01ca7455fe79fc81a6120de29b645fb4aa82384daf4c4582a6f355ec694c108df3711da5a5c9108434d5ecaad25017773ba203c17fb021febe840691919c6daedca569a59dd76b5b41652c9e9ffdc961c939ec365248999c61b1b72697e21913cbeb8f31436ffa4c876fa67dbcf6c36f028ab34f2b50f31673d53a4fa4c56bc4026e14cc698259157d5ca6a49f199eec2a084ffdf7c8eda9c5e1b5253d9c3bb4fee1a13b54250eeb63ce1537d55b4a1a33ecdca34d328aba3fb65c519a15abcc97e8c0ab6db5db115d9d771a0eae711dc20bdc356f0a76e970bcab5cd88eff90ffa0b4b19316b69fc5606c65534bbf8bc594be757031b28e393073eeb00307c3a2c0c026a60afc42849c395ae5a3b9ef3b9ee07e7954645d09d4e9d2ea6e898cecae0fdc31b31c0fcb948dc77f32a9ce9cf2ef89b80303bbbadc5041f5c30367d1f367f1bc4e849f39e7c5763d796bb27e9cae6bfa6ef8e090e69ff3e91c75f15668c5c4f5a531d2ccefad3f88883388cc238392e0f57ec3d03dce7c3a3e5da73ed71a993574f66e76585fd40100523655d956b3e2a61ed155ec5a1e0fc21cd419c33ed0f9c2348b5f04b276267218f8fd40c5d"}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x1}]}, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000001280)) 2m27.678712371s ago: executing program 0 (id=5641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) 2m27.114581834s ago: executing program 0 (id=5647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.039641765s ago: executing program 33 (id=5647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.069130252s ago: executing program 3 (id=6408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x4d, 0x2, 0xffbf, 0xffff, 0x7, 0x6, 0x40, 0x80, 0x5, 0xb4, 0x5, 0x81, 0x6, 0x2c, 0x40, 0x8, [0x8, 0xc]}}) (async) fchdir(r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 1m37.006421582s ago: executing program 3 (id=6409): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xa, 0x80, 0xa0, 0x8}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x9, 0x2d9}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0xfe}]}, 0xc0}}, 0x24004800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008005) (async, rerun: 32) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x290, r7, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000000, @empty, 0x8e00}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x672d}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x906}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf74}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdda}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44cf, @private0, 0xe2}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa8f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xedde}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x290}, 0x1, 0x0, 0x0, 0xe1c48302a603c768}, 0x4e0c0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 1m35.914327738s ago: executing program 3 (id=6410): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x4}}, 0x26) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x17) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m33.318752063s ago: executing program 3 (id=6464): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7, 0x401, 0x3, 0x2, 0x7e, 0x7}, 0x1c) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000003c0)) r6 = open(&(0x7f0000000480)='./bus\x00', 0x38000, 0x718bb647156ec31f) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x80000) arch_prctl$ARCH_GET_FS(0x1003, 0x0) mmap(&(0x7f00009d9000/0x3000)=nil, 0x3000, 0x2, 0x4010, 0xffffffffffffffff, 0x9a971000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 1m33.192657004s ago: executing program 3 (id=6467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280004000301010200000000000c001980080001000f000000fb326a0eee78dc8345d69235ccc660fffa61a066483486a715"], 0x28}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000001040102000000008000030002000007080004400000033708000540000001ff"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_setup(0x10007, &(0x7f0000000040)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x28, 0x5, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000240)=0x2) unshare(0x24060400) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d6f61657020686173683df7"], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) fstatfs(r5, &(0x7f0000001640)=""/4096) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) read$msr(r2, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1m32.970804836s ago: executing program 3 (id=6470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)=0x1) 1m32.951637856s ago: executing program 34 (id=6470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)=0x1) 1m28.993507208s ago: executing program 5 (id=6528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) pselect6(0x40, &(0x7f0000000100)={0x1200000000000, 0x9, 0x68cb, 0x4000000000000, 0x6, 0x8, 0x252b}, 0x0, 0xfffffffffffffffc, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r3 = memfd_create(&(0x7f00000014c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\b\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdamm\x92\xdf\xe6\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\n\x1bj\x15ydL\xde\xbaH\\\x19\x12.\xfc\xd4O\xfc\x99\xf9\x9a\x9b\xc8\xec\xa9\x95Q)\xbc\x9a\xd2\xa7\x02\xe8\x1c\xad=^\xe3\xce\x01\xe19\x8f\xc4\x9a\x89\x81g4\x98~\x14\x18\xf2FG\xab,\xaf`\xcf\x9b\x11V\x8dX\xc17\x8cU,\xaf\x18\xc7\xe1c\xe4 \x90\xbf\xbf\xaa\xc8Qw\xefJ\x97\xd9IV\x8b7\xe5\xc7]\xb3\xab \xa4C\a\xaf\xcd\xc7\xea\xb7\x1a\xa1^\xde\x04r\x11\x86\x89}\xae\xbf\xfdz=l` M\xf8P\x7f\xa9&\x81DdR\xd0\xeb\x1a:\x86C\xe8\xfe1]7\xe7\x19\x11}V\x96\x17t\xfe\xd2\x185\x99\x12\x1b\x9a\xf1 \xbc!\x7fF\x00&S\x19\xea\xb1\x87\aY\xe2\x91\xdd\xb0\x18M\xd8\x19y\xbf\xc2\xe8\x81\xde\x19\xd3\x01\x1b\x00\xef;\xe7\xc2\tuX\xceVY,\x7f\xe4\\X\xee((\xa4\x8d\xa3\x16\x19V\xa6\x97\x13\xcc\xe4\x9c\x1fR\x93', 0x2) ftruncate(r3, 0x10000) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 1m28.912892499s ago: executing program 5 (id=6529): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x80000001, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r1 = open(&(0x7f0000000080)='./cgroup\x00', 0x20000, 0x67) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20008050) 1m28.806681199s ago: executing program 5 (id=6530): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8", 0x0, 0xd}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @multicast1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000008, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x101, 0xa1d, 0x68ff, 0x5, 0x1, 0xfffffffffffffffd, 0x5], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x1000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x8, 0x0, 0x8, 0x6}, {0x0, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xcccc0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x2, 0x0, 0xc, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xcd, 0x3c}, {0x100000, 0x80a2000, 0x0, 0x76, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x8, 0x0, 0x0, 0x2}, {0x80a0000, 0x4b}, {0xdddd1000, 0xfffc}, 0xddf8ffdb, 0x0, 0x0, 0x80, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x7, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/67, 0x43}, {0x0}, {&(0x7f00000000c0)=""/113, 0xfffffffffffffe8a}, {&(0x7f0000000140)=""/103, 0x67}], 0x4) 1m28.73494554s ago: executing program 5 (id=6531): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) futimesat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m27.845614045s ago: executing program 5 (id=6541): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f00000001c0)={0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x10a}, @fda={0x66646185, 0xa, 0xfffffffffffffffd, 0x20000000000006}}, &(0x7f0000000080)={0x0, 0x18, 0xffffffd4}}}], 0x0, 0x0, 0x0}) 1m27.765153425s ago: executing program 5 (id=6545): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x22, 0x0, 0x8, {'/dev/loop-control\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000280)=""/247, 0xf7, 0x10000, &(0x7f00000001c0)=@file={0x1, './bus\x00'}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x22) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m27.700551066s ago: executing program 35 (id=6545): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x22, 0x0, 0x8, {'/dev/loop-control\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r3, &(0x7f0000000280)=""/247, 0xf7, 0x10000, &(0x7f00000001c0)=@file={0x1, './bus\x00'}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x22) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 2.371863626s ago: executing program 1 (id=7901): socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0xea60}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r3 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) close(r2) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0) read(r2, &(0x7f0000001400)=""/255, 0xff) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x87, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xd0022d274671688e, 0x5, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xd1, 0x4, 0x7f, 0x8, 0x4}, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x74, 0xc, 0x4, 0x80, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x8541, 0xf000, 0xc}]}, 0x4, [{0x96, &(0x7f0000000100)=@string={0x96, 0x3, "eef0bf27f7cd267cd291b789ebdcde0e4663f859cd66627d99f9625017255291e9f1aa9cc794e2d4439ed22ed886808cb4329e96b9db890e666d6cdcd727015e1ef893722f690b2d69bf7f033ec5753324c22437f5cc4f516dd772fafb0c5bc45f1e7ec16fda0f93b330f3c077e92b2a26fe7407ff946f6adb78903d5a980b7bcfdfc84cd9b53ccad36aaea93f4e22bdc5358a6a"}}, {0xb6, &(0x7f00000001c0)=@string={0xb6, 0x3, "7889e5eb6bb51936c9e7db94efce03dd8f470ef182b3b38fba653a11a1fbff69e1486cbe10c7d002f5997f99b465fd855f67602009448f55ee60a57bb5593bd069819a6cf6850ee6f5ab0b0aff9ba4249833a96f5500511b103bf55ec79c33f0275174558c5da6020d35177ae0d678441633e6b528f8becc7b5f0adff0141e96f8acffe0e06ec05a7d99402ace37534b11aaa303c882ed4f3f157337e0956948bdd9e4a00dfa469a1e7b28bbf3bdd48975b4ef36"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3825}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "5cc0612d0eb795811126bf2aba82b1d6b1b0d43599406a000e3c7287745b79bcdc0dd144120ceceed38bcca0d837d4e9accc54d044ba3ee956e6f1480158b57063695716038ec2bbdde3f2e6be5a81c62c4b75768d9ae77a2b3efe73aa3e531a6356ab23aa2d8ffb962ae63b50cc7954e76db98f7338e34a4cf8d62c60afe4b5b8acaf1e7edf645196fd1126a7c8daedf1c443c283e06a7bba"}}]}) write(r4, &(0x7f0000000400)="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", 0x1f000) 2.286764987s ago: executing program 6 (id=7902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) (async) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f00000008c0)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000780)}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) socket(0xa, 0x2400000001, 0x0) (async) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x88, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x3}, @dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x2, 0x1, 0x2f}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x1000}, @acquire, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 2.204995297s ago: executing program 6 (id=7904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f00000001c0)=0x2, 0x80, 0x2, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.64277637s ago: executing program 1 (id=7920): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x161142, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x298800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800002, 0x100010, r1, 0x3000) write(r0, &(0x7f0000000400)="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", 0x678) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x302) 1.63097227s ago: executing program 1 (id=7922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="0f20c035000000800f22c0c4017a11a58353618ac401d05fd366ba200066b8890066ef66420f72d19ac7442400e4000000c7442402fffae64eff2c24440f20c03504000000440f22c066bad004b885eb0a10efb8010000000f01c1260f884bab0000", 0x62}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.60535153s ago: executing program 7 (id=7923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x5, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "4aef"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfff, 0x9, 0x2}, [@acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xf4, 0x8, [0x8, 0x0]}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7f}, @obex={0x5, 0x24, 0x15, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x10, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7d, 0xcd}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0x8}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x4, 0xe, 0x20, 0x10}, 0x126, &(0x7f00000001c0)={0x5, 0xf, 0x126, 0x4, [@generic={0x100, 0x10, 0x3, "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"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "97417cc2c3cdc28efbdd93f428fae871"}]}, 0x3, [{0x93, &(0x7f0000000300)=@string={0x93, 0x3, "d4d4f44f09d6a18e2ce2bb92403bc092f9f9dfd7b1337dc686b88123d0abda02ecf095558e64d4bd70970509370d40383de595d448e8e89bad0c630f551e75594401983e108230b5462c7b63a3ee6858e2ec3da8f4cb09ef6b6b81d8fa72b74b4b40e55612b03c988cf061b2538c4d4740896c8dd41c144321211f16764d9bd1718b7e52a6fc944b1cc48558c9118d737e"}}, {0x43, &(0x7f00000003c0)=@string={0x43, 0x3, "8b955cf2f1252ac778ad555509b5b03698cac0970c4b154ea582e24e0773d598c36cbfa08d8fcac6f764e9193c5ee70cc818290b65e827dfe0bbe6c88ccd9d6c0c"}}, {0xe5, &(0x7f0000000500)=@string={0xe5, 0x3, "e285e39940d40cb1f31ecf72f24f8531424090a7dea273a18007a3f7df48462b2cefaab945d51211eea64e16e1e4d4274e825e6b5d50d1900f911b471cfab4c25b266fd5dcc7fd74f8118c8b6996ebd8c59c9e901a6b2fb15b9ada9d2dcee09ba369e1a38c845be5f0700df193322e04a3ad3cf10c68f43bbb33ba4e654d456c44e42d1851ef4b4ec0db9e2486e5be809644b2ca5ee5b23c8d13f03ffe157c4070ba36ec78a81082bceb8323b1762ca9d1bec3ee4540f8e13d88914e0d10211d9a9d7a60a205632ce4148a4e6c40432e080294302e9479e2a8e02b6cc58ed156ca2cec"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@index_on}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x40, 0x5, 0x84, {0x84, 0x10, "8559845c633a74b6e43c2bf930db2f22fe2c4a1ce13a8a5d9b23473c30b9d66e522d870af553250b3d86fa34ad534536eb4eeedc47b9938140aa904bca0eda596a3a01cf164706c970698fb57f467632e5e5a4675a46e9e0ce0302198d1b9fa3b806a01ce13ce88bc5095bdc913001fe8420edaa4ae82b26710f1cea0d9d3fa366f0"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000740)={0x40, 0xb, 0xf3, "d36bbe5f838fb927dd3947894191204e0ac203543c9c813e8ce2b884f1a1d4d9e0943dd7abc50603744b7c7ad55e38bb916805517f32091eb9394e0349cde5ab4c176f738d8750f61fc76cf59d2ba13df3581c0e53cd5c31e85161c084faf2102ca10f31347e8c92c03ba43145b54480cede8dc629051b722bdb67aa6bad4a4fa7a8ea9abd6bfae8f59033351d987169643b704896a2fd4e32e96ed38221c2774acf49334f36cb1a858ec2e9f8acb151b29de0d1fb511be91218a343b8c80d6d6849d7fbaa7266dd9f2b79796b358f2fe4e5e6edb56a21012464f0ed724c79a60c255591548b276e5afdb5a8bee13cb2fc78b2"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r3, &(0x7f0000000480)={0x7fffffff, 0x20, 0x0, 0x20, 0x3}, 0x48) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.509758751s ago: executing program 1 (id=7924): r0 = socket(0x1a, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x26000004) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) (async) recvfrom(r1, &(0x7f0000000240)=""/115, 0x73, 0x12020, &(0x7f0000000380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) (async) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, 0x18, 0x209, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x25dfdbff, {{@in6=@local, @in6=@private2, 0x0, 0xfffd, 0x0, 0x0, 0x2, 0x180, 0x0, 0x73, r5}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5}, {0x1, 0x0, 0x1}, 0x80000}}, 0xb8}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r10, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x41624800ab11328c, 0x4}) sendmmsg$inet6(r9, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000180)={@val={0x0, 0x88e7}, @val={0x1, 0x80, 0xc3, 0x9, 0x1}, @arp=@generic={0x1b, 0x88a2, 0x6, 0x2, 0x3, @broadcast, "3a8d", @empty, "c1f257ed3d2184ba1cff00000000f6"}}, 0x33) 1.278741222s ago: executing program 6 (id=7925): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x1) syz_open_dev$evdev(0x0, 0x0, 0x822b01) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x0, 0x10, 0x4, "78a5014c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000180)={0x1c, &(0x7f0000000840)={0x40, 0xe, 0x4, "6c1f5ef8"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000500)={0x14, 0x0, 0x0}, &(0x7f0000000b40)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="40147800000067057e1c92bf9a88f6dffc2d236625f54b63ffca7230473028b8e6968c333dfe0e5eeed0311d5f45390f7d"], 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000ec0)={0x20, 0x80, 0x1c, {0xa, 0x7, 0x1, 0x0, 0x28ec, 0x1, 0xf, 0xae1c, 0xc, 0x8, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 1.029516593s ago: executing program 7 (id=7926): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r5, &(0x7f00000001c0)=""/62, 0x40000, 0x14100, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000001180)={{0x3, 0x0, 0x80, {0x8000000, 0x4, 0x2}}, "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", "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"}) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="e000000000000000070000000604000002000000feffffff0000000000000000"]) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) syz_open_procfs$namespace(r10, 0x0) setns(r11, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r1, 0xffffffffffffffff, 0x0) 999.257244ms ago: executing program 7 (id=7927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x130) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x300, 0xffff, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x47, &(0x7f0000000240)={@fda={0x66646185, 0x0, 0x0, 0x31}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086201, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f00000047c0)={0x2020}, 0x2020) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) 754.665235ms ago: executing program 6 (id=7928): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xc8800, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000431c93d503000000000909022400010040c00009040000ac030002000921000000012205000905810000000000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000100)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xa}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0xcc000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x300) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0xffffffffffffff24, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505ef0000440f22c066b93002000066b8040000000fc779000f30", 0x41}], 0x1, 0x42, 0x0, 0xffffffffffffffe9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a", 0xe}], 0x1}, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00', @ANYBLOB="0100280000000000000002"], 0x34}}, 0x0) dup(r8) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000100)={0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r5, 0x9) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 754.258155ms ago: executing program 4 (id=7929): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') (async) socket$inet6(0xa, 0x1, 0x84) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r3, &(0x7f00000028c0)=[{&(0x7f0000000300)="4d768e43ac4e810bd98520fc64039d57261a3826eb9d48fdc5372b56f684d89c5ef411866f123ea56846b59dd66b0a1919dc61ba6e99d44a4cd3e4431dda1bc60c15579c56b1fb7dfb55aa9f9efc9df711ed5a1ed8f8879146acec725c583b26bcdb90b6fe61e7afd579733391c461f056f2a90e1799e63f5c01a50a0b4d068eed7f85829eac7440b21b0ce4ac54825f7d3c4c3737e412a17dbcfa92961bdf64af3e17a7826ddee10cc76fcfd88a7431f9b56c4bf17a5bac34d45cdaafe693cf532818819e76066eb880", 0xca}, {&(0x7f0000000440)="ce6bf8212cc9e9c8fccde7e04c03503fcc48e3c69b5550276d3f0484bdf6855f1c035640a09886418000f2b503eb3df0da940ffaf830862301257148e1f94a77ff8fd19f794b25ca359d370a86877d8f5f227d2290dd2daf5b31ffc3aa3cef4b8786a4a9966f72c289263d007226e6fc73f9a45976f78a20893b9a4816bff0d37b461027120aa2accd6efe4b683ee60a9e0a889e7bb0f6ae815e4ab9104b6661868f5077d49e4dc4bd2a35194be9e2", 0xaf}, {&(0x7f00000025c0)="9e8f8a8b7997fe42d0e65860afdd9ea125b26cd75c2776354e24c7623e83768983b9150b675e4d87ed7dfd487418c4aecfc6f70a40818e52a5168e9abb0abc8b84513a1efa072d18baa84b3bf23f0f9455a4e465b8869a31f035a2e87b29093393853e48cffa610bc1480154aa1cc0e8c55ee630bd44523387895419050081152e3e3580e3f5bf117f0a71999be0", 0x8e}, {&(0x7f0000002680)="6d56962a8f272b37f539a822c0675fc2ce605c48c8f47b83f5bd5dcc9cb31a679d168e81880d03c938f1ae9225eca7df5385977a414d19d83fb6801051c6f3ed6ebceeaedeca7aa4fd9d2dbfcad7469487b656b6f12dd848836c64a3eaa7f531a3d7a2", 0x63}, {&(0x7f0000002700)="7f2381e56742eb3923ee44885b0e600363937ccfe9c04e9379a77bf144f9126c498ea4ca9b7d89f964ad3a09082d0d23f430a3ce67003b216d9a711434e45fe5dfcd996a70a5cc54eb6aab56ae09a2683e281e8ac12c7f6bade177fa493593ed6c75bb4d56473f469d81d529660465fadbe30c428794cfab69b1d0d27680b40c02887e4394eac6fb259703758db22a22343f4ef823f18f74b20fe3ab81715d516b4553674b48817431dd8c85d835a09595e3b78edb58f12b6080ee984a244496db5bcff80e9d98e496e103f266b6efc81288872e760daf2943e780ec0cd8fb4140cedb2af370eae5d5eee59e4311af033bc386f7e7a4", 0xf6}, {&(0x7f0000002800)="e60dd2db21ec8e65e3ce0be9f4020d2517c1800451f8c4f542cebdd4b2c971decc84b3fb1d9786416305a2b6e6334737d31e727b65834e0691a563ba6ff9d0098cc045acb5fa7c214098e1b5719e46aa0c16220be265be3098dde4d0d12c5ca4623f49a473c6cc9e5773086c4a8d0e0a3d6c0273e133d5bd52cd1cfc33e5e06c4feeac858e7a9a48ffab6e800b0b592f22c6db39d4ce3bfa7f86c6b8acae74cbeb8f0eb60f417cc8", 0xa8}], 0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x792f8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r7, 0x0, 0xc) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r6, 0x0, 0x0) fchdir(r8) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000280)={[{0x3, 0x8000, 0xa, 0x9, 0x3, 0xff, 0x7f, 0x89, 0x0, 0x0, 0xff, 0x9, 0x1}, {0x877, 0xee, 0x3, 0x42, 0xf, 0xa0, 0x9, 0x5f, 0x4, 0x3, 0x9}, {0x8, 0x7fff, 0x70, 0x37, 0x9, 0x0, 0x44, 0xfd, 0x4, 0xff, 0x7, 0xa, 0x100000007fffffff}], 0x50}) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) (async) ftruncate(r2, 0x5) (async) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0xfffffffffffffe3a) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002940)={@ptr={0x70742a85, 0x4, &(0x7f0000000180)=""/239, 0xef, 0x2, 0x4}, @fda={0x66646185, 0x9, 0x1, 0x4}, @flat=@handle={0x73682a85, 0xc17eed8f0ab94293, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 611.106806ms ago: executing program 4 (id=7930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 510.320307ms ago: executing program 4 (id=7931): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/fscreate\x00', 0x2, 0x0) fstatfs(r0, &(0x7f0000000300)=""/219) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0x800, 0x7, 0xf9, 0x5}, {0x7, 0x37, 0x1, 0x9}, {0xa, 0x81, 0x83, 0x400}, {0x4b76, 0x3, 0x8, 0x6}, {0x8000, 0x8, 0x2, 0x7c6}, {0x10, 0xb5, 0xe1, 0x8011}, {0x3, 0xbe, 0x6, 0xd82b}, {0xc, 0xfd, 0x4}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000140)={0x0, 0x53a}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1080, 0x103) lgetxattr(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f0000000440)=""/231, 0xe7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r3, 0x5) r4 = accept4(r3, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040054, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) write$FUSE_INIT(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x50084}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf250200000008040164", @ANYRES32=0x0, @ANYBLOB="6c0102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400530700003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040009000000"], 0x24c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x11}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 346.777407ms ago: executing program 1 (id=7932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 326.621337ms ago: executing program 4 (id=7933): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f00000001c0)=""/100, 0x64, 0x6) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000b1b000/0x2000)=nil, 0x2000, 0x9) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000006) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1003, 0x6, '9P2000.L'}, 0x15) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendfile(r2, r1, 0x0, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0x7) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'vlan1\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0x1, @usr_ip4_spec={@multicast2, @empty, 0xe, 0x3, 0x1, 0x8}, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e21, 0x4e22, 0x9}, 0x7f, 0xff01, 0x35, 0xe, 0xffffffffffffffff}}}) socket$inet6(0xa, 0x3, 0x87) r7 = userfaultfd(0x80802) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r9, r8, &(0x7f0000000040)=0xd, 0x8) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) read(r7, &(0x7f00000002c0)=""/153, 0x99) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 267.796668ms ago: executing program 4 (id=7934): lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000080)={0x6e, 0x7a6, 0x2a, 0xa, "f4db294b4f8a72542ab9"}, 0x2a, 0x0) r0 = memfd_secret(0x80000) r1 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x400200, 0xa0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}, 0x32) getsockopt(r4, 0x111, 0x4, 0x0, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000012c0)={0x2020}, 0x2020) lsm_get_self_attr(0xdc, &(0x7f0000000000)={0x0, 0x0, 0x6e, 0x4e, ""/78}, &(0x7f00000000c0)=0x6e, 0x1) r5 = socket(0x1e, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x10f, 0x11, 0x0, &(0x7f0000000500)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$lock(r6, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 198.755049ms ago: executing program 7 (id=7935): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x80, &(0x7f0000000940)=""/128}, {0x1, 0x1000, &(0x7f0000000a80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0xa8, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x4, 0x2, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/4081, 0xff1, 0x0, 0xe}, @fda={0x66646185, 0x2, 0x2, 0x5}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}}, @acquire_done], 0x0, 0x0, 0x0}) 198.504779ms ago: executing program 6 (id=7936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 186.657928ms ago: executing program 7 (id=7937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) r1 = socket(0x1, 0x2, 0x1) ioctl$SIOCGETLINKNAME(r1, 0x89e0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) r2 = dup2(r0, r0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440d4}, 0x4000) 179.519229ms ago: executing program 4 (id=7938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a01010200"/184], 0xd0}}, 0x40) syz_clone(0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x4000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) listen(r0, 0x10) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001) connect$inet6(r2, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = socket(0xb, 0x805, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x105fa, 0x8, 0x203, 0x0, [{0x3, 0x0, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x5}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0x8, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x5, '\x00', 0xff}, {0x5, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x7, 0x0, '\x00', 0x6}, {0x43, 0x4, 0x3, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0xfc, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x3, 0xd1, '\x00', 0x1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x1}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7b, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000"]) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) sendto$inet(0xffffffffffffffff, &(0x7f0000001180)="d00c668b45ca06773aeeafe3bc637cf295faed36456f0b16c774d70597400858169b9223e86b129ddedf1b692816d10fe956840b27def5337d806e380a3eed065e61b1c4ee526ac32e03d57542cf105a918a2e5f01acc7aa5025b23f022b8a97636c744c735f89117dee266a04b9920bc0d9649af6ec55a9aadbc5c31b4516ad3db8c495c9c558867ff3690b0db2375e00a7546831a0aab509edfc2eb143f7ecd37b2de70152062a0f7cb658ca9c961bdb38615374cad02ed0fb6b1b89342dc7e38e5f546a97445bc2ae71fa4a0787d9bce052a56454ecf0282d540e450369c2650e17e5861939027ee325523393d447ed8812bd74cbe8dd3d0744ef8aded72ed48d0792e9336b4ac2244555afe7e06c38b65781965785b4b0e5e58e16ed3e5c8242b052f35433432e8a54c1909ec8c39376bdeb6d205417c94336acd0415c538c1aabe4a3f0f87aa1278c0eec336969ffbca00e556e86119ffc01af905bb8d1585fcbb6ad94d472d11112c9f093fbfc7a9fe62e73f7148fc21e02c6a7abf97055fa8b394f9ede09a946d5cd258b706154eddef68c595606eaab7a19915ce327b6c0e4451e240b9d613c2b26d7e9692d396b5956b83fe0d1dda05d3b398849ad98f85968b1daa109d302df80d5be08e2086d2a698bcf138a89b9f1fdf758946946d26107226352a040f68094e69ee295b6b089a48bcfd4342a3801218a5005f88c0a8434f986450359a121a229d6c255c192f43dca7f4386ebfea90b37d0dab60247adeb6f0abad70144aca8cb11967926ef34412993e7976da0452e598e9f367dae779a3d7b7048061109e706b5e5f0195cf39ad995cd8150666f180d3a8439756548e5d85ce5c0ff4ee0be120d4e4ecb45961026b8ab9ce7a816aa0af9eb12980cc3ce9a8595f36edd872add79bbe2c6d906b31744d15b89177fdf0c1292cec205b2cd49f71c840abf20bde9a1b774b1e51fe5f2e5cf5bc3147c2d516180cd99adb8ccb642505ebf030a61f4cb930a86fc92505506834be599c5fac6eb6c459bcc03f42fe355937ef2c5ffaf2fb795109a3b92a7cc185b8d3d2531d8de8bb610e4978bf692f9e3b0e091ccbe206ce131ed5ef8ffcab415ffc4bcaad6579ea6e421e65ed40fda06345cf8f312bfa9979654ec12405cfbe2055653f1ac34d4fc883ed4ba5a6296667a93f379c22ed68cbf906cec652659ad504a0193c6dee3ba7e21eedcce44e090a695bc1f00eea6bcf0cde6de3d5d1196a5e4ddf7ac516ad1907c988a655afcda273b6aa749d2bc7f8955f830efee9d5f37a58a576c39cd47fd71bea9a310be738316266b13757c918b6314083bcf08bc810c6fb119a1720fd47c9bcc7ac658a06cd6de6dc14d5efa6c80db2bc4cad1137cc1cab20dee3ce9051236e2ee330f2c92ba66ea86364dc0337ac38f4d85ea403ff80c565b92566e55f4e059b7b2697a98b963fd1b410cc4226a3b50cad763d6840e1bcb5408ce04d98b560fd2a0d38818de459169de39a6130e8b712de89964bf2659f04ca728f069f75b0e7593fc3cd985eb3a908eca8aac11e2608a2e97c09f7cb47dcac726629743c56673ab29b24f71ed2b6a8833a54c735eb95c12cacc8e4fa1f3f0dba4a9049db956e9f73512db528da80843cb90c0c5bdc11d4df1697b6c6ac436e8093a2e00f035ab6037a370408d910c512ae6a4f10b973f71920fdaf22e33a697aef2f6d349ec64218f070b62cb82be67ef3e546a8dc18525633f498380e867ad60f6072f4f76b059be40f004eca72cc8d102c30bc54e26c08e9844119973fd180410c6e5470c866a0af5ff60b6f5f81207085375dad23f870e2c8f15e6b55e9b0fa571da36f1921b3523da8e701097e81354016cdbab1556ecb821ddd90b7dd524d5731703ba55837c175684250920043d388ba48a03db8eee8a79ffb7c3181b44db6e439cd9f2831248a03048739d36a9574ff53cc53128c029770b1cc382092e17c732d133c83718ff298743b4b29a723bfef1b0f9b2e4da3a682e443adddc3f53cf957f1724b3b36cfc6ee52cf30c74c8cb9bec565b050d87ee71d4536ff00ba80793cedadb1f0139a597122f224c549ebfddb2864a75b835ece85978d4283880baecf4f31c82008a7bb42acabb242ce94cff603e644eb8f5e57a5c58e0f910ce7481b5695ee53411af6a7cade879a99073daed83dc8f278c026e11cf976b21db85ee42549998277a026d82a802bc967b264d05fbbc632eb1e4a4417dffd3d11867374ecade25837f7288c85f41ca96574f37a751403fc3bb0f62db809b7672932d6cfe41b644098743ddfcd20524df6645aa9367b056599656bcfc9d7c6c3b82e2a5050f6604b0d907bc9d86a2bcb0422652a4fe1b619bd8258378905bda8adb335aff268caf21b4c05468d4c8a767eb65b1f50946bb7352e9b1ebaff4196f0c0c9101600185b85cf9db9d3fdba296571b664c2aeca6ec9089468a020ac7f6583c79349b7e808893887a9162bb9fb9f94578ae12400dec7bf7e67960b2c45f5be93c340c9e9cf12936720b69aa0adfb4bf8019f4dbf1f50f04dd9e2244966ba064bcc752a56c9732eecdf1d03787a9764512b0c77afdd871fe8356e95663b39dab75c3b6557aa41fb5d14c6d46d0d594242d85758b6cbec7900cfbc67746da5c3d97432dbb4b35c31bc558d492a27fc508083f3dc8c570989c2a925a6e14ca51417c9b2683e5793425c6cd93858fc13cefbe511b6552bdd1b6e0c81b5bc6912359290df9829878f15d4a8c989498131680bd5edab57b3a9bb3781781ef0d83d62f028be88d58031483312589e69d71be0248563388c2ae3068169e1f4809ba5e8aed99146104a51517cdfb3d9d7c02f549ec72e78058bbf1c1ccb46e3ffbf3888ec590d2c5f47ae9e9dd136c6d278d2af6d6929011ac23df9b0bc57b59b6b3e7478d5af414dc2a9aa6160dc06f99352b7e164312c75da1831b4846c5f96f0764633a06cd497b885426284d110d834cff9d0bb328040d70899a112a2c67569f4916d996e45abf7e6d310db9e33f21d64e372b1b20bde2d737322d95ef3fb47e04b44a5dd8d6f04073061ed395170490f09e4677578ab1975ed96644cc6756a728743d892f40e9d22f597f4009e5f21ee05a007b4d394653885438cb280f072b41827eff151fbe037e78af4a1da5cf74c880c3693b3ee7ef5ad080cea1f5222054640757bc37389bb6ed069c41dbf84be0b02eecb575fcdcca988f5d5618275836504913ff96a10c7c452aa07d16a6e7593a83cfd78e3847639ad48d0786dc3399bbf8369316ca081dbb384aa11ef00ecf4d93b8469a006cb3e13119178866f172a4b2b1c19250f12afeacaa0165b2694cdd114c47da35f67f3aa08900d66dde363cd21752c5f637a6fca67bd436470a5ec92fcd71d550cf824bcf30fe7aabc13a0aff7dc08c5415c50523fecc76e82bc4176512d8d6ae623ef65c0829f8cba23c6562fcccd22ed14d2f25d48a9c3debcb55fab2149cfeb0623c5445b750c04e5b789e2e36986e096f4ead0c5ecb8ecd344ac1bcc8da90579fa80b0ab8316f20b5451ceaec21b81b14219d145430b65f0f12b523bd0ff4095297b521f8076c1ca50abe276e4deeee39152528f2ef2c3ed9f3af24c87ad13dc0f45dab8f8a997c165bc56c5c30914dcb95c05e74a5f79b35e1112bbf55c5fa7133595793aad84e98bce6a8194a40168480dc6eb7948b5c3b5f1799321a4e41b3f6b21beafd593bf7116de4123b551fdf5d4d0cf7286397d40dce6229ffe8d5d2b2c221d48be92e52ec2423e24effeb75995890a097b0d73f504d11451e2dd8300e4ce8f73c7e4d8efe1d325c535e028967436e16ac45ca3f48198b01da42b86b5f59513be13b8701a5ecde0dd41a6ce270f53884d8260e868693beeb196fa63b9ce39d4c124992817fa79a92b91a035dbe7ca122bdc260bffbbc74749eb816f57b656a7babd8dfd34d9be564a6e12463d1d7bf07ea264d76a6850b61b4a1764272e04d37fa1b6ec057f3c443867d4fb66f3f7a515ffe62fddac500aa431fec1d4b64615396c54b003d39ce63f7f17be878cf9b338bf6b9ffc6a89c1e16270aae13de3387dfecc1ac84721630d427ca87de962f3190e4b2757be044724b83b8b9b4ea5592d45cfc53cd446278f30706900bfc633fc599b97ce6a46abee2bbb3cca7b36f180788227bf2020fa4951057d6dcb94d4eaaa5ca2aa04b640d9249de3d29f04445838a7b0611606c51f711e9b411da2e8883ec9a5131725eb45da39db7b1a1f4b2309a61198503534a402f35ac5f9aaf14343d0da9e7918071411c58f9bac7a599ed5ffec522f88946a36f06461a4fef06b896a434ceffb08163574461b8168f0fc83981c515d4bca4cfbe10c5f07f3e18c6c750b88214bb9fd3de1df8c179f7abc07fb3a719c4b222635f330dbb5fb8920af5d55eb561f6dd580143139d99c8a3a0a79cc4bdee17e90c046120d43cd123b31dc5b45ca93b900111e7bee48926bacb0dfb0e3ae73c7404984e4e7a125efa8a6f92de65f803b83eee7939ea638f0e17143175638ebeb5fef83f33a9156a04a363c481928b3429f2d7c34e89f7a34ba7e59cdb98845ea062b1293b8b36e86ca81b5f89d574896b39cde49b7633afb972b23e87755454acb44819370f42418b6207dab26696487278185f44f84892ec9282cc0cc719edd3cf44a5bf3d29de51dfb89e46dfaef964895bda659f6c8bd1423f984921ac0c849ccf39b457f09b6736d7bf0758d3c0d61476f9ada88dcb51625949cf601da775b9d73cdb74629bb56d213faf648e3950da7954af7226db636ae9c922fa9bc59cbe7c6414ea5da1b2c9ed1e4249c94fcc8a8347d3002174cb3e21de1da820ecc20e50c756fd5eda85b82d0ad5d33b918094f0b69ab2dc66f4c0d66fcf17335bfaa9b9d6f10985961b05d114f81effacd4dc09a75312dd9d49f0641048f4a8bb0950bd5ea1e4b929332f5a5b17bcdcf6a9231b6bdd26e0c9bcc8a56f2ccd37ec7d733f5eef98da7274522b2e242cdf1337676715c0eb7f5a48148583ccb4753bde82d0ee3cfd46963c915cad6c582c277f1cae81cfb0816e61dc5bbfb0a74bfff176720fec3fcef40ebddd90c9bb7f6069273a86eb554ba3cb0297f0440bac1e00054a23584858a1008f6f033060e08ee89112d0f7a319fc88146ce761a7eed4dcc0e0bf6ffe622c93f90e1e9721aa1d28f402de1d2a796c6aeb4ab33317066e1f8a9b4937523f3a3a938eda603264bfc0a02b4989d0f50a9b056cd4249a855df5e0c8fd71fa6a6e70ea953525300d11b3fbeccc748bd12936c2a195d1e636e8b9d93d297b8fe4005067b6196cf12f39bc1a377c432b0b73f4412a6896fff951fa417269e5f085db542b5a84d525d1f02a6cec79485327e88a8984a191b3ea951230a69bbed65583fdacd8071557e99f2eb6461e7734a1913d222e3845f0b6cc8a3046ea0c0698ed177d3be4942430b739be5a0e861fef8766c0fb64051e102b15b24071962d97d606d3dc4957db541f9618658e1ba0da4433825b7cca4a4eb35e2c37d20d20816bdc41b3b3c60fa1525e379a465fdb8a336fd392573f442e2eb9f72db7350dc5e1a241ab520c06d7dd82958448f2c51e909d94dc5e3a7ddad97997dc07bdec6caa78bc441c39b2d3d6386e34777097d5ced959b3b72fc0f5aacf306000b7d12d84f224e0e3df9b3602733d2011299d03af3f7245d4c18ddef1470de28e7aa106902c214cff3cd1917ae5eaf70c1cc1567a9b2a9b2a9b", 0x1000, 0x10, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x17) 86.662719ms ago: executing program 1 (id=7939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0xffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r4, r4, 0x0, 0x4) read$FUSE(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000c40), 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 86.235749ms ago: executing program 7 (id=7940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53b}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x229, 0x218, 0x108, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000000)=""/156, &(0x7f00000000c0)=0x9c) unlinkat(r2, &(0x7f0000000200)='./cgroup/file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)="86"}) 0s ago: executing program 6 (id=7941): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100c000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x1c, 0x100, 0x70bd26, 0x25dfdbfd, {0x7}, [@generic="95030d572ccd474d9f36183fd62dd947fc3f9ece140beefb1f596cb3215a6cf9ed4254b8fd1c2dc157efafc706063e32dec9594f30e8fbb5dc7a384bc6b9542a88c3d338909c73f60e8526041520bc8977f734defb3a74967c5fc47003a98c9482e629ec53df9204163bba2f12728aade12a4f1fa3e67c7eed252702c99d4ad05fac46f9e044e4cd146096b783de9ea950d7c93799741ff045ebda78d1e0b66f23fdddfcb68bb1bc6b73d49440ef381b92d2bf08310dbab1572f98ee5774ac39c90c4accecb3830293b4515a8304ed717ab82f22f4f20a692bcc0085d0e6e6c2c95b81cf30ba5eac06b3"]}, 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x26800, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000300)="77767429e19cb47f92154989d6defcf29c9ee11981c21af206709bb935eb029ee71fbad40243a537acdcf086b4f03c80185a5de9da8a44722d94b82d722f6d13f1371fac1a457ebb1d99e2ce9f56ce42a7d429cfce6f70d5aec35433f1a8f43d79cffbe7b1e19298aa01535d3cdad727150e03", 0x73}, {&(0x7f0000000380)="e22b6ac4332c2c2a94cc625049b12ae06c142c655ca361b731ec3a5064961ee293dcc14ddf6e27ed8809faa76191481b6f6abde29996fed24bfa9a364f3ce62702240783c94df4da0463e182f7ac362b99df9c4ea4893fe9864ca949ab435c4ca53afcb1683dbb32ce001307c0264c9be3025438fbb8542565669c38c6a7c4a38644e93664a297bd822318ba21a176c586cfac28e5c54b495a48dc1512ccb634fac06ed40aa91ede2bede2297e52be616b5765846ef1ebb664a3e741565945ecd8a8450408becd0290739957318bc222878410fca8c41b6e4ec77fa4587a181332c010d697fefc60aebef16edb", 0xed}, {&(0x7f0000000480)='M', 0x1}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="0585b65990ee17f6b67ee45bb4c6c6cce517c7af469ead7a70acd6239cf4c684318e09943f309c75fecd0ba10aced8b973216de415fc93868b486e056247b53c1d4f68296e3cabddcc8ca99c5428da2c68c20c2e7c69cd8a97ed542a41e492b9a95e639e713359c50c7b69ad7bf20a3a236fdd21dcef36d0", 0x78}, {&(0x7f0000001540)="ea0b3589601d43eb861b148a", 0xc}], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000001840)={0x44002000, &(0x7f0000001640)=0xffffffffffffffff, &(0x7f0000001680), &(0x7f00000016c0)=0x0, {0x37}, &(0x7f0000001700)=""/153, 0x99, &(0x7f00000017c0)=""/39, &(0x7f0000001800)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000001a80)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10006000}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x16c, 0x35, 0x200, 0x70bd25, 0x25dfdbfb, {0x13}, [@nested={0x10, 0x51, 0x0, 0x1, [@typed={0x4, 0x33}, @typed={0x8, 0x13f, 0x0, 0x0, @pid=r3}]}, @nested={0xd9, 0x31, 0x0, 0x1, [@generic="e9f38cf9329456bca67f85266b1caf0d5433a55b97556c7774563e08dbc900ec1ba25090abdec4a9dafe747c24671942eae5769973a25e1c625e90e85d6b0df55b09b2360c7594d6cde839849db24e24e14b73aacbbd2708dd39b9b67e83fa4f2ea6551b80ed4fe89e93c7825728544a182b454290bd620b8ea73ac7b3805dfe6902a3ee6d74c9602a16f86b42c4263283eda7c32b1901b1cbe38e3404038ee94fa21c1d97190dcb7da3c699754748ae19b36af399aca506a0f74c3d83e87de08d6d18e149716ca4242d7b3efcf901cad15e959eaf"]}, @generic="fff1780fafdab3cc66cbae40224580aa4fcbc410423b7df124ef091017e1f46198c134e024b13f91a4dac83c6f49783f678827155ebbb9b6502a327cd98a2f6cabb27c2a885c54cadb20e968b76b9423b8de53cf86a274333fa7a295438e36b33a42f04d30099a2b15"]}, 0x16c}, 0x1, 0x0, 0x0, 0xd4}, 0x4000080) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x200080c4) syz_clone(0xa00, &(0x7f0000001bc0)="72e110efc16f885c5059519b208871a0c11040109f7ecb9fa314acf0639d7f60459feb450b5a12cea4999f550ca07f6d259a55699f50f4f6bf41acefedcf963f33e57c", 0x43, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="57b8c99a8cd3ca9b875e43f31c94891661e9a36984f949efe9d4e906fe925137c32217673ccdbb71e3231bb6868f8be97c78293e1ae066955e240d6479a23721f8c4aac9bec6b5eb77ca6ba7bced08e8c0708c0794da06b70c57") r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000001d40)={@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) write$tun(r0, &(0x7f0000001d80)={@void, @val={0x2, 0x0, 0x2, 0x1, 0x9, 0x8}, @ipv6=@generic={0x4, 0x6, "106dc0", 0x1ae, 0x32, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, {[@fragment={0x29, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x68}, @srh={0x1, 0xc, 0x4, 0x6, 0x48, 0x20, 0x800, [@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @empty, @loopback]}, @routing={0x3c, 0x6, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @routing={0x87, 0x4, 0x0, 0x7f, 0x0, [@private0, @rand_addr=' \x01\x00']}, @dstopts={0x3b, 0x9, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0x0, 0x4c, [0x7, 0x6, 0x5e, 0x8, 0x7fff, 0x2, 0x1, 0x9]}}]}], "c233339043f28ee89e917b8f7877d827e8036ca78ebcb99dd8d1bb83fa8c32d0365271d992414d85f7f57f6dce4bc0b4e201c09d2c6946f83bfd6fb19dd813f6f31537ab4cee0a6a8f368fbc910732ad9741ce1623bc4d3413e5f16bb8cbf2e684193c242dcd014d77f7a530ec21a5445ad2bae3d1b8e25cc3fb37ac6f621660a130cf88408c"}}}, 0x1e0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000001f80)={{0x1, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x4, 'wrr\x00', 0x2, 0xffff, 0x74}, {@broadcast, 0x4e24, 0x1, 0x800, 0x9, 0x3}}, 0x44) r5 = signalfd(r1, &(0x7f0000002000)={[0xde1]}, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000002040), 0x4) ioctl$TCXONC(r0, 0x540a, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x3c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040840}, 0x8000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000021c0), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0x94, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x76, 0x5, "9a019c07244ae76d9588a7b22798ad4db8991d4646053220e63bdb1a261ee2365094baddc35dc24984978761eeb8727a7b64ebb64188bdcf9e673739dbbf22dd95f45ca442f08c50586eb0d6aefadde4000cef8809f5ba2cebefe1bfc27b4fcac4f75bc6b31955bd3b94ed4f0d804ded2bee"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x10010, r1, 0x78c87000) getdents(r5, &(0x7f0000002340)=""/61, 0x3d) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000002380)={"49b5c100b31519dff31a72d3a68073f0", 0x0, 0x0, {0x9, 0x8}, {0x0, 0xf7}, 0x8, [0x8, 0x1, 0x7fff, 0x8, 0x5fe6, 0x7, 0x80000001, 0x8, 0x9, 0x7, 0x433, 0xb, 0x80, 0x6, 0x0, 0xd1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000002500)={{r5}, r8, 0x1a, @inherit={0x58, &(0x7f0000002480)={0x1, 0x2, 0x1, 0x1, {0x14, 0x0, 0x0, 0x8, 0x343}, [0x7, 0x1000000000000]}}, @name="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"}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000003540), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x14, r10, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003680), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000036c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000003800)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003700)={0xac, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80890}, 0xc004) kernel console output (not intermixed with test programs): e_t tclass=chr_file permissive=1 [ 429.886222][ T36] audit: type=1400 audit(647.715:31879): avc: denied { read write open } for pid=18431 comm="syz.5.5954" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 429.979168][ T36] audit: type=1400 audit(647.935:31880): avc: denied { read write } for pid=10847 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.003478][ T36] audit: type=1400 audit(647.935:31881): avc: denied { read write open } for pid=10847 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 430.446247][T18474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.690227][ T435] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 430.862232][ T435] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.872410][ T435] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.882848][ T435] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 430.891918][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 430.899895][ T435] usb 4-1: SerialNumber: syz [ 431.121272][ T435] usb 4-1: 0:2 : does not exist [ 431.129650][ T435] usb 4-1: unit 5: unexpected type 0x0b [ 431.138058][ T435] usb 4-1: USB disconnect, device number 40 [ 431.183392][T11047] udevd[11047]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 431.596491][T18516] futex_wake_op: syz.1.5985 tries to shift op by 32; fix this program [ 431.662954][T18518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.798685][T18527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=18527 comm=syz.3.5989 [ 431.818551][T18527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5989'. [ 431.827582][ T1038] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.009941][T18548] fuse: Bad value for 'fd' [ 432.639283][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6005'. [ 432.799591][T18588] rust_binder: 211: no such ref 0 [ 432.804675][T18588] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 432.812013][T18588] rust_binder: 211: no such ref 2 [ 432.822547][T18588] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 432.913807][T18599] fuse: Bad value for 'fd' [ 432.936487][T18598] fuse: Bad value for 'fd' [ 432.961314][T18593] rust_binder: Write failure EFAULT in pid:213 [ 432.962704][T18593] rust_binder: Write failure EFAULT in pid:213 [ 433.111580][T18611] rust_binder: Write failure EFAULT in pid:215 [ 433.525275][T18648] 9pnet_fd: Insufficient options for proto=fd [ 433.889824][T18667] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 433.926399][T18667] rust_binder: Write failure EINVAL in pid:227 [ 434.290170][T18692] rust_binder: Write failure EFAULT in pid:233 [ 434.713686][ T36] kauditd_printk_skb: 493 callbacks suppressed [ 434.713710][ T36] audit: type=1400 audit(434.664:32375): avc: denied { create } for pid=18702 comm="syz.5.6046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.759276][ T36] audit: type=1400 audit(434.694:32376): avc: denied { execmem } for pid=18704 comm="syz.4.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 434.799309][ T36] audit: type=1400 audit(434.694:32377): avc: denied { execute } for pid=18704 comm="syz.4.6047" path="/dev/rnullb0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 434.859253][ T36] audit: type=1400 audit(434.694:32378): avc: denied { ioctl } for pid=18702 comm="syz.5.6046" path="socket:[77546]" dev="sockfs" ino=77546 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 434.899260][ T36] audit: type=1400 audit(434.704:32379): avc: denied { mounton } for pid=18702 comm="syz.5.6046" path="/78" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 434.939255][ T36] audit: type=1400 audit(434.734:32380): avc: denied { read write } for pid=17507 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.968154][ T36] audit: type=1400 audit(434.734:32381): avc: denied { read write open } for pid=17507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.069270][ T36] audit: type=1400 audit(434.734:32382): avc: denied { ioctl } for pid=17507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.155702][T18722] __vm_enough_memory: pid: 18722, comm: syz.5.6054, bytes: 18014402804453376 not enough memory for the allocation [ 435.170071][ T36] audit: type=1400 audit(434.774:32383): avc: denied { read append } for pid=18707 comm="syz.5.6049" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.220727][ T36] audit: type=1400 audit(434.774:32384): avc: denied { read open } for pid=18707 comm="syz.5.6049" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.547108][T18751] rust_binder: inc_ref_done called when no active inc_refs [ 435.547137][T18751] rust_binder: 258: no such ref 2 [ 435.559712][T18751] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 435.567108][T18751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 435.783188][T18757] netlink: 679 bytes leftover after parsing attributes in process `syz.3.6066'. [ 435.869282][ T45] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 436.021607][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 436.032682][ T45] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 436.041793][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.056384][ T45] usb 6-1: config 0 descriptor?? [ 436.070953][T18753] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 436.491658][ T45] hid-generic 0003:04F3:0755.0034: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 436.705051][ T9] usb 6-1: USB disconnect, device number 11 [ 437.097866][T18808] tipc: Enabling of bearer rejected, failed to enable media [ 437.745328][T18839] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6093'. [ 437.758125][T18840] overlayfs: failed to clone upperpath [ 437.849268][ T45] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 437.999294][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 438.006490][ T45] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 438.015130][ T45] usb 6-1: config 0 has no interface number 0 [ 438.021520][ T45] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 438.031474][ T45] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 438.044406][ T45] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 438.053597][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.061643][ T45] usb 6-1: Product: syz [ 438.065799][ T45] usb 6-1: Manufacturer: syz [ 438.070714][ T45] usb 6-1: SerialNumber: syz [ 438.076700][ T45] usb 6-1: config 0 descriptor?? [ 438.089248][T18832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 438.097025][T18832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 438.306787][T18832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 438.315247][T18832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 438.325863][ T45] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 438.336219][ T45] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 438.347349][ T45] asix 6-1:0.251: probe with driver asix failed with error -5 [ 439.035146][ T435] usb 6-1: USB disconnect, device number 12 [ 439.389790][T18889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=18889 comm=syz.3.6110 [ 439.411573][T18889] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.6110'. [ 439.445408][T18894] netlink: 'syz.4.6112': attribute type 27 has an invalid length. [ 439.459319][ T435] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 439.599254][ T435] usb 6-1: device descriptor read/64, error -71 [ 439.725151][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 439.725174][ T36] audit: type=1400 audit(439.674:32883): avc: denied { create } for pid=18907 comm="syz.3.6118" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 439.752521][ T36] audit: type=1400 audit(439.674:32884): avc: denied { map } for pid=18907 comm="syz.3.6118" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 439.776405][ T36] audit: type=1400 audit(439.674:32885): avc: denied { read write } for pid=18907 comm="syz.3.6118" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 439.801105][ T36] audit: type=1400 audit(439.674:32886): avc: denied { map } for pid=18907 comm="syz.3.6118" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 439.825004][ T36] audit: type=1400 audit(439.674:32887): avc: denied { read write } for pid=18907 comm="syz.3.6118" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 439.849771][ T36] audit: type=1400 audit(439.684:32888): avc: denied { create } for pid=18907 comm="syz.3.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.869808][ T435] usb 6-1: device descriptor read/64, error -71 [ 439.871291][ T36] audit: type=1400 audit(439.684:32889): avc: denied { write } for pid=18907 comm="syz.3.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.896063][ T36] audit: type=1400 audit(439.684:32890): avc: denied { read } for pid=18907 comm="syz.3.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.916840][ T36] audit: type=1400 audit(439.684:32891): avc: denied { read } for pid=18907 comm="syz.3.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.936874][ T36] audit: type=1400 audit(439.754:32892): avc: denied { ioctl } for pid=18875 comm="syz.5.6105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.109278][ T435] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 440.249271][ T435] usb 6-1: device descriptor read/64, error -71 [ 440.489304][ T435] usb 6-1: device descriptor read/64, error -71 [ 440.599631][ T435] usb usb6-port1: attempt power cycle [ 440.939297][ T435] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 440.961829][ T435] usb 6-1: device descriptor read/8, error -71 [ 441.091314][ T435] usb 6-1: device descriptor read/8, error -71 [ 441.329267][ T435] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 441.351804][ T435] usb 6-1: device descriptor read/8, error -71 [ 441.481208][ T435] usb 6-1: device descriptor read/8, error -71 [ 441.589568][ T435] usb usb6-port1: unable to enumerate USB device [ 442.041029][T19015] overlayfs: failed to clone upperpath [ 442.060064][T19016] overlayfs: failed to clone upperpath [ 442.252593][T19026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 442.303756][T19034] 9pnet_fd: Insufficient options for proto=fd [ 442.338352][T19038] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 442.731084][T19064] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6172'. [ 443.029734][T19087] netlink: 'syz.4.6179': attribute type 19 has an invalid length. [ 443.448529][T19101] can: request_module (can-proto-3) failed. [ 443.669170][T19113] netlink: 25 bytes leftover after parsing attributes in process `syz.4.6189'. [ 443.681937][T19113] netlink: 'syz.4.6189': attribute type 17 has an invalid length. [ 444.334908][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6198'. [ 444.419609][T19173] x_tables: duplicate entry at hook 1 [ 444.425674][T19173] x_tables: duplicate entry at hook 1 [ 445.015920][ T36] kauditd_printk_skb: 536 callbacks suppressed [ 445.015940][ T36] audit: type=1400 audit(444.964:33429): avc: denied { read write } for pid=17507 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.079831][ T36] audit: type=1400 audit(444.964:33430): avc: denied { read write open } for pid=17507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.111974][ T36] audit: type=1400 audit(444.964:33431): avc: denied { ioctl } for pid=17507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.162902][ T36] audit: type=1400 audit(444.984:33432): avc: denied { read write } for pid=19204 comm="syz.5.6216" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.185960][ T36] audit: type=1400 audit(444.984:33433): avc: denied { read write open } for pid=19204 comm="syz.5.6216" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 445.210344][ T36] audit: type=1400 audit(444.984:33434): avc: denied { create } for pid=19204 comm="syz.5.6216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.234474][ T36] audit: type=1400 audit(444.994:33435): avc: denied { write } for pid=19204 comm="syz.5.6216" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.257364][ T36] audit: type=1400 audit(444.994:33436): avc: denied { create } for pid=19204 comm="syz.5.6216" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.278786][ T36] audit: type=1400 audit(444.994:33437): avc: denied { ioctl } for pid=19204 comm="syz.5.6216" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=80243 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.305344][ T36] audit: type=1400 audit(444.994:33438): avc: denied { create } for pid=19204 comm="syz.5.6216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 445.369301][ T331] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 445.509289][ T331] usb 6-1: device descriptor read/64, error -71 [ 445.749316][ T331] usb 6-1: device descriptor read/64, error -71 [ 445.954605][T19233] incfs: Options parsing error. -22 [ 445.960066][T19233] incfs: mount failed -22 [ 445.989273][ T331] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 446.129274][ T331] usb 6-1: device descriptor read/64, error -71 [ 446.369300][ T331] usb 6-1: device descriptor read/64, error -71 [ 446.479790][ T331] usb usb6-port1: attempt power cycle [ 446.588348][T19267] netlink: 'syz.1.6241': attribute type 64 has an invalid length. [ 446.596253][T19267] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6241'. [ 446.715629][T19277] netlink: 'syz.4.6243': attribute type 64 has an invalid length. [ 446.829263][ T331] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 446.851341][ T331] usb 6-1: device descriptor read/8, error -71 [ 446.949471][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 446.981327][ T331] usb 6-1: device descriptor read/8, error -71 [ 447.219287][ T331] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 447.246687][ T331] usb 6-1: device descriptor read/8, error -71 [ 447.381759][ T331] usb 6-1: device descriptor read/8, error -71 [ 447.490587][ T331] usb usb6-port1: unable to enumerate USB device [ 447.845962][T19326] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6265'. [ 447.974000][T19346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6271'. [ 448.134421][T19357] rust_binder: 299: no such ref 3 [ 448.149045][T19357] rust_binder: 299: no such ref 1 [ 448.154525][T19357] rust_binder: Write failure EFAULT in pid:299 [ 448.236525][T19361] tipc: Enabled bearer , priority 0 [ 448.251127][T19360] tipc: Resetting bearer [ 448.266370][T19360] tipc: Disabling bearer [ 448.391180][T19374] fuse: Bad value for 'fd' [ 448.590041][T19382] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6283'. [ 450.131433][ T36] kauditd_printk_skb: 413 callbacks suppressed [ 450.131455][ T36] audit: type=1400 audit(450.084:33852): avc: denied { name_bind } for pid=19436 comm="syz.1.6300" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 450.189309][ T36] audit: type=1400 audit(450.084:33853): avc: denied { node_bind } for pid=19436 comm="syz.1.6300" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 450.229254][ T36] audit: type=1400 audit(450.144:33854): avc: denied { create } for pid=19436 comm="syz.1.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 450.269283][ T36] audit: type=1400 audit(450.144:33855): avc: denied { create } for pid=19446 comm="syz.3.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.312957][ T36] audit: type=1400 audit(450.174:33856): avc: denied { name_bind } for pid=19436 comm="syz.1.6300" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 450.359242][ T36] audit: type=1400 audit(450.174:33857): avc: denied { node_bind } for pid=19436 comm="syz.1.6300" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 450.382014][ T36] audit: type=1400 audit(450.174:33858): avc: denied { write } for pid=19446 comm="syz.3.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.406293][ T36] audit: type=1400 audit(450.174:33859): avc: denied { read } for pid=19446 comm="syz.3.6303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 450.430479][ T36] audit: type=1400 audit(450.174:33860): avc: denied { name_bind } for pid=19436 comm="syz.1.6300" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 450.452778][ T36] audit: type=1400 audit(450.174:33861): avc: denied { node_bind } for pid=19436 comm="syz.1.6300" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 451.988805][T19494] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6321'. [ 451.998602][T19494] gretap0: entered promiscuous mode [ 452.006456][T19494] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6321'. [ 452.015762][T19494] 0{X: renamed from gretap0 [ 452.027711][T19494] 0{X: left promiscuous mode [ 452.041655][T19494] 0{X: entered allmulticast mode [ 452.054691][T19494] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 452.196156][T19501] overlayfs: missing 'lowerdir' [ 452.423560][T19506] overlayfs: failed to clone lowerpath [ 452.481194][T19506] overlayfs: failed to clone lowerpath [ 453.257975][T19541] overlayfs: failed to clone upperpath [ 453.308597][T19543] overlayfs: failed to clone upperpath [ 453.800586][T19562] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 453.807936][T19562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:341 [ 454.001671][T19578] SELinux: security_context_str_to_sid () failed with errno=-22 [ 455.064091][T19664] netlink: 1335 bytes leftover after parsing attributes in process `syz.5.6375'. [ 455.156014][ T36] kauditd_printk_skb: 1095 callbacks suppressed [ 455.156037][ T36] audit: type=1400 audit(715.106:34957): avc: denied { create } for pid=19665 comm="syz.5.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.158543][T19666] 9pnet_fd: Insufficient options for proto=fd [ 455.178150][ T36] audit: type=1400 audit(715.106:34958): avc: denied { setopt } for pid=19665 comm="syz.5.6379" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.218954][ T36] audit: type=1400 audit(715.106:34959): avc: denied { mounton } for pid=19665 comm="syz.5.6379" path="/118/file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 455.241762][ T36] audit: type=1400 audit(715.166:34960): avc: denied { read write } for pid=17507 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.272299][ T36] audit: type=1400 audit(715.166:34961): avc: denied { read write open } for pid=17507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.297060][ T36] audit: type=1400 audit(715.166:34962): avc: denied { ioctl } for pid=17507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.324734][ T36] audit: type=1400 audit(715.196:34963): avc: denied { mounton } for pid=19669 comm="syz.3.6381" path="/584/file0" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 455.347790][ T36] audit: type=1400 audit(715.226:34964): avc: denied { mount } for pid=19669 comm="syz.3.6381" name="/" dev="incremental-fs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 455.382285][ T36] audit: type=1400 audit(715.226:34965): avc: denied { mounton } for pid=19669 comm="syz.3.6381" path="/584/file0" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 455.404713][ T36] audit: type=1400 audit(715.226:34966): avc: denied { mount } for pid=19669 comm="syz.3.6381" name="/" dev="incremental-fs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 455.906249][T19714] overlayfs: failed to clone upperpath [ 455.968103][ T331] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 456.004643][T19725] overlayfs: failed to clone upperpath [ 456.119340][ T331] usb 6-1: Using ep0 maxpacket: 32 [ 456.128825][ T331] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 456.137729][ T331] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 456.146427][ T331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 456.156830][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 456.166620][ T331] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 456.176738][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 456.189844][ T331] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 456.199146][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.209458][ T331] usb 6-1: config 0 descriptor?? [ 456.429186][ T331] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 456.444118][ T331] usb 6-1: USB disconnect, device number 21 [ 456.451639][ T331] usblp0: removed [ 456.454124][T11086] udevd[11086]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 456.465575][T11086] udevd[11086]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 456.541730][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6404'. [ 456.580696][T19754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6405'. [ 456.867886][ T331] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 457.017854][ T331] usb 6-1: Using ep0 maxpacket: 32 [ 457.036331][ T331] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 457.055302][ T331] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 457.074723][ T331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 457.093937][ T331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 457.109009][ T331] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 457.121369][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 457.134462][ T331] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 457.143730][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.154737][ T331] usb 6-1: config 0 descriptor?? [ 457.202025][T19769] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.213570][T19769] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.227981][T19769] bridge_slave_0: entered allmulticast mode [ 457.234479][T19769] bridge_slave_0: entered promiscuous mode [ 457.242137][T19769] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.249302][T19769] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.256417][T19769] bridge_slave_1: entered allmulticast mode [ 457.263024][T19769] bridge_slave_1: entered promiscuous mode [ 457.330483][T10413] bridge_slave_1: left allmulticast mode [ 457.336203][T10413] bridge_slave_1: left promiscuous mode [ 457.342050][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.349628][T10413] bridge_slave_0: left allmulticast mode [ 457.355296][T10413] bridge_slave_0: left promiscuous mode [ 457.361047][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.373473][ T331] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 457.490238][T10413] tipc: Left network mode [ 457.491013][T19769] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.501683][T19769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.509041][T19769] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.516090][T19769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.525164][T10413] veth1_macvtap: left promiscuous mode [ 457.530794][T10413] veth0_vlan: left promiscuous mode [ 457.612457][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.621553][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.634824][ T2176] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.641926][ T2176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.653789][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.660934][T10422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.728360][ T9] usb 6-1: USB disconnect, device number 22 [ 457.743115][T19769] veth0_vlan: entered promiscuous mode [ 457.751884][ T9] usblp0: removed [ 457.836339][T19790] fuse: Unknown parameter 'J20x0000000000000004' [ 457.852650][T19769] veth1_macvtap: entered promiscuous mode [ 458.017779][ T2176] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.652096][T19872] 9pnet_fd: Insufficient options for proto=fd [ 458.797632][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 458.947390][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 458.954855][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.965847][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.975631][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 458.984739][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.994151][ T9] usb 6-1: config 0 descriptor?? [ 459.413738][ T9] savu 0003:1E7D:2D5A.0035: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 459.674654][T19866] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 459.790700][T19903] netlink: 'syz.4.6447': attribute type 46 has an invalid length. [ 459.972825][T19923] 9pnet_fd: Insufficient options for proto=fd [ 459.981403][T19926] futex_wake_op: syz.1.6454 tries to shift op by 32; fix this program [ 460.067151][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 460.500682][ T36] kauditd_printk_skb: 873 callbacks suppressed [ 460.500750][ T36] audit: type=1400 audit(720.457:35840): avc: denied { execmem } for pid=19939 comm="syz.4.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 460.527109][ T36] audit: type=1400 audit(720.457:35841): avc: denied { execute } for pid=19939 comm="syz.4.6460" path="/dev/rnullb0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.550831][ T36] audit: type=1400 audit(720.497:35842): avc: denied { mounton } for pid=19941 comm="syz.4.6461" path="/303/file0" dev="tmpfs" ino=1632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.592162][ T36] audit: type=1400 audit(720.547:35843): avc: denied { read write } for pid=19769 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.637281][ T36] audit: type=1400 audit(720.547:35844): avc: denied { read write open } for pid=19769 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.695301][T19949] rust_binder: Write failure EFAULT in pid:4 [ 460.696389][ T36] audit: type=1400 audit(720.547:35845): avc: denied { ioctl } for pid=19769 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 460.729061][ T36] audit: type=1400 audit(720.547:35846): avc: denied { read } for pid=19948 comm="syz.3.6464" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.750017][ T36] audit: type=1400 audit(720.547:35847): avc: denied { read open } for pid=19948 comm="syz.3.6464" path="net:[4026532819]" dev="nsfs" ino=4026532819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.773276][ T36] audit: type=1400 audit(720.547:35848): avc: denied { create } for pid=19948 comm="syz.3.6464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.792831][ T36] audit: type=1400 audit(720.547:35849): avc: denied { shutdown } for pid=19948 comm="syz.3.6464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.866915][ T45] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 460.875619][T10422] bridge_slave_1: left allmulticast mode [ 460.883046][T10422] bridge_slave_1: left promiscuous mode [ 460.889480][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.902649][T10422] bridge_slave_0: left allmulticast mode [ 460.908457][T10422] bridge_slave_0: left promiscuous mode [ 460.914213][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.101277][T10422] veth1_macvtap: left promiscuous mode [ 461.107006][T10422] veth0_vlan: left promiscuous mode [ 461.211718][T19969] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.224497][T19969] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.231941][T19969] bridge_slave_0: entered allmulticast mode [ 461.243715][T19969] bridge_slave_0: entered promiscuous mode [ 461.251432][T19969] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.259064][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.266215][T19969] bridge_slave_1: entered allmulticast mode [ 461.272946][T19969] bridge_slave_1: entered promiscuous mode [ 461.374406][T19969] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.381523][T19969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.388919][T19969] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.395977][T19969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.452778][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.460689][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.475641][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.482742][T10422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.498813][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.505889][T10422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.598770][T19988] rust_binder: 19987 RLIMIT_NICE not set [ 461.598802][T19988] rust_binder: 385: no such ref 0 [ 461.641348][T19969] veth0_vlan: entered promiscuous mode [ 461.707545][T19969] veth1_macvtap: entered promiscuous mode [ 461.899758][T20003] rust_binder: 2: no such ref 0 [ 461.907383][T20003] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 461.915051][T20003] rust_binder: 2: no such ref 4294967295 [ 461.928794][T20003] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 462.043186][T20011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=88 sclass=netlink_tcpdiag_socket pid=20011 comm=syz.5.6481 [ 462.072473][T20014] rust_binder: 4: no such ref 2 [ 462.080828][T20012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20012 comm=syz.5.6481 [ 462.276970][ T31] usb 6-1: USB disconnect, device number 23 [ 462.966434][ T377] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 463.118764][ T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.129759][ T377] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.139656][ T377] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 463.148780][ T377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.160283][ T377] usb 6-1: config 0 descriptor?? [ 463.584353][ T377] usbhid 6-1:0.0: can't add hid device: -71 [ 463.590912][ T377] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 463.600242][ T377] usb 6-1: USB disconnect, device number 24 [ 464.250117][T20126] 9pnet_fd: Insufficient options for proto=fd [ 464.522394][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6524'. [ 464.986541][T20166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 465.115356][T20173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.507337][ T36] kauditd_printk_skb: 621 callbacks suppressed [ 465.507359][ T36] audit: type=1400 audit(725.468:36471): avc: denied { read write } for pid=19969 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.585826][ T36] audit: type=1400 audit(725.468:36472): avc: denied { read write open } for pid=19969 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.654390][ T36] audit: type=1400 audit(725.468:36473): avc: denied { ioctl } for pid=19969 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.715750][ T36] audit: type=1400 audit(725.488:36474): avc: denied { create } for pid=20183 comm="syz.6.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 465.739075][ T36] audit: type=1400 audit(725.488:36475): avc: denied { write } for pid=20183 comm="syz.6.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 465.758250][ T36] audit: type=1400 audit(725.488:36476): avc: denied { read write } for pid=20183 comm="syz.6.6533" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.781791][ T36] audit: type=1400 audit(725.488:36477): avc: denied { read write open } for pid=20183 comm="syz.6.6533" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.805966][ T36] audit: type=1400 audit(725.488:36478): avc: denied { ioctl } for pid=20183 comm="syz.6.6533" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.835920][ T36] audit: type=1400 audit(725.488:36479): avc: denied { ioctl } for pid=20183 comm="syz.6.6533" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 465.868806][ T36] audit: type=1400 audit(725.488:36480): avc: denied { create } for pid=20183 comm="syz.6.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 466.120152][ T2176] bridge_slave_1: left allmulticast mode [ 466.125930][ T2176] bridge_slave_1: left promiscuous mode [ 466.131619][ T2176] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.141761][ T2176] bridge_slave_0: left allmulticast mode [ 466.153866][ T2176] bridge_slave_0: left promiscuous mode [ 466.159635][ T2176] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.287892][ T2176] tipc: Left network mode [ 466.296829][ T2176] veth1_macvtap: left promiscuous mode [ 466.312547][ T2176] veth0_vlan: left promiscuous mode [ 466.434261][T20216] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.441544][T20216] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.448673][T20216] bridge_slave_0: entered allmulticast mode [ 466.454859][T20216] bridge_slave_0: entered promiscuous mode [ 466.463404][T20216] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.470793][T20216] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.478019][T20216] bridge_slave_1: entered allmulticast mode [ 466.484306][T20216] bridge_slave_1: entered promiscuous mode [ 466.562089][T20216] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.569172][T20216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.576480][T20216] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.583636][T20216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.629938][ T2176] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.637321][ T2176] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.652040][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.659180][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.670114][ T2176] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.677218][ T2176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.746173][T20216] veth0_vlan: entered promiscuous mode [ 466.778583][T20216] veth1_macvtap: entered promiscuous mode [ 466.919015][T20235] rust_binder: Error while translating object. [ 466.919057][T20235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 466.925256][T20235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2 [ 467.114625][T20239] /dev/rnullb0: Can't open blockdev [ 467.225908][T20243] 9pnet_fd: Insufficient options for proto=fd [ 467.744282][T20286] /dev/rnullb0: Can't open blockdev [ 467.857964][T20292] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 467.966492][T20298] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=20298 comm=syz.1.6570 [ 468.197099][T20312] /dev/rnullb0: Can't open blockdev [ 468.725334][T20323] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 468.725364][T20323] rust_binder: Error while translating object. [ 468.739752][T20323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.746505][T20323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 469.023877][T20347] binder: Unknown parameter 'fscontext?}' [ 469.336428][T20366] /dev/rnullb0: Can't open blockdev [ 469.349101][T20363] 9pnet_fd: Insufficient options for proto=fd [ 469.421615][T20372] 9pnet_fd: Insufficient options for proto=fd [ 469.769315][T20384] rust_binder: Error in use_page_slow: ESRCH [ 469.769340][T20384] rust_binder: use_range failure ESRCH [ 469.775745][T20384] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 469.781408][T20384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 469.791905][T20384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49 [ 470.216023][T20411] rust_binder: Error in use_page_slow: ESRCH [ 470.225920][T20411] rust_binder: use_range failure ESRCH [ 470.232343][T20411] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 470.240604][T20411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 470.249671][T20411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62 [ 470.541483][ T36] kauditd_printk_skb: 856 callbacks suppressed [ 470.541507][ T36] audit: type=1400 audit(730.499:37337): avc: denied { mounton } for pid=20423 comm="syz.4.6612" path="/346/file0" dev="tmpfs" ino=1861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 470.624593][ T36] audit: type=1400 audit(730.519:37338): avc: denied { create } for pid=20423 comm="syz.4.6612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.654622][ T36] audit: type=1400 audit(730.519:37339): avc: denied { connect } for pid=20423 comm="syz.4.6612" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.694605][ T36] audit: type=1400 audit(730.519:37340): avc: denied { setopt } for pid=20423 comm="syz.4.6612" laddr=fe80::11 lport=58 faddr=ff02::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.734601][ T36] audit: type=1400 audit(730.539:37341): avc: denied { read write } for pid=20422 comm="syz.6.6611" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 470.792441][ T36] audit: type=1400 audit(730.539:37342): avc: denied { read write open } for pid=20422 comm="syz.6.6611" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 470.844542][ T36] audit: type=1400 audit(730.539:37343): avc: denied { write } for pid=20423 comm="syz.4.6612" path="socket:[83666]" dev="sockfs" ino=83666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.904534][ T36] audit: type=1400 audit(730.539:37344): avc: denied { mount } for pid=20422 comm="syz.6.6611" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 470.951191][ T36] audit: type=1400 audit(730.539:37345): avc: denied { write } for pid=20423 comm="syz.4.6612" laddr=fe80::11 lport=58 faddr=ff02::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.992637][ T36] audit: type=1400 audit(730.720:37346): avc: denied { create } for pid=20429 comm="syz.4.6613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.644170][T20457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 471.779182][T20465] netlink: 'syz.1.6625': attribute type 4 has an invalid length. [ 471.787980][T20465] netlink: 'syz.1.6625': attribute type 5 has an invalid length. [ 471.804544][T20465] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6625'. [ 471.884637][T20472] fuseblk: Bad value for 'blksize' [ 472.129047][T20487] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 472.716201][T20519] fuse: Unknown parameter '0xffffffffffffffff' [ 473.077828][T20557] overlayfs: failed to clone upperpath [ 473.350424][T20568] netlink: 'syz.1.6663': attribute type 3 has an invalid length. [ 473.419276][T20570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6664'. [ 473.636473][T20586] 9pnet_virtio: no channels available for device ./file0 [ 473.647549][T20588] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6669'. [ 473.653745][T20586] netlink: 116 bytes leftover after parsing attributes in process `syz.7.6668'. [ 473.670204][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6668'. [ 473.906129][T20620] tmpfs: Unknown parameter 'quota' [ 473.907339][T20619] overlayfs: failed to clone upperpath [ 473.926376][T20620] overlayfs: failed to clone upperpath [ 474.497017][T20643] 9pnet_fd: Insufficient options for proto=fd [ 474.526893][T20645] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6689'. [ 474.536013][T20645] z00X: renamed from gretap0 (while UP) [ 474.542796][T20645] z00X: entered allmulticast mode [ 474.874723][T20678] virtiofs: Unknown parameter 'always' [ 475.162923][T20706] fuse: Unknown parameter 'i)@54M6c8HnY.%' [ 475.169119][T20712] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.6712'. [ 475.183079][T20710] x_tables: duplicate entry at hook 1 [ 475.569742][ T36] kauditd_printk_skb: 587 callbacks suppressed [ 475.569761][ T36] audit: type=1400 audit(735.531:37934): avc: denied { read write } for pid=20756 comm="syz.6.6724" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.626615][ T36] audit: type=1400 audit(735.571:37935): avc: denied { read write open } for pid=20756 comm="syz.6.6724" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.753379][ T36] audit: type=1400 audit(735.571:37936): avc: denied { ioctl } for pid=20756 comm="syz.6.6724" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.777832][ T36] audit: type=1400 audit(735.581:37937): avc: denied { read write } for pid=19969 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.781148][T20767] binder: Bad value for 'max' [ 475.829334][ T36] audit: type=1400 audit(735.581:37938): avc: denied { read write open } for pid=19969 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.883451][ T36] audit: type=1400 audit(735.581:37939): avc: denied { ioctl } for pid=19969 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.963350][ T36] audit: type=1400 audit(735.621:37940): avc: denied { create } for pid=20759 comm="syz.1.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.003326][ T36] audit: type=1400 audit(735.621:37941): avc: denied { write } for pid=20759 comm="syz.1.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.028711][T20776] audit: audit_backlog=65 > audit_backlog_limit=64 [ 476.035921][ T36] audit: type=1400 audit(735.621:37942): avc: denied { mounton } for pid=20761 comm="syz.7.6727" path="/46/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 476.091106][T20784] overlayfs: failed to clone upperpath [ 476.164478][T20793] input: syz0 as /devices/virtual/input/input40 [ 476.168905][T20791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20791 comm=syz.4.6736 [ 476.289686][T20797] netlink: 'syz.1.6738': attribute type 4 has an invalid length. [ 476.313571][T20796] netlink: 'syz.1.6738': attribute type 4 has an invalid length. [ 476.690951][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6749'. [ 476.984149][T20871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 476.986272][T20872] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.458203][T20906] tipc: Started in network mode [ 478.469545][T20906] tipc: Node identity 4, cluster identity 4711 [ 478.475719][T20906] tipc: Node number set to 4 [ 478.643664][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6779'. [ 478.652780][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6779'. [ 479.094004][T20928] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6782'. [ 479.103328][T20929] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6782'. [ 479.328384][T20946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6789'. [ 479.358239][T20949] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.994439][T20964] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 479.995015][T20967] cgroup: fork rejected by pids controller in /syz1 [ 480.014175][T20964] overlayfs: missing 'lowerdir' [ 480.040760][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6798'. [ 480.577322][ T36] kauditd_printk_skb: 520 callbacks suppressed [ 480.577345][ T36] audit: type=1400 audit(740.532:38428): avc: denied { create } for pid=21005 comm="syz.4.6803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 480.607719][ T36] audit: type=1400 audit(740.572:38429): avc: denied { create } for pid=21007 comm="syz.1.6804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 480.645919][ T36] audit: type=1400 audit(740.602:38430): avc: denied { mounton } for pid=21009 comm="syz.1.6805" path="/448" dev="tmpfs" ino=2410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.707105][ T36] audit: type=1400 audit(740.662:38431): avc: denied { mounton } for pid=21015 comm="syz.1.6807" path="/450/bus" dev="tmpfs" ino=2427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.708054][T21016] overlayfs: failed to clone upperpath [ 480.773296][ T36] audit: type=1400 audit(740.732:38432): avc: denied { create } for pid=21017 comm="syz.1.6808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 480.826695][ T36] audit: type=1400 audit(740.792:38433): avc: denied { setopt } for pid=21017 comm="syz.1.6808" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 481.071781][ T36] audit: type=1400 audit(741.022:38434): avc: denied { create } for pid=21022 comm="syz.7.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.090988][ T36] audit: type=1400 audit(741.042:38435): avc: denied { setopt } for pid=21022 comm="syz.7.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.110285][ T36] audit: type=1400 audit(741.042:38436): avc: denied { create } for pid=21022 comm="syz.7.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.129892][ T36] audit: type=1400 audit(741.042:38437): avc: denied { create } for pid=21022 comm="syz.7.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.656576][T21035] netlink: 'syz.1.6814': attribute type 4 has an invalid length. [ 481.664373][T21035] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6814'. [ 481.678128][T21035] netlink: 'syz.1.6814': attribute type 1 has an invalid length. [ 481.686121][T21035] netlink: 'syz.1.6814': attribute type 2 has an invalid length. [ 482.557705][T21070] 9pnet_fd: Insufficient options for proto=fd [ 482.746040][T21088] cgroup: Unknown subsys name 'smackfsdef' [ 484.849258][T21134] netlink: 'syz.4.6850': attribute type 1 has an invalid length. [ 484.857118][T21134] netlink: 'syz.4.6850': attribute type 2 has an invalid length. [ 485.582219][ T36] kauditd_printk_skb: 848 callbacks suppressed [ 485.582240][ T36] audit: type=1400 audit(745.543:39286): avc: denied { execute } for pid=21181 comm="syz.1.6867" path="/462/cpuacct.usage_percpu" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 485.612666][ T36] audit: type=1400 audit(745.543:39287): avc: denied { execute } for pid=21181 comm="syz.1.6867" path="/462/cpuacct.usage_percpu" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 485.640671][ T36] audit: type=1400 audit(745.593:39288): avc: denied { create } for pid=21187 comm="syz.1.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.659859][ T36] audit: type=1400 audit(745.603:39289): avc: denied { bind } for pid=21187 comm="syz.1.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.678818][ T36] audit: type=1400 audit(745.603:39290): avc: denied { create } for pid=21187 comm="syz.1.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.698398][ T36] audit: type=1400 audit(745.603:39291): avc: denied { create } for pid=21187 comm="syz.1.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.717960][ T36] audit: type=1400 audit(745.603:39292): avc: denied { bind } for pid=21187 comm="syz.1.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.736425][T21192] bpf: Bad value for 'mode' [ 485.737462][ T36] audit: type=1400 audit(745.603:39293): avc: denied { write } for pid=21187 comm="syz.1.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.747224][T21192] bpf: Bad value for 'mode' [ 485.760658][ T36] audit: type=1400 audit(745.643:39294): avc: denied { create } for pid=21189 comm="syz.1.6870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 485.784110][ T36] audit: type=1400 audit(745.643:39295): avc: denied { ioctl } for pid=21189 comm="syz.1.6870" path="socket:[86433]" dev="sockfs" ino=86433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.527609][T21225] fuse: Bad value for 'rootmode' [ 486.535209][T21222] rust_binder: Error while translating object. [ 486.535262][T21222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 486.549154][T21222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:128 [ 486.714651][T21242] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.966453][T21288] rust_binder: Read failure Err(EAGAIN) in pid:143 [ 487.980853][T21290] overlayfs: failed to clone lowerpath [ 488.039056][T21296] overlayfs: failed to clone lowerpath [ 488.399860][T21315] binder: Bad value for 'defcontext' [ 488.485541][T21320] rust_binder: Write failure EFAULT in pid:164 [ 489.229505][T21353] 9pnet_fd: Insufficient options for proto=fd [ 489.798012][T21373] overlayfs: failed to clone upperpath [ 489.883573][T21382] tmpfs: Bad value for 'nr_blocks' [ 489.891094][T21382] fuse: Bad value for 'fd' [ 490.363416][T21401] 9pnet_fd: Insufficient options for proto=fd [ 490.594515][ T36] kauditd_printk_skb: 380 callbacks suppressed [ 490.594536][ T36] audit: type=1400 audit(750.554:39676): avc: denied { create } for pid=21402 comm="syz.7.6952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 490.619964][ T36] audit: type=1400 audit(750.554:39677): avc: denied { setopt } for pid=21402 comm="syz.7.6952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 490.623563][T21424] 9pnet_fd: Insufficient options for proto=fd [ 490.649914][ T36] audit: type=1400 audit(750.584:39678): avc: denied { mounton } for pid=21422 comm="syz.4.6959" path="/429/file0" dev="tmpfs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 490.691126][ T36] audit: type=1400 audit(750.654:39679): avc: denied { name_bind } for pid=21425 comm="syz.4.6960" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 490.712606][ T36] audit: type=1400 audit(750.654:39680): avc: denied { node_bind } for pid=21425 comm="syz.4.6960" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 490.858146][ T36] audit: type=1400 audit(750.814:39681): avc: denied { mounton } for pid=21432 comm="syz.1.6962" path="/502/file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 490.949899][T21443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6965'. [ 490.954963][ T36] audit: type=1400 audit(750.904:39682): avc: denied { execmem } for pid=21442 comm="syz.4.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 490.959020][T21443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6965'. [ 490.979445][ T36] audit: type=1400 audit(750.904:39683): avc: denied { create } for pid=21442 comm="syz.4.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.008103][ T36] audit: type=1400 audit(750.904:39684): avc: denied { write } for pid=21442 comm="syz.4.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 491.036368][ T36] audit: type=1400 audit(750.994:39685): avc: denied { execmem } for pid=21444 comm="syz.1.6966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 492.594336][T21517] overlayfs: failed to clone upperpath [ 492.753943][T21538] netlink: 'syz.7.7000': attribute type 12 has an invalid length. [ 492.869591][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7004'. [ 492.882449][T21550] tipc: Started in network mode [ 492.887361][T21550] tipc: Node identity ac14142f, cluster identity 4711 [ 492.894363][T21550] tipc: Enabling of bearer rejected, failed to enable media [ 493.515096][T21595] overlayfs: failed to clone upperpath [ 494.192745][T21643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7037'. [ 494.226758][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7038'. [ 494.226816][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7038'. [ 494.236448][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7038'. [ 494.246716][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7038'. [ 494.255248][T21645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7038'. [ 494.511099][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7042'. [ 495.355939][T21700] tmpfs: Unknown parameter '' [ 495.408923][T21704] fuse: Bad value for 'group_id' [ 495.413969][T21704] fuse: Bad value for 'group_id' [ 495.454793][T21707] overlayfs: failed to clone upperpath [ 495.642078][ T36] kauditd_printk_skb: 319 callbacks suppressed [ 495.642109][ T36] audit: type=1400 audit(755.605:40005): avc: denied { create } for pid=21718 comm="syz.6.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 495.668419][ T36] audit: type=1400 audit(755.605:40006): avc: denied { bind } for pid=21718 comm="syz.6.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 495.687571][ T36] audit: type=1400 audit(755.615:40007): avc: denied { connect } for pid=21718 comm="syz.6.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 495.734528][ T36] audit: type=1400 audit(755.695:40008): avc: denied { create } for pid=21718 comm="syz.6.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 495.753702][ T36] audit: type=1400 audit(755.705:40009): avc: denied { bind } for pid=21718 comm="syz.6.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 495.772751][ T36] audit: type=1326 audit(755.705:40010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dca98f6c9 code=0x7ffc0000 [ 495.796261][ T36] audit: type=1326 audit(755.705:40011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2dca98f6c9 code=0x7ffc0000 [ 495.820837][ T36] audit: type=1326 audit(755.705:40012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dca98f6c9 code=0x7ffc0000 [ 495.845030][ T36] audit: type=1326 audit(755.705:40013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.7063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dca98f6c9 code=0x7ffc0000 [ 495.869488][ T36] audit: type=1400 audit(755.815:40014): avc: denied { execmem } for pid=21724 comm="syz.6.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 495.898656][T21727] overlayfs: failed to clone lowerpath [ 497.035330][T21772] overlayfs: failed to clone lowerpath [ 497.520216][T21801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=21801 comm=syz.6.7093 [ 497.672206][T21808] __nla_validate_parse: 3 callbacks suppressed [ 497.672228][T21808] netlink: 680 bytes leftover after parsing attributes in process `syz.6.7094'. [ 498.367691][T21852] netlink: 'syz.4.7108': attribute type 1 has an invalid length. [ 498.647455][T21876] 9pnet: Could not find request transport: fE"d [ 499.086392][T21918] bridge0: entered allmulticast mode [ 499.193602][T21926] netlink: 328 bytes leftover after parsing attributes in process `syz.7.7135'. [ 499.204098][T21926] netlink: 'syz.7.7135': attribute type 4 has an invalid length. [ 499.214108][T21926] netlink: 992 bytes leftover after parsing attributes in process `syz.7.7135'. [ 499.391089][T21946] netlink: 188 bytes leftover after parsing attributes in process `syz.7.7142'. [ 499.407133][T21946] netlink: 188 bytes leftover after parsing attributes in process `syz.7.7142'. [ 499.599944][T21976] cgroup: Invalid name [ 500.959433][ T36] kauditd_printk_skb: 671 callbacks suppressed [ 500.959454][ T36] audit: type=1400 audit(760.927:40686): avc: denied { map } for pid=22048 comm="syz.4.7175" path="pipe:[89236]" dev="pipefs" ino=89236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 500.988627][ T36] audit: type=1400 audit(760.927:40687): avc: denied { execute } for pid=22048 comm="syz.4.7175" path="pipe:[89236]" dev="pipefs" ino=89236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 501.043532][ T36] audit: type=1400 audit(761.007:40688): avc: denied { create } for pid=22050 comm="syz.6.7176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 501.087432][ T36] audit: type=1400 audit(761.007:40689): avc: denied { create } for pid=22050 comm="syz.6.7176" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.125601][T22062] netlink: 328 bytes leftover after parsing attributes in process `syz.6.7180'. [ 501.127428][ T36] audit: type=1400 audit(761.007:40690): avc: denied { map } for pid=22050 comm="syz.6.7176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.159979][ T36] audit: type=1400 audit(761.007:40691): avc: denied { read write } for pid=22050 comm="syz.6.7176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.192175][ T36] audit: type=1400 audit(761.007:40692): avc: denied { map } for pid=22050 comm="syz.6.7176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.217537][ T36] audit: type=1400 audit(761.007:40693): avc: denied { read write } for pid=22050 comm="syz.6.7176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.244621][ T36] audit: type=1400 audit(761.007:40694): avc: denied { create } for pid=22050 comm="syz.6.7176" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.272647][ T36] audit: type=1400 audit(761.007:40695): avc: denied { map } for pid=22050 comm="syz.6.7176" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=88513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 501.822776][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7200'. [ 501.949696][T22126] tipc: Started in network mode [ 501.954620][T22126] tipc: Node identity 4, cluster identity 4711 [ 501.961436][T22126] tipc: Node number set to 4 [ 502.047039][T22135] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 502.096830][T22145] fuse: Unknown parameter 'gr?Ip_id' [ 502.169372][T22154] tmpfs: Unknown parameter 'net/route' [ 503.077386][T22203] fuse: Bad value for 'fd' [ 503.451995][T22214] netlink: 'syz.4.7232': attribute type 6 has an invalid length. [ 503.460442][T22214] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.580636][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7237'. [ 504.054974][T22271] netlink: 'syz.1.7248': attribute type 11 has an invalid length. [ 504.156414][T22281] overlayfs: failed to clone upperpath [ 504.188949][T22285] overlayfs: failed to clone upperpath [ 504.271495][T22293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22293 comm=syz.6.7257 [ 504.348937][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7259'. [ 504.360293][T22305] futex_wake_op: syz.6.7259 tries to shift op by -1; fix this program [ 504.420765][T22313] netlink: 'syz.1.7264': attribute type 1 has an invalid length. [ 504.428610][T22313] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7264'. [ 505.057703][T22330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7271'. [ 505.672987][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7282'. [ 505.780227][T22378] overlayfs: failed to clone upperpath [ 506.001686][T22387] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.008784][T22387] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.016030][T22387] bridge_slave_0: entered allmulticast mode [ 506.022465][T22387] bridge_slave_0: entered promiscuous mode [ 506.029444][T22387] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.036547][T22387] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.043735][T22387] bridge_slave_1: entered allmulticast mode [ 506.050640][T22387] bridge_slave_1: entered promiscuous mode [ 506.062643][ T36] kauditd_printk_skb: 314 callbacks suppressed [ 506.062662][ T36] audit: type=1400 audit(766.028:41010): avc: denied { sys_module } for pid=22387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.089767][ T36] audit: type=1400 audit(766.028:41011): avc: denied { sys_module } for pid=22387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.114533][ T36] audit: type=1400 audit(766.078:41012): avc: denied { sys_module } for pid=22387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.135514][ T36] audit: type=1400 audit(766.078:41013): avc: denied { sys_module } for pid=22387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.160436][ T36] audit: type=1400 audit(766.128:41014): avc: denied { sys_module } for pid=22387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.181379][ T36] audit: type=1400 audit(766.128:41015): avc: denied { sys_module } for pid=22387 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 506.226725][ T36] audit: type=1400 audit(766.198:41016): avc: denied { create } for pid=22387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.247131][ T36] audit: type=1400 audit(766.198:41017): avc: denied { write } for pid=22387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.266363][T22387] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.274419][T22387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.277658][ T36] audit: type=1400 audit(766.198:41018): avc: denied { read } for pid=22387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.281714][T22387] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.302599][ T36] audit: type=1400 audit(766.198:41019): avc: denied { read } for pid=22387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.308639][T22387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.353762][ T2176] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.361278][ T2176] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.375563][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.382657][T10422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.393700][ T2176] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.400794][ T2176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.468490][T22387] veth0_vlan: entered promiscuous mode [ 506.499364][T22387] veth1_macvtap: entered promiscuous mode [ 506.585193][T22398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 515.468201][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 515.468224][ T36] audit: type=1400 audit(775.440:41121): avc: denied { read } for pid=22402 comm="syz.1.7293" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 515.509547][T22407] 9pnet_fd: Insufficient options for proto=fd [ 515.554086][ T36] audit: type=1400 audit(775.440:41122): avc: denied { read open } for pid=22402 comm="syz.1.7293" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 515.581547][ T36] audit: type=1400 audit(775.450:41123): avc: denied { create } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.608617][ T36] audit: type=1400 audit(775.450:41124): avc: denied { create } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.629447][ T36] audit: type=1400 audit(775.450:41125): avc: denied { write } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.650255][ T36] audit: type=1400 audit(775.450:41126): avc: denied { read } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.674833][ T36] audit: type=1400 audit(775.450:41127): avc: denied { write } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.695843][ T36] audit: type=1400 audit(775.450:41128): avc: denied { getopt } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 515.716553][ T36] audit: type=1400 audit(775.450:41129): avc: denied { create } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 515.737627][ T36] audit: type=1400 audit(775.450:41130): avc: denied { getopt } for pid=22404 comm="syz.6.7295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 515.746967][T22429] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7300'. [ 515.766055][T22429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.788115][T22431] netlink: 'syz.4.7294': attribute type 27 has an invalid length. [ 516.054768][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 517.518565][T22492] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 517.628011][T22508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 517.963565][T22525] binder: Unknown parameter 'defcontext01777777777777777777777' [ 518.210189][T22554] netlink: 'syz.7.7340': attribute type 6 has an invalid length. [ 518.218044][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7340'. [ 518.390572][T22569] tipc: New replicast peer: 255.255.255.255 [ 518.404832][T22569] tipc: Enabled bearer , priority 10 [ 518.448025][T22576] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 518.478075][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7349'. [ 518.487105][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7349'. [ 518.911557][T22604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 518.918379][T22604] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 518.925801][T22604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 518.943306][T22604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:39 [ 518.956028][T22612] 9pnet_fd: Insufficient options for proto=fd [ 519.264991][T22645] netlink: 'syz.6.7372': attribute type 29 has an invalid length. [ 519.340331][T22649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=22649 comm=syz.4.7374 [ 519.407698][T22658] /dev/loop0: Can't lookup blockdev [ 519.613126][ T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 519.773097][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 519.903079][ T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 519.919973][T22691] EXT4-fs: Ignoring removed check option [ 519.925741][T22691] No source specified [ 520.062154][T22698] fuse: Bad value for 'group_id' [ 520.067220][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 520.073249][T22698] fuse: Bad value for 'group_id' [ 520.080068][ T9] usb usb2-port1: attempt power cycle [ 520.092436][T22698] 9p: Unknown Cache mode or invalid value m [ 520.200305][T22707] netlink: 488 bytes leftover after parsing attributes in process `syz.7.7394'. [ 520.279818][T22716] fuse: Unknown parameter '' [ 520.422973][ T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 520.443612][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 520.488618][ T36] kauditd_printk_skb: 620 callbacks suppressed [ 520.488640][ T36] audit: type=1400 audit(780.461:41751): avc: denied { create } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.515060][ T36] audit: type=1400 audit(780.461:41752): avc: denied { create } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.537027][ T36] audit: type=1400 audit(780.461:41753): avc: denied { write } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.558505][ T36] audit: type=1400 audit(780.461:41754): avc: denied { create } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.579799][ T9] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 520.593819][ T36] audit: type=1400 audit(780.461:41755): avc: denied { write } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.614374][ T36] audit: type=1400 audit(780.461:41756): avc: denied { read } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.624015][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 520.635031][ T36] audit: type=1400 audit(780.471:41757): avc: denied { create } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.641259][ T9] usb usb2-port1: unable to enumerate USB device [ 520.664933][ T36] audit: type=1400 audit(780.471:41758): avc: denied { setopt } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.684320][ T36] audit: type=1400 audit(780.471:41759): avc: denied { write } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.703489][ T36] audit: type=1400 audit(780.471:41760): avc: denied { write } for pid=22735 comm="syz.7.7404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 520.793585][T22746] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7409'. [ 520.804178][T22746] netlink: 51 bytes leftover after parsing attributes in process `syz.4.7409'. [ 520.813297][T22746] netlink: 'syz.4.7409': attribute type 4 has an invalid length. [ 521.478794][T22782] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7419'. [ 522.177441][T22840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7436'. [ 522.186655][T22839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7436'. [ 522.502783][T22864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 522.547960][T22864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 522.554641][T22864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 522.679430][T10404] tipc: Subscription rejected, illegal request [ 522.705180][T22877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 522.706950][T22877] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 522.720941][T22877] rust_binder: Read failure Err(EAGAIN) in pid:57 [ 522.807757][T22877] rust_binder: 57: no such ref 0 [ 522.819270][T22877] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 522.826416][T22877] rust_binder: 57: no such ref 2 [ 522.832657][T22877] rust_binder: Error while translating object. [ 522.832711][T22877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 522.838873][T22877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 522.964873][T22882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 522.981277][T22882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 523.011148][T22884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 523.019176][T22884] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 523.025649][T22884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 523.033759][T22884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:62 [ 523.162027][T22890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 524.074753][T10406] Bluetooth: hci0: Frame reassembly failed (-84) [ 524.097571][T22954] overlayfs: conflicting lowerdir path [ 524.501708][T22981] fuse: Bad value for 'fd' [ 524.999672][T23005] netlink: 'syz.7.7496': attribute type 15 has an invalid length. [ 525.513715][ T36] kauditd_printk_skb: 448 callbacks suppressed [ 525.513736][ T36] audit: type=1400 audit(5135.486:42209): avc: denied { mounton } for pid=23051 comm="syz.6.7512" path="/228/file0" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 525.543341][ T36] audit: type=1400 audit(5135.486:42210): avc: denied { mount } for pid=23051 comm="syz.6.7512" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 525.565768][ T36] audit: type=1400 audit(5135.486:42211): avc: denied { mounton } for pid=23051 comm="syz.6.7512" path="/228/file0" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 525.595434][ T36] audit: type=1400 audit(5135.516:42212): avc: denied { create } for pid=23056 comm="syz.6.7513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 525.616206][ T36] audit: type=1400 audit(5135.516:42213): avc: denied { getopt } for pid=23056 comm="syz.6.7513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 525.648791][ T36] audit: type=1400 audit(5135.516:42214): avc: denied { mounton } for pid=23056 comm="syz.6.7513" path="/229/file0" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 525.684981][ T36] audit: type=1400 audit(5135.526:42215): avc: denied { mount } for pid=23056 comm="syz.6.7513" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 525.708001][ T36] audit: type=1400 audit(5135.566:42216): avc: denied { create } for pid=23058 comm="syz.7.7514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.727403][ T36] audit: type=1400 audit(5135.566:42217): avc: denied { bind } for pid=23058 comm="syz.7.7514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.753209][ T36] audit: type=1400 audit(5135.566:42218): avc: denied { create } for pid=23058 comm="syz.7.7514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 526.142241][ T1038] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 526.142285][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 526.972276][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 527.129230][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 527.137826][ T9] usb 2-1: config 0 has no interface number 0 [ 527.145782][ T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 527.156681][ T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 527.167723][ T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 527.179696][ T9] usb 2-1: config 0 interface 2 has no altsetting 0 [ 527.190266][ T9] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 527.199853][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.212217][ T9] usb 2-1: Product: syz [ 527.216415][ T9] usb 2-1: Manufacturer: syz [ 527.221119][ T9] usb 2-1: SerialNumber: syz [ 527.232846][ T9] usb 2-1: config 0 descriptor?? [ 527.243622][T23107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.251222][T23107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.479370][T23107] /dev/rnullb0: Can't open blockdev [ 527.507365][ T9] usb 2-1: USB disconnect, device number 20 [ 527.606027][T23138] udevd[23138]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 528.033097][T23157] rust_binder: Write failure EINVAL in pid:77 [ 528.043059][T23157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.059930][T23157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.272271][ T380] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 528.432349][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 528.445143][ T380] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 528.462258][ T380] usb 2-1: config 0 has no interface number 0 [ 528.472436][ T380] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 528.481780][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.489901][ T380] usb 2-1: Product: syz [ 528.494340][ T380] usb 2-1: Manufacturer: syz [ 528.498935][ T380] usb 2-1: SerialNumber: syz [ 528.506048][ T380] usb 2-1: config 0 descriptor?? [ 528.715999][T23157] rust_binder: Error in use_page_slow: ESRCH [ 528.716027][T23157] rust_binder: use_range failure ESRCH [ 528.722075][T23157] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 528.734031][T23157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 528.742007][T23157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:77 [ 528.755609][ T380] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 528.776287][ T380] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 528.791784][ T380] usb 2-1: USB disconnect, device number 21 [ 529.405745][T23214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.406466][T23214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 529.413262][T23214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:83 [ 529.722969][T23250] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7578'. [ 529.744615][T23250] fuseblk: Bad value for 'user_id' [ 529.749745][T23250] fuseblk: Bad value for 'user_id' [ 529.822235][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 529.972228][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 529.979359][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.991028][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 530.000276][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.009733][ T9] usb 2-1: config 0 descriptor?? [ 530.232228][T23260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.246889][T23260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.261148][T23259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.269745][T23259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.354673][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 530.374511][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 530.387826][ T9] usb 2-1: USB disconnect, device number 22 [ 530.518202][T23280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.518772][T23280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.526314][ T36] kauditd_printk_skb: 495 callbacks suppressed [ 530.526333][ T36] audit: type=1400 audit(5140.496:42714): avc: denied { create } for pid=23279 comm="syz.1.7589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.538303][T23280] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 530.541068][ T36] audit: type=1400 audit(5140.496:42715): avc: denied { write } for pid=23279 comm="syz.1.7589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.559994][T23280] rust_binder: Error while translating object. [ 530.569210][ T36] audit: type=1400 audit(5140.496:42716): avc: denied { read write } for pid=23279 comm="syz.1.7589" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 530.588531][T23280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 530.595769][ T36] audit: type=1400 audit(5140.496:42717): avc: denied { read write open } for pid=23279 comm="syz.1.7589" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 530.622733][T23280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 530.629209][ T36] audit: type=1400 audit(5140.496:42718): avc: denied { mounton } for pid=23279 comm="syz.1.7589" path="/33" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 530.682442][ T36] audit: type=1400 audit(5140.506:42719): avc: denied { mount } for pid=23279 comm="syz.1.7589" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 530.704178][ T36] audit: type=1400 audit(5140.506:42720): avc: denied { ioctl } for pid=23279 comm="syz.1.7589" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.742372][ T36] audit: type=1400 audit(5140.506:42721): avc: denied { call } for pid=23279 comm="syz.1.7589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 530.761139][ T36] audit: type=1400 audit(5140.636:42722): avc: denied { unmount } for pid=22387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 530.781769][ T36] audit: type=1400 audit(5140.706:42723): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.794210][T23282] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 530.814630][T23282] rust_binder: Write failure EINVAL in pid:104 [ 530.943855][T23288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.954260][T23288] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 530.961067][T23288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 530.970792][T23288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:108 [ 530.985672][T23288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23288 comm=syz.1.7593 [ 531.053852][T23296] kernel read not supported for file /policy (pid: 23296 comm: syz.1.7597) [ 531.228389][T23319] netlink: 'syz.4.7604': attribute type 3 has an invalid length. [ 531.263636][T23324] overlayfs: failed to clone lowerpath [ 531.267087][T23325] overlayfs: failed to clone lowerpath [ 531.684475][T23360] 9pnet_fd: Insufficient options for proto=fd [ 531.773198][T23352] x_tables: duplicate entry at hook 2 [ 532.108436][T23379] rust_binder: Write failure EINVAL in pid:120 [ 532.110369][T23378] rust_binder: 120: no such ref 6 [ 532.121629][T23378] rust_binder: 120: no such ref 3 [ 532.126683][T23378] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 532.255934][T23392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 532.258324][T23392] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 532.264846][T23392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 532.272835][T23392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:134 [ 532.310520][T23394] /dev/rnullb0: Can't open blockdev [ 532.732275][ T380] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 532.884347][ T380] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.894710][ T380] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.905455][ T380] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.914658][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.922796][ T380] usb 2-1: SerialNumber: syz [ 533.144853][ T380] usb 2-1: 0:2 : does not exist [ 533.164119][ T380] usb 2-1: USB disconnect, device number 23 [ 533.234838][T22659] udevd[22659]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 533.412303][T23432] veth1_macvtap: left promiscuous mode [ 533.417922][T23432] macsec0: entered promiscuous mode [ 533.423296][T23432] macsec0: entered allmulticast mode [ 533.431313][T23432] veth1_macvtap: entered promiscuous mode [ 533.437155][T23432] veth1_macvtap: entered allmulticast mode [ 533.444197][T23432] macsec0: left promiscuous mode [ 533.449382][T23432] macsec0: left allmulticast mode [ 533.454545][T23432] veth1_macvtap: left allmulticast mode [ 533.750482][T23461] rust_binder: Write failure EFAULT in pid:144 [ 533.755025][T23463] fuse: Unknown parameter '0x0000000000000003' [ 533.883448][T23466] binder: Bad value for 'defcontext' [ 533.941350][T23473] netlink: 'syz.1.7656': attribute type 2 has an invalid length. [ 533.949160][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7656'. [ 534.138199][T23480] rust_binder: Got transaction with invalid offset. [ 534.138265][T23480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 534.144971][T23480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 534.472293][ T380] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 534.630897][T23498] overlayfs: failed to clone upperpath [ 534.636456][ T380] usb 2-1: Using ep0 maxpacket: 32 [ 534.645572][ T380] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 534.653989][ T380] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 534.663977][ T380] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 534.673143][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.683024][ T380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 534.693048][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 534.706217][ T380] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 534.715389][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.724908][ T380] usb 2-1: config 0 descriptor?? [ 534.936934][ T380] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 534.951657][ T380] usb 2-1: USB disconnect, device number 24 [ 534.960545][ T380] usblp0: removed [ 535.103021][T23517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=23517 comm=syz.6.7675 [ 535.372225][ T380] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 535.522229][ T380] usb 2-1: Using ep0 maxpacket: 32 [ 535.541567][ T36] kauditd_printk_skb: 1006 callbacks suppressed [ 535.541588][ T36] audit: type=1400 audit(5146.504:43730): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.585647][ T380] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 535.594596][ T380] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 535.612869][ T380] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 535.632950][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 535.652250][ T36] audit: type=1400 audit(5146.554:43731): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.678980][ T380] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 535.689389][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 535.703355][ T36] audit: type=1400 audit(5146.554:43732): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.729185][ T380] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 535.739303][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.750988][ T380] usb 2-1: config 0 descriptor?? [ 535.758986][ T36] audit: type=1400 audit(5146.554:43733): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.822216][ T36] audit: type=1400 audit(5146.554:43734): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.853712][ T36] audit: type=1400 audit(5146.564:43735): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.879364][ T36] audit: type=1400 audit(5146.764:43736): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.938251][ T36] audit: type=1400 audit(5146.764:43737): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.964047][ T36] audit: type=1400 audit(5146.764:43738): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 535.991137][ T36] audit: type=1400 audit(5146.764:43739): avc: denied { ioctl } for pid=23485 comm="syz.1.7662" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 536.023979][ T380] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 536.376885][ T9] usb 2-1: USB disconnect, device number 25 [ 536.392302][ T9] usblp0: removed [ 536.808846][T23569] 9pnet_fd: Insufficient options for proto=fd [ 537.127767][T23580] fuse: Bad value for 'rootmode' [ 537.280837][T23591] fuseblk: Unknown parameter 'croup_wZ%"id' [ 537.427981][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7709'. [ 537.438456][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7709'. [ 537.455915][T23607] rust_binder: Write failure EFAULT in pid:179 [ 537.456504][T23607] rust_binder: Write failure EFAULT in pid:179 [ 537.541789][T23609] overlay: ./file0 is not a directory [ 537.782914][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7716'. [ 537.894639][T23634] cgroup: fork rejected by pids controller in /syz4 [ 537.927115][T23661] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 538.497161][T10401] tipc: Subscription rejected, illegal request [ 538.712245][ T45] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 538.862228][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 538.992232][ T45] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 539.142227][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 539.147671][ T45] usb usb2-port1: attempt power cycle [ 539.388985][T23729] 9pnet_fd: Insufficient options for proto=fd [ 539.492245][ T45] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 539.523021][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 539.652261][ T45] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 539.673588][ T45] usb 2-1: Invalid ep0 maxpacket: 64 [ 539.679440][ T45] usb usb2-port1: unable to enumerate USB device [ 541.029425][ T36] kauditd_printk_skb: 581 callbacks suppressed [ 541.029446][ T36] audit: type=1400 audit(5151.994:44321): avc: denied { sys_module } for pid=23767 comm="syz.6.7752" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 541.057025][ T36] audit: type=1400 audit(5152.014:44322): avc: denied { create } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.078174][ T36] audit: type=1400 audit(5152.014:44323): avc: denied { write } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.098353][ T36] audit: type=1400 audit(5152.014:44324): avc: denied { read } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.118898][ T36] audit: type=1400 audit(5152.014:44325): avc: denied { create } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.139243][ T36] audit: type=1400 audit(5152.014:44326): avc: denied { write } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.159619][ T36] audit: type=1400 audit(5152.014:44327): avc: denied { read } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.179612][ T36] audit: type=1400 audit(5152.014:44328): avc: denied { sys_module } for pid=23767 comm="syz.6.7752" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 541.200657][ T36] audit: type=1400 audit(5152.014:44329): avc: denied { sys_module } for pid=23767 comm="syz.6.7752" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 541.221735][ T36] audit: type=1400 audit(5152.014:44330): avc: denied { create } for pid=23767 comm="syz.6.7752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.651628][T23782] input: syz1 as /devices/virtual/input/input41 [ 541.682950][T23776] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.690221][T23776] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.732267][T23776] bridge_slave_0: entered allmulticast mode [ 541.738819][T23776] bridge_slave_0: entered promiscuous mode [ 541.754292][T23776] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.761454][T23776] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.762649][T23782] rust_binder: Error while translating object. [ 541.777454][T23782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 541.784148][T23776] bridge_slave_1: entered allmulticast mode [ 541.800829][T23782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 541.812982][T23776] bridge_slave_1: entered promiscuous mode [ 541.829671][T23799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7763'. [ 542.008831][T23776] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.016052][T23776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.023661][T23776] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.030740][T23776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.057666][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7768'. [ 542.106434][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.114189][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.140727][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.146535][T23826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7769'. [ 542.147832][T10401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.169348][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.176633][T10406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.328818][T23776] veth0_vlan: entered promiscuous mode [ 542.388217][T23776] veth1_macvtap: entered promiscuous mode [ 542.401779][T23849] incfs_lookup_dentry err:-13 [ 542.572338][T23857] rust_binder: 2: no such ref 1 [ 542.722469][T23876] 9pnet_fd: p9_fd_create_tcp (23876): problem connecting socket to 127.0.0.1 [ 542.750499][T23880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 542.830943][T23886] fuse: Unknown parameter 'ro00' [ 543.122245][ T45] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 543.295311][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 543.315251][ T45] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 543.332253][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.345736][ T45] usb 5-1: Product: syz [ 543.346948][T23913] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7794'. [ 543.349960][ T45] usb 5-1: Manufacturer: syz [ 543.349981][ T45] usb 5-1: SerialNumber: syz [ 543.587486][T23922] 9pnet_fd: p9_fd_create_tcp (23922): problem connecting socket to 127.0.0.1 [ 543.589625][T23890] netlink: 'syz.4.7784': attribute type 27 has an invalid length. [ 543.599024][T23922] 9pnet_fd: p9_fd_create_tcp (23922): problem connecting socket to 127.0.0.1 [ 543.615272][T23922] 9pnet_fd: p9_fd_create_tcp (23922): problem connecting socket to 127.0.0.1 [ 543.625703][T23922] 9pnet_fd: p9_fd_create_tcp (23922): problem connecting socket to 127.0.0.1 [ 543.639707][T23922] 9pnet_fd: p9_fd_create_tcp (23922): problem connecting socket to 127.0.0.1 [ 543.647216][T23890] __vm_enough_memory: pid: 23890, comm: syz.4.7784, bytes: 18014402804453376 not enough memory for the allocation [ 543.671937][ T45] usb 5-1: USB disconnect, device number 68 [ 543.691818][T22659] udevd[22659]: setting mode of /dev/bus/usb/005/068 to 020664 failed: No such file or directory [ 543.706719][T22659] udevd[22659]: setting owner of /dev/bus/usb/005/068 to uid=0, gid=0 failed: No such file or directory [ 543.779448][T23922] tipc: Enabling of bearer rejected, failed to enable media [ 543.843189][T23898] 9pnet_fd: p9_fd_create_tcp (23898): problem connecting socket to 127.0.0.1 [ 543.918738][T23925] overlay: Unknown parameter 'dont_measure' [ 544.482875][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 544.589066][T23944] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7804'. [ 544.601520][T23944] netlink: 'syz.1.7804': attribute type 6 has an invalid length. [ 544.616679][T23944] netlink: 'syz.1.7804': attribute type 5 has an invalid length. [ 544.632921][T23944] netlink: 'syz.1.7804': attribute type 4 has an invalid length. [ 544.653372][ T9] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 544.654121][T23947] /dev/rnullb0: Can't open blockdev [ 544.674964][T23944] /dev/rnullb0: Can't open blockdev [ 544.688295][ T9] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 544.712211][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.732294][ T9] usb 5-1: config 0 descriptor?? [ 544.950049][ T435] usb 5-1: USB disconnect, device number 69 [ 545.063771][T23970] tmpfs: Bad value for 'nr_inodes' [ 545.248783][T23977] fuse: Unknown parameter 'rootmode00000000000000000060000' [ 545.327065][T23987] rust_binder: Write failure EINVAL in pid:273 [ 545.658951][T24015] binder: Unknown parameter 'context.! [ 545.658951][T24015] }H&' [ 545.705009][T24018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 545.942265][ T377] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 545.978650][T24028] binder: Bad value for 'max' [ 546.032890][ T36] kauditd_printk_skb: 772 callbacks suppressed [ 546.032912][ T36] audit: type=1400 audit(5157.003:45103): avc: denied { ioctl } for pid=24017 comm="syz.4.7833" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.073848][ T36] audit: type=1400 audit(5157.043:45104): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.097830][ T36] audit: type=1400 audit(5157.043:45105): avc: denied { read write open } for pid=22387 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.116179][ T377] usb 5-1: too many configurations: 167, using maximum allowed: 8 [ 546.123967][ T36] audit: type=1400 audit(5157.043:45106): avc: denied { ioctl } for pid=22387 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.138909][ T377] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 546.168249][ T36] audit: type=1400 audit(5157.063:45107): avc: denied { read append } for pid=24032 comm="syz.1.7839" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.193096][ T377] usb 5-1: can't read configurations, error -61 [ 546.197300][ T36] audit: type=1400 audit(5157.063:45108): avc: denied { read open } for pid=24032 comm="syz.1.7839" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.242254][ T36] audit: type=1400 audit(5157.073:45109): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.277238][ T36] audit: type=1400 audit(5157.073:45110): avc: denied { read write open } for pid=22387 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.306261][ T36] audit: type=1400 audit(5157.073:45111): avc: denied { ioctl } for pid=22387 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.322258][ T377] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 546.339134][ T36] audit: type=1400 audit(5157.083:45112): avc: denied { ioctl } for pid=24017 comm="syz.4.7833" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 546.513126][ T377] usb 5-1: too many configurations: 167, using maximum allowed: 8 [ 546.526016][ T377] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 546.534269][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 546.542012][ T377] usb 5-1: can't read configurations, error -61 [ 546.551595][ T377] usb usb5-port1: attempt power cycle [ 546.692233][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 546.700409][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.713138][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 546.719794][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 546.730003][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.740796][ T9] usb 2-1: config 0 descriptor?? [ 546.892242][ T377] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 546.913890][ T377] usb 5-1: too many configurations: 167, using maximum allowed: 8 [ 546.924118][ T377] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 546.931833][ T377] usb 5-1: can't read configurations, error -61 [ 546.951207][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 546.961040][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 546.978149][ T9] usb 2-1: USB disconnect, device number 30 [ 547.062246][ T377] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 547.093907][ T377] usb 5-1: too many configurations: 167, using maximum allowed: 8 [ 547.104221][ T377] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 547.111882][ T377] usb 5-1: can't read configurations, error -61 [ 547.119169][ T377] usb usb5-port1: unable to enumerate USB device [ 547.236082][T24100] 9pnet: Unknown protocol version 9 [ 547.672264][ T377] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 547.822252][ T377] usb 2-1: device descriptor read/64, error -71 [ 548.062247][ T377] usb 2-1: device descriptor read/64, error -71 [ 548.302268][ T377] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 548.442301][ T377] usb 2-1: device descriptor read/64, error -71 [ 548.682245][ T377] usb 2-1: device descriptor read/64, error -71 [ 548.792294][ T377] usb usb2-port1: attempt power cycle [ 549.102264][ T330] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 549.132275][ T377] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 549.154555][ T377] usb 2-1: device descriptor read/8, error -71 [ 549.255310][ T330] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 549.263845][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.274025][ T330] usb 5-1: config 0 has no interfaces? [ 549.290344][ T330] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 549.299621][ T377] usb 2-1: device descriptor read/8, error -71 [ 549.305846][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.314191][ T330] usb 5-1: Product: syz [ 549.318667][ T330] usb 5-1: Manufacturer: syz [ 549.323330][ T330] usb 5-1: SerialNumber: syz [ 549.329310][ T330] usb 5-1: config 0 descriptor?? [ 549.542240][ T377] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 549.550701][T24128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 549.553891][T24128] rust_binder: Error while translating object. [ 549.560445][T24128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 549.564953][ T377] usb 2-1: device descriptor read/8, error -71 [ 549.566667][T24128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:20 [ 549.584143][ T330] usb 5-1: USB disconnect, device number 74 [ 549.704729][ T377] usb 2-1: device descriptor read/8, error -71 [ 549.812393][ T377] usb usb2-port1: unable to enumerate USB device [ 550.084788][T24144] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 550.372386][ T45] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 550.532515][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 550.541333][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 550.556421][T24168] rust_binder: Write failure EFAULT in pid:318 [ 550.557860][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 550.582212][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 550.601508][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 550.615842][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 550.626901][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 550.647279][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 550.676830][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.972214][T24194] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7896'. [ 551.141786][ T36] kauditd_printk_skb: 531 callbacks suppressed [ 551.141807][ T36] audit: type=1400 audit(5162.103:45644): avc: denied { execmem } for pid=24201 comm="syz.7.7899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 551.205149][ T36] audit: type=1400 audit(5162.143:45645): avc: denied { execmem } for pid=24201 comm="syz.7.7899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 551.379228][ T45] usb 5-1: config 0 descriptor?? [ 551.387561][ T36] audit: type=1400 audit(5162.363:45646): avc: denied { ioctl } for pid=24147 comm="syz.4.7878" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.426196][ T36] audit: type=1400 audit(5162.363:45647): avc: denied { ioctl } for pid=24147 comm="syz.4.7878" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.491018][ T36] audit: type=1400 audit(5162.363:45648): avc: denied { ioctl } for pid=24147 comm="syz.4.7878" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.516068][ T36] audit: type=1400 audit(5162.363:45649): avc: denied { ioctl } for pid=24147 comm="syz.4.7878" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.541012][ T36] audit: type=1400 audit(5162.363:45650): avc: denied { ioctl } for pid=24147 comm="syz.4.7878" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.565720][ T36] audit: type=1400 audit(5162.503:45651): avc: denied { create } for pid=24207 comm="syz.6.7900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 551.585385][ T36] audit: type=1400 audit(5162.513:45652): avc: denied { write } for pid=24207 comm="syz.6.7900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 551.626794][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 551.634957][ T36] audit: type=1400 audit(5162.513:45653): avc: denied { create } for pid=24207 comm="syz.6.7900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 551.665142][ T45] usb 5-1: USB disconnect, device number 75 [ 551.701783][ T45] usblp0: removed [ 551.762568][T24219] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 551.820013][T24224] @0: renamed from bond_slave_1 [ 551.944306][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7909'. [ 551.944325][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7909'. [ 552.101073][T24247] futex_wake_op: syz.7.7914 tries to shift op by -1; fix this program [ 552.112230][ T380] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 552.252224][ T380] usb 5-1: device descriptor read/64, error -71 [ 552.347468][T24268] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 552.355903][T24268] overlayfs: missing 'lowerdir' [ 552.492235][ T380] usb 5-1: device descriptor read/64, error -71 [ 552.662227][ T1198] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 552.732373][ T380] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 552.814667][ T1198] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 552.823860][ T1198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.834046][ T1198] usb 2-1: config 0 descriptor?? [ 552.841240][ T1198] usb-storage 2-1:0.0: USB Mass Storage device detected [ 552.850640][ T1198] usb-storage 2-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 552.850640][ T1198] Please send a copy of this message to and [ 552.877036][ T380] usb 5-1: device descriptor read/64, error -71 [ 553.122224][ T380] usb 5-1: device descriptor read/64, error -71 [ 553.232327][ T380] usb usb5-port1: attempt power cycle [ 553.513131][ T1198] usb 2-1: USB disconnect, device number 35 [ 553.570816][T24291] /dev/rnullb0: Can't open blockdev [ 553.747935][T24303] rust_binder: Error while translating object. [ 553.748002][T24303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 553.759888][T24303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:336 [ 553.898875][T24311] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 553.920711][T24311] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 553.929158][T24311] CPU: 0 UID: 0 PID: 24311 Comm: syz.1.7939 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 553.940821][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 553.951078][T24311] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 553.957354][T24311] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 553.977059][T24311] RSP: 0018:ffffc90002ba7820 EFLAGS: 00010202 [ 553.983162][T24311] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888114844c00 [ 553.991140][T24311] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffb [ 553.999114][T24311] RBP: ffffc90002ba7a40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 554.007105][T24311] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 554.015102][T24311] R13: 7ffffffffffffffb R14: ffff8881208ee038 R15: ffff8881208ee028 [ 554.023180][T24311] FS: 00007fc1542b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 554.032204][T24311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.038964][T24311] CR2: 000000110c2b0154 CR3: 0000000136b42000 CR4: 00000000003526b0 [ 554.046946][T24311] Call Trace: [ 554.050227][T24311] [ 554.053165][T24311] ? __cfi_iter_file_splice_write+0x10/0x10 [ 554.059165][T24311] ? __kmalloc_noprof+0x271/0x530 [ 554.064192][T24311] ? futex_wait_setup+0x1bc/0x260 [ 554.069226][T24311] ? __kasan_check_write+0x18/0x20 [ 554.074358][T24311] ? __cfi_iter_file_splice_write+0x10/0x10 [ 554.080270][T24311] direct_splice_actor+0x279/0x4b0 [ 554.085478][T24311] splice_direct_to_actor+0x4fb/0xbc0 [ 554.090870][T24311] ? __cfi_direct_splice_actor+0x10/0x10 [ 554.096506][T24311] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 554.102409][T24311] do_splice_direct+0x182/0x270 [ 554.107269][T24311] ? __cfi_do_splice_direct+0x10/0x10 [ 554.112651][T24311] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 554.118557][T24311] ? security_file_permission+0x2e/0xc0 [ 554.124110][T24311] ? rw_verify_area+0xac/0x230 [ 554.128888][T24311] do_sendfile+0x5c8/0xfb0 [ 554.133319][T24311] ? vfs_writev+0xcf0/0xcf0 [ 554.137830][T24311] ? __se_sys_futex+0x28f/0x300 [ 554.142693][T24311] __x64_sys_sendfile64+0x193/0x1f0 [ 554.147918][T24311] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 554.153646][T24311] ? switch_fpu_return+0x12/0x20 [ 554.158697][T24311] x64_sys_call+0xa26/0x2ee0 [ 554.163301][T24311] do_syscall_64+0x58/0xf0 [ 554.167724][T24311] ? clear_bhb_loop+0x50/0xa0 [ 554.172407][T24311] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 554.178319][T24311] RIP: 0033:0x7fc15338f6c9 [ 554.182751][T24311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.202536][T24311] RSP: 002b:00007fc1542b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 554.210962][T24311] RAX: ffffffffffffffda RBX: 00007fc1535e5fa0 RCX: 00007fc15338f6c9 [ 554.218937][T24311] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 554.226914][T24311] RBP: 00007fc153411f91 R08: 0000000000000000 R09: 0000000000000000 [ 554.234888][T24311] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 554.242858][T24311] R13: 00007fc1535e6038 R14: 00007fc1535e5fa0 R15: 00007ffe9d657148 [ 554.250924][T24311] [ 554.253945][T24311] Modules linked in: [ 554.258005][T24311] ---[ end trace 0000000000000000 ]--- [ 554.295738][T24311] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 554.309367][T24311] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 554.330504][T24311] RSP: 0018:ffffc90002ba7820 EFLAGS: 00010202 [ 554.337614][T24311] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888114844c00 [ 554.346581][T24311] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffb [ 554.355426][T24311] RBP: ffffc90002ba7a40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 554.364386][T24311] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 554.373807][T24311] R13: 7ffffffffffffffb R14: ffff8881208ee038 R15: ffff8881208ee028 [ 554.382013][T24311] FS: 00007fc1542b46c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 554.391297][T24311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.398095][T24311] CR2: 00007f2dcabb2d58 CR3: 0000000136b42000 CR4: 00000000003526b0 [ 554.406171][T24311] Kernel panic - not syncing: Fatal exception [ 554.412636][T24311] Kernel Offset: disabled [ 554.417076][T24311] Rebooting in 86400 seconds..