last executing test programs: 3m1.496026783s ago: executing program 3 (id=2362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) fcntl$lock(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.435346164s ago: executing program 3 (id=2363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x1, 0x14}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x7e, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffdd2176b693e310fc19d9a57b87540b2194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d62"}) 3m1.431879905s ago: executing program 3 (id=2364): ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0x64a, 0x0, 0x7}, {0x777, 0x0, 0x81}, {0x9a4, 0x0, 0xf0}, {0x263, 0x0, 0x7ff}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xe, 0xc7be, 0xff78, 0x108, 0x6, 0x7, 0x100000000, 0x1, 0x8000000000000001, 0x0, 0x4, 0x1, 0x4, 0x2, 0x3, 0x8], 0x5000, 0x4000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x0, 0x8, '\x00', 0x0, &(0x7f00000001c0)=[0x0]}) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x3, 0x10, 0xd, 0x0, 0x7, 0x2, 0x2, '\x00', 0x3}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000440)=0x2) r2 = syz_io_uring_complete(0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000480)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f00000004c0)="b5cae591bfa2fe05840f8964b19e5ae2d0bcf3561ba180dc534bf1c73d9fdd7524c8e54d3c6ff7c48cbfd16e5ad56464e1ed21bf35565826d7bc2c17dd0acc9a2c9aadaa333b3085926921c93af8847379caf4259dc7c4699d") ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000540)={0x3, r2, 0x1}) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000580)=0x7fffffff) writev(r2, &(0x7f0000002880)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="f92cfb0041d858bcbae65423e3a86ddd89b07f2461a0e79d359d1b4f2fbb6e183f2d2eb8ddb7da353dd6897aacaed7f690304c9eb944acd9ed95cebf4dbe7ed9821ba06e090e396c5c25fc413541959c4c7e7fc5314f0dc236185198eba702110dce6a0b04de211cfee8195c3a9d21b6efa77ed670bba9acf00f52d5e10183a967ea3ba393fda885b53b5063c2bd5dc232c18f7edabaea7948a03619dea7d754e7f5ea6781b4482fe92918f56a56066d95cb3a4a3796a614", 0xb8}, {&(0x7f0000001680)="32d3869fede328ce91c7e0d255dca59dfef40b4dcf1be3d82ca529758400aceba07877f674", 0x25}, {&(0x7f00000016c0)="1e2a", 0x2}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="08f9682addb9f719bc66b6ab8f6017028fafd6ada3da612ab806082dae6ebd7ee07e577eb84a92ab3a5ff5a5f40cbfe5552fdc04059804645fac96e1738302900bf2294fc0fbcda7651a09ec5d7fac52107e18a4da5eb35b7c7f7f810dfe04e3c36f8a9e3899ac997e89966e7f1e893255b23502f5b4c09573289971f9f5a3b75bc30059e58e335f9efe15c90f936204ef6e6ee4b83c84cb3f8e1cffc6b11a265888cd4b2b48fc7b5a3582314036ee63fc590c667c2610c382d04dd4d012b83103f6252c1e5d439617e6c209cb", 0xcd}, {&(0x7f0000002800)="75856f9758386b686db39546e2f17a026a48b949b02ebbe6bff29d31190e1f174b03142a9e09b3a3f0806368cad494d012713269efd6bb7afb090bce683e6ae6a957858aab0bc6bf90f3efeaaf46a2ffcd91e19063ae76f593d25323", 0x5c}], 0x7) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000002940)='/dev/rfkill\x00', &(0x7f0000002980)='./file0\x00', r2) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000029c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002a40), 0x43, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002a80)=0x0) setpriority(0x0, r4, 0x8) setxattr$incfs_metadata(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00), &(0x7f0000002b40)="8568f44bd9d6c4c3c9dce2ef97c5c49d15e9b7f47d50fb18e260e4d42859a376e08e9cc58e90b5e71c45c108dc9bc0cd25c31a427619105e276fc3c35328dbb838635568613e583ea7f914c2bbc62d98164e6aee7a1070d6b8b7d2aed3b4f966107858c9002c5c84df4dce2e314e0aa9a2a4037514c145982836152057ec6ad72414c5c808324878ae7b4282b140a13e331c5554df719268e40b18a03225ff64e93235ae720bdddedcb150e2b9f8215ebf423d9fbca34859569dca6e53776a8205e4334fdd4d56d2e36feedb34933b9a", 0xd0, 0x1) r5 = accept4$inet6(r2, &(0x7f0000002c40)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002c80)=0x1c, 0x40000) recvmsg(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002cc0)=""/89, 0x59}], 0x1, &(0x7f0000002d80)=""/48, 0x30}, 0x40000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000002e00), 0x6, 0x600) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002e40)={'vcan0\x00'}) lremovexattr(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)=@random={'osx.', '-\'/\x00'}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000002f00)={0x1, r2}) 3m1.431505645s ago: executing program 3 (id=2365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800070000000000140002007767300000426eed1a000000000000008800088048000080"], 0xb8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000640)={0x20, 0x1c, 0x4, "61930f4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0x4, "ac4e8dd4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x23, 0x97, {0x97, 0x7, "de6ded9a3c99d5e2c0c7b34f9afb86b617a38361cd6e711d29f7821de4eaed7c37557b54cde8135193cc52d0915ade2a71f3dae53a01ef4e3bb0c4a6282221d73b4874b6d507b1ac28fd68774c38334e9606c98701ece65a16fa237a51f96637425b6eaa409e9d7987a9ecc78bfbc6d94fac390c367bc5b6f3a9e6de0079b76e7172044f084eaec60a2ef75448782def94dbb8dd70"}}, &(0x7f00000001c0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x20, 0x30, 0x79, "9ddcbbbd349843fd491670de5d8b68acc62f5bba9fdc99434290dfd5d37bc33901e59d30d5bbb95dd009cea192b390fffff74f3fee3a5d35a8201a2a9aebca2f06ea4007707c9fe1aff0573ddffcbb185844332a1f058c6bd8864e5e2be6f256416a5e0830bfa634c1aeedac04525adeb962dc5c21782d50f5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000880)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000008c0)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000900)={0xc0, 0xa2, 0x2f, "c653222cdbdcd1010bbc25a28fd0a579e238d3b0a06ea4ee648f9f9d18f2cb93bf151258db397bd528399d1d0e063e"}}) 3m0.838893656s ago: executing program 3 (id=2370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000002ac1e00010000000000000000000000000000000000020000020000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000001010000000032000000fe880000000000000000000000000001fdffffffffffffff0000000000000000ffffffffffffffffcd2d0000190000000800000000000000000000000000000000004000005c000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000008001d"], 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) 3m0.775215667s ago: executing program 3 (id=2371): unshare(0x44040200) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000017c0)=ANY=[@ANYRES16, @ANYBLOB="6fff20d6bfaba42c7a8ee5be482821af9309717200f5b3c73a26e52ae5acc848bb20b5a871ebcc146e3192a199fc988f4a7de4186f721bfe8c4330c4505a5268087eab21cef393a004250a359c2bc4ce8aeb6a5dda96a3deedab84ba704c9b22fd37dfd023d2fd6ec6218b38ce358b96cb24291bafaa6f23b5780e9a0b030a110301657e1890d0e8abeb8873c73d28b7cb2a5b0056287e5e13a2468d1063ae8cdda8558b8e7d9ef2d3d09f7a543baede2cc599b167c2f77cb646ebc6f7ade18c3253beb7eb741ff9a7a8eab745d669a9d53bd598a34bf6a4f1e43dea34f521ef1bf724903ef9dde49624bc4b37c27780f38ba00d7f0c613eaba6a61575b469c1925956e2d294063d9137e027466a44595799956e62b88267d5e434b4134448188194f4699dd7cf75030c8be90a0333832508630c38f54498b622444d7d0d688479ace804719aec0723cfd96d0f5f41d1b1f114a03a97278243b7824203dc082a9210c1ec511ec042738f55af3ed88f7dd6004620fa07b0f990b02cb639c28bc8c5bf38e8bfca63661f209951be6090d6b58026e5eac22c1ea7dd6d6cc8bb826f40085f32f4af25a3a2b8103f8d8dea39e6bdf667b7935e3b76ccdf4c60059de2aeee137b6df813777cbb4ecb47cfaf7951c63d7fd52678e2c0c6c265617e60cbe0b46c92779e93523ac5b1ee232e8d734909b2a0fd337ef1605acd8897eafe191f80d6ae7e62cfe13360f332249d91d445eb5c31c395f315f71a3e917a2c4d70f72935eb7f459840e4a852e9fe1246dcf84094d5d81054479e434c1122054007a1795da4b09f5b481c8a06231b907a4ab0afda13cc8294d46be95dff095501b1d0d1c8d34bdfc4a2102875ca6b258b9b340382c2e204e5fa6958b93b5b07204a9e8ca8b80cc61c1f2a2252c6b2d252d646aad8a75adac8efaa4fe5e9ab11c9995460a1f4d97e633143b11209988d8a0c5baa6639c8978d124f2673818b29afe871c68d1939b502245c0105ae81eb9c6806d809c226dc1cc8f08a555ace52e0b27bb644560fa60f24ce493989a28a362cf53bb4c3baf6fda6f48053c252d2bb6b1b9f95411e9b2651c2ffd521c346c82bdfb8313d7175df85271f27eae0052ac42704a248a6e28f9bbde1d18467e4d523acccc1d93675ea8a24219387de200261d31dd1d3cfb5f5eb6b5a8f83d3998633934287dcb111de07eec3a07bd884510ca40791ada8d2bf260c4c10a46a4eaf584a653f2a8cce46998645dd890fb33e0d30296d1f9ab27ae906f542c33e8f8a46520298e0ad505fd2416f70d0d31a56cb822fae494246e1ecbf84bcf449ede27a8a6801dc8b0001a7e9c5f416e6a0b81c1c1c97b85889da01a1a4d5b1591ba786e8b7e68820e9ae92d589b73e700db462283fc1c88c8a433ce889dc14ba5f289633a29c2f183cc4b6013bb6024524f97635556da972df999f5f04c0e0503d0ba22812064cd47cd79c1ea24b362761287719f2349f3684ed5b4075ea6fba8f7f7b8a6583776e1ec5506180463302c8afb5d7195e3878cac82450d610b6b66c934c6b86bdce074da6554638e3266ed2b3a5b469f0053f80f21167e2f5c5196a5897f7003855429be7b6404add8bd0b8bfa6818051bf70240e2b42d92edb9b5590364ec5fe4530eef9192d530665c97e962cc0b0a7488009987b5d47938b604d65067a5d437bccd71b4dd51d84c64a4a9fb34c523c4cbb50a211cf5e905f3c723bec209fdf7abd3d8444595bdf30b97a664512916ff24f3d09d9b4274f6a10c2e3fb0c00e71ca35479ee8cce73882583f87df7d59675ae7b6e086714454e8fd03155219c8e364100f2e9c5d2864b0900257d68b62b4001d6a0349d2350cc21c3c92f5023b55a7c534cdde696d0b9c19a41fb32cfbb931d7d4393999b0ae8bd39f4a5f18cdd192f7571bca5a399638871d8aeeb00c8db6a2d9e69541b5aa66d37fd935ee6a6617b1e0619318eccd6ca432e809c9949de37d237a59812ce456fa6dc6b73435988355aaf334cd5600dfc9eb764541f99cdfb25da6574bcd7daff4fb2296e478d585a5e10873efdc36b10b2590a0e0c0aeb4d8bfd2899e6c2ef14f9a3e9188c7cc81a02e92856ade8a0127a806c158ebf792d37278a399b1f1ebf44c1b948ab711d43ae0f4a4824f72285678e662bbb4a29638540397249c2bc7608fe82e6f8b12275af2357cd5b2b2cee48ed4d72b954e6bf1c01948d9b84e067b0860d344e3f4c2ab06876bd5562c1dad625f16f11eb41e4bf8f3566c2ab8b18ea31759dceffd3d0e23444cf4f9d500db7af2afa5f354ff9c814d0c16584e9a0941301c1f24d9c5742c9bc0b9f52820796ae17869285dde5687a478f1cfd86654abfb9e51f11b7fdfc229826de45d10d1f5bb385d17cd152fd7eff095d8c167a8fea22ea11eda01aa27a209e57e345acb2f566925f4dccd94c70776934c2dcd66849500a46614d8735423e73777192a7d3a0256a6a4beced282d2c01858983f5a2b1ce3114d4ef68265155de4000e89d56708169eff4f226dc2a6d92dbaf586feb6d09c36e3616007ed31656f70f0c0715bb4bd522446d7218c0f3b65eba679e29340ded5133122444615bf06dcb3d5acdf6999ea4418e8933891d9e0cc07383bdd232f2562d8f965eae1c03da4bd10e1167284a3343ad4f3eea9b59159e2d203e0cd0c689957750ecb2daa348b18de9c5117bb8ec324e73f87667e05b6c7445d1c5fe3a3bed0131324560de60d6bf21a745f189a0b32f354090bc3331c7030a02c44c3f62eaab46c3ba23a2a2c01488523ed622b2ec58cdb90bcf3cf8fe517caa46534c39c0c8ebdf66a106360a8d2004e9e6ea5325991fbedbda5041bde138833f1368c3f281479c5c7a0262928522ad0605edcae1cf15428bc511b51a00384f80dfc9f6484e503763686a5547c00ac8f57c15ce5a84a2fea66dfc18e62306aaffd4d752eb5f6f5c4117a09efecde11f964a9cadcb60494cce9af70f8c8b811b863f4510c2853d997dd241962e45da1123fded3c809014d7972165c696c1d90d944d21fb56b95c7296b8f784418c750d8c7e8a1b70559452803f752728183e70d346caf7395cffdc6f33bd421c464a6bc33410267dd1c1c168ac2389ebefa9521ce2bf887483116a85600cd182d4baba2cbfab75b2e4745b947c89268c61a99c54ffc86f4f449a9776166f8e7b06e72bc2cce6d217a6306627f6be04bd70d8dfbecf05fc0b2395425602b99613cb009437c4e4e495447ec59c65d88f790d150ccff116db6bfc719062291cf5fbc7b22db6133f17c3219bc1aecd9d2d311d295419ffc3771be1b9e53c19e46eab8ef7a6cf693e233fd9889d89439d2922f47092edc75e709d33879aa1addbf8f829e2f29df02e3902e96167060fadf1ee9d30481ae76c2452810fe8eeee1874d39dd6955869706668c9d21d654d16b2ebe0b6a91b79d0be2d9599f5ad71ad416582e5350a72eb0c86c39088f90d3f7db5a0041c9eb58b3db5143070dd6b866e5afa00117b66160336c4c2fb05df75aafea313c78bf34841ed02d0263638c43ab47627ba170cecfbbec23d10fe5671dc02c1d7ac2afd08d3d348d976c7055694c3de181dd14770b92b416426ff8a3380991dcec5e17626cf8fdc0839e93e0899a3016053e3f2a4033339b67c5f9e221a467772f981024c00dfaf010162b503a8bb5221123a0353e8103b9f95bf8d5ba24fe41136b9382c30a48675e4178ca530ae45a17797db92403fb2761360b362f6f8307962d267e676875320c4d07165f4b1f96625c430b5c6a8f580b655eb07ff98d948d56a30bc5cc5d826143506ec1580cdff4cf4b7279b1f77e16890a58039cde79e6b744f83ad91c35d0e5b3aa36ec38fb1271a8cf20ccecaecc89142311c2f3407945f9d626dbd933758b4fd63b73673b09f46150eb99781545166ab5fec52f3e7fa01e2042658bd9fac43bc988e224d2c9be13a2386a595094122ea8e41836d31340091d0e43c3dabea870b5bb65554d8fa858decd8b303389db5736595fa4d9db453ab62f448cdd02c93cf2d9e202da335c667d463a6101528f821b9c0189332e0e240005e0ca67ef69779236f6d507949fa9e1cc275234c1249ef1b1f3dc3517169aeb6fe3db142d93d7ca85dbdab5e2f76117eaa982214cf916d9f9711da4d7f2587a7d1a762dabcd03a59b38d9080183ea853fb354d75af57d22f0f09f05fed145228c4cfa61283156b9d7863afd93c5ba3888596f22b641e082c920bf3d8cc0f86b0458dddb2dab6aab704ba05ca60fed003cb368fb09da6caaf4f97ed1dcc1916d33b4e317602c213edc56f3728f16decee8aeae84698ba83394e2e2669cb516d78d99ad505e6aca959e93b847ead9b169406a9fe39b0c9fdb65959691c63edcecfd9da842a6ed57aad1a0b2107b5c040a721b785decf8204ab2f5ff8dace32ce3aa8ac8086dc2d4eb57c9f30b1032852f92ca071cc7d81cbf9bd8d3b165ac0216dac9e7e5c36505288bf209d1735630eb1e937f32ea2785f97eed530a4df32c3115e5a9924778495165ae933ed88837970b80d47f79a4a2bdca9979fc639506bd9f782aa318d3cfd02de54aa68f7c8a793677646b97236786196a9dc12aca4421910d9b7b6fbd683fddd8b72199cfdc54d583a0d9307c5bea94fde02db3490ba2cc8a35da4e5a392df2f1c9739118441b2f2b2309a06a7424dbaac0ea39d41f0997f4e47f7a1d25ef1fcdee04e8457437946a4879d9628dec6881d4318de4afe845299e057edae2db4eccd0a086278fb87665a2fd5901a3566ff0df21c0897c466ffde5632228b1b93cd7c8c94bc085655e03db5c1a9c7bc9039ead165b194f83736694b5b5489dd814f1265369ce7acf921b0d61b11a9b6e8830cbe516ae0c502f9b7081fc171a5feb81c79656b470727b86e6fc11d983d562fee1b14cfc983d87c5e8c3e8f136e9b4afa10e8c1d76c2d4f1acebd7b7d571c3fa2a61cd1a57ea5d019b91ff6eedfd51f41070c88bd22edb133ed864869751a0fb8d9f23f23a596f5bb15ca63421f7136df5e1a19dde4b66116190cfbb8d3a1e8207b854e64ac058298c4b3b07145bbb16a864bff40ca7630727aac15aafff0fdf0b6ad5e0a0789062357625441dfe3808ee8a317ae4dc9bae24a7dfdb85d7c4cdaead622794b37d698d13297a407fad63736e489f5864f51e825eeeca5c56ac1f4e657e529802ff0b5439b6e5220a5ccbd697e01c829ffe035a3fc25513f37dbb82fc8246ab686d4a5da44f18b57d0f3a4147412aa88e7b97f96d8a1c51dd45db0f647973981afd339f44cef6b4ebaf5609f1f3c21c3b078ee2b0ac05a0d2c2886116ba8e24519cbcd77050ece05163dddb9db7fdf5768ddc3475b975686cdab50e6e63e4bcf81474b58650bde7fd00443a66276b8945da43cb2af158f1ec809d6a6976b85b7dc390c47a649f9bab1f69388734df5f7147bc85236e928d3db648e7c32ef425ada4fe829758298a7dc7c6f0953aa235860c314b65e2813eb2fc183691c34d2da166c1786302190978c98e413fb5b632c3de90632d7dad9f2c1a7e5dbd426798e069e99dfc7c14b97c148a2436aaf29a2c6d37753dac44d18a8c30fd547c8ff4c7c99c18d90aa52052c04e5c1924020f21de1047a6a5e27f257dee6c01d0cd71187c510b2b863bd58eb51e945b24fed8f62ed88fb9e13abfc87a4c6c551b43558f919c3497f939ddc5c3e8dbdad5254dc67c9a2e988afc4b68923fc2f24bc45e25120e5e308cd3d543eea24b5512d4573"], 0x15) (async) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c72655f746906921b71bdca2c000000"]) (async) getxattr(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000004c0)=""/4069, 0xfe5}], 0x2}}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) setresuid(0xee01, 0xee01, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002bbd7000fddbdf250e00000008003a005200000008000600", @ANYRES32=r7, @ANYBLOB="050038000000000069c31abe686fd8b206f608c9c323a015fa539cb05a19cc9ac82d35e74925c8fef31c6b9a05f0122f0c0e3d6e71dff8b3b7955662487750b94d1cd8df1aa14784220f1f9e83fa18893b2c862482e8f43280ad14696160"], 0x2c}, 0x1, 0x0, 0x0, 0x4040044}, 0x100) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000001500)={0x0, 0x0, "5a3bfa09aacada191a15528a5fc3fcd3"}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000001540)=@ethtool_stats={0x1d, 0x7, [0x0, 0x8, 0x3, 0xc, 0x1, 0x0, 0xe2a]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0xc8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@readahead={'readahead', 0x3d, 0x5500}}]}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 2m45.678921608s ago: executing program 32 (id=2371): unshare(0x44040200) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000017c0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x15) (async) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c72655f746906921b71bdca2c000000"]) (async) getxattr(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000004c0)=""/4069, 0xfe5}], 0x2}}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) setresuid(0xee01, 0xee01, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x660f3000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002bbd7000fddbdf250e00000008003a005200000008000600", @ANYRES32=r7, @ANYBLOB="050038000000000069c31abe686fd8b206f608c9c323a015fa539cb05a19cc9ac82d35e74925c8fef31c6b9a05f0122f0c0e3d6e71dff8b3b7955662487750b94d1cd8df1aa14784220f1f9e83fa18893b2c862482e8f43280ad14696160"], 0x2c}, 0x1, 0x0, 0x0, 0x4040044}, 0x100) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000001500)={0x0, 0x0, "5a3bfa09aacada191a15528a5fc3fcd3"}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000001540)=@ethtool_stats={0x1d, 0x7, [0x0, 0x8, 0x3, 0xc, 0x1, 0x0, 0xe2a]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0xc8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@readahead={'readahead', 0x3d, 0x5500}}]}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 2m45.167990908s ago: executing program 4 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0) 2m45.149737978s ago: executing program 4 (id=2587): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1085000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1085000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x40000, 0x0) (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async) 2m45.08318002s ago: executing program 4 (id=2588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket(0x26, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x630, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x5}, @broadcast, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x4}, {0x3, 0x7}}}}, @NL80211_ATTR_FRAME={0x1bb, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @initial, {0x9}, @value=@ver_80211n={0x0, 0xfde, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x48, 0xfffa, @broadcast, {0x0, 0x1e, @random="3510850d2748794699bdfe46ad43e53f685cc359d435f94f6b3a401f31ae"}, @val, @val={0x2d, 0x1a, {0x300, 0x1, 0x5, 0x0, {0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x1, 0x400, 0x3}}, [{0xdd, 0xbe, "51eea5b0d0c4f3a0efa681465bab90f7042612b3d44d91176e7daf32820d452a0677bedbdf6f6ea685d2bbcda872be57f5ffd4a35d970824fa8ba941376092c2a620511b2bfcb76915c52c017f0fdcc818ddccb628bfa733be277d2855f08be4939ccb3316ab02e94cf3b85793168e81ad35fd3c198fce60ab3536a5c089ee02405972d267f815cc2aeb87ba7253d3f372feb8dc0b884601b7f7e619d803c2ebbc6603ec4f434c82ae2be01004f6d0c4735108ad2ad04131646332292684"}, {0xdd, 0x60, "0558b1ef7eae5e1d0eaa7dabbf208a5287efe0d901108f086d0463f5eddd295ca2cafa07bff6b2d48494c71ff4a0a069f12dae877989a3a3e0f95ab9b3dee3a76610cc65000822176e389350f7474971ffa0d1fd647ea54fb9facf58fedc1f8d"}, {0xdd, 0x2f, "609f1aa9573be742da61f7cc835f58170fc1a7e466bf608570097f8cca0bc81a3644c21835db1a5d5a8e1a2f102456"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}, @NL80211_ATTR_FRAME={0x433, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @initial, {0x1, 0x4}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x8, @random=0xf9, 0x300, @val={0x0, 0xc, @random="01bf630b81f3694df77ddb83"}, @val={0x1, 0x7, [{0x18}, {0x4, 0x1}, {0x6c, 0x1}, {0x24}, {0x5, 0x1}, {0x30, 0x1}, {0x1}]}, @val={0x3, 0x1, 0xb9}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x7, 0x0, {0x0, 0x1fb5, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x300, 0xd13, 0x7f}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc7, 0x20}}, [{0xdd, 0x14, "778f6225ead2f14a88f4b16a07c423876b374783"}, {0xdd, 0xe8, "4fa05fa0f43d880cf124372a1005aa1f9e3e986bd18a6421692be1b5f3bbe9945e94f6ad767bc06697caa97192a3e709bf16c7f8a5e0ef4d09f5ca56c15ba85ca88effa5abc1d49846311e382c323fb2be1ea3864c84df8228d8cfca1feac88260668aa0a1d183ae50dbdf8421fb5d5c0c4d588390e84712065f1f9ede460b06187877b63e647736519bec1c7b4a648a57f6a7952c8b88ca2f5856ecc7c8c86cf62b11a73b532a14778f5421bb96e5f83dcee4ccc8b7cae0dc315b722b9b4a726e8f59811cedc69ff1b60cffe914a28e23d58f317bf7c1b380acd5e8f340a18daa1e6bbe86d28cf0"}, {0xdd, 0x63, "2ab60d9e5e7c13e149252101455ad2b276a4ff4ccabecee74dc979c86c08ed2b97ccf30d9ba81aac27bb2b814b2426ff52876a93c44eae62ef1819dc37aace99258bc04ac17157a3838a95dfc9784abe12363fc36985b2a5ef4d5ac1d5b294ab260120"}, {0xdd, 0xd6, "75dfde97af8ffe45c600ec82b80ed62ad9d402eeb784f59eb0ca0aa3d780459c4126dda260358f3043452d7c9fd7e08739be22c7db08efe8a4c8e830ac6eebd0c0e81ffb0949fd1f54225ed23f0642d46b70c47c99e736ae71bdcf627535bcf9ddf0d7a1a3a14ffc1696777b55b776e9bd727dd08d3b7bd49aff9e8760ef4f971c209228110efd27db0830de8236b23060512a3b98c7fcfcc3f6f2f13fac7a176279e5e88aba13d7fe9a1d21d02110a17ee090550e4b5d1c39362ecc76cd7232123b4e9adec7db970e7c86877c333cc4c9c93de96788"}, {0xdd, 0xee, "87effccdcb40306d6436168a54cef9dab54ec50d1dd09d746364e5b546594008ace3fd08310ef17a630ff7117d4840eadb2f2a1d3ca3f41b16d31c20bc80237df010f12cd7ac14c345a58d52d9ed207f65bec68c6cdfd993ef9c5962c7cc59dab4d7d064a896f74e316303b62911e4b3fb8a43d909167ad06694e0d0a28f2f3e8c4e9011f1c56077f1bd485b1c0f0f7d3bddba2af89522847e91a92552f12bdc9bb873d8b2c3c342400365179f41daf338dde5936608c70fd25ff6a047609813f7837a430d8da9d8f57eb6c362f65453b0bdbbb9aca2a52909b538139e32a22b2056b306c95edf854ba84720ee28"}, {0xdd, 0x46, "61c916e93b018b93583c617db991a30d659a2a0a561253fa4535aa1a09c487bd7a2f9e5b765e9c2ceb09a27b351074046c5b646c9ae37fbd8986e6faa02cf27e51e349d2efdc"}, {0xdd, 0x12, "88bf7d86366c81a82338b9e5bea043d1fe9e"}, {0xdd, 0x3d, "22cf777b85f1265a76b25ebe6a8984bcbaa4f17e104ddd377d167932382c3f1617ecea1693cd2d489c3e7fbec58bdca690d9fcaa972dc58b59affd446f"}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x40c8850}, 0x40082) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf2517000000480006803c00040067636d2861657329000000000000000000000000c44100f1eaad3339d0130f6eb1df1acf5b51da71e70800060007000000000000000000000000000000000000002007adcacc1840cc6a92a8dfea875959e05933e23776c03a8ec9a2610dce7316c94693e62a1010e08fb31857ba9c4d7d36"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r6, 0x19}) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.990560292s ago: executing program 4 (id=2592): r0 = memfd_secret(0x80000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000002080)=0x80000000) recvmmsg$unix(r0, &(0x7f0000003940)=[{{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002140)=""/149, 0x95}], 0x1, &(0x7f0000002240)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000003880)=[{&(0x7f0000002380)=""/218, 0xda}, {&(0x7f0000002480)=""/187, 0xbb}, {&(0x7f0000002540)=""/49, 0x31}, {&(0x7f0000002580)=""/143, 0x8f}, {&(0x7f0000002640)=""/233, 0xe9}, {&(0x7f0000002740)=""/185, 0xb9}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/120, 0x78}], 0x8, &(0x7f0000003900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x2, 0x20, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f00000039c0)={0x8}) statx(r11, &(0x7f0000003a00)='./file0\x00', 0x4000, 0x800, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000500, r12, &(0x7f0000003b40)) r13 = getpid() prlimit64(r13, 0xb, &(0x7f0000003b80)={0x100000000, 0x1}, &(0x7f0000003bc0)) openat(r2, &(0x7f0000003c00)='./file0\x00', 0x2, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000003c40)={0x0, 0x0}) ptrace$ARCH_SHSTK_LOCK(0x1e, r14, 0x1, 0x5003) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003cc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000003ec0)={{r0}, r15, 0x18, @unused=[0x5, 0x10001, 0x6, 0x3], @name="3bff206a0ea59e7c259bc01923892dd73803b10cc93092d34e2400fae87503f7cb339c5331245cad824a5479a120c11157c05adbe8655733df26f30e9923807cd5e57fe300bd66cb7c7e4e35e73de5316942a5fef9b752d7a759f7aef8b13875e41f9b412a988e5349ae30680d50246e0bcf7009c13734a9866936712eea3005ded0c236c406fdaadbb7ffbefb709960ada2dcd4ba893e6e74b0198f420ac7675102f22c50b998524d6c0b0a58e7706e0cc66d105c39107aec979efd1aa4b325d15a1129eed893c9504171eff7353fd086570a4e9334a0e6402b7149026c1fc5503dacb2c8c6dada1c23f5a93e9660de0ad5d7726f9de5a75fa2e7cb3d27481b5f80669359bb8bdec5b1ca022c9c424bd9d1503068e84ee02ae5cda7908a7a132c9f0134e6564d4e0e2055bc0877535ee0b300552f0e53e0aefa26e73019f9c59952c9a696834f35b35bd4d353874a0c4c5bd65ff47a8bf4536ef9088ac0c84ed789fa92a359c5a38c158e4185640207470e4ffc2d8d64c0b37480bdda7babd5a33938b1c8fe2288bc351451ec23d38654022d9c42ecbfae991443ae19b862173d68f7f55f0eafba19f1ef6968882cb766e518f9822cf0b699f4a46e4c4276529e67cd1c0e2748dcb71f72d4a5373d5bf303e67e804de5a45e16c434207bd7d79b13e49ef4e880a0816616fb3e319695256e6a5e3185cfacbacdabe7a6e455d49c7aacb5aa8f339a66d6994df277975d213aeaf946ac05e8c37d3cda3e128cab881fced89c92c7999e1790a17ae7afab37551613659a2551dba73206b99787654a52d24250f03406669ae245815c4d1530a06eca78c80cba7b7b3af0cb3184850c6cc6e40492f6b09014881d92b89801518895c3c2362d13c78c1076b7895ccd3ae46280218a3ae60b07ed21dd9b8d0395fd142116203102afaf43ad746ca0a86bd4e62e59a9b73c2de8492aebfee9cc5ae267f0adb1e65714119fe81ba1fe11d601274291117f3a65c95cb2be71b182220f718e5342d0ce46ee91a0bfd63c1b2cb63aaa857ef7c15c5ed5c0a5b9db857978e89e273257f5509bf558060599e798179bbb18cad71c18c6d803cf1753629a098a08eebb0a203104d4b4f2a69d68b73264d9d1da755529346c330f7ee21303926e620d3d7808c41060920d9aad00e9e308dfda40744174d151709c1976923b21c542e0369894a84d65206dca77ad959634c78503a6d16b457d668c0d7d5e565c9d2ecd537221955dbb18a70cccc4a053bd7c1a10843c341d4918ee0be83c803b3a918f756ae9e031ef1e3bd76126555fa4aaa56655e55e83839635be79ec044233daa8e59d0baa27f0d4eab44cc15554750a4a7255726da252254d1da8452026fe54d0f5d133aee586372e6a4654bb5bc0398d76cb8d045a3f7dc4925c901e5a527c96452d91d59f0cef7807d118ee706e47add7ed70e640055ee032bcffcdb0111ee809817111bd342546456af1c9672699303698c240a4d97aeb2f02906c9db1e527b77ed36cee698daee7557e27e730624a8ddefa6edb0b9ec4a430d26f53423964a9ec2f0f20b9f854f2ed120ce7d66fd214d1fe6b429b5898042798e7808f7a738aec694fa820bc7919b9057d24353ac095ed113926ff36ff57b8031ab76623163f6160e4662403b07570328f537d8a82c47bd084c376717a88ec91c7c4291c73b120d16098744fc8ba448559ca27386d9f962d1f3344828c82b59d4aeb18374178861dff7d180aafa9ebe22982a720de0bdcdc3a9c0764d2bb6ddb52cf7dd759bf787a3d4707b4ea643bc8650488ac254e815a791fc9f7ed61d32cfb55611bf8932e0181862921ffdf449200f5f3a22f6743e63a6d70f396f7c78c013af679dc0005deb0d1459850284b2e46a64736631f78da3142ae0e478a6dcef60f865895a1822f95643311a45d8cc8ea0a0f5a043cc605f5e823880fa754881c97efc52bdc3403033ff78dfe356cdfcb4c5a6154e9df169ebcdc303a5b2dbc97eb874278389db22199b80dd0ad58a1e7229640648b81d63236d6c11c2607ab5454955ec11a59231ee9e4e43bf2358227fc8cae2019838c17ddff005c45189ae1f7f9f58be0c12c8bdb4bec8f594756f107683248c6b4bb3a4996071597e66b1e6313369549f5bd0d2aba423c33e2c33bf67a223dafa4d6fec1de3d7363513f0b98df3191c2592c826af3b3ab392229807060ac8e4e069ca4d4ac763ea72464b9ff4ac398009bf1ccc1a49e5ddc4c83e8c27484f0a78e0938f04f092bacb869899922de7c90b04e793d31261519a25b3f6456342f821169709bc21444605c5a79fb29f76386add7c2290d6ace79991df0423120fcc39f74a7dcb9e2bd01c5d97c7d318118d3bc4c0407498b178fda54a4c74ed1cf56320b8d2c387cb2017fc7f5295cfbea50ba90f6ec2e2bb30a3914922ac468729218c466b9427de8638b1d03b77700390c83d235379a781a164a95bf1631ba8a78f1fa528a124b44475d610d572b7f72a92798215f4c467c86c975bf9cee95fb10197980849b35cb29c5aa876512eed45e80056f7210a7f7b8e9aa0a32d04dd128f0795fc7ec803661d76c1499a8a224156b0519bcdf5b1f298a4ee6601f29cf74ddd58dd326775acbb89e53659acd436922cb5140a53a6d66751d6e1145472cfeeb296d42341e88e9459eb1a1804fc75e8493f099bcc1f388f35d4f6c9e585fa76ce844321da46296069a58e6bc0d2001a25046ec750a0a08300c7fc4b494a091adee8eb3159115855ed0632a1fe3735285c86fc03ddcd93ec96ad204846037b056b0791a753ed2079255ac82f0f045a7951c045d4641b2554256695d18cce91922218e1167d4d447d2e1814759aaf2282a13940a98e3f89ce94483a4988f0af37f59cef820696c84321eca55faafb0553438636568d62701abeca61313320757ea97e36e736dec0f52cba203275c2d93547b55abb37cd97db7c9747dcbf068d8d0a64fafc3f5f30595a8b1fa97b472c431ea00481662ab3d8ef495ce88d77de740208c307d189dbea680b64e43d70a862a6d9361f6e058ab12c60e114d0f9ecefa28679c0ffb6918ecac5c99303659fa9839aae9d17b81ae19ef5dcc6aacb5ae0bda4095f5a1b7c372b9a6a2a2302450e0272bc0da2baab8e09d35ba5f4f6685bcf56332d4813d36994265fbfce8e7e58718da878443b86b258297dda2ecb3e41c3df9be3f0442782ebed39bdf319fa6652729d89d7f63ae9b76a9d01928002533b73fcc874ae47864de6edfa083e0c5847546fd23d373a598c5488fbd6d42c8199af1a5e2513ab21fafa41e144d3e8a2a1fcf7de68d8336a512e2d4beb2d51f8ea60667f7f8c436dec5219ffc3e999071f2059bf5407bbd7b5544a09092c58c3db26f9b7de18b70e71559a7bc5c35fdecaf939dd775d08769b0b2869b14fffaff8a3480e12d413018275fb6b3712409d413e547f82f25f366d30c7bc2ffab36d0250cd1612b46394d6d55f79aad15d77a5d1be5cf63072ce1e0cbebeacf2e107a4d6a60df6315f056923fb60a27adeb18ac8e20f3c80a3193e8ae04545c8f53cecc4af72be6dabe067e6953ebc3ee553462296ec84a0c7284ad83882f7fc34d94f4da3e6ab204c27ffea1c8b48c7b86eea3787da96089aee236e3f240d8333676fe8fbb3bf6db05fb4447397f0214d7e51ef738e694a67c09890dbdeafe6661acb9313751bbd4561827593b7eb0da003222b19e4bef95ad7b626ab92f063119ea3fea250462c4addb46ab3f4f40e8f9c4a018d872a5e3375d8e296ddac3b42095cf1e060ac48423520bb4dae3c8a854765535e8fdbbabf9f98ca42ba61c49f5b023c3a93cec34bb9c18cea33035c3dc21d16e22340c69d42de33bddce179555f8068d99fe6d22aead972e0ec3f455597d0eaf6141370e28b764a38cc6a8f5a71480499e1b5ce0f6deef82de3aad57278d78b61c73ad95f4ae644bd400a072fa3075f71f10800e7e2b2a4f26b854d0a374c0b4b56a156be560b5b900181a12387c52d54dffe79722f04832e0da27bdbb4e508514fff36201889222ea2633e73014dedd373c290dd53bdd24ecee89a4cb88d592ceb7b56a6fccc1f772647ed60db871ef38e83068f98ce9410a3d0fccb68e303c0ef978085d7324d568ac91090194b546fa29ac5802e701ac3eba194edf40654d05938dfa2a3635e0728cb8e836fa7cbd2de1c1f18abe1a2ca06940acbae7b5bfb9eab7a9b010e0b85e36f6c1018e906cec04c07d51ea878af73a041582058ba4650ecff58b5e601eca23c3ef55e3b28f908e8368274f161b57fdebb2c9bbfac742cd405047caea6b45dee5e3284d99491748b9e6e361035be5821577ec574c5bc78218acf05ff7163af5e7644bf1df2193197f05c1779f6cc328c5062ae40b72c91609182a0b9f4c863d6a7b8b879948b1fad9b2697ff2e60dae15881b923e4ca582499c9182be65546cb2d739bf6314fc81bc77e96e6e8aabffdf05c5b130ef999972de4a3070dc82e2714543b41eeb7804d57e03a1bb5d556bc069ee208bee2d8fd028618bf4be963c207afa99719c9ec067e4125190705e2366b81a58ac1a081d766f6dec29d45ba79b5997fad1dbc41bae6584f6bb20079f1ef085a1a769df91e7f7dbdf14f465bbef25ab522391ae2993f34797133a0193cb1765aa199b8c4c3a7c62b3f442c27447e062ec7ea3042e02fbec5f988e9c7aa1c204f9bbbc7d24b18e14c69ce02afd176b70f3e5e55935a4c659878e05d92e4b40e25aa04063cb28a7bc261b2b326c1d6d1aab2ea98d26f600f7198d7e8733949108043db5bb5e90cd60cdcac6e7ad210fb9908a5d5d2590c7c8bcd2e41da93c554bfa74197e12eca1d89f276fa2c611188117877eee803094cf936251b7aaa02c94933932ea6b66d60696c4a5848852f17eccfdc32a569ca5633fafe0ad20e0ec03d02b4054542ad7b0d44903d4ddfa74708c48e50338856ffc562e33116b7451e8c737e0d53c240bd8a8cc24cc99a920843be7a2938be9e9dfdc8c52ae7f0ace65109f28243c24be2a7c7785c6ba7b0212e267467c4e3dc43b7ce095ac022102c718ac378ebbd7b20ccd17f7c5923ba2519566a7c13da202789b51941b2f129a70fb974bf4292a3024b9a658299d1ea02394e931cfe6334ff7d34173291e1ee62915737077ce763dcae285d35c6d17bddfa24d55fe7545742e6328b049fd250e6705eb51e075d28026bfd20cda040e88462a1c0732fe17ae19770beb9768cd3cfc8d895194f8995b9f6fdfe98e21252cb42edbeb2dc31ecf56f97dd15499116e83bc19a34573f22e2822a4044c5ff71aac66e428c110cb14451f5ef503b4e2bf26a17ce17e7516d0a06d33b11683b1b70607b3afe4abba27ad930622908d0397411029153163b44b75d39b228ecff90567d7ad3de88c20360fbbedd5a92d72965abefc7063f2bdaab164513b3d485cb8fd99f470533c215ca9c8ed1f96e482c144f8fe4539a8357de28d8fb74f0a54beec948c4675881d71c838f4a8ebf5b4844b3d2f767d09629502ec1603e870fe81d3a8b8779e79ca639d6370214dfe2f1bb69b5fcb79af03593acb4453ad616895024dea4586843b2c08b5c4ac3b2544f0e2e76b7fd35aa6d4d435a33e57b4d6e8e82a3617778af890742ded671d23b32e30f1e4974abd917e9c21c0647f75a9cafe0e1a"}) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000004ec0)) setsockopt$packet_buf(r8, 0x107, 0x2, &(0x7f0000004f00)="af0ae66303beeb5bb6af454b40399d1b4b82c1be72398aabe27e81643ed3546bce09188a25b349436fbbfcd5931701911363d10a59bec2b3a3a1e323a2a300a9e961ba01df9763a7b29a45803479c9ac7748fa0576edbab93f0507fc2c9a91d02392", 0x62) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004f80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f00000053c0)={0x119, 0x0, &(0x7f0000004fc0)="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"}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r9, &(0x7f0000005600)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000055c0)={&(0x7f00000054c0)={0xfc, r17, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x37, 0x4}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x3c) pwrite64(r5, &(0x7f0000005640)="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", 0x1000, 0x5) io_setup(0x3, &(0x7f0000006640)=0x0) r20 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r21 = eventfd(0x6) io_submit(r19, 0x5, &(0x7f0000007a00)=[&(0x7f00000066c0)={0x0, 0x0, 0x0, 0x7, 0x2, r11, &(0x7f0000006680)="48e164cc985423579ff66a50d4e7d89a42b6cac47ada51ce404b274676fa969fc9b8ab9e30d753a2bec3", 0x2a, 0x2, 0x0, 0x2, r20}, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000006700)="1d7770a593339181485e283ad89558bca9583aad64f8a8127b926590", 0x1c, 0x0, 0x0, 0x1}, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x7, 0x4, r3, &(0x7f0000006780)="7f9c30b7074b28ea635ff9dd92d1f77686bdb40604b165df380869cad85956e55408c7bf72be803daf1cfe2da7a083c07c7a96af377eabf23bc1606875e6daf1bcdd9606df057ae625dca21e5f0eebbf3becd8e7e2d5f7dca708fe35b6cfec3305fb3fe811e36ae1888b69c890fce57e068c45ad32c2f17732a698ec7b1619f30b8a6a04d4f12510cae6cb114a94f156ee6ab17b6ea7285550c0219d2d4c2f601b9c72bd3a27c446daf67d59fac0ec7476540ff8c3d5e650c7309b325ab7fa7a1bc660dd143d9f7817ef581f624e8aa1612ed09084f8439c9973c09bc24f1b3973940ecee795753cb0f66f6038f8cf070ba3", 0xf2, 0x742d, 0x0, 0x2, r21}, &(0x7f00000078c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r16, &(0x7f00000068c0)="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", 0x1000, 0x100, 0x0, 0x1, r7}, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x2, 0x3, r10, &(0x7f0000007900)="f86226c0c4bedf497facd20ed3744c78236935a9e9caadd843c39c2ec4a94bb19ead1744bde417bbf689668f75a26ea8efde0ec6b7af686b16605656c351830942d1bc2a52bfdb1b05bab60cb08c6bdab865089f24b34b82e67b958e5d8b0e4e01d4d8afbba3ff694f923a47567b1f1a82177476c2ed76ed8d126cd1577352a5ae96180050d3c3b52ba27ca428612640001832425e507646217a57b5c64058", 0x9f, 0x6a, 0x0, 0x3, r1}]) 2m44.957072622s ago: executing program 33 (id=2592): r0 = memfd_secret(0x80000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000002080)=0x80000000) recvmmsg$unix(r0, &(0x7f0000003940)=[{{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002140)=""/149, 0x95}], 0x1, &(0x7f0000002240)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000003880)=[{&(0x7f0000002380)=""/218, 0xda}, {&(0x7f0000002480)=""/187, 0xbb}, {&(0x7f0000002540)=""/49, 0x31}, {&(0x7f0000002580)=""/143, 0x8f}, {&(0x7f0000002640)=""/233, 0xe9}, {&(0x7f0000002740)=""/185, 0xb9}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/120, 0x78}], 0x8, &(0x7f0000003900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x2, 0x20, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f00000039c0)={0x8}) statx(r11, &(0x7f0000003a00)='./file0\x00', 0x4000, 0x800, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000500, r12, &(0x7f0000003b40)) r13 = getpid() prlimit64(r13, 0xb, &(0x7f0000003b80)={0x100000000, 0x1}, &(0x7f0000003bc0)) openat(r2, &(0x7f0000003c00)='./file0\x00', 0x2, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000003c40)={0x0, 0x0}) ptrace$ARCH_SHSTK_LOCK(0x1e, r14, 0x1, 0x5003) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003cc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000003ec0)={{r0}, r15, 0x18, @unused=[0x5, 0x10001, 0x6, 0x3], @name="3bff206a0ea59e7c259bc01923892dd73803b10cc93092d34e2400fae87503f7cb339c5331245cad824a5479a120c11157c05adbe8655733df26f30e9923807cd5e57fe300bd66cb7c7e4e35e73de5316942a5fef9b752d7a759f7aef8b13875e41f9b412a988e5349ae30680d50246e0bcf7009c13734a9866936712eea3005ded0c236c406fdaadbb7ffbefb709960ada2dcd4ba893e6e74b0198f420ac7675102f22c50b998524d6c0b0a58e7706e0cc66d105c39107aec979efd1aa4b325d15a1129eed893c9504171eff7353fd086570a4e9334a0e6402b7149026c1fc5503dacb2c8c6dada1c23f5a93e9660de0ad5d7726f9de5a75fa2e7cb3d27481b5f80669359bb8bdec5b1ca022c9c424bd9d1503068e84ee02ae5cda7908a7a132c9f0134e6564d4e0e2055bc0877535ee0b300552f0e53e0aefa26e73019f9c59952c9a696834f35b35bd4d353874a0c4c5bd65ff47a8bf4536ef9088ac0c84ed789fa92a359c5a38c158e4185640207470e4ffc2d8d64c0b37480bdda7babd5a33938b1c8fe2288bc351451ec23d38654022d9c42ecbfae991443ae19b862173d68f7f55f0eafba19f1ef6968882cb766e518f9822cf0b699f4a46e4c4276529e67cd1c0e2748dcb71f72d4a5373d5bf303e67e804de5a45e16c434207bd7d79b13e49ef4e880a0816616fb3e319695256e6a5e3185cfacbacdabe7a6e455d49c7aacb5aa8f339a66d6994df277975d213aeaf946ac05e8c37d3cda3e128cab881fced89c92c7999e1790a17ae7afab37551613659a2551dba73206b99787654a52d24250f03406669ae245815c4d1530a06eca78c80cba7b7b3af0cb3184850c6cc6e40492f6b09014881d92b89801518895c3c2362d13c78c1076b7895ccd3ae46280218a3ae60b07ed21dd9b8d0395fd142116203102afaf43ad746ca0a86bd4e62e59a9b73c2de8492aebfee9cc5ae267f0adb1e65714119fe81ba1fe11d601274291117f3a65c95cb2be71b182220f718e5342d0ce46ee91a0bfd63c1b2cb63aaa857ef7c15c5ed5c0a5b9db857978e89e273257f5509bf558060599e798179bbb18cad71c18c6d803cf1753629a098a08eebb0a203104d4b4f2a69d68b73264d9d1da755529346c330f7ee21303926e620d3d7808c41060920d9aad00e9e308dfda40744174d151709c1976923b21c542e0369894a84d65206dca77ad959634c78503a6d16b457d668c0d7d5e565c9d2ecd537221955dbb18a70cccc4a053bd7c1a10843c341d4918ee0be83c803b3a918f756ae9e031ef1e3bd76126555fa4aaa56655e55e83839635be79ec044233daa8e59d0baa27f0d4eab44cc15554750a4a7255726da252254d1da8452026fe54d0f5d133aee586372e6a4654bb5bc0398d76cb8d045a3f7dc4925c901e5a527c96452d91d59f0cef7807d118ee706e47add7ed70e640055ee032bcffcdb0111ee809817111bd342546456af1c9672699303698c240a4d97aeb2f02906c9db1e527b77ed36cee698daee7557e27e730624a8ddefa6edb0b9ec4a430d26f53423964a9ec2f0f20b9f854f2ed120ce7d66fd214d1fe6b429b5898042798e7808f7a738aec694fa820bc7919b9057d24353ac095ed113926ff36ff57b8031ab76623163f6160e4662403b07570328f537d8a82c47bd084c376717a88ec91c7c4291c73b120d16098744fc8ba448559ca27386d9f962d1f3344828c82b59d4aeb18374178861dff7d180aafa9ebe22982a720de0bdcdc3a9c0764d2bb6ddb52cf7dd759bf787a3d4707b4ea643bc8650488ac254e815a791fc9f7ed61d32cfb55611bf8932e0181862921ffdf449200f5f3a22f6743e63a6d70f396f7c78c013af679dc0005deb0d1459850284b2e46a64736631f78da3142ae0e478a6dcef60f865895a1822f95643311a45d8cc8ea0a0f5a043cc605f5e823880fa754881c97efc52bdc3403033ff78dfe356cdfcb4c5a6154e9df169ebcdc303a5b2dbc97eb874278389db22199b80dd0ad58a1e7229640648b81d63236d6c11c2607ab5454955ec11a59231ee9e4e43bf2358227fc8cae2019838c17ddff005c45189ae1f7f9f58be0c12c8bdb4bec8f594756f107683248c6b4bb3a4996071597e66b1e6313369549f5bd0d2aba423c33e2c33bf67a223dafa4d6fec1de3d7363513f0b98df3191c2592c826af3b3ab392229807060ac8e4e069ca4d4ac763ea72464b9ff4ac398009bf1ccc1a49e5ddc4c83e8c27484f0a78e0938f04f092bacb869899922de7c90b04e793d31261519a25b3f6456342f821169709bc21444605c5a79fb29f76386add7c2290d6ace79991df0423120fcc39f74a7dcb9e2bd01c5d97c7d318118d3bc4c0407498b178fda54a4c74ed1cf56320b8d2c387cb2017fc7f5295cfbea50ba90f6ec2e2bb30a3914922ac468729218c466b9427de8638b1d03b77700390c83d235379a781a164a95bf1631ba8a78f1fa528a124b44475d610d572b7f72a92798215f4c467c86c975bf9cee95fb10197980849b35cb29c5aa876512eed45e80056f7210a7f7b8e9aa0a32d04dd128f0795fc7ec803661d76c1499a8a224156b0519bcdf5b1f298a4ee6601f29cf74ddd58dd326775acbb89e53659acd436922cb5140a53a6d66751d6e1145472cfeeb296d42341e88e9459eb1a1804fc75e8493f099bcc1f388f35d4f6c9e585fa76ce844321da46296069a58e6bc0d2001a25046ec750a0a08300c7fc4b494a091adee8eb3159115855ed0632a1fe3735285c86fc03ddcd93ec96ad204846037b056b0791a753ed2079255ac82f0f045a7951c045d4641b2554256695d18cce91922218e1167d4d447d2e1814759aaf2282a13940a98e3f89ce94483a4988f0af37f59cef820696c84321eca55faafb0553438636568d62701abeca61313320757ea97e36e736dec0f52cba203275c2d93547b55abb37cd97db7c9747dcbf068d8d0a64fafc3f5f30595a8b1fa97b472c431ea00481662ab3d8ef495ce88d77de740208c307d189dbea680b64e43d70a862a6d9361f6e058ab12c60e114d0f9ecefa28679c0ffb6918ecac5c99303659fa9839aae9d17b81ae19ef5dcc6aacb5ae0bda4095f5a1b7c372b9a6a2a2302450e0272bc0da2baab8e09d35ba5f4f6685bcf56332d4813d36994265fbfce8e7e58718da878443b86b258297dda2ecb3e41c3df9be3f0442782ebed39bdf319fa6652729d89d7f63ae9b76a9d01928002533b73fcc874ae47864de6edfa083e0c5847546fd23d373a598c5488fbd6d42c8199af1a5e2513ab21fafa41e144d3e8a2a1fcf7de68d8336a512e2d4beb2d51f8ea60667f7f8c436dec5219ffc3e999071f2059bf5407bbd7b5544a09092c58c3db26f9b7de18b70e71559a7bc5c35fdecaf939dd775d08769b0b2869b14fffaff8a3480e12d413018275fb6b3712409d413e547f82f25f366d30c7bc2ffab36d0250cd1612b46394d6d55f79aad15d77a5d1be5cf63072ce1e0cbebeacf2e107a4d6a60df6315f056923fb60a27adeb18ac8e20f3c80a3193e8ae04545c8f53cecc4af72be6dabe067e6953ebc3ee553462296ec84a0c7284ad83882f7fc34d94f4da3e6ab204c27ffea1c8b48c7b86eea3787da96089aee236e3f240d8333676fe8fbb3bf6db05fb4447397f0214d7e51ef738e694a67c09890dbdeafe6661acb9313751bbd4561827593b7eb0da003222b19e4bef95ad7b626ab92f063119ea3fea250462c4addb46ab3f4f40e8f9c4a018d872a5e3375d8e296ddac3b42095cf1e060ac48423520bb4dae3c8a854765535e8fdbbabf9f98ca42ba61c49f5b023c3a93cec34bb9c18cea33035c3dc21d16e22340c69d42de33bddce179555f8068d99fe6d22aead972e0ec3f455597d0eaf6141370e28b764a38cc6a8f5a71480499e1b5ce0f6deef82de3aad57278d78b61c73ad95f4ae644bd400a072fa3075f71f10800e7e2b2a4f26b854d0a374c0b4b56a156be560b5b900181a12387c52d54dffe79722f04832e0da27bdbb4e508514fff36201889222ea2633e73014dedd373c290dd53bdd24ecee89a4cb88d592ceb7b56a6fccc1f772647ed60db871ef38e83068f98ce9410a3d0fccb68e303c0ef978085d7324d568ac91090194b546fa29ac5802e701ac3eba194edf40654d05938dfa2a3635e0728cb8e836fa7cbd2de1c1f18abe1a2ca06940acbae7b5bfb9eab7a9b010e0b85e36f6c1018e906cec04c07d51ea878af73a041582058ba4650ecff58b5e601eca23c3ef55e3b28f908e8368274f161b57fdebb2c9bbfac742cd405047caea6b45dee5e3284d99491748b9e6e361035be5821577ec574c5bc78218acf05ff7163af5e7644bf1df2193197f05c1779f6cc328c5062ae40b72c91609182a0b9f4c863d6a7b8b879948b1fad9b2697ff2e60dae15881b923e4ca582499c9182be65546cb2d739bf6314fc81bc77e96e6e8aabffdf05c5b130ef999972de4a3070dc82e2714543b41eeb7804d57e03a1bb5d556bc069ee208bee2d8fd028618bf4be963c207afa99719c9ec067e4125190705e2366b81a58ac1a081d766f6dec29d45ba79b5997fad1dbc41bae6584f6bb20079f1ef085a1a769df91e7f7dbdf14f465bbef25ab522391ae2993f34797133a0193cb1765aa199b8c4c3a7c62b3f442c27447e062ec7ea3042e02fbec5f988e9c7aa1c204f9bbbc7d24b18e14c69ce02afd176b70f3e5e55935a4c659878e05d92e4b40e25aa04063cb28a7bc261b2b326c1d6d1aab2ea98d26f600f7198d7e8733949108043db5bb5e90cd60cdcac6e7ad210fb9908a5d5d2590c7c8bcd2e41da93c554bfa74197e12eca1d89f276fa2c611188117877eee803094cf936251b7aaa02c94933932ea6b66d60696c4a5848852f17eccfdc32a569ca5633fafe0ad20e0ec03d02b4054542ad7b0d44903d4ddfa74708c48e50338856ffc562e33116b7451e8c737e0d53c240bd8a8cc24cc99a920843be7a2938be9e9dfdc8c52ae7f0ace65109f28243c24be2a7c7785c6ba7b0212e267467c4e3dc43b7ce095ac022102c718ac378ebbd7b20ccd17f7c5923ba2519566a7c13da202789b51941b2f129a70fb974bf4292a3024b9a658299d1ea02394e931cfe6334ff7d34173291e1ee62915737077ce763dcae285d35c6d17bddfa24d55fe7545742e6328b049fd250e6705eb51e075d28026bfd20cda040e88462a1c0732fe17ae19770beb9768cd3cfc8d895194f8995b9f6fdfe98e21252cb42edbeb2dc31ecf56f97dd15499116e83bc19a34573f22e2822a4044c5ff71aac66e428c110cb14451f5ef503b4e2bf26a17ce17e7516d0a06d33b11683b1b70607b3afe4abba27ad930622908d0397411029153163b44b75d39b228ecff90567d7ad3de88c20360fbbedd5a92d72965abefc7063f2bdaab164513b3d485cb8fd99f470533c215ca9c8ed1f96e482c144f8fe4539a8357de28d8fb74f0a54beec948c4675881d71c838f4a8ebf5b4844b3d2f767d09629502ec1603e870fe81d3a8b8779e79ca639d6370214dfe2f1bb69b5fcb79af03593acb4453ad616895024dea4586843b2c08b5c4ac3b2544f0e2e76b7fd35aa6d4d435a33e57b4d6e8e82a3617778af890742ded671d23b32e30f1e4974abd917e9c21c0647f75a9cafe0e1a"}) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000004ec0)) setsockopt$packet_buf(r8, 0x107, 0x2, &(0x7f0000004f00)="af0ae66303beeb5bb6af454b40399d1b4b82c1be72398aabe27e81643ed3546bce09188a25b349436fbbfcd5931701911363d10a59bec2b3a3a1e323a2a300a9e961ba01df9763a7b29a45803479c9ac7748fa0576edbab93f0507fc2c9a91d02392", 0x62) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004f80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PIO_FONTX(r10, 0x4b6c, &(0x7f00000053c0)={0x119, 0x0, &(0x7f0000004fc0)="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"}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r9, &(0x7f0000005600)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000055c0)={&(0x7f00000054c0)={0xfc, r17, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x37, 0x4}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x3c) pwrite64(r5, &(0x7f0000005640)="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", 0x1000, 0x5) io_setup(0x3, &(0x7f0000006640)=0x0) r20 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r21 = eventfd(0x6) io_submit(r19, 0x5, &(0x7f0000007a00)=[&(0x7f00000066c0)={0x0, 0x0, 0x0, 0x7, 0x2, r11, &(0x7f0000006680)="48e164cc985423579ff66a50d4e7d89a42b6cac47ada51ce404b274676fa969fc9b8ab9e30d753a2bec3", 0x2a, 0x2, 0x0, 0x2, r20}, &(0x7f0000006740)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000006700)="1d7770a593339181485e283ad89558bca9583aad64f8a8127b926590", 0x1c, 0x0, 0x0, 0x1}, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x7, 0x4, r3, &(0x7f0000006780)="7f9c30b7074b28ea635ff9dd92d1f77686bdb40604b165df380869cad85956e55408c7bf72be803daf1cfe2da7a083c07c7a96af377eabf23bc1606875e6daf1bcdd9606df057ae625dca21e5f0eebbf3becd8e7e2d5f7dca708fe35b6cfec3305fb3fe811e36ae1888b69c890fce57e068c45ad32c2f17732a698ec7b1619f30b8a6a04d4f12510cae6cb114a94f156ee6ab17b6ea7285550c0219d2d4c2f601b9c72bd3a27c446daf67d59fac0ec7476540ff8c3d5e650c7309b325ab7fa7a1bc660dd143d9f7817ef581f624e8aa1612ed09084f8439c9973c09bc24f1b3973940ecee795753cb0f66f6038f8cf070ba3", 0xf2, 0x742d, 0x0, 0x2, r21}, &(0x7f00000078c0)={0x0, 0x0, 0x0, 0x7, 0x7fff, r16, &(0x7f00000068c0)="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", 0x1000, 0x100, 0x0, 0x1, r7}, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x2, 0x3, r10, &(0x7f0000007900)="f86226c0c4bedf497facd20ed3744c78236935a9e9caadd843c39c2ec4a94bb19ead1744bde417bbf689668f75a26ea8efde0ec6b7af686b16605656c351830942d1bc2a52bfdb1b05bab60cb08c6bdab865089f24b34b82e67b958e5d8b0e4e01d4d8afbba3ff694f923a47567b1f1a82177476c2ed76ed8d126cd1577352a5ae96180050d3c3b52ba27ca428612640001832425e507646217a57b5c64058", 0x9f, 0x6a, 0x0, 0x3, r1}]) 1m34.446169122s ago: executing program 0 (id=3938): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x1}) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000100)={'filter\x00', 0xb001, 0x4, 0x408, 0x238, 0x130, 0x238, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0x101}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) 1m33.938422092s ago: executing program 0 (id=3943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000002ac1e00010000000000000000000000000000000000020000020000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000001010000000032000000fe880000000000000000000000000001fdffffffffffffff0000000000000000ffffffffffffffffcd2d000000000000080000000000000000001a000000000000004000005c000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000008001d"], 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040) 1m33.926766432s ago: executing program 0 (id=3944): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x1a1081, 0x18) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="f485e581ece0cb4eac71298f62509299768ccc260a01aed89e1fcf764b944cf7459a9714831f8ef9dced243cf6354bd11ff03f1c6e49b58960d3fda7409683464fb5d14d5ba0e33de52abc204fafa0ff5fa4cd7edadab374b9668a2096b7cd11e91b69838669ca0c70ebef9bc9a56b0df509d05652ecc790b40f969358f77d323d08aadfb30eaf511b3c9c6026211a9f6ca1c94d1c53dda0f252a087e858cf784c319750d7873c24a2d7fbf6831179b68200f0330da5735631580466f13655c5b8b14cd27360b82236c8621ec684d7e48cb89672506bd562d4fce83a13b8b6b15bc3a127f011f5f70fe524b413912275736e2c9b9e72a5bc40f9405f7fb09d08") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x13, r2, 0x5401000) r3 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000040)={0x4, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000040)={0x4, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1m33.871255704s ago: executing program 0 (id=3945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x26c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x258, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "cbcb6a9041699f3bdff5ce6f9fe769a4248b0ce87deb03129984218d2ac7a3231092000e17701140ebc6c4f67b4594398d5e78eb7c7b6c4f6d5318327a8df2247fd73b780a73136fa055d63c171774b8080ff7b6c292557e8387dbdbb0cce48ff29d2aba268737b4d31b0ce6f82ec264574eba1785b413bfe25d4730324026aca86ccdc884b0ba7bcbefe9d928dc81a671daaac1973cec648c4c01dfb4256437d963a23073766b9d07026a18abd3bd71f138e636"}, @ETHTOOL_A_BITSET_MASK={0x42, 0x5, "da854d160c02dce8548626f2ba63ab6950a44562c6b14e421750f3416d608bb9a106eae8233124ae7528a65337f2714db6a11a1495b5d0518c480ca771ea"}, @ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1e}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "fb53ec8401b315781e9a5645ee754f039f488a5c2d9cbb822dc23a6bdfe3baa365ecea7f67d82d86df0423f0a201bc8084e28b12"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000000) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000002c0)=""/112) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2}) 1m33.871016524s ago: executing program 0 (id=3946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1281, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) (async) close(0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140), 0x10) (async) listen(r2, 0x5) (async) accept4$unix(r2, 0x0, 0x0, 0x0) (async) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)="84ffe6a4", 0x4}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m33.763264476s ago: executing program 0 (id=3949): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005d40), 0x2, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000008dc0)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0x42ab) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x2) write$uinput_user_dev(r4, &(0x7f0000000340)={'syz0\x00', {0x4, 0xa9c6, 0x8, 0x2}, 0xe, [0x7, 0x8001, 0x8001, 0x8, 0x4, 0xffffff7f, 0x3, 0x8, 0xfd3, 0x40, 0x70068fe0, 0x401, 0x1ff, 0x0, 0x280000, 0x7, 0x1, 0x6317, 0x40, 0x4, 0x3, 0xdeb2, 0x200, 0xfff, 0x0, 0xe9, 0x9, 0x4, 0xffffff04, 0x4, 0x8, 0x6, 0x100, 0x9, 0x4, 0x0, 0x4, 0x400, 0x0, 0x9, 0x365, 0x3, 0x9, 0x3, 0xfffffffb, 0x2, 0x6, 0x0, 0x2, 0x400, 0x1, 0x7, 0x4, 0x200, 0x3, 0x2, 0x4, 0xc, 0xc, 0x32, 0x8, 0x3, 0x8001, 0xfff], [0x0, 0xd, 0x0, 0x5, 0x5, 0xfff, 0x1, 0x5, 0x8a6c, 0x2, 0x9, 0x0, 0x4, 0x200, 0x77e5, 0xfffffe00, 0x9e9d, 0x258b, 0x8, 0x4, 0xaac, 0x4, 0x80000001, 0x5, 0x10001, 0x10000000, 0x881, 0x5, 0x3, 0x8, 0x6e4d, 0x2, 0x0, 0x7, 0x1, 0x2, 0x8, 0x200, 0x2, 0x7fffffff, 0x8, 0x8, 0x3, 0x9, 0x8000, 0x3, 0xffff, 0x2, 0x6, 0xfffff42d, 0x7, 0x1, 0xffff, 0x6, 0x2, 0x7fffffff, 0xfff, 0x7fffffff, 0xff, 0x1000, 0x3ff, 0x7, 0x4, 0x2], [0x1, 0x7fff, 0x8, 0x6, 0x72d6, 0x1, 0x5, 0x6, 0x800, 0x80000001, 0x8, 0x4, 0xfffff000, 0x7, 0xb, 0x80000001, 0x3, 0x1, 0x3, 0x5, 0x565, 0x8, 0x2, 0x1, 0x9, 0xffffffff, 0xfff, 0x2ae, 0xb, 0x40, 0x7, 0x1, 0x8, 0x4, 0x80000000, 0x5e81, 0x5, 0x2, 0x7, 0x5f6, 0x0, 0x3, 0xb, 0x1, 0x4e, 0x9, 0x9, 0x6, 0x80000001, 0xf36, 0x3, 0x5, 0x8, 0xfffffffa, 0x5, 0xfffffffd, 0x7, 0xbae, 0x3, 0x2, 0x80000001, 0x9, 0xfd, 0x3], [0x100, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x0, 0x5, 0xa907, 0xf, 0x6a9, 0x6, 0xc27, 0x7fffffff, 0x81, 0x1ff, 0x1000, 0x5c47, 0x9, 0x51, 0x8, 0x80, 0x8, 0x8, 0xaf66, 0x41, 0x2, 0xfffffffa, 0x5, 0x89c, 0x8, 0x0, 0x80, 0xffffffff, 0x3da4f18b, 0x48, 0xffffffff, 0x97aa, 0xa6e6, 0xe, 0x3, 0xff, 0xe, 0x8, 0xc884, 0x40c9, 0x0, 0x6, 0x7f, 0x800, 0x5, 0x1, 0x0, 0xac, 0xfffe000, 0x72bd, 0x8, 0x8, 0x8, 0xc001, 0x8, 0x8]}, 0x45c) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m33.762252786s ago: executing program 34 (id=3949): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005d40), 0x2, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000008dc0)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0x42ab) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x2) write$uinput_user_dev(r4, &(0x7f0000000340)={'syz0\x00', {0x4, 0xa9c6, 0x8, 0x2}, 0xe, [0x7, 0x8001, 0x8001, 0x8, 0x4, 0xffffff7f, 0x3, 0x8, 0xfd3, 0x40, 0x70068fe0, 0x401, 0x1ff, 0x0, 0x280000, 0x7, 0x1, 0x6317, 0x40, 0x4, 0x3, 0xdeb2, 0x200, 0xfff, 0x0, 0xe9, 0x9, 0x4, 0xffffff04, 0x4, 0x8, 0x6, 0x100, 0x9, 0x4, 0x0, 0x4, 0x400, 0x0, 0x9, 0x365, 0x3, 0x9, 0x3, 0xfffffffb, 0x2, 0x6, 0x0, 0x2, 0x400, 0x1, 0x7, 0x4, 0x200, 0x3, 0x2, 0x4, 0xc, 0xc, 0x32, 0x8, 0x3, 0x8001, 0xfff], [0x0, 0xd, 0x0, 0x5, 0x5, 0xfff, 0x1, 0x5, 0x8a6c, 0x2, 0x9, 0x0, 0x4, 0x200, 0x77e5, 0xfffffe00, 0x9e9d, 0x258b, 0x8, 0x4, 0xaac, 0x4, 0x80000001, 0x5, 0x10001, 0x10000000, 0x881, 0x5, 0x3, 0x8, 0x6e4d, 0x2, 0x0, 0x7, 0x1, 0x2, 0x8, 0x200, 0x2, 0x7fffffff, 0x8, 0x8, 0x3, 0x9, 0x8000, 0x3, 0xffff, 0x2, 0x6, 0xfffff42d, 0x7, 0x1, 0xffff, 0x6, 0x2, 0x7fffffff, 0xfff, 0x7fffffff, 0xff, 0x1000, 0x3ff, 0x7, 0x4, 0x2], [0x1, 0x7fff, 0x8, 0x6, 0x72d6, 0x1, 0x5, 0x6, 0x800, 0x80000001, 0x8, 0x4, 0xfffff000, 0x7, 0xb, 0x80000001, 0x3, 0x1, 0x3, 0x5, 0x565, 0x8, 0x2, 0x1, 0x9, 0xffffffff, 0xfff, 0x2ae, 0xb, 0x40, 0x7, 0x1, 0x8, 0x4, 0x80000000, 0x5e81, 0x5, 0x2, 0x7, 0x5f6, 0x0, 0x3, 0xb, 0x1, 0x4e, 0x9, 0x9, 0x6, 0x80000001, 0xf36, 0x3, 0x5, 0x8, 0xfffffffa, 0x5, 0xfffffffd, 0x7, 0xbae, 0x3, 0x2, 0x80000001, 0x9, 0xfd, 0x3], [0x100, 0x4, 0x9, 0x1, 0x4, 0x7, 0x8, 0x0, 0x5, 0xa907, 0xf, 0x6a9, 0x6, 0xc27, 0x7fffffff, 0x81, 0x1ff, 0x1000, 0x5c47, 0x9, 0x51, 0x8, 0x80, 0x8, 0x8, 0xaf66, 0x41, 0x2, 0xfffffffa, 0x5, 0x89c, 0x8, 0x0, 0x80, 0xffffffff, 0x3da4f18b, 0x48, 0xffffffff, 0x97aa, 0xa6e6, 0xe, 0x3, 0xff, 0xe, 0x8, 0xc884, 0x40c9, 0x0, 0x6, 0x7f, 0x800, 0x5, 0x1, 0x0, 0xac, 0xfffe000, 0x72bd, 0x8, 0x8, 0x8, 0xc001, 0x8, 0x8]}, 0x45c) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.920368576s ago: executing program 2 (id=5757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x70505) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r5) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.866962867s ago: executing program 2 (id=5759): ioprio_get$pid(0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x711803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000440)={0x30, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x52}, @void, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0xb, 0x0, &(0x7f0000000040)) ioctl$BLKRRPART(r0, 0x125f, 0x0) 7.865919087s ago: executing program 2 (id=5761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x12, 0xa2, 0xea, 0x8, 0x3285, 0x6b3, 0x643f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0xd0, 0x2, [{{0x9, 0x4, 0x5d, 0x4, 0x0, 0xff, 0x5d, 0x1, 0x3}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="7103503a2edc330c4745eb2258d3913744c2c2220427f8dffda9f5392aaab54010d50e43e8b62c4112793afa3e02a8e83781357fbe4729ca5b2f12315411ff265b576004dee6e2e73a3222ac914aeabfb088443136d6232b611c92ee1f37b2a4624d905300"/113]}]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x50, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) socket$inet6(0xa, 0x80002, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0x3, 0xac, {0xac, 0x4, "218366e700c971c909401b6c8bdd8b1e7e53292295a2e93924b6e636f10fbd50e3b5dcd16513b3e2e89f080f718bfccbbb962e08806472858ab7ea3688da2edcd035c1c420769503a0b8f72347f8bc6f8cdaf918f4dac86bb1d8df77ff7cb84b26019c6bf9c92daaf14aa77de4f7854dbc42e9da28b1bb2a35e7cc05335cf41183c6e3b0c9c46d13be34b37287ba7405bd6d85e58a5ce8eb97ddfebd9db48fc6871161c1f201ea045f6e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 7.345991997s ago: executing program 2 (id=5777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) (async) ppoll(&(0x7f00000003c0)=[{}, {}, {r2, 0x9008}], 0x3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) sendmsg$inet6(r3, 0x0, 0x40) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x85b83000) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r5, 0xd6baf000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000300)={0x3, 0x5, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x6}) 7.280332429s ago: executing program 2 (id=5779): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xff, 0xd}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz1\x00', {0x10, 0x0, 0x7, 0x200}, 0x11, [0x7, 0x8, 0x0, 0x8, 0x6, 0x7, 0x1, 0xf, 0x1, 0x9173, 0x0, 0x7, 0x9, 0x43b, 0x7fffffff, 0x5, 0xfffffff3, 0x3, 0x8, 0x1, 0x7fffffff, 0xbe0, 0x9, 0xa9, 0xfffffff7, 0x57, 0x4, 0xfffeffff, 0x2, 0xc, 0x0, 0x80000001, 0x6, 0x0, 0x3, 0x10, 0x4, 0x8, 0x6, 0x0, 0x1, 0xfffffe2e, 0x80000000, 0xb6, 0x1, 0x0, 0x6, 0xffff98e0, 0x5, 0x9, 0x0, 0x1b, 0x8, 0x3, 0x1000, 0x101, 0x25e, 0x40, 0x2, 0x7, 0x3, 0xffff, 0x7c, 0x7], [0xfffffff9, 0x7fff, 0x4, 0x3, 0x8, 0xb, 0x7, 0x4, 0x100, 0x9633, 0x7, 0x6, 0xb, 0x6, 0x5, 0x5, 0x5, 0xdf2, 0x4, 0x2000000, 0x4, 0x2e7f, 0x200, 0x7f, 0x10001, 0x397e, 0x7, 0x401, 0x8000, 0x6, 0x4dc1, 0x7fffffff, 0x4, 0x7, 0x800, 0x6, 0x9, 0x6, 0x2, 0xd9e8, 0x7fff, 0x8, 0x0, 0x8, 0x101, 0x80000000, 0xc6, 0x6, 0x10001, 0x5, 0x7fffffff, 0x5, 0xf449, 0x6, 0x9, 0x7, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4, 0x1, 0x101], [0x7, 0x7, 0x1, 0x5, 0xffffffff, 0x12, 0xfffffffc, 0x6, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x0, 0x200, 0x0, 0x7, 0x7, 0x2, 0x80000000, 0x6, 0x9, 0x8000, 0x1, 0xe10, 0x22d7, 0x9, 0x5, 0x1e74, 0x3, 0x3, 0x7fff, 0x5, 0x5, 0xfffffffb, 0x1, 0x1, 0x10, 0x9fd9, 0x0, 0x2924, 0x7, 0x2, 0x9, 0x4, 0x0, 0x8, 0x3, 0x40, 0x6da, 0x1, 0x1000, 0x10, 0x8001, 0x8, 0x8001, 0x2, 0x4, 0x7fffffff, 0x3, 0x8, 0x5, 0x211, 0x7], [0x0, 0x2, 0x8c, 0x8, 0x26f, 0x8, 0xfffffff8, 0xca, 0x5e, 0x4, 0x8, 0x200, 0x5, 0x5, 0x0, 0x600000, 0xb09, 0x9, 0xff, 0x10000, 0x3, 0xffffffff, 0xfffffffe, 0x10, 0x9, 0x5fd, 0x8, 0x200, 0x0, 0x6, 0xb, 0xb, 0x7ff, 0x9, 0x4, 0x0, 0x3, 0x7f, 0x0, 0x0, 0x1, 0x8, 0x6cc20712, 0x9, 0x5, 0x1000, 0x3, 0x7, 0x214, 0xb, 0x7, 0xabe5, 0xfffffffa, 0x0, 0x4, 0x200, 0x0, 0xe1, 0x2, 0x5, 0xffffffd9, 0xb, 0xe, 0x3]}, 0x45c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x1, 0x0, 0xc, 0x0, 0x0, 0xfffffffc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x60}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800153f00000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/248, 0xf8}], 0x2) 6.923238185s ago: executing program 2 (id=5780): futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) r3 = socket$inet6(0xa, 0x2, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.892449746s ago: executing program 35 (id=5780): futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) r3 = socket$inet6(0xa, 0x2, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.122623699s ago: executing program 1 (id=5903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{r0}, {}, {r1, 0x9009}], 0x3, 0x0, 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/171, 0xab, 0x0, 0x35}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.799219365s ago: executing program 7 (id=5908): r0 = open(&(0x7f0000000000)='./file0\x00', 0x40280, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x81}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x81) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004084}, 0x4010) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb55c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8cd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87ca}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x50}, 0x4811) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000640)={0x9d, 0xfdc4, 0x3, 0x3, 0x2, 0x0, [{0xe135, 0x87dd, 0xfffffffffffffd20, '\x00', 0x218c}, {0x0, 0xfff, 0x6, '\x00', 0x400}]}) write$selinux_context(r0, &(0x7f0000000700)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x260, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x260}, 0x1, 0x0, 0x0, 0x40051}, 0x8004001) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000b00), r8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x7fffffff, 0x4, {{0xa, 0x4, 0x3, 0x27, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @broadcast, @private=0xa010101, {[@noop, @noop, @lsrr={0x83, 0xf, 0x51, [@multicast1, @private=0xa010101, @private=0xa010101]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000c00)={@mcast1, 0x0}, &(0x7f0000000c40)=0x14) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000c80)={@dev, @local, 0x0}, &(0x7f0000000cc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x28, @remote, @local, 0x20, 0x40, 0x4000, 0xde8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000ec0)={'ip_vti0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x81, 0x4, {{0x1a, 0x4, 0x0, 0x3, 0x68, 0x67, 0x0, 0x6, 0x4, 0x0, @loopback, @private=0xa010101, {[@cipso={0x86, 0x10, 0x3, [{0x7, 0x6, "30820b18"}, {0xb8d5de4221e127f3, 0x4, "01de"}]}, @cipso={0x86, 0x44, 0x1, [{0x1, 0xd, "e5207f7fad5414c6099b8a"}, {0x7, 0xf, "fd7b8a45086da0740339d16e3a"}, {0x7, 0xe, "32e5133bb2684f73c7187ed2"}, {0x6, 0x10, "9d0d6df97c8f50299a942b8823ec"}, {0x2, 0x4, "2c1c"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001240)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000000f00)={0x2dc, r10, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x1b0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r12}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xf800, 0x3, 0x9, 0x7}, {0x10, 0xdc, 0x1, 0x6}, {0x2, 0x2, 0x5, 0x7}, {0x4, 0x4, 0x2, 0x2}, {0x4, 0x0, 0x10, 0x7}, {0x81, 0x3, 0x0, 0x9}, {0x8000, 0x1, 0x1, 0xf41}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x24000044}, 0x40010) r17 = socket$nl_sock_diag(0x10, 0x3, 0x4) r18 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) r19 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0}, &(0x7f0000001300)=0xc) sendmsg$netlink(r17, &(0x7f0000003bc0)={&(0x7f0000001280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc, &(0x7f0000001900)=[{&(0x7f0000001340)={0x1c0, 0x15, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x9, 0x143, 0x0, 0x0, @str=',)\\$\x00'}, @typed={0x8, 0xdc, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xf6, 0x0, 0x0, @u64=0x7}, @nested={0x13a, 0xfa, 0x0, 0x1, [@typed={0x7, 0x50, 0x0, 0x0, @str='ib\x00'}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r18}, @generic="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", @typed={0x8, 0xd4, 0x0, 0x0, @u32=0xd20}, @typed={0x8, 0xa7, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xa7, 0x0, 0x0, @pid=r19}, @typed={0x8, 0x82, 0x0, 0x0, @uid}, @typed={0x8, 0xbd, 0x0, 0x0, @uid=r20}, @nested={0x4, 0x9}]}, @nested={0x20, 0x93, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0x14, 0x110, 0x0, 0x0, @ipv6=@mcast1}, @generic="67e2febdcfa5a40ee2fac0566f264c647644c7ad0f4c0241aa6c868bd749e13c"]}, 0x1c0}, {&(0x7f0000001500)={0x88, 0x10, 0x400, 0x70bd26, 0x25dfdbff, "", [@typed={0x76, 0xe7, 0x0, 0x0, @binary="95f6d77dc7ca16874acb51aa8d386740db20b5ef3f1bf82c9d0a819aaa67971f9e36f8332885ce426fdf241e27cae7355584541127f7d27189b54cf4545ac94dc4b8507ec6622ef6b1a1eb91fb7880e57c60abba769f95581d5bf2bb4e66029dda685cb4ae6c6f1df4b47e77f98f9040216f"}]}, 0x88}, {&(0x7f00000015c0)={0x320, 0x20, 0x200, 0x70bd2a, 0x25dfdbff, "", [@nested={0x10c, 0x7, 0x0, 0x1, [@typed={0xc, 0x101, 0x0, 0x0, @u64=0x7ff}, @nested={0x4, 0x11d}, @nested={0x4, 0xdd}, @typed={0xeb, 0xa0, 0x0, 0x0, @binary="0d1183d1e654cc4d3c7974e463de06f958a6e90aab5854f93893ea497f63759e645b57df0b18b91b8f3a1a17b3e4d28b63d638cb4561cefa16de543c169d2f2b69d60601fb2f64575e6c16f079577b29430a34f31105be4962ed14eb0406d9feab91a27b1a68aa1778e5d7284c276a99caae2a9734adfa5d2041973d35bd35b9fcf05a30088b1c70d87eedecb33c35e8dab5d7380026c1d860f48c0253a1c0cdd97d92d61d7203e78d165014e297bd8f17ba8304fda28659f469b2c7791f15da809d10d307e817c70b0fb23d095e1ac1cafbc2f30da9939518e4f00b62012d32405e0d1a5433cc"}, @nested={0x4, 0xf2}, @nested={0x4, 0x119}]}, @nested={0x8, 0x22, 0x0, 0x1, [@generic, @nested={0x4, 0xc7}]}, @typed={0x8, 0xa7, 0x0, 0x0, @fd=r8}, @nested={0x132, 0x93, 0x0, 0x1, [@typed={0xc, 0xe2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@private1}, @generic="4e90abe09b7d8daaf3c4c18a27f05b7c573e30e720743151043bf22eca528af3a8fa519149b94faf362fcab0d46d21fb1e12663c29287b251b7c11088fa51654f9525ee2e18e366aeac15e03d1b1bb5cebb473c6b13477dec9cc12136bccabfbd014100e415d0621436cd993d11cd63636dfc868f7a0adb68944972175b63893a302b1f00aa03e71659f079a9d12bb87c451c0d4c3ea02047a237ac93c1b30bbace3a042fb1d474eed35c30a098cdec8506959e1f625fed29c1db14bf28760fac3abb5a5de264bdc5ce1fa86a662f04ad1aceaff51", @nested={0x4, 0x126}, @nested={0x4, 0x2}, @typed={0x8, 0xcf, 0x0, 0x0, @pid}, @typed={0x4, 0x32}, @typed={0x8, 0xa7, 0x0, 0x0, @u32=0xf0}, @generic="30e685cfedde6199a0b6d669505f7671d2", @typed={0xc, 0x95, 0x0, 0x0, @u64=0x81}]}, @generic="4dcb2407032d589eda809f496397c03e030158f62e3451a67e93c457fd69c9ed01246152a6b74756e454eaeb721e4cf9adb65e547b62a57c0df4df313279852d74302d8aabded724d7cc99c10a3b354c4019d34106d809f5c3976763c8b6601adc93c6df17746893342f5ded5ee7ad0de5940a8e58c49a95e9894c0a8f225993c1b72317f1f15d08c6dded8f488d7330667771a0dd0c2e727903ac78da51d2446e628b5758", @nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @u32=0xffff}]}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x7}]}, 0x320}], 0x3, &(0x7f0000003b40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}, @cred={{0x1c}}], 0x58, 0x14}, 0x8050) 1.702262787s ago: executing program 7 (id=5910): r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) sendto$inet6(r0, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0x114, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x3}}]}, 0x114}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b00) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$eventfd(r6, &(0x7f0000000140), 0x8) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x8001) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b330000f90005000000050000c4080005007e"], 0x34}}, 0x0) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) dup3(r7, r9, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="80", 0x1, 0x4000, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r10, 0x8983, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./cgroup/pids.max\x00', 0x6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 1.686948467s ago: executing program 7 (id=5911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) read$FUSE(r2, &(0x7f0000001640)={0x2020}, 0x2020) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000003680)="7fc56e94f79e6f72ee7d475bdde1313728ca092ef3c974c7dbe6e04a42b70396c26af23d03ff393d56af4fb13a94b32e4c11552d0c73a37043c6945e3b2757a00f3f9d5f170aefedd9100b72c2ed247099b877365ed8dcd31773031b1193627332ae3f67dcf0d8dbe576e56b194ee4e915b3078126ac7250698daf8120b35eb8eecaf818715e9b682f9daf5c6cb6b51809ee3bffd2fdc369196e509bf8e323e46bfd1cf810a125ac2ec2971adf65f74a795096577f47f72ced80a5e9e9477ab3fcd3d90d0e17cb03e5cbe61b752f2c9c70d4f0768a4e25e7889daa5c957e464d395a6983abbd939f2572fa00da3847fd7bf267376e48007664c63dea88c688012e074b97dfa2939a58b044e88d793a9af8ea39790f06c0816127f4cc67c1aa40a5520f4e98415c1d195af235361a23f41ecbb0a0d4cb4c300a37c041832a30db2c0b82c607068c7647b35631d0d376d8aaf4531abfcb73f92a88a4d1077d76ece71ee2d9a874e78676d16d77329babe1b6d426b142d17af2c2645ff169975fc48efeffde6eedc8ba0f421c96cec1bc13b1a13481a184b633bb4d6d290910090f34f7c8bded263a79c9dc8145339db198927b3ea0c12b1054434eea2f93d9ca2f6274365e6cd1eeb2ae7a6dc0281808f17e086aab7d3341777d26ccf851243e3d17b18797eeae58ff5be1db68eb6c5933344f4322175bfc74a8f55546d7669e1070c418b33873a2483df7725df4e8c667f7613d2e2025dc888820c3f4098a553fe6731113cde05cf2b691c098eee7d5e017cfe5040704da84a98de4b16b0e18f24b88d0f4f616c3b3f0", 0x249}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r4, 0xb, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40840) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x7, 0x0, 0x18}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0xc014) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x7e, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0b"}) 1.52615264s ago: executing program 7 (id=5915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x105400, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x80, 0x2002) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000200)={0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000540)=""/210, 0xd2}], 0x3, 0x80000001, 0x1000) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000004c0)="b805000000b937eb00000f01c13e0f0198f6ffffff672e0fc79d7a0000002e470f01d1f2420fbd114133b900800000c4817dd56601400f00dd440f0766b8a0000f00d8", 0x43}], 0x1, 0x4b, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) r10 = syz_clone(0x200800, &(0x7f0000000680)="fadae83b7e670ba66fa43daff701eb07db83f2fe97b99347037ec875c70499d48eeee0ffc5873a19723ffcf50f775e8c0451c298d831546ed9db65a15e91f7d985f3eefcc270f4763d686d243f2968d3d735cc241051d53ef1c7eb0f730ed1710eb5f7cc104263f27f", 0x69, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="1bbe348ca971fcf4a09788134e41adea1f382990f7c0f89dffd8fe68fb4abf9f8de51990a193fc01a80538ea32e1b404c745cc18a9d80d5b0af1399ee726877992f6f85cb39db4b628b44766329bbe576f82ce5a7313680062a78bbe5f91c314188cdf1a2dbbc6f42e35f53778f525bc4ac9da8315986f4df2edaec664b5da625968795ea65c99edd081907b323d40e57824cb86edce2f87469737137dbf7b28daa69a9143") ptrace(0x4207, r10) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x20}}, &(0x7f0000000000)={0x58, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.445607791s ago: executing program 6 (id=5917): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x6558, r4, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}, 0x14) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x302}) fchdir(0xffffffffffffffff) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x80) lseek(r7, 0x105, 0x4) getdents64(r7, 0x0, 0x4f) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 1.445231921s ago: executing program 7 (id=5918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ppoll(&(0x7f00000005c0)=[{r1, 0x42}], 0x1, &(0x7f0000000640), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x13, r3, 0x5401000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = socket(0x1e, 0x1, 0x0) shutdown(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) fstatfs(0xffffffffffffffff, &(0x7f0000000200)=""/70) dup3(r2, r0, 0x80000) utimensat(0xffffffffffffffff, &(0x7f000000a300)='./file1\x00', 0x0, 0x631e84ec02c57dd7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000080)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0xb, 0x1}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@handle={0x73682a85, 0x110b, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.245989705s ago: executing program 1 (id=5920): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xfdc48000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[0xf000, 0x3000, 0x1000], 0x5, 0x88, 0x6fa5bfdb}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 558.674189ms ago: executing program 6 (id=5923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000002ac1e00010000000000000000000000000000000000020000020000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000001010000000032000000fe880000000000000000000000000001fdffffffffffffff0000000000000000ffffffffffffffffcd2d0000000000000800000000000000000000000000000000004000005c000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000008001d"], 0x140}, 0x7ffffffe, 0x0, 0x0, 0x20008000}, 0x4048040) 558.368919ms ago: executing program 6 (id=5924): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) (async, rerun: 64) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (rerun: 64) close(r0) (async) keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9) (async, rerun: 32) r1 = inotify_init1(0x800) (async, rerun: 32) fcntl$setstatus(r0, 0x4, 0x2c00) (async, rerun: 32) r2 = gettid() (rerun: 32) fcntl$setown(r0, 0x8, r2) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) (async, rerun: 32) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa400080a) (async, rerun: 32) rmdir(&(0x7f0000000100)='./control\x00') (async) r3 = getpid() syz_pidfd_open(r3, 0x0) (async) setns(0xffffffffffffffff, 0x66020000) (async) io_setup(0xfffc, &(0x7f0000000800)) io_setup(0x7ffe, &(0x7f0000000040)) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) fgetxattr(r4, 0x0, 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x22000000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) (async, rerun: 32) r7 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)="98", 0x1}], 0x1) (async) accept4$unix(r6, 0x0, 0x0, 0x0) 558.202239ms ago: executing program 6 (id=5925): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000203030000000000000000000200ffff080001000100002626901da9f9619d4b6b58cada47fe004671d8419787e69f2526665febd8e316aa83196b159efde4557fde7448"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000052000106"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x240000d0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x88, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x98, 0x80, 0xa4, 0x20, 0x6d0, 0x622, 0x3f5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0xf4, 0xab, 0xe0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="1c00000018000711ab092500090007000a0700030000000600003693", 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 557.907469ms ago: executing program 7 (id=5926): openat$ashmem(0xffffffffffffff9c, 0x0, 0xf4041, 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xaf, 0x46d, 0xc22e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0xfff3, 0x3, 0x1, {0x22, 0xa48}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0xea, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x13, 0x3}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0x4, 0x0, 0x10, 0x2}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x7, 0xf000, 0x5, [0xa000, 0xffff00, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0xd4, "408ada643a3668a0c8bc7ff20c5a659d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0xe4, 0x2}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x8}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000200)={0x40, 0x5, 0xb0, {0xb0, 0x10, "a59c5a423c54f5da8c86299add252eaeda2bd287e98558d22b007b28c4f7941865f85c17c22b406b28309b0c3b036ac731d53d62cce4b7e1490deabbc337ed9f3aaf8b5fda85cca10cb96628963aed4b70650b34b9a268d6403c3469e7eaff7294ecec9869d5637607656d0fb99128aeb982678159c6e5bff5d036a01b9cfda9f8e1211ae382eb3782122c16cc04991474b237578588e839288a175cef0bed2dafbe4a615db3d69f339beec6e680"}}, &(0x7f00000002c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "da230e8cde26dd4785e9cf409062f2c275d20db34d654682265c344c5442368cc280748ce18871e178b691fb1f66d9c3abb10e86faebee68395596b7bb5e9d4093bfa055f706635b085c8be50b05fb09d77140743b3ab2f5d628c0b8b5596a6d3aeb5fb9b910a873ffe780864f0204d23c63d904071d65a0c8f296c1fa8d0a01be8c10692bff52c395666adfa841db522c8f129e1b74df87f093b4e522628dcfade009daa10a2f78b7fb1429bbebc5312c6b269365fd0c12c2e43b711a1d804e7127d7243e27f21a726a95485209b34d4bf760a5"}}, &(0x7f0000000140)={0x0, 0x22, 0x1c, {[@local=@item_012={0x0, 0x2, 0x986e0d7dd219243f}, @global=@item_012={0x2, 0x1, 0x8, "a04d"}, @local=@item_4={0x3, 0x2, 0x5, "325864c0"}, @main=@item_4={0x3, 0x0, 0x8, "4b770713"}, @local=@item_4={0x3, 0x2, 0x3, "492c835d"}, @global=@item_012={0x1, 0x1, 0x6, 'M'}, @global=@item_4={0x3, 0x1, 0xa, "84cb7e82"}, @global=@item_012={0x1, 0x1, 0x8, "e9"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0x76, 0x1, {0x22, 0x139}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x20, 0x1, 0xed, "0b29f1d8f30726c5b6a3377643b3b19cb1c8a8b2c852398577a25049176838c86e8eda44a97d29222e682ce15ba4a763d242b45c67ee10095b8d09626f8a14cf93602db147f7bac67cbd719dae9b3b98944baec1c2a66cb84854f5c47a8abebdd00b01d6e3662734ca56dd29c203e6bd4d1ab1c4f8be657835d6ba7853d6137a98109c68434c6fc3fe5675d55c792846161a30ae42ee21df50c9e36bbd4c06769d7f95ff3e8def54b6f271a8cb72e9eea52ebd5a732f6131db7e0cf1d4df63f4ab62572e7484f88c3561da55321762a538d7b4605980b284605e38cea696384e87674e6ab963d7fefd3355b922"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x79}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7a}, &(0x7f0000000700)={0x20, 0x1, 0x6a, "080299431454bb136369f67eecf9a9152e387eb619e56d4aa0737706a6a5731183d65bff2d99bcabd3d69d9d599fc58aee02662632ee0b9ae5fa2801c27d6b0e83513a5752dd7943b023c01ecd285463520183a94e5b15ced94957a9b4964570058b22fdfc59628f7115"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x3}}) 303.343863ms ago: executing program 1 (id=5927): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x200) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) (async) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) fcntl$setownex(r1, 0xf, &(0x7f0000002600)={0x2}) fcntl$getownex(r1, 0x10, &(0x7f0000002c00)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) fadvise64(r2, 0x3, 0x0, 0x4) 303.129793ms ago: executing program 1 (id=5928): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/64, 0xd}, {&(0x7f0000000200)=""/77, 0x9c}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) recvmmsg(r0, &(0x7f0000009340)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/230, 0xe6}], 0x6}, 0x10001}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000480)=""/2, 0x2}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f0000000ac0)=""/90, 0x5a}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x6, &(0x7f0000000bc0)=""/144, 0x90}, 0x3}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000c80)=""/180, 0xb4}, {&(0x7f0000000d40)=""/177, 0xb1}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000e80)=""/206, 0xce}, {&(0x7f0000000f80)=""/37, 0x25}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/194, 0xc2}, {&(0x7f00000030c0)=""/165, 0xa5}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f0000003240)=""/59, 0x3b}], 0xa, &(0x7f0000003340)=""/217, 0xd9}, 0xfffffffd}, {{&(0x7f0000003440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/100, 0x64}, {&(0x7f0000003540)=""/156, 0x9c}, {&(0x7f0000003600)=""/96, 0x60}], 0x3, &(0x7f00000036c0)=""/7, 0x7}}, {{&(0x7f0000003740)=@nfc, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006800)=""/14, 0xe}, {&(0x7f0000006840)=""/77, 0x4d}, {&(0x7f00000068c0)=""/242, 0xf2}, {&(0x7f00000069c0)=""/137, 0x89}, {&(0x7f0000006a80)=""/132, 0x84}, {&(0x7f0000006b40)=""/143, 0x8f}], 0x6, &(0x7f0000006c80)=""/83, 0x53}, 0x948}, {{&(0x7f0000006d00)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006d80)=""/143, 0x8f}, {&(0x7f0000006e40)=""/18, 0x12}], 0x2, &(0x7f0000006ec0)=""/247, 0xf7}, 0x1}, {{0x0, 0x0, &(0x7f0000009000)=[{&(0x7f0000006fc0)=""/4096, 0x1000}, {&(0x7f0000007fc0)=""/56, 0x38}, {&(0x7f0000008000)=""/4096, 0x1000}], 0x3, &(0x7f0000009040)=""/59, 0x3b}, 0x3}, {{&(0x7f0000009080)=@can, 0x80, &(0x7f0000009200)=[{&(0x7f0000009100)=""/246, 0xf6}], 0x1, &(0x7f0000009240)=""/207, 0xcf}, 0x1}], 0x8, 0x40, &(0x7f0000009540)={0x77359400}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 302.878613ms ago: executing program 1 (id=5929): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 302.410674ms ago: executing program 1 (id=5930): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) timer_create(0x80d5b643adfce43f, 0x0, &(0x7f00000017c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa2040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r6, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000040)={0x88}, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc028ae92, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11) socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 192.870446ms ago: executing program 5 (id=5932): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) 131.354337ms ago: executing program 5 (id=5933): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29082dbd7040fedbdf251e"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 131.082947ms ago: executing program 5 (id=5934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400100001000330600020000fcdbdf2520010000000000000000000000000002ac1e00010000000000000000000000000000000000020000020000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000001010000000032000000fe880000000000000000000000000001fdffffffffffffff0000000000000000ffffffffffffffffcd2d0000000000000800000000000000000000000000000000004000005c000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000008001d"], 0x140}, 0x1, 0x19, 0x0, 0x20008000}, 0x4048040) 128.927327ms ago: executing program 5 (id=5935): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000a40)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}, {0x0}, {0x0}], 0x5, 0x0, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 102.047417ms ago: executing program 5 (id=5936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1040}], 0x5a, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'veth1_to_bond\x00', {'tunl0\x00'}, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 51.258169ms ago: executing program 6 (id=5937): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = epoll_create1(0x80000) fremovexattr(r1, &(0x7f0000000980)=@known='system.posix_acl_access\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$UHID_INPUT2(r2, &(0x7f0000000280)=ANY=[], 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x30) sendfile(r3, r3, 0x0, 0x1) 3.328539ms ago: executing program 5 (id=5938): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4b8901, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) write$rfkill(r0, &(0x7f0000000280)={0x4, 0x0, 0x2, 0x1, 0x1}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0xfffffffc) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x2c, 0x5, 0x5) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) read$rfkill(r0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000003640), 0x0, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='.\x00', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 0s ago: executing program 6 (id=5939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@local=@item_4={0x3, 0x2, 0x3, "8ce642d1"}, @local=@item_4={0x3, 0x2, 0x3, 'n4Lo'}, @global=@item_4={0x3, 0x1, 0x5, "683d032e"}, @global=@item_012={0x2, 0x1, 0xa, "af37"}, @main=@item_012={0x1, 0x0, 0xb, 'd'}, @global=@item_012={0x2, 0x1, 0x7, "0ea3"}, @local=@item_4={0x3, 0x2, 0x1, "5b8ebee7"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x17, 0xbb, "3d8bf474acb95d0aa00072785caf0a627edb4ba9639eacad8fff0ba9f8a5a2fd3b30f1c57eae65bc4bed0b66033e9497278dcf6e3ec76fb02c20090e9d583f4ec088e3c14e64b1542ffe533f337638b09a4ba5920a847c3a28b76241b0b059caff92564cdd270a2622a0401ed263f3a312957569fec5b74513a46c3905f1dfff630521f0d5000a7535c85a62037ad673ce3b1b17c711222719798f94590cc096e98be9a339b275feee80a77c844f4e023ba8ca62a7bdcfbef1e34b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2b, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) kernel console output (not intermixed with test programs): 105.680339][ T6441] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2037'. [ 105.690906][ T6441] 9pnet_fd: Insufficient options for proto=fd [ 105.924865][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'. [ 105.968537][ T6477] tc_dump_action: action bad kind [ 106.200287][ T6533] veth0_virt_wifi: entered allmulticast mode [ 106.317687][ T6532] veth0_virt_wifi: left allmulticast mode [ 106.336470][ T6537] overlayfs: failed to clone upperpath [ 106.343795][ T6538] /dev/rnullb0: Can't lookup blockdev [ 106.343807][ T6537] /dev/rnullb0: Can't lookup blockdev [ 106.417135][ T6549] overlayfs: missing 'lowerdir' [ 106.694669][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 106.850302][ T6587] fuse: Unknown parameter 'useXǁɍD0r_id' [ 107.013930][ T6610] /dev/md0: Can't lookup blockdev [ 107.029804][ T6613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6613 comm=syz.0.2099 [ 107.695367][ T6654] netlink: 'syz.2.2114': attribute type 28 has an invalid length. [ 107.716387][ T6656] overlayfs: failed to clone lowerpath [ 107.723075][ T6656] overlayfs: failed to clone lowerpath [ 107.832759][ T6667] netlink: 'syz.1.2118': attribute type 64 has an invalid length. [ 107.840710][ T6667] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2118'. [ 108.694495][ T6738] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 108.703790][ T6738] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 108.721747][ T6738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.736049][ T6740] ip6gretap0: mtu less than device minimum [ 108.929838][ T6759] overlayfs: failed to clone upperpath [ 109.169944][ T6772] overlayfs: failed to clone upperpath [ 109.189392][ T6775] devpts: called with bogus options [ 109.470609][ T6782] x_tables: unsorted underflow at hook 4 [ 109.605391][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.613022][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.620166][ T6784] bridge_slave_0: entered allmulticast mode [ 109.626667][ T6784] bridge_slave_0: entered promiscuous mode [ 109.633655][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.640870][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.648028][ T6784] bridge_slave_1: entered allmulticast mode [ 109.654486][ T6784] bridge_slave_1: entered promiscuous mode [ 109.664321][ T293] bridge_slave_1: left allmulticast mode [ 109.670390][ T293] bridge_slave_1: left promiscuous mode [ 109.676953][ T293] +$<: port 2(bridge_slave_1) entered disabled state [ 109.684797][ T293] bridge_slave_0: left allmulticast mode [ 109.690750][ T293] bridge_slave_0: left promiscuous mode [ 109.696446][ T293] +$<: port 1(bridge_slave_0) entered disabled state [ 109.815398][ T293] veth1_macvtap: left allmulticast mode [ 109.821184][ T293] veth1_macvtap: left promiscuous mode [ 109.857689][ T293] vcan0 (unregistering): left allmulticast mode [ 109.873341][ T6820] bridge0: port 3(dummy0) entered blocking state [ 109.879833][ T6820] bridge0: port 3(dummy0) entered disabled state [ 109.887174][ T6820] dummy0: entered allmulticast mode [ 109.892915][ T6820] dummy0: entered promiscuous mode [ 109.898764][ T6820] bridge0: port 3(dummy0) entered blocking state [ 109.905159][ T6820] bridge0: port 3(dummy0) entered listening state [ 109.922472][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.929599][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.936994][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.942379][ T6828] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2170'. [ 109.944126][ T6784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.974600][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.981928][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.993953][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.001045][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.009644][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.016768][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.049255][ T6784] veth0_vlan: entered promiscuous mode [ 110.063615][ T6784] veth1_macvtap: entered promiscuous mode [ 110.084480][ T36] kauditd_printk_skb: 727 callbacks suppressed [ 110.084499][ T36] audit: type=1400 audit(1758110878.214:4050): avc: denied { mounton } for pid=6784 comm="syz-executor" path="/root/syzkaller.7aqso9/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 110.116067][ T36] audit: type=1400 audit(1758110878.214:4051): avc: denied { mounton } for pid=6784 comm="syz-executor" path="/root/syzkaller.7aqso9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 110.142943][ T36] audit: type=1400 audit(1758110878.214:4052): avc: denied { mounton } for pid=6784 comm="syz-executor" path="/root/syzkaller.7aqso9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 110.184602][ T36] audit: type=1400 audit(1758110878.254:4053): avc: denied { mounton } for pid=6784 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 110.207985][ T36] audit: type=1400 audit(1758110878.254:4054): avc: denied { mounton } for pid=6784 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 110.244003][ T6840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6840 comm=syz.0.2173 [ 110.264107][ T6840] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 110.264131][ T6840] rust_binder: Error while translating object. [ 110.277488][ T6840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.283902][ T6840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 110.434843][ T36] audit: type=1400 audit(1758110878.564:4055): avc: denied { map } for pid=6852 comm="syz.0.2178" path="socket:[24327]" dev="sockfs" ino=24327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.468555][ T36] audit: type=1400 audit(1758110878.564:4056): avc: denied { read accept } for pid=6852 comm="syz.0.2178" path="socket:[24327]" dev="sockfs" ino=24327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.495182][ T6854] 9pnet_fd: Insufficient options for proto=fd [ 110.504511][ T6856] rust_binder: Read failure Err(EAGAIN) in pid:13 [ 110.505361][ T6856] rust_binder: Write failure EINVAL in pid:13 [ 110.554725][ T6865] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 110.569348][ T6865] rust_binder: Write failure EINVAL in pid:22 [ 110.628461][ T6867] kernel profiling enabled (shift: 0) [ 110.736428][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2185'. [ 111.675784][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.825748][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 111.832458][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.841369][ T45] usb 1-1: config 6 has an invalid interface number: 248 but max is 0 [ 111.850187][ T45] usb 1-1: config 6 has no interface number 0 [ 111.856882][ T45] usb 1-1: config 6 interface 248 has no altsetting 0 [ 111.865436][ T45] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 111.875404][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.883714][ T45] usb 1-1: Product: syz [ 111.888318][ T45] usb 1-1: Manufacturer: syz [ 111.893023][ T45] usb 1-1: SerialNumber: syz [ 112.101506][ T45] ums-karma 1-1:6.248: USB Mass Storage device detected [ 112.153574][ T45] usb 1-1: USB disconnect, device number 2 [ 112.426533][ T36] audit: type=1400 audit(1758110880.564:4057): avc: denied { shutdown } for pid=6903 comm="syz.1.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.523595][ T36] audit: type=1400 audit(1758110880.654:4058): avc: denied { create } for pid=6928 comm="syz.2.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.855794][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 113.007017][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.017196][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.027091][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 113.036199][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.044220][ T45] usb 1-1: SerialNumber: syz [ 113.058777][ T45] usb 1-1: 0:2 : does not exist [ 113.182235][ T36] audit: type=1326 audit(1758110881.314:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.1.2209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febec78eba9 code=0x0 [ 113.459752][ T6938] rust_binder: Read failure Err(EAGAIN) in pid:30 [ 113.460079][ T360] usb 1-1: USB disconnect, device number 3 [ 114.009840][ T6972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 114.010961][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2218'. [ 114.035754][ T6972] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2218'. [ 114.050819][ T6972] tipc: Invalid UDP bearer configuration [ 114.050847][ T6972] tipc: Enabling of bearer rejected, failed to enable media [ 114.085645][ T6982] overlayfs: failed to clone upperpath [ 114.085858][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 114.116577][ T6985] netlink: 'syz.1.2225': attribute type 12 has an invalid length. [ 114.638629][ T6993] fuse: Bad value for 'fd' [ 114.951017][ T7010] SELinux: security_context_str_to_sid () failed with errno=-22 [ 114.980635][ T7014] overlayfs: failed to resolve './file0': -2 [ 115.066157][ T7020] cgroup: Unknown subsys name 'hugetlb' [ 115.226902][ T7053] netlink: 'syz.3.2250': attribute type 64 has an invalid length. [ 115.281140][ T7068] overlayfs: failed to clone upperpath [ 115.325226][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 115.325246][ T36] audit: type=1400 audit(1758110883.454:4066): avc: denied { setattr } for pid=7079 comm="syz.3.2262" name="" dev="pipefs" ino=24856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.373072][ T7089] overlayfs: failed to clone upperpath [ 115.713980][ T7106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 115.924568][ T7113] tipc: Enabling of bearer rejected, failed to enable media [ 116.005893][ T360] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.155783][ T360] usb 1-1: Using ep0 maxpacket: 16 [ 116.162130][ T360] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 116.172588][ T360] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.183523][ T360] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 116.196371][ T360] usb 1-1: config 7 interface 0 has no altsetting 0 [ 116.203024][ T360] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 116.212152][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.338283][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2279'. [ 116.548482][ T7132] tipc: Started in network mode [ 116.554294][ T7132] tipc: Node identity fe80000000000000000000000000000f, cluster identity 4711 [ 116.563457][ T7132] tipc: Enabling of bearer rejected, failed to enable media [ 116.633031][ T360] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0002/input/input7 [ 116.645295][ T36] audit: type=1400 audit(1758110884.784:4067): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=509 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.656156][ T360] kye 0003:0458:5010.0002: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 116.674865][ T36] audit: type=1400 audit(1758110884.784:4068): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=509 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.703787][ T36] audit: type=1400 audit(1758110884.834:4069): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=509 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.825935][ T7111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2274'. [ 116.836899][ T713] usb 1-1: USB disconnect, device number 4 [ 116.949355][ T7136] netlink: 'syz.2.2284': attribute type 27 has an invalid length. [ 117.356830][ T7138] binder: Bad value for 'defcontext' [ 117.393161][ T36] audit: type=1400 audit(1758110885.524:4070): avc: denied { map } for pid=7139 comm="syz.1.2286" path="socket:[24936]" dev="sockfs" ino=24936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.450145][ T7144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2288'. [ 117.450240][ T7146] incfs: Options parsing error. -22 [ 117.464588][ T7146] incfs: mount failed -22 [ 117.548232][ T7158] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 117.558040][ T7159] overlayfs: failed to resolve './file0': -2 [ 117.659304][ T7180] rust_binder: Write failure EINVAL in pid:79 [ 117.660526][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 117.686590][ T7183] tipc: Enabling of bearer rejected, failed to enable media [ 117.733297][ T7192] 9pnet_fd: Insufficient options for proto=fd [ 117.808600][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 117.818332][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 117.877398][ T7213] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 118.109725][ T7224] new mount options do not match the existing superblock, will be ignored [ 118.152265][ T7229] overlayfs: failed to clone upperpath [ 118.276711][ T7248] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2326'. [ 118.286638][ T7248] netlink: 'syz.1.2326': attribute type 16 has an invalid length. [ 118.540304][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.547517][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.554644][ T7261] bridge_slave_0: entered allmulticast mode [ 118.561120][ T7261] bridge_slave_0: entered promiscuous mode [ 118.567523][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.574571][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.581762][ T7261] bridge_slave_1: entered allmulticast mode [ 118.588103][ T7261] bridge_slave_1: entered promiscuous mode [ 118.642915][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.650076][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.657408][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.664461][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.687874][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.695206][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.705014][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.712116][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.721560][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.728652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.754808][ T7261] veth0_vlan: entered promiscuous mode [ 118.765786][ T713] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.767232][ T7261] veth1_macvtap: entered promiscuous mode [ 118.817519][ T36] audit: type=1400 audit(1758110886.954:4071): avc: denied { setcheckreqprot } for pid=7279 comm="syz.1.2335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.818565][ T7280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2335'. [ 118.847692][ T7280] tipc: Started in network mode [ 118.852571][ T7280] tipc: Node identity , cluster identity 4711 [ 118.858814][ T7280] tipc: Failed to obtain node identity [ 118.864316][ T7280] tipc: Enabling of bearer rejected, failed to enable media [ 118.873448][ T7280] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 118.925739][ T713] usb 1-1: Using ep0 maxpacket: 32 [ 118.932812][ T713] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 118.944024][ T713] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.955391][ T713] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.968902][ T713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.975551][ T713] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 118.984832][ T713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.995630][ T713] usb 1-1: config 0 descriptor?? [ 119.021762][ T7292] __nla_validate_parse: 1 callbacks suppressed [ 119.021783][ T7292] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2338'. [ 119.417003][ T713] zeroplus 0003:0C12:0030.0003: item fetching failed at offset 5/7 [ 119.425179][ T713] zeroplus 0003:0C12:0030.0003: parse failed [ 119.436607][ T713] zeroplus 0003:0C12:0030.0003: probe with driver zeroplus failed with error -22 [ 119.618377][ T36] audit: type=1400 audit(1758110887.754:4072): avc: denied { write } for pid=7262 comm="syz.0.2333" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 119.666710][ T360] usb 1-1: USB disconnect, device number 5 [ 119.861741][ T7307] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2344'. [ 119.894992][ T7309] rust_binder: Got transaction with invalid offset. [ 119.895028][ T7309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.901909][ T7309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 120.140065][ T7321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=7321 comm=syz.1.2350 [ 120.208599][ T7331] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 121.056152][ T7352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.076027][ T7352] rust_binder: Failed to allocate buffer. len:200, is_oneway:false [ 121.163463][ T7356] rust_binder: got new transaction with bad transaction stack [ 121.185762][ T7356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 121.194915][ T7368] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 121.221596][ T7368] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2365'. [ 121.245102][ T7368] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2365'. [ 121.258390][ T7370] /dev/sg0: Can't lookup blockdev [ 121.355663][ T7376] __vm_enough_memory: pid: 7376, comm: syz.0.2367, bytes: 18014402804453376 not enough memory for the allocation [ 121.884776][ T7392] rust_binder: Write failure EFAULT in pid:51 [ 122.155826][ T709] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 122.248017][ T7403] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 122.257715][ T36] audit: type=1400 audit(1758110890.394:4073): avc: denied { setattr } for pid=7402 comm="syz.0.2377" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 122.284050][ T7403] __vm_enough_memory: pid: 7403, comm: syz.0.2377, bytes: 18014402804453376 not enough memory for the allocation [ 122.319532][ T709] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 122.330040][ T709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.338281][ T709] usb 2-1: Product: syz [ 122.342524][ T709] usb 2-1: Manufacturer: syz [ 122.347191][ T709] usb 2-1: SerialNumber: syz [ 122.353906][ T709] usb 2-1: config 0 descriptor?? [ 122.360195][ T709] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 122.368602][ T709] usb 2-1: Detected FT2233HP [ 122.559880][ T709] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 122.567844][ T709] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 123.433221][ T7445] fuse: Bad value for 'fd' [ 124.341167][ T7478] rust_binder: Write failure EFAULT in pid:74 [ 124.565880][ T36] audit: type=1400 audit(1758110892.712:4074): avc: denied { ioctl } for pid=7493 comm="syz.1.2409" path="socket:[27356]" dev="sockfs" ino=27356 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.566671][ T7494] pim6reg1: entered promiscuous mode [ 124.602602][ T7494] pim6reg1: entered allmulticast mode [ 124.680930][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.689573][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.125883][ C0] bridge0: port 3(dummy0) entered learning state [ 125.327759][ T7510] rust_binder: Error while translating object. [ 125.327800][ T7510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 125.334038][ T7510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:85 [ 125.356590][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.374242][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.755317][ T7551] tipc: Enabling of bearer rejected, failed to enable media [ 125.764382][ T7552] tipc: Enabling of bearer rejected, failed to enable media [ 126.113552][ T7572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 126.113588][ T7572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:93 [ 126.123684][ T7572] rust_binder: 93: no such ref 2 [ 126.137844][ T7572] rust_binder: 93: no such ref 1 [ 126.235845][ T36] audit: type=1400 audit(1758110894.382:4075): avc: denied { read } for pid=7577 comm="syz.1.2442" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.259297][ T36] audit: type=1400 audit(1758110894.382:4076): avc: denied { open } for pid=7577 comm="syz.1.2442" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.283126][ T36] audit: type=1400 audit(1758110894.382:4077): avc: denied { ioctl } for pid=7577 comm="syz.1.2442" path="/dev/usbmon0" dev="devtmpfs" ino=89 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.308441][ T36] audit: type=1400 audit(1758110894.382:4078): avc: denied { append } for pid=7577 comm="syz.1.2442" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.452952][ T7600] fuse: Bad value for 'fd' [ 126.458501][ T7600] overlayfs: failed to clone upperpath [ 126.465543][ T7603] fuse: Bad value for 'fd' [ 126.567229][ T7624] fuse: Bad value for 'fd' [ 126.595762][ T36] audit: type=1400 audit(1758110894.732:4079): avc: denied { create } for pid=7629 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 127.110253][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 127.119290][ T7635] bridge_slave_1: left allmulticast mode [ 127.125088][ T7635] bridge_slave_1: left promiscuous mode [ 127.130769][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.138437][ T7635] bridge_slave_0: left allmulticast mode [ 127.144090][ T7635] bridge_slave_0: left promiscuous mode [ 127.149853][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.381960][ T7651] overlayfs: failed to clone upperpath [ 127.401264][ T7653] tipc: Can't bind to reserved service type 0 [ 127.445784][ T36] audit: type=1400 audit(1758110895.582:4080): avc: denied { watch_reads } for pid=7659 comm="syz.1.2469" path="/40/file0" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.470109][ T7660] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 127.543253][ T7676] /dev/loop0: Can't lookup blockdev [ 127.623896][ T7674] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 127.748775][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.757412][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.966190][ T7692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 128.086806][ T7721] 9pnet_fd: Insufficient options for proto=fd [ 128.150692][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2494'. [ 128.165177][ T7728] overlayfs: failed to clone upperpath [ 128.297812][ T7723] syz.0.2492: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 128.336404][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.0.2492 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5 [ 128.336440][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.336455][ T7723] Call Trace: [ 128.336463][ T7723] [ 128.336473][ T7723] __dump_stack+0x21/0x30 [ 128.336511][ T7723] dump_stack_lvl+0x10c/0x190 [ 128.336544][ T7723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.336576][ T7723] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 128.336602][ T7723] dump_stack+0x19/0x20 [ 128.336631][ T7723] warn_alloc+0x1bc/0x2a0 [ 128.336663][ T7723] ? __cfi_warn_alloc+0x10/0x10 [ 128.336693][ T7723] ? __get_vm_area_node+0x1dc/0x3a0 [ 128.336724][ T7723] ? xskq_create+0xdb/0x2a0 [ 128.336751][ T7723] __vmalloc_node_range_noprof+0x68e/0x1420 [ 128.336789][ T7723] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 128.336823][ T7723] ? avc_has_perm+0x144/0x220 [ 128.336856][ T7723] ? kasan_save_alloc_info+0x40/0x50 [ 128.336887][ T7723] ? __kasan_kmalloc+0x96/0xb0 [ 128.336913][ T7723] vmalloc_user_noprof+0x77/0x90 [ 128.336944][ T7723] ? xskq_create+0xdb/0x2a0 [ 128.336970][ T7723] xskq_create+0xdb/0x2a0 [ 128.336996][ T7723] xsk_init_queue+0xb6/0x120 [ 128.337022][ T7723] xsk_setsockopt+0x4dc/0x6f0 [ 128.337047][ T7723] ? __cfi_xsk_setsockopt+0x10/0x10 [ 128.337072][ T7723] ? do_futex+0x309/0x500 [ 128.337097][ T7723] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 128.337127][ T7723] ? security_socket_setsockopt+0x33/0xd0 [ 128.337150][ T7723] ? __cfi_xsk_setsockopt+0x10/0x10 [ 128.337176][ T7723] do_sock_setsockopt+0x26d/0x400 [ 128.337203][ T7723] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 128.337233][ T7723] __x64_sys_setsockopt+0x1b8/0x250 [ 128.337267][ T7723] x64_sys_call+0x2adc/0x2ee0 [ 128.337302][ T7723] do_syscall_64+0x58/0xf0 [ 128.337324][ T7723] ? clear_bhb_loop+0x50/0xa0 [ 128.337356][ T7723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.337387][ T7723] RIP: 0033:0x7f0e2958eba9 [ 128.337407][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.337429][ T7723] RSP: 002b:00007f0e2a410038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.337454][ T7723] RAX: ffffffffffffffda RBX: 00007f0e297d5fa0 RCX: 00007f0e2958eba9 [ 128.337472][ T7723] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 128.337487][ T7723] RBP: 00007f0e29611e19 R08: 0000000000000004 R09: 0000000000000000 [ 128.337503][ T7723] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 128.337519][ T7723] R13: 00007f0e297d6038 R14: 00007f0e297d5fa0 R15: 00007ffcaa999fe8 [ 128.337541][ T7723] [ 128.338458][ T7723] Mem-Info: [ 128.544512][ T709] rust_binder: 7690: removing orphan mapping 0:24 [ 128.549644][ T7723] active_anon:24263 inactive_anon:5 isolated_anon:0 [ 128.549644][ T7723] active_file:9655 inactive_file:14573 isolated_file:0 [ 128.549644][ T7723] unevictable:20475 dirty:68 writeback:0 [ 128.549644][ T7723] slab_reclaimable:5845 slab_unreclaimable:76562 [ 128.549644][ T7723] mapped:24223 shmem:16557 pagetables:905 [ 128.549644][ T7723] sec_pagetables:0 bounce:0 [ 128.549644][ T7723] kernel_misc_reclaimable:0 [ 128.549644][ T7723] free:1380158 free_pcp:5062 free_cma:0 [ 128.619563][ T7739] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2496'. [ 128.652655][ T7723] Node 0 active_anon:97120kB inactive_anon:20kB active_file:38620kB inactive_file:58292kB unevictable:81900kB isolated(anon):0kB isolated(file):0kB mapped:96968kB dirty:272kB writeback:0kB shmem:66240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5732kB pagetables:3716kB sec_pagetables:0kB all_unreclaimable? no [ 128.694155][ T7723] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5740kB free_cma:0kB [ 128.699206][ T7738] netlink: 'syz.1.2496': attribute type 4 has an invalid length. [ 128.734357][ T7723] lowmem_reserve[]: 0 3921 3921 [ 128.746885][ T7723] Normal free:2570004kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92320kB inactive_anon:20kB active_file:38620kB inactive_file:58292kB unevictable:81900kB writepending:272kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:10480kB local_pcp:5600kB free_cma:0kB [ 128.779620][ T7723] lowmem_reserve[]: 0 0 0 [ 128.784017][ T7723] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 128.805012][ T7723] Normal: 134*4kB (UME) 79*8kB (UME) 37*16kB (ME) 86*32kB (UE) 31*64kB (UME) 25*128kB (UE) 27*256kB (UME) 43*512kB (UME) 29*1024kB (UM) 13*2048kB (UME) 604*4096kB (M) = 2568928kB [ 128.823081][ T7723] 53491 total pagecache pages [ 128.827827][ T7723] 7 pages in swap cache [ 128.835095][ T7723] Free swap = 124320kB [ 128.839339][ T7723] Total swap = 124996kB [ 128.839949][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.843504][ T7723] 2097051 pages RAM [ 128.843515][ T7723] 0 pages HighMem/MovableOnly [ 128.855803][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.859199][ T7723] 351533 pages reserved [ 128.871020][ T7736] bridge_slave_0: entered allmulticast mode [ 128.872375][ T7723] 0 pages cma reserved [ 128.877927][ T7736] bridge_slave_0: entered promiscuous mode [ 128.887638][ T46] tipc: Left network mode [ 128.888018][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.894884][ T7723] Memory allocations: [ 128.899732][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.910868][ T7723] 0 B 0 init/main.c:1370 func:do_initcalls [ 128.915791][ T7736] bridge_slave_1: entered allmulticast mode [ 128.924524][ T7736] bridge_slave_1: entered promiscuous mode [ 128.925738][ T7723] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 128.938782][ T7723] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 128.948795][ T7723] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 128.956989][ T7723] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 128.965043][ T7723] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 128.974024][ T7723] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 128.982311][ T7723] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 128.990631][ T7723] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 128.998656][ T7723] 0 B 0 init/initramfs.c:101 func:find_link [ 129.059272][ T36] audit: type=1400 audit(1758110897.192:4081): avc: denied { bpf } for pid=7743 comm="syz.0.2497" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.131682][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.138779][ T7736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.146101][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.153150][ T7736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.180422][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.188803][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.198435][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.205493][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.215332][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.222406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.237312][ T7757] incfs: Error accessing: ./file0. [ 129.242640][ T7757] incfs: mount failed -20 [ 129.248842][ T36] audit: type=1400 audit(1758110897.392:4082): avc: denied { watch } for pid=7755 comm="syz.0.2499" path="/file0" dev="rootfs" ino=17852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 129.260896][ T7736] veth0_vlan: entered promiscuous mode [ 129.286124][ T7736] veth1_macvtap: entered promiscuous mode [ 129.302834][ T7761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.303628][ T7759] rust_binder: got new transaction with bad transaction stack [ 129.310845][ T7759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 129.475759][ T7771] rust_binder: 6: no such ref 3 [ 129.489985][ T7771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 129.497330][ T7771] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 129.504755][ T7771] rust_binder: Write failure EFAULT in pid:6 [ 129.755836][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 129.917070][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.928068][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.937921][ T10] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 129.947038][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.955624][ T10] usb 3-1: config 0 descriptor?? [ 130.213899][ T36] audit: type=1400 audit(1758110898.352:4083): avc: denied { connect } for pid=7791 comm="syz.1.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.428587][ T36] audit: type=1326 audit(1758110898.572:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.0.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x7fc00000 [ 130.472826][ T36] audit: type=1400 audit(1758110898.612:4085): avc: denied { bind } for pid=7828 comm="syz.1.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.499124][ T36] audit: type=1400 audit(1758110898.642:4086): avc: denied { append } for pid=7833 comm="syz.1.2523" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.564634][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 130.571598][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 130.580340][ T10] usb 3-1: USB disconnect, device number 22 [ 131.315775][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 131.344764][ T7846] rust_binder: 160: no such ref 2 [ 131.350037][ T7846] rust_binder: 160: no such ref 1 [ 131.402178][ T7847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160 [ 131.465753][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 131.482113][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.493009][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.503730][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.513615][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.521895][ T45] usb 3-1: Product: ၭ㳲䗖랾ꈡ찔ㅈ쌗 [ 131.528367][ T45] usb 3-1: Manufacturer: щ [ 131.532977][ T45] usb 3-1: SerialNumber: Ј [ 131.665766][ T36] audit: type=1326 audit(1758110899.802:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 131.689037][ T36] audit: type=1326 audit(1758110899.802:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 131.712646][ T36] audit: type=1326 audit(1758110899.802:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 131.741660][ T7843] rust_binder: Error while translating object. [ 131.741701][ T7843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.756793][ T7843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 131.779289][ T7843] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 131.802001][ T7843] rust_binder: Read failure Err(EFAULT) in pid:10 [ 131.839532][ T45] usb 3-1: 0:2 : does not exist [ 131.859349][ T45] usb 3-1: USB disconnect, device number 23 [ 131.877037][ T6887] udevd[6887]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.455784][ T36] kauditd_printk_skb: 11117 callbacks suppressed [ 132.455803][ T36] audit: type=1326 audit(1758110900.592:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e2958d65f code=0x50000 [ 132.485974][ T36] audit: type=1326 audit(1758110900.592:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.509741][ T36] audit: type=1326 audit(1758110900.602:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.533050][ T36] audit: type=1326 audit(1758110900.602:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.556437][ T36] audit: type=1326 audit(1758110900.602:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.579715][ T36] audit: type=1326 audit(1758110900.602:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.602963][ T36] audit: type=1326 audit(1758110900.602:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.626219][ T36] audit: type=1326 audit(1758110900.602:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.649464][ T36] audit: type=1326 audit(1758110900.602:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.674031][ T36] audit: type=1326 audit(1758110900.602:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2958eba9 code=0x50000 [ 132.990257][ T7871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.990293][ T7871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 133.245748][ T709] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 133.405748][ T709] usb 3-1: device descriptor read/64, error -71 [ 133.645753][ T709] usb 3-1: device descriptor read/64, error -71 [ 133.885767][ T709] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 134.015759][ T709] usb 3-1: device descriptor read/64, error -71 [ 134.265781][ T709] usb 3-1: device descriptor read/64, error -71 [ 134.375999][ T709] usb usb3-port1: attempt power cycle [ 134.710881][ T7877] overlayfs: failed to clone upperpath [ 134.715760][ T709] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 134.724932][ T7878] overlayfs: failed to clone upperpath [ 134.747019][ T709] usb 3-1: device descriptor read/8, error -71 [ 134.807011][ T7886] netlink: 'syz.0.2540': attribute type 58 has an invalid length. [ 134.877117][ T709] usb 3-1: device descriptor read/8, error -71 [ 135.115817][ T709] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 135.136909][ T709] usb 3-1: device descriptor read/8, error -71 [ 135.248119][ T7906] fuse: Unknown parameter '0x0000000000000004' [ 135.268024][ T709] usb 3-1: device descriptor read/8, error -71 [ 135.292780][ T7915] netlink: 'syz.1.2549': attribute type 4 has an invalid length. [ 135.300681][ T7915] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2549'. [ 135.379018][ T7926] overlayfs: failed to clone upperpath [ 135.381159][ T709] usb usb3-port1: unable to enumerate USB device [ 135.468587][ T7948] /dev/rnullb0: Can't lookup blockdev [ 135.530990][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2568'. [ 136.104045][ T7967] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 136.113410][ T7967] rust_binder: Write failure EINVAL in pid:25 [ 136.202060][ T7977] netlink: 'syz.1.2575': attribute type 3 has an invalid length. [ 137.042250][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.049462][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.056764][ T7997] bridge_slave_0: entered allmulticast mode [ 137.063195][ T7997] bridge_slave_0: entered promiscuous mode [ 137.069967][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.077545][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.086008][ T7997] bridge_slave_1: entered allmulticast mode [ 137.092457][ T7997] bridge_slave_1: entered promiscuous mode [ 137.149453][ T7994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.163403][ T7994] rust_binder: Error while translating object. [ 137.170211][ T7994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 137.176988][ T7994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:28 [ 137.191713][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.207816][ T7997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.215265][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.222370][ T7997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.251331][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.267209][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.282546][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.289670][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.294915][ T8012] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 137.312334][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.319461][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.364060][ T8012] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 137.372238][ T8012] netlink: 'syz.2.2586': attribute type 2 has an invalid length. [ 137.392751][ T7997] veth0_vlan: entered promiscuous mode [ 137.414474][ T7997] veth1_macvtap: entered promiscuous mode [ 137.566414][ T8025] rust_binder: Write failure EFAULT in pid:36 [ 137.566878][ T8025] rust_binder: Write failure EFAULT in pid:36 [ 137.593312][ T8028] rust_binder: Error while translating object. [ 137.599606][ T8028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.606489][ T8028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 137.727328][ T293] bridge_slave_1: left allmulticast mode [ 137.752644][ T293] bridge_slave_1: left promiscuous mode [ 137.762409][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.770426][ T293] bridge_slave_0: left allmulticast mode [ 137.776483][ T293] bridge_slave_0: left promiscuous mode [ 137.782170][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.924474][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.932062][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.939657][ T8035] bridge_slave_0: entered allmulticast mode [ 137.946194][ T8035] bridge_slave_0: entered promiscuous mode [ 137.952700][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.959899][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.967062][ T8035] bridge_slave_1: entered allmulticast mode [ 137.973520][ T8035] bridge_slave_1: entered promiscuous mode [ 137.990275][ T293] veth1_macvtap: left promiscuous mode [ 137.995916][ T293] veth0_vlan: left promiscuous mode [ 138.144243][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.151376][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.164760][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.171960][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.205441][ T8035] veth0_vlan: entered promiscuous mode [ 138.220894][ T8035] veth1_macvtap: entered promiscuous mode [ 138.268786][ T8050] netlink: 'syz.1.2596': attribute type 4 has an invalid length. [ 138.279270][ T8050] netlink: 'syz.1.2596': attribute type 4 has an invalid length. [ 138.316009][ T8050] netlink: 'syz.1.2596': attribute type 16 has an invalid length. [ 138.323894][ T8050] netlink: 'syz.1.2596': attribute type 4 has an invalid length. [ 138.331970][ T8050] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.2596'. [ 138.714312][ T8096] fuse: Bad value for 'fd' [ 138.821016][ T8111] fuse: Unknown parameter '01777777777777777777777' [ 139.736109][ T8165] netlink: 'syz.0.2638': attribute type 12 has an invalid length. [ 139.844514][ T8171] fuseblk: Unknown parameter 'ro0000000000000010000' [ 139.865465][ T8174] 9pnet_fd: Insufficient options for proto=fd [ 139.887855][ T8180] fuse: Unknown parameter 'fl' [ 140.088556][ T8187] netlink: 'syz.2.2646': attribute type 25 has an invalid length. [ 140.097491][ T8187] fuse: Bad value for 'fd' [ 140.237805][ T36] kauditd_printk_skb: 44727 callbacks suppressed [ 140.237840][ T36] audit: type=1326 audit(1758110908.382:59944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8131 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7fc00000 [ 140.360441][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.370809][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.485756][ C0] bridge0: port 3(dummy0) entered forwarding state [ 140.492358][ C0] bridge0: topology change detected, propagating [ 140.531082][ T36] audit: type=1400 audit(1758110908.672:59945): avc: denied { shutdown } for pid=8236 comm="syz.0.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.551140][ T36] audit: type=1400 audit(1758110908.672:59946): avc: denied { ioctl } for pid=8238 comm="syz.0.2663" path="socket:[30418]" dev="sockfs" ino=30418 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.595845][ T8243] fuse: Bad value for 'group_id' [ 140.600897][ T8243] fuse: Bad value for 'group_id' [ 140.618501][ T8246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=8246 comm=syz.0.2666 [ 140.920023][ T8280] rust_binder: Error while translating object. [ 140.920473][ T8280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.926890][ T8280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 140.972012][ T8284] rust_binder: Fixups oob 165 172 361 173 [ 140.981234][ T8284] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 140.987576][ T8284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.996197][ T8284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 141.029776][ T36] audit: type=1400 audit(1758110909.172:59947): avc: denied { map } for pid=8291 comm="syz.2.2681" path="/proc/86/task/87/mounts" dev="proc" ino=30537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 141.078910][ T36] audit: type=1400 audit(1758110909.222:59948): avc: denied { mounton } for pid=8303 comm="syz.2.2684" path="/proc/98/task" dev="proc" ino=31089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 141.101676][ T36] audit: type=1326 audit(1758110909.222:59949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.2.2684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x0 [ 141.285980][ T8332] netlink: 'syz.1.2694': attribute type 4 has an invalid length. [ 141.294964][ T8333] netlink: 'syz.1.2694': attribute type 4 has an invalid length. [ 141.456095][ T8360] fuseblk: Unknown parameter 'rootmob' [ 142.208745][ T36] audit: type=1326 audit(1758111170.345:59950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.5.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 142.232501][ T36] audit: type=1326 audit(1758111170.345:59951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.5.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 142.256473][ T36] audit: type=1326 audit(1758111170.345:59952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.5.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 142.280034][ T36] audit: type=1326 audit(1758111170.345:59953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.5.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 142.379461][ T8398] 9pnet_fd: Insufficient options for proto=fd [ 142.431747][ T8407] overlayfs: failed to clone upperpath [ 142.828884][ T8461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 142.828921][ T8461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105 [ 142.905092][ T8469] rust_binder: Write failure EFAULT in pid:113 [ 143.727817][ T8509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2756'. [ 144.271235][ T8517] overlayfs: failed to resolve './file1': -2 [ 145.559522][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 145.584999][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 145.585019][ T36] audit: type=1400 audit(1758111173.712:59979): avc: denied { lock } for pid=8553 comm="syz.0.2774" path="socket:[32149]" dev="sockfs" ino=32149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.799738][ T8587] overlayfs: failed to clone upperpath [ 145.857329][ T8588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8588 comm=syz.0.2787 [ 145.888974][ T8596] /dev/rnullb0: Can't lookup blockdev [ 146.171163][ T8604] netlink: 'syz.5.2792': attribute type 19 has an invalid length. [ 146.179274][ T8604] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2792'. [ 146.524000][ T8625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2801'. [ 146.841370][ T8660] /dev/rnullb0: Can't lookup blockdev [ 146.901419][ T36] audit: type=1326 audit(1758111175.042:59980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.2.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 147.217466][ T36] audit: type=1326 audit(1758111175.342:59981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.2.2821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7ee00000 [ 147.337196][ T8717] overlayfs: failed to clone upperpath [ 147.359253][ T36] audit: type=1400 audit(1758111175.492:59982): avc: denied { create } for pid=8718 comm="syz.0.2834" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 147.359965][ T8719] ./file0: Can't lookup blockdev [ 147.403565][ T36] audit: type=1400 audit(1758111175.492:59983): avc: denied { mounton } for pid=8718 comm="syz.0.2834" path="/file0" dev="ramfs" ino=31503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 147.432841][ T36] audit: type=1400 audit(1758111175.532:59984): avc: denied { remount } for pid=8718 comm="syz.0.2834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 147.486219][ T8725] overlayfs: failed to clone upperpath [ 147.575963][ T8741] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 147.911822][ T8773] 9pnet_fd: Insufficient options for proto=fd [ 148.084192][ T36] audit: type=1400 audit(1758111176.212:59985): avc: denied { read } for pid=8779 comm="syz.2.2860" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.107635][ T36] audit: type=1400 audit(1758111176.212:59986): avc: denied { open } for pid=8779 comm="syz.2.2860" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.230514][ T8787] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 148.230538][ T8787] rust_binder: Error while translating object. [ 148.239461][ T8787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.245979][ T8787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 148.269523][ T8789] rust_binder: Fixups oob 165 172 361 173 [ 148.278784][ T8789] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 148.284586][ T8789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.292907][ T8789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 148.302949][ T8789] netlink: 'syz.2.2864': attribute type 27 has an invalid length. [ 148.871871][ T36] audit: type=1326 audit(1758111177.002:59987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.5.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7fc00000 [ 149.007498][ T8858] netlink: 'syz.5.2886': attribute type 16 has an invalid length. [ 149.015462][ T8858] netlink: 'syz.5.2886': attribute type 3 has an invalid length. [ 149.023475][ T8858] netlink: 64054 bytes leftover after parsing attributes in process `syz.5.2886'. [ 149.153524][ T8873] overlayfs: failed to clone upperpath [ 149.160069][ T8873] overlayfs: failed to clone upperpath [ 149.297411][ T8887] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 149.297440][ T8887] rust_binder: Error while translating object. [ 149.306496][ T8887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.312703][ T8887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 149.575753][ T713] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 149.638930][ T8900] netlink: 'syz.0.2902': attribute type 4 has an invalid length. [ 149.747410][ T713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.757710][ T713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.774925][ T713] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.784163][ T713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.793069][ T713] usb 3-1: SerialNumber: syz [ 149.824050][ T8920] overlayfs: failed to resolve './file0': -2 [ 149.900108][ T8939] tipc: Enabling of bearer rejected, failed to enable media [ 149.939496][ T36] audit: type=1400 audit(1758111178.072:59988): avc: denied { create } for pid=8944 comm="syz.5.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.962624][ T8947] netlink: 'syz.0.2916': attribute type 28 has an invalid length. [ 150.009698][ T713] usb 3-1: 0:2 : does not exist [ 150.010584][ T8893] netlink: 'syz.2.2899': attribute type 2 has an invalid length. [ 150.025309][ T713] usb 3-1: USB disconnect, device number 29 [ 150.623507][ T9004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=9004 comm=syz.0.2944 [ 150.636454][ T9004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9004 comm=syz.0.2944 [ 150.714674][ T9014] netlink: 'syz.0.2949': attribute type 2 has an invalid length. [ 150.723401][ T9012] 9pnet_fd: p9_fd_create_tcp (9012): problem connecting socket to 127.0.0.1 [ 151.412822][ T9089] syz.1.2973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 151.427839][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.1.2973 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5 [ 151.427874][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.427890][ T9089] Call Trace: [ 151.427898][ T9089] [ 151.427907][ T9089] __dump_stack+0x21/0x30 [ 151.427949][ T9089] dump_stack_lvl+0x10c/0x190 [ 151.427983][ T9089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.428033][ T9089] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 151.428062][ T9089] dump_stack+0x19/0x20 [ 151.428095][ T9089] warn_alloc+0x1bc/0x2a0 [ 151.428127][ T9089] ? stack_depot_save_flags+0x38/0x800 [ 151.428156][ T9089] ? __cfi_warn_alloc+0x10/0x10 [ 151.428187][ T9089] ? kasan_save_track+0x4f/0x80 [ 151.428211][ T9089] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 151.428248][ T9089] ? xskq_create+0x68/0x2a0 [ 151.428274][ T9089] ? xsk_init_queue+0xb6/0x120 [ 151.428300][ T9089] ? xsk_setsockopt+0x43f/0x6f0 [ 151.428326][ T9089] ? do_sock_setsockopt+0x26d/0x400 [ 151.428354][ T9089] ? __x64_sys_setsockopt+0x1b8/0x250 [ 151.428381][ T9089] ? x64_sys_call+0x2adc/0x2ee0 [ 151.428419][ T9089] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.428453][ T9089] __vmalloc_node_range_noprof+0x135/0x1420 [ 151.428495][ T9089] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 151.428531][ T9089] ? avc_has_perm+0x144/0x220 [ 151.428566][ T9089] ? kasan_save_alloc_info+0x40/0x50 [ 151.428600][ T9089] ? __kasan_kmalloc+0x96/0xb0 [ 151.428627][ T9089] vmalloc_user_noprof+0x77/0x90 [ 151.428660][ T9089] ? xskq_create+0xdb/0x2a0 [ 151.428688][ T9089] xskq_create+0xdb/0x2a0 [ 151.428716][ T9089] xsk_init_queue+0xb6/0x120 [ 151.428743][ T9089] xsk_setsockopt+0x43f/0x6f0 [ 151.428770][ T9089] ? __cfi_xsk_setsockopt+0x10/0x10 [ 151.428797][ T9089] ? do_futex+0x309/0x500 [ 151.428823][ T9089] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 151.428860][ T9089] ? security_socket_setsockopt+0x33/0xd0 [ 151.428885][ T9089] ? __cfi_xsk_setsockopt+0x10/0x10 [ 151.428911][ T9089] do_sock_setsockopt+0x26d/0x400 [ 151.428939][ T9089] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 151.428971][ T9089] __x64_sys_setsockopt+0x1b8/0x250 [ 151.429007][ T9089] x64_sys_call+0x2adc/0x2ee0 [ 151.429045][ T9089] do_syscall_64+0x58/0xf0 [ 151.429068][ T9089] ? clear_bhb_loop+0x50/0xa0 [ 151.429102][ T9089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.429136][ T9089] RIP: 0033:0x7fd64ff8eba9 [ 151.429157][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.429180][ T9089] RSP: 002b:00007fd650ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.429208][ T9089] RAX: ffffffffffffffda RBX: 00007fd6501d6090 RCX: 00007fd64ff8eba9 [ 151.429228][ T9089] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 151.429245][ T9089] RBP: 00007fd650011e19 R08: 0000000000000004 R09: 0000000000000000 [ 151.429262][ T9089] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.429279][ T9089] R13: 00007fd6501d6128 R14: 00007fd6501d6090 R15: 00007ffdeaf22978 [ 151.429301][ T9089] [ 151.429362][ T9089] Mem-Info: [ 151.446023][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 151.446046][ T36] audit: type=1326 audit(1758111179.592:59990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.454145][ T9089] active_anon:7834 inactive_anon:8 isolated_anon:0 [ 151.454145][ T9089] active_file:9688 inactive_file:14587 isolated_file:0 [ 151.454145][ T9089] unevictable:20476 dirty:83 writeback:0 [ 151.454145][ T9089] slab_reclaimable:5677 slab_unreclaimable:86606 [ 151.454145][ T9089] mapped:29442 shmem:189 pagetables:1006 [ 151.454145][ T9089] sec_pagetables:0 bounce:0 [ 151.454145][ T9089] kernel_misc_reclaimable:0 [ 151.454145][ T9089] free:1387484 free_pcp:1929 free_cma:0 [ 151.458482][ T36] audit: type=1326 audit(1758111179.592:59991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.462269][ T9089] Node 0 active_anon:31336kB inactive_anon:32kB active_file:38752kB inactive_file:58348kB unevictable:81904kB isolated(anon):0kB isolated(file):0kB mapped:117768kB dirty:332kB writeback:0kB shmem:756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6080kB pagetables:4024kB sec_pagetables:0kB all_unreclaimable? no [ 151.466497][ T36] audit: type=1326 audit(1758111179.592:59992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.472380][ T9089] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:0kB free_cma:0kB [ 151.477830][ T36] audit: type=1326 audit(1758111179.592:59993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.482053][ T9089] lowmem_reserve[]: [ 151.486339][ T36] audit: type=1326 audit(1758111179.592:59994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.491717][ T9089] 0 [ 151.496870][ T36] audit: type=1326 audit(1758111179.592:59995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.501859][ T9089] 3921 [ 151.507268][ T36] audit: type=1326 audit(1758111179.592:59996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.511906][ T9089] 3921 [ 151.518563][ T36] audit: type=1326 audit(1758111179.592:59997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.521665][ T9092] /dev/rnullb0: Can't lookup blockdev [ 151.526633][ T36] audit: type=1326 audit(1758111179.592:59998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.533118][ T9089] [ 151.537313][ T36] audit: type=1326 audit(1758111179.592:59999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7ffc0000 [ 151.546149][ T9089] Normal free:2588352kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31336kB inactive_anon:32kB active_file:38752kB inactive_file:58348kB unevictable:81904kB writepending:332kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3908kB local_pcp:2024kB free_cma:0kB [ 152.133706][ T9089] lowmem_reserve[]: 0 0 0 [ 152.138301][ T9089] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 152.153903][ T9089] Normal: 313*4kB (UME) 664*8kB (UME) 505*16kB (UME) 420*32kB (UME) 379*64kB (UME) 115*128kB (UME) 79*256kB (UME) 38*512kB (UME) 19*1024kB (UME) 14*2048kB (UME) 595*4096kB (UM) = 2591988kB [ 152.172756][ T9089] 44946 total pagecache pages [ 152.177556][ T9089] 10 pages in swap cache [ 152.181854][ T9089] Free swap = 124308kB [ 152.186101][ T9089] Total swap = 124996kB [ 152.190276][ T9089] 2097051 pages RAM [ 152.194104][ T9089] 0 pages HighMem/MovableOnly [ 152.198869][ T9089] 351533 pages reserved [ 152.203069][ T9089] 0 pages cma reserved [ 152.209699][ T9089] Memory allocations: [ 152.213696][ T9089] 0 B 0 init/main.c:1370 func:do_initcalls [ 152.220934][ T9089] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 152.229152][ T9089] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 152.236857][ T9089] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 152.244774][ T9089] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 152.252729][ T9089] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 152.261359][ T9089] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 152.269327][ T9089] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 152.277314][ T9089] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 152.285277][ T9089] 0 B 0 init/initramfs.c:101 func:find_link [ 152.304295][ T9095] overlayfs: failed to clone upperpath [ 152.309099][ T9098] netlink: 'syz.5.2975': attribute type 2 has an invalid length. [ 152.882206][ T9149] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2992'. [ 153.056153][ T9159] veth0: entered promiscuous mode [ 153.070633][ T9159] veth0: left promiscuous mode [ 153.099705][ T9164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1142 sclass=netlink_route_socket pid=9164 comm=syz.1.2999 [ 153.139932][ T9168] netlink: 'syz.1.3000': attribute type 2 has an invalid length. [ 154.304394][ T9217] fuse: Bad value for 'fd' [ 154.553910][ T9258] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3036'. [ 154.609265][ T9269] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3041'. [ 154.637719][ T9275] fuseblk: Unknown parameter 'default_permisblksize' [ 154.640694][ T9277] fuse: Bad value for 'fd' [ 154.677703][ T9282] overlayfs: failed to clone lowerpath [ 155.284580][ T9320] fuse: Bad value for 'fd' [ 155.334373][ T9327] /dev/rnullb0: Can't lookup blockdev [ 155.514881][ T9343] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3068'. [ 155.932040][ T9368] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3080'. [ 155.941118][ T9368] 0M: renamed from gretap0 (while UP) [ 155.948140][ T9368] 0M: entered allmulticast mode [ 155.953859][ T9368] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 156.111031][ T9377] tipc: Enabling of bearer rejected, failed to enable media [ 156.200319][ T9398] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 156.208402][ T9399] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 157.029785][ T9419] 9pnet_fd: Insufficient options for proto=fd [ 157.478487][ T36] kauditd_printk_skb: 619 callbacks suppressed [ 157.478507][ T36] audit: type=1400 audit(1774888630.621:60619): avc: denied { map } for pid=9452 comm="syz.0.3108" path="socket:[34443]" dev="sockfs" ino=34443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.515270][ T9457] !@: renamed from xfrm0 (while UP) [ 157.560559][ T9462] 9pnet_fd: Insufficient options for proto=fd [ 157.710361][ T9501] x_tables: duplicate underflow at hook 1 [ 157.748218][ T9508] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3127'. [ 157.757752][ T9508] gretap0: entered promiscuous mode [ 157.769496][ T9508] fuse: Unknown parameter '' [ 157.803210][ T9512] overlayfs: failed to clone upperpath [ 157.820862][ T9514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9514 comm=syz.0.3130 [ 157.922346][ T36] audit: type=1326 audit(1774888631.060:60620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.1.3133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x0 [ 158.847983][ T9570] /dev/rnullb0: Can't lookup blockdev [ 159.115370][ T36] audit: type=1326 audit(1774888632.241:60621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.5.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7fc00000 [ 169.027849][ T9656] tipc: Enabling of bearer rejected, failed to enable media [ 169.172064][ T9698] overlayfs: failed to clone lowerpath [ 169.266158][ T9724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3215'. [ 169.589221][ T9740] tipc: Started in network mode [ 169.594288][ T9740] tipc: Node identity 100, cluster identity 4711 [ 169.600762][ T9740] tipc: Node number set to 256 [ 169.689034][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3225'. [ 169.797599][ T9766] overlayfs: failed to clone upperpath [ 169.804529][ T36] audit: type=1400 audit(1774888642.855:60622): avc: denied { accept } for pid=9767 comm="syz.2.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.880080][ T9774] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3233'. [ 169.963084][ T36] audit: type=1400 audit(1774888643.014:60623): avc: denied { listen } for pid=9786 comm="syz.5.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.533524][ T9808] netlink: 'syz.2.3246': attribute type 15 has an invalid length. [ 170.546107][ T9808] fuseblk: Bad value for 'rootmode' [ 171.097977][ T9845] incfs: Error accessing: ./file0. [ 171.103264][ T9845] incfs: mount failed -20 [ 171.128764][ T473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=473 comm=kworker/0:3 [ 172.048617][ T36] audit: type=1400 audit(1774888645.091:60624): avc: denied { setattr } for pid=9882 comm="syz.2.3274" name="NETLINK" dev="sockfs" ino=36061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.133910][ T9910] overlayfs: failed to clone upperpath [ 172.717906][ T9939] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 172.806629][ T36] audit: type=1326 audit(1774888645.836:60625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.2.3299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efee4d8eba9 code=0x0 [ 173.014373][ T9963] overlayfs: failed to clone upperpath [ 173.659232][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 173.668210][ T9973] bridge_slave_1: left allmulticast mode [ 173.673891][ T9973] bridge_slave_1: left promiscuous mode [ 173.679752][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.687816][ T9973] bridge_slave_0: left allmulticast mode [ 173.693598][ T9973] bridge_slave_0: left promiscuous mode [ 173.699846][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.332642][T10015] IPv6: syztnl0: Disabled Multicast RS [ 174.341097][T10017] overlayfs: failed to clone upperpath [ 174.597712][T10036] netlink: 8540 bytes leftover after parsing attributes in process `syz.0.3324'. [ 174.607101][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 174.616366][T10036] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3324'. [ 174.765952][T10041] 9pnet_fd: Insufficient options for proto=fd [ 174.783148][T10043] /dev/rnullb0: Can't lookup blockdev [ 174.890207][T10047] tipc: Enabling of bearer rejected, failed to enable media [ 175.256322][T10067] 9pnet_fd: Insufficient options for proto=fd [ 175.535570][T10074] overlayfs: failed to resolve './bus': -2 [ 175.791218][T10076] /dev/rnullb0: Can't lookup blockdev [ 176.051551][ T36] audit: type=1326 audit(1774888649.066:60626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.5.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x7fc00000 [ 176.333969][T10085] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3345'. [ 176.513718][T10103] /dev/rnullb0: Can't lookup blockdev [ 176.697245][T10133] overlayfs: failed to clone upperpath [ 176.893062][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3371'. [ 177.321600][T10187] tipc: Started in network mode [ 177.326544][T10187] tipc: Node identity aaaaaaaaaa19, cluster identity 4711 [ 177.334088][T10187] tipc: Enabled bearer , priority 10 [ 177.373010][T10192] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 177.723256][T10201] 9pnet: p9_errstr2errno: server reported unknown error [ 177.885871][ T36] audit: type=1400 audit(1774888650.886:60627): avc: denied { accept } for pid=10230 comm="syz.0.3397" path="socket:[35701]" dev="sockfs" ino=35701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.393750][T10264] tipc: Enabling of bearer rejected, failed to enable media [ 178.402685][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 178.456084][ T713] tipc: Node number set to 11774634 [ 178.492254][ T293] tipc: Subscription rejected, illegal request [ 178.493627][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3415'. [ 178.581718][T10291] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 178.662515][ T36] audit: type=1400 audit(1774888651.654:60628): avc: denied { getopt } for pid=10307 comm="syz.5.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.668657][T10231] 9pnet_fd: p9_fd_create_tcp (10231): problem connecting socket to 127.0.0.1 [ 178.802078][T10326] netlink: 'syz.0.3431': attribute type 27 has an invalid length. [ 178.869716][T10329] overlayfs: failed to clone upperpath [ 178.945544][T10331] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=84 sclass=netlink_xfrm_socket pid=10331 comm=syz.1.3433 [ 179.819354][T10376] netlink: 'syz.1.3451': attribute type 46 has an invalid length. [ 180.049108][T10412] overlayfs: missing 'lowerdir' [ 180.055326][T10412] overlayfs: missing 'lowerdir' [ 180.250052][T10450] overlayfs: failed to resolve './cgroup': -2 [ 180.410361][ T36] audit: type=1400 audit(1774888653.404:60629): avc: denied { accept } for pid=10479 comm="syz.5.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 181.019171][T10518] overlayfs: failed to clone upperpath [ 181.025277][T10518] overlayfs: failed to clone upperpath [ 181.031328][T10518] overlayfs: failed to clone upperpath [ 181.037664][T10518] overlayfs: failed to clone upperpath [ 181.043743][T10518] overlayfs: failed to clone upperpath [ 181.050510][T10518] overlayfs: failed to clone upperpath [ 181.056608][T10518] overlayfs: failed to clone upperpath [ 181.062595][T10518] overlayfs: failed to clone upperpath [ 181.068731][T10518] overlayfs: failed to clone upperpath [ 181.665319][T10549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3513'. [ 181.688016][T10549] netlink: 'syz.2.3513': attribute type 19 has an invalid length. [ 181.696553][T10549] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3513'. [ 181.708739][T10557] netlink: 'syz.2.3513': attribute type 19 has an invalid length. [ 181.716881][T10557] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3513'. [ 181.728201][T10549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10549 comm=syz.2.3513 [ 181.730974][T10557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10557 comm=syz.2.3513 [ 182.474527][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 182.545110][T10588] netlink: 'syz.0.3528': attribute type 27 has an invalid length. [ 182.585587][T10593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10593 comm=syz.0.3530 [ 182.671351][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3535'. [ 182.691230][T10604] incfs: Error accessing: ./file0. [ 182.696602][T10604] incfs: mount failed -20 [ 182.701522][ T36] audit: type=1400 audit(1774888655.694:60630): avc: denied { read } for pid=10602 comm="syz.5.3533" name="file0" dev="tmpfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.757399][ T36] audit: type=1400 audit(1774888655.754:60631): avc: denied { name_bind } for pid=10618 comm="syz.0.3538" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 182.792527][ T36] audit: type=1400 audit(1774888655.784:60632): avc: denied { create } for pid=10621 comm="syz.0.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 183.393820][T10636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3545'. [ 183.431589][T10643] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 183.445631][T10643] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 183.455512][T10643] tmpfs: Unknown parameter 'fsuuid' [ 183.496549][T10657] overlayfs: failed to clone upperpath [ 183.501927][T10656] overlayfs: failed to clone upperpath [ 183.736168][T10697] fuse: Bad value for 'fd' [ 184.421782][T10753] fuse: Bad value for 'group_id' [ 184.427375][T10753] fuse: Bad value for 'group_id' [ 184.434312][T10753] tipc: Enabling of bearer rejected, failed to enable media [ 184.667224][T10771] tipc: Enabling of bearer rejected, failed to enable media [ 184.817601][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 185.067710][T10789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10789 comm=syz.5.3599 [ 185.389789][ T36] audit: type=1400 audit(1774888658.384:60633): avc: denied { lock } for pid=10808 comm="syz.2.3605" path="socket:[37649]" dev="sockfs" ino=37649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 185.538739][T10819] 9pnet_fd: Insufficient options for proto=fd [ 186.216166][T10872] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3629'. [ 186.225236][T10872] 1M: renamed from 30M (while UP) [ 186.232162][T10872] A link change request failed with some changes committed already. Interface 31M may have been left with an inconsistent configuration, please check. [ 186.270809][T10876] tmpfs: Unknown parameter './file0' [ 187.104674][T10905] syz.0.3641: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 187.119621][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.0.3641 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5 [ 187.119658][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.119673][T10905] Call Trace: [ 187.119681][T10905] [ 187.119691][T10905] __dump_stack+0x21/0x30 [ 187.119731][T10905] dump_stack_lvl+0x10c/0x190 [ 187.119764][T10905] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.119797][T10905] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 187.119824][T10905] dump_stack+0x19/0x20 [ 187.119856][T10905] warn_alloc+0x1bc/0x2a0 [ 187.119888][T10905] ? stack_depot_save_flags+0x38/0x800 [ 187.119914][T10905] ? __cfi_warn_alloc+0x10/0x10 [ 187.119945][T10905] ? kasan_save_track+0x4f/0x80 [ 187.119967][T10905] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 187.120001][T10905] ? xskq_create+0x68/0x2a0 [ 187.120027][T10905] ? xsk_init_queue+0xb6/0x120 [ 187.120052][T10905] ? xsk_setsockopt+0x43f/0x6f0 [ 187.120076][T10905] ? do_sock_setsockopt+0x26d/0x400 [ 187.120102][T10905] ? __x64_sys_setsockopt+0x1b8/0x250 [ 187.120128][T10905] ? x64_sys_call+0x2adc/0x2ee0 [ 187.120164][T10905] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.120198][T10905] __vmalloc_node_range_noprof+0x135/0x1420 [ 187.120238][T10905] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 187.120271][T10905] ? avc_has_perm+0x144/0x220 [ 187.120303][T10905] ? kasan_save_alloc_info+0x40/0x50 [ 187.120337][T10905] ? __kasan_kmalloc+0x96/0xb0 [ 187.120364][T10905] vmalloc_user_noprof+0x77/0x90 [ 187.120395][T10905] ? xskq_create+0xdb/0x2a0 [ 187.120420][T10905] xskq_create+0xdb/0x2a0 [ 187.120446][T10905] xsk_init_queue+0xb6/0x120 [ 187.120471][T10905] xsk_setsockopt+0x43f/0x6f0 [ 187.120497][T10905] ? __cfi_xsk_setsockopt+0x10/0x10 [ 187.120534][T10905] ? do_futex+0x309/0x500 [ 187.120560][T10905] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 187.120592][T10905] ? security_socket_setsockopt+0x33/0xd0 [ 187.120617][T10905] ? __cfi_xsk_setsockopt+0x10/0x10 [ 187.120648][T10905] do_sock_setsockopt+0x26d/0x400 [ 187.120676][T10905] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 187.120704][T10905] ? xfd_validate_state+0x68/0x150 [ 187.120737][T10905] ? __kasan_check_read+0x15/0x20 [ 187.120773][T10905] __x64_sys_setsockopt+0x1b8/0x250 [ 187.120803][T10905] x64_sys_call+0x2adc/0x2ee0 [ 187.120841][T10905] do_syscall_64+0x58/0xf0 [ 187.120863][T10905] ? clear_bhb_loop+0x50/0xa0 [ 187.120896][T10905] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.120928][T10905] RIP: 0033:0x7f0e2958eba9 [ 187.120949][T10905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.120972][T10905] RSP: 002b:00007f0e2a410038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.120999][T10905] RAX: ffffffffffffffda RBX: 00007f0e297d5fa0 RCX: 00007f0e2958eba9 [ 187.121019][T10905] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 187.121035][T10905] RBP: 00007f0e29611e19 R08: 0000000000000004 R09: 0000000000000000 [ 187.121050][T10905] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.121067][T10905] R13: 00007f0e297d6038 R14: 00007f0e297d5fa0 R15: 00007ffcaa999fe8 [ 187.121089][T10905] [ 187.121147][T10905] Mem-Info: [ 187.435909][T10905] active_anon:10566 inactive_anon:9 isolated_anon:0 [ 187.435909][T10905] active_file:9688 inactive_file:14601 isolated_file:0 [ 187.435909][T10905] unevictable:20477 dirty:56 writeback:0 [ 187.435909][T10905] slab_reclaimable:6346 slab_unreclaimable:78572 [ 187.435909][T10905] mapped:28902 shmem:4306 pagetables:1091 [ 187.435909][T10905] sec_pagetables:0 bounce:0 [ 187.435909][T10905] kernel_misc_reclaimable:0 [ 187.435909][T10905] free:1385275 free_pcp:7373 free_cma:0 [ 187.481437][T10905] Node 0 active_anon:42264kB inactive_anon:36kB active_file:38752kB inactive_file:58404kB unevictable:81908kB isolated(anon):0kB isolated(file):0kB mapped:115608kB dirty:224kB writeback:0kB shmem:17224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6208kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no [ 187.514039][T10905] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5740kB free_cma:0kB [ 187.544201][T10905] lowmem_reserve[]: 0 3921 3921 [ 187.549212][T10905] Normal free:2580888kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42264kB inactive_anon:36kB active_file:38752kB inactive_file:58404kB unevictable:81908kB writepending:224kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:23816kB local_pcp:22048kB free_cma:0kB [ 187.581217][T10905] lowmem_reserve[]: 0 0 0 [ 187.585787][T10905] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 187.601451][T10905] Normal: 152*4kB (UME) 161*8kB (ME) 25*16kB (ME) 323*32kB (UME) 203*64kB (UME) 179*128kB (UME) 104*256kB (UME) 46*512kB (UME) 24*1024kB (UME) 12*2048kB (UME) 594*4096kB (UM) = 2580888kB [ 187.620187][T10905] 49080 total pagecache pages [ 187.624939][T10905] 12 pages in swap cache [ 187.629199][T10905] Free swap = 124504kB [ 187.633493][T10905] Total swap = 124996kB [ 187.637686][T10905] 2097051 pages RAM [ 187.641514][T10905] 0 pages HighMem/MovableOnly [ 187.646266][T10905] 351533 pages reserved [ 187.650432][T10905] 0 pages cma reserved [ 187.656838][T10905] Memory allocations: [ 187.660882][T10905] 0 B 0 init/main.c:1370 func:do_initcalls [ 187.668417][T10905] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 187.676638][T10905] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 187.684364][T10905] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 187.692273][T10905] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 187.700211][T10905] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 187.708854][T10905] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 187.716790][T10905] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 187.724727][T10905] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 187.732651][T10905] 0 B 0 init/initramfs.c:101 func:find_link [ 187.960226][T10933] fuse: Bad value for 'fd' [ 187.960522][T10934] fuse: Bad value for 'fd' [ 188.157250][ T36] audit: type=1400 audit(1774888661.154:60634): avc: denied { create } for pid=10948 comm="syz.5.3656" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 188.191293][ T36] audit: type=1400 audit(1774888661.184:60635): avc: denied { nlmsg_write } for pid=10950 comm="syz.5.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 188.858720][T10982] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 188.868043][T10982] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 188.879683][T10982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 189.153011][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3674'. [ 189.176387][T11007] tipc: Enabling of bearer rejected, failed to enable media [ 189.303585][ T36] audit: type=1326 audit(1774888662.294:60636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.2.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 189.958847][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3705'. [ 190.015541][T11095] overlayfs: failed to clone upperpath [ 198.632640][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3712'. [ 198.669892][T11114] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3717'. [ 198.713359][ T36] audit: type=1400 audit(1774888671.704:60637): avc: denied { create } for pid=11122 comm="syz.5.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 199.244596][T11149] netlink: 'syz.2.3730': attribute type 4 has an invalid length. [ 200.340261][T11196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3747'. [ 200.598295][T11203] 9pnet_fd: p9_fd_create_tcp (11203): problem binding to privport [ 200.675992][T11218] 9pnet_fd: Insufficient options for proto=fd [ 200.706536][ T36] audit: type=1326 audit(1774888673.704:60638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11213 comm="syz.5.3754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52a5b8eba9 code=0x0 [ 200.757311][T11219] tipc: MTU too low for tipc bearer [ 201.024609][T11221] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.045863][T11223] can: request_module (can-proto-0) failed. [ 201.092768][T11225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3759'. [ 201.597270][ T36] audit: type=1400 audit(1774888674.594:60639): avc: denied { listen } for pid=11253 comm="syz.5.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 202.281209][T11279] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3780'. [ 202.707317][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3791'. [ 203.306710][T11320] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3795'. [ 203.432363][T11325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11325 comm=syz.0.3797 [ 203.460980][T11329] overlayfs: failed to clone upperpath [ 203.661852][T11355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29290 sclass=netlink_route_socket pid=11355 comm=syz.5.3810 [ 203.935208][T11366] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3814'. [ 204.916136][ T36] audit: type=1326 audit(1774888677.914:60640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 204.939912][ T36] audit: type=1326 audit(1774888677.914:60641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 204.963606][ T36] audit: type=1326 audit(1774888677.914:60642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 204.987227][ T36] audit: type=1326 audit(1774888677.914:60643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.005702][ T293] tipc: Subscription rejected, illegal request [ 205.011047][ T36] audit: type=1326 audit(1774888677.914:60644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.038028][T11397] 9pnet_fd: Insufficient options for proto=fd [ 205.041590][ T36] audit: type=1326 audit(1774888677.914:60645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.070861][ T36] audit: type=1326 audit(1774888677.914:60646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.096209][ T36] audit: type=1326 audit(1774888677.914:60647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.122626][ T36] audit: type=1326 audit(1774888677.914:60648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.146586][ T36] audit: type=1326 audit(1774888677.914:60649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.2.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x7fc00000 [ 205.173329][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3831'. [ 205.198208][T11418] 9pnet_fd: Insufficient options for proto=fd [ 205.204635][T11417] 9pnet_fd: Insufficient options for proto=fd [ 205.288342][T11431] netlink: 'syz.0.3838': attribute type 27 has an invalid length. [ 205.541702][T11442] overlayfs: failed to clone lowerpath [ 205.914421][T11501] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3862'. [ 205.918663][T11502] overlayfs: failed to clone upperpath [ 205.979794][T11515] netlink: 'syz.0.3866': attribute type 19 has an invalid length. [ 205.987750][T11515] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3866'. [ 206.081597][T11527] overlayfs: failed to clone lowerpath [ 206.081926][T11528] overlayfs: failed to clone lowerpath [ 206.227347][T11550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=11550 comm=syz.1.3878 [ 206.255054][T11554] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.263939][T11554] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 206.275777][T11554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.600473][T11592] overlayfs: failed to clone upperpath [ 206.784339][T11611] netlink: 'syz.1.3900': attribute type 63 has an invalid length. [ 206.792229][T11611] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3900'. [ 206.884820][T11634] SELinux: Context system_u:object_r:auditctl_exec_t:s0 is not valid (left unmapped). [ 207.119541][T11642] GUP no longer grows the stack in syz.5.3909 (11642): 200000005000-200000008000 (200000004000) [ 207.130139][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.5.3909 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5 [ 207.130181][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.130194][T11642] Call Trace: [ 207.130200][T11642] [ 207.130207][T11642] __dump_stack+0x21/0x30 [ 207.130235][T11642] dump_stack_lvl+0x10c/0x190 [ 207.130259][T11642] ? __cfi_dump_stack_lvl+0x10/0x10 [ 207.130282][T11642] ? futex_lock_pi_atomic+0xdd/0xc70 [ 207.130322][T11642] dump_stack+0x19/0x20 [ 207.130345][T11642] fixup_user_fault+0x63d/0x6d0 [ 207.130366][T11642] fault_in_user_writeable+0x76/0xe0 [ 207.130386][T11642] futex_lock_pi+0x258/0xa10 [ 207.130408][T11642] ? futex_unqueue+0x136/0x160 [ 207.130431][T11642] ? __cfi_futex_lock_pi+0x10/0x10 [ 207.130455][T11642] ? __cfi_futex_wake_mark+0x10/0x10 [ 207.130477][T11642] ? futex_setup_timer+0xb4/0xd0 [ 207.130493][T11642] ? __cfi_futex_wake_mark+0x10/0x10 [ 207.130516][T11642] ? mas_find+0x358/0x5f0 [ 207.130538][T11642] ? __kasan_check_write+0x18/0x20 [ 207.130564][T11642] do_futex+0x25c/0x500 [ 207.130581][T11642] ? __cfi_do_futex+0x10/0x10 [ 207.130598][T11642] ? __vm_munmap+0x2c7/0x370 [ 207.130615][T11642] __se_sys_futex+0x28f/0x300 [ 207.130643][T11642] ? __x64_sys_futex+0x110/0x110 [ 207.130660][T11642] ? __kasan_check_write+0x18/0x20 [ 207.130685][T11642] ? do_user_addr_fault+0xbc4/0x1200 [ 207.130711][T11642] ? __kasan_check_write+0x18/0x20 [ 207.130738][T11642] __x64_sys_futex+0xe9/0x110 [ 207.130755][T11642] x64_sys_call+0x227f/0x2ee0 [ 207.130781][T11642] do_syscall_64+0x58/0xf0 [ 207.130796][T11642] ? clear_bhb_loop+0x50/0xa0 [ 207.130820][T11642] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.130842][T11642] RIP: 0033:0x7f52a5b8eba9 [ 207.130857][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.130872][T11642] RSP: 002b:00007f52a6956038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 207.130891][T11642] RAX: ffffffffffffffda RBX: 00007f52a5dd5fa0 RCX: 00007f52a5b8eba9 [ 207.130905][T11642] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 207.130917][T11642] RBP: 00007f52a5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 207.130928][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.130939][T11642] R13: 00007f52a5dd6038 R14: 00007f52a5dd5fa0 R15: 00007ffc7eac1448 [ 207.130953][T11642] [ 208.780267][T11748] overlayfs: failed to clone upperpath [ 208.932591][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.939694][T11755] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.946822][T11755] bridge_slave_0: entered allmulticast mode [ 208.953186][T11755] bridge_slave_0: entered promiscuous mode [ 208.959681][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.966759][T11755] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.973880][T11755] bridge_slave_1: entered allmulticast mode [ 208.980153][T11755] bridge_slave_1: entered promiscuous mode [ 209.059542][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.066705][T11755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.074035][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.081097][T11755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.115120][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.125748][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.132859][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.179872][T11755] veth0_vlan: entered promiscuous mode [ 209.195349][T11755] veth1_macvtap: entered promiscuous mode [ 209.229483][T11771] overlayfs: failed to clone upperpath [ 209.488373][T11806] tmpfs: Unknown parameter '0x0000000014f982dc000000000003518962840x00000000000000000x0000000014f982dc' [ 209.718644][T11812] fuse: Bad value for 'group_id' [ 209.723775][T11812] fuse: Bad value for 'group_id' [ 209.856733][T11832] sit0: entered promiscuous mode [ 209.863224][T11832] netlink: 'syz.6.3976': attribute type 1 has an invalid length. [ 209.871745][T11832] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3976'. [ 209.881506][T11832] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2048 [ 209.891197][T11832] rust_binder: Write failure EINVAL in pid:21 [ 210.122961][T11857] overlayfs: failed to resolve './file0': -2 [ 210.184897][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 210.184916][ T36] audit: type=1400 audit(1774888683.184:60717): avc: denied { execute } for pid=11865 comm="syz.6.3988" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.278074][T11878] syz.6.3992: attempt to access beyond end of device [ 210.278074][T11878] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 210.303418][T11878] exFAT-fs (loop6): unable to read boot sector [ 210.310352][T11878] exFAT-fs (loop6): failed to read boot sector [ 210.316794][T11878] exFAT-fs (loop6): failed to recognize exfat type [ 210.352831][ T36] audit: type=1326 audit(1774888683.344:60718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11884 comm="syz.5.3994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52a5b8eba9 code=0x0 [ 210.403384][T11896] netlink: 'syz.1.3997': attribute type 13 has an invalid length. [ 210.479672][ T36] audit: type=1400 audit(1774888683.474:60719): avc: denied { write } for pid=11919 comm="syz.6.4003" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.481881][T11920] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 210.513715][T11920] rust_binder: Write failure EINVAL in pid:51 [ 210.541331][T11926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 210.548660][T11926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:53 [ 210.687234][T11944] /dev/rnullb0: Can't lookup blockdev [ 210.721345][T11952] overlayfs: failed to clone upperpath [ 210.786280][ T36] audit: type=1400 audit(1774888683.784:60720): avc: denied { write } for pid=11965 comm="syz.1.4021" name="kvm" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditctl_exec_t:s0" [ 210.825187][T11930] rust_binder: Read failure Err(EFAULT) in pid:57 [ 210.839432][T11969] @0: renamed from bond_slave_1 [ 210.852018][T11969] rust_binder: Fixups oob 165 172 361 173 [ 210.852037][T11969] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 210.857901][T11969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.867002][T11969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 210.877321][T11971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.316218][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.328995][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.335302][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.341491][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.347912][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.354469][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.360792][T11992] 9pnet_fd: Insufficient options for proto=fd [ 211.385447][ T36] audit: type=1400 audit(1774888684.384:60721): avc: denied { accept } for pid=11997 comm="syz.2.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.758915][T12007] rust_binder: Write failure EFAULT in pid:74 [ 211.789326][T12009] rust_binder: 76: no such ref 3 [ 211.800572][T12009] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 211.807982][T12009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 213.204342][T12090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.213575][T12090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 213.401595][ T36] audit: type=1400 audit(2000000001.130:60722): avc: denied { append } for pid=12096 comm="syz.1.4067" name="kvm" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:auditctl_exec_t:s0" [ 213.460156][ T36] audit: type=1400 audit(2000000001.190:60723): avc: denied { connect } for pid=12100 comm="syz.1.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.503545][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 213.655275][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.666714][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.676701][ T9] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 213.687668][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.699892][ T9] usb 7-1: config 0 descriptor?? [ 213.752569][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'. [ 214.418223][T12169] 9pnet_fd: Insufficient options for proto=fd [ 214.448793][ T36] audit: type=1326 audit(2000000002.180:60724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.5.4095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x0 [ 215.280839][T12196] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.303093][ T36] audit: type=1400 audit(2000000003.030:60725): avc: denied { setattr } for pid=12199 comm="syz.5.4105" name="RAW" dev="sockfs" ino=41832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.345833][ T36] audit: type=1326 audit(2000000003.080:60726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.2.4108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efee4d8eba9 code=0x0 [ 215.422376][T12227] overlayfs: failed to clone upperpath [ 216.106465][T12245] netlink: 'syz.5.4121': attribute type 2 has an invalid length. [ 216.272053][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 216.280363][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 216.307030][ T9] usb 7-1: USB disconnect, device number 2 [ 216.626133][ T36] audit: type=1400 audit(2000000004.360:60727): avc: denied { append } for pid=12319 comm="syz.6.4150" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.162711][T12355] tipc: Enabling of bearer rejected, failed to enable media [ 217.206676][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4168'. [ 217.403552][ T713] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 217.543527][ T713] usb 7-1: device descriptor read/64, error -71 [ 217.647929][T12413] overlayfs: failed to clone upperpath [ 217.783558][ T713] usb 7-1: device descriptor read/64, error -71 [ 218.023519][ T713] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.163512][ T713] usb 7-1: device descriptor read/64, error -71 [ 218.286768][T12438] fuse: Bad value for 'fd' [ 218.288002][ T36] audit: type=1326 audit(2000000006.020:60728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12437 comm="syz.5.4197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x0 [ 218.403509][ T713] usb 7-1: device descriptor read/64, error -71 [ 218.513703][ T713] usb usb7-port1: attempt power cycle [ 218.853552][ T713] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 218.874580][ T713] usb 7-1: device descriptor read/8, error -71 [ 219.004545][ T713] usb 7-1: device descriptor read/8, error -71 [ 219.243539][ T713] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 219.264604][ T713] usb 7-1: device descriptor read/8, error -71 [ 219.288583][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4217'. [ 219.309990][T12502] netlink: 'syz.2.4218': attribute type 4 has an invalid length. [ 219.317870][T12502] netlink: 'syz.2.4218': attribute type 21 has an invalid length. [ 219.326038][T12502] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4218'. [ 219.405926][ T713] usb 7-1: device descriptor read/8, error -71 [ 219.515631][ T713] usb usb7-port1: unable to enumerate USB device [ 219.632009][T12534] netlink: 37 bytes leftover after parsing attributes in process `syz.1.4230'. [ 219.992669][ T36] audit: type=1326 audit(2000000263.728:60729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.5.4242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a5b8eba9 code=0x0 [ 220.273960][ T36] audit: type=1400 audit(2000000264.018:60730): avc: denied { unmount } for pid=11755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.292995][T12582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 220.294367][T12582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:125 [ 220.470529][T12594] cgroup: none used incorrectly [ 220.606940][T12603] 9pnet_fd: Insufficient options for proto=fd [ 220.614189][T12604] 9pnet_fd: Insufficient options for proto=fd [ 220.865842][T12625] 9pnet_virtio: no channels available for device 127.0.0.1 [ 221.067047][T12634] futex_wake_op: syz.1.4261 tries to shift op by 32; fix this program [ 221.424648][ T36] audit: type=1400 audit(2000000265.168:60731): avc: denied { write } for pid=12657 comm="syz.6.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 221.429078][T12658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.445011][T12658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 221.565450][T12676] rust_binder: 12673 RLIMIT_NICE not set [ 221.721355][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 221.806950][T12703] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4285'. [ 222.426788][T12741] overlayfs: failed to clone upperpath [ 222.434572][T12741] tipc: Enabling of bearer rejected, failed to enable media [ 222.596371][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4306'. [ 222.687518][T12768] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 222.827579][T12790] fuseblk: Bad value for 'source' [ 223.790029][T12868] overlayfs: failed to clone upperpath [ 223.986133][ T36] audit: type=1107 audit(2000000267.728:60732): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 224.007257][ T36] audit: type=1326 audit(2000000267.748:60733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.030987][ T36] audit: type=1326 audit(2000000267.748:60734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.054648][ T36] audit: type=1326 audit(2000000267.748:60735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.078435][ T36] audit: type=1326 audit(2000000267.748:60736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.102222][ T36] audit: type=1326 audit(2000000267.748:60737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.133491][ T36] audit: type=1326 audit(2000000267.748:60738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.141723][T12905] fuse: Bad value for 'fd' [ 224.157564][ T36] audit: type=1326 audit(2000000267.748:60739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.185768][ T36] audit: type=1326 audit(2000000267.748:60740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.1.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64ff8eba9 code=0x7ff00000 [ 224.809218][T12919] tipc: Started in network mode [ 224.814462][T12919] tipc: Node identity ac14140f, cluster identity 4711 [ 224.821365][T12919] tipc: New replicast peer: 255.255.255.255 [ 224.827673][T12919] tipc: Enabled bearer , priority 10 [ 224.834429][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4368'. [ 224.843399][T12919] tipc: Disabling bearer [ 224.849540][T12919] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4368'. [ 224.860599][T12919] netlink: 'syz.1.4368': attribute type 4 has an invalid length. [ 225.439922][T12950] overlayfs: failed to clone upperpath [ 226.001096][T13004] netlink: 37 bytes leftover after parsing attributes in process `syz.5.4400'. [ 226.226928][T13032] fuse: Bad value for 'user_id' [ 226.231835][T13032] fuse: Bad value for 'user_id' [ 226.262157][T13037] netlink: 'syz.1.4414': attribute type 28 has an invalid length. [ 226.379930][T13042] fuseblk: Bad value for 'rootmode' [ 226.620037][T13060] overlayfs: missing 'workdir' [ 228.015358][ T473] usb 2-1: USB disconnect, device number 5 [ 228.021395][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.032759][ T473] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 228.037893][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.051050][T13152] bridge_slave_0: entered allmulticast mode [ 228.052456][ T473] ftdi_sio 2-1:0.0: device disconnected [ 228.057771][T13152] bridge_slave_0: entered promiscuous mode [ 228.070603][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.077739][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.084881][T13152] bridge_slave_1: entered allmulticast mode [ 228.091853][T13152] bridge_slave_1: entered promiscuous mode [ 228.098148][ T293] tipc: Left network mode [ 228.103971][ T293] veth1_macvtap: left promiscuous mode [ 228.109548][ T293] veth0_vlan: left promiscuous mode [ 228.201690][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.208804][T13152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.216134][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.223184][T13152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.245030][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.252480][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.262996][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.270097][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.279295][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.286377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.311472][T13152] veth0_vlan: entered promiscuous mode [ 228.324638][T13152] veth1_macvtap: entered promiscuous mode [ 228.510313][T13179] @: renamed from vlan0 (while UP) [ 228.653786][T13194] binder: Bad value for 'stats' [ 228.677410][T13196] netlink: 'syz.1.4466': attribute type 4 has an invalid length. [ 228.685352][T13196] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4466'. [ 228.880171][T13204] netlink: 'syz.6.4468': attribute type 13 has an invalid length. [ 228.935567][T13215] 9pnet_fd: p9_fd_create_unix (13215): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 228.991203][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4474'. [ 229.000200][T13219] bridge_slave_1: left allmulticast mode [ 229.006180][T13219] bridge_slave_1: left promiscuous mode [ 229.011942][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.019966][T13219] bridge_slave_0: left allmulticast mode [ 229.025917][T13219] bridge_slave_0: left promiscuous mode [ 229.031566][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.041904][T13220] fuse: Bad value for 'fd' [ 229.920589][ T36] kauditd_printk_skb: 6835 callbacks suppressed [ 229.920609][ T36] audit: type=1400 audit(2000000273.658:67576): avc: denied { write } for pid=713 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44884 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.010305][ T36] audit: type=1400 audit(2000000273.748:67577): avc: denied { write } for pid=13253 comm="syz.1.4489" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.032563][ T36] audit: type=1400 audit(2000000273.748:67578): avc: denied { remove_name } for pid=13253 comm="syz.1.4489" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.056239][ T36] audit: type=1400 audit(2000000273.748:67579): avc: denied { unlink } for pid=13253 comm="syz.1.4489" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 230.208427][T13265] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4492'. [ 230.361980][T13277] overlayfs: failed to clone upperpath [ 230.908384][T13282] tmpfs: Unknown parameter 'nr_blockap: s' [ 230.965015][T13290] tipc: Enabling of bearer rejected, failed to enable media [ 231.217438][T13303] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 231.376292][T13330] fuse: Bad value for 'user_id' [ 231.390487][T13330] fuse: Bad value for 'user_id' [ 231.397142][ T36] audit: type=1400 audit(2000000275.138:67580): avc: denied { append } for pid=13328 comm="syz.1.4517" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.492398][T13339] rust_binder: 13338 RLIMIT_NICE not set [ 231.492824][T13338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 231.599479][T13345] fuseblk: Unknown parameter 'mask' [ 231.625693][T13349] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 231.702563][T13360] overlayfs: missing 'lowerdir' [ 232.000193][T13377] tipc: Failed to remove unknown binding: 66,1,1/0:2455199798/2455199800 [ 232.008867][T13377] tipc: Failed to remove unknown binding: 66,1,1/0:2455199798/2455199800 [ 232.032790][T13379] /dev/loop0: Can't lookup blockdev [ 232.038611][T13379] /dev/loop0: Can't lookup blockdev [ 232.043989][T13380] /dev/loop0: Can't lookup blockdev [ 232.643525][ T709] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 232.794603][ T709] usb 2-1: config 127 has an invalid interface number: 54 but max is 0 [ 232.803031][ T709] usb 2-1: config 127 has no interface number 0 [ 232.809604][ T709] usb 2-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 232.818853][ T709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.830847][T13450] 9pnet_fd: Insufficient options for proto=fd [ 232.864958][T13454] tmpfs: Unknown parameter 'ţKaV/' [ 232.872647][T13454] netlink: 'syz.2.4558': attribute type 4 has an invalid length. [ 232.900784][T13456] overlayfs: failed to clone lowerpath [ 233.044926][ T709] usb 2-1: string descriptor 0 read error: -71 [ 233.051924][ T709] usb 2-1: Found UVC 0.00 device (1b3f:2002) [ 233.067343][ T709] usb 2-1: No valid video chain found. [ 233.083828][ T709] usb 2-1: USB disconnect, device number 6 [ 233.102404][T13483] rust_binder: 13483 RLIMIT_NICE not set [ 233.110965][ T713] rust_binder: 13482: removing orphan mapping 0:1024 [ 233.194950][T13507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.220522][T13512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=13512 comm=syz.2.4576 [ 233.282158][T13527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=13527 comm=syz.1.4581 [ 233.297085][T13527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.336653][T13537] rust_binder: Write failure EFAULT in pid:89 [ 233.359399][T13539] rust_binder: Write failure EFAULT in pid:91 [ 233.425739][T13542] overlayfs: failed to resolve './file0': -2 [ 233.518363][ T36] audit: type=1400 audit(2000000277.258:67581): avc: denied { listen } for pid=13557 comm="syz.1.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.641253][T13578] rust_binder: inc_ref_done called when no active inc_refs [ 233.641290][T13578] rust_binder: 112: no such ref 1 [ 233.654453][T13578] rust_binder: 112: no such ref 3 [ 233.659978][T13578] rust_binder: 13578 RLIMIT_NICE not set [ 233.667864][ T713] rust_binder: 13577: removing orphan mapping 0:1168 [ 233.761588][T13588] rust_binder: Write failure EFAULT in pid:120 [ 233.856904][T13597] netlink: 'syz.5.4609': attribute type 16 has an invalid length. [ 233.871036][T13597] netlink: 'syz.5.4609': attribute type 2 has an invalid length. [ 233.879346][T13597] netlink: 64086 bytes leftover after parsing attributes in process `syz.5.4609'. [ 233.897921][ T36] audit: type=1400 audit(2000000277.638:67582): avc: denied { setopt } for pid=13598 comm="syz.1.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.133498][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 234.263513][ T9] usb 2-1: device descriptor read/64, error -71 [ 234.479557][T13612] fuse: Bad value for 'user_id' [ 234.484541][T13612] fuse: Bad value for 'user_id' [ 234.503528][ T9] usb 2-1: device descriptor read/64, error -71 [ 234.534208][T13620] overlayfs: failed to clone upperpath [ 234.743548][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.873534][ T9] usb 2-1: device descriptor read/64, error -71 [ 235.115996][ T9] usb 2-1: device descriptor read/64, error -71 [ 235.181247][T13660] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4632'. [ 235.208514][T13669] overlayfs: failed to clone upperpath [ 235.223739][ T9] usb usb2-port1: attempt power cycle [ 235.359156][T13712] overlayfs: failed to clone upperpath [ 235.365239][T13712] overlayfs: cannot append lower layer [ 235.366559][T13714] overlayfs: failed to clone upperpath [ 235.430784][T13732] 9pnet_fd: Insufficient options for proto=fd [ 235.561792][T13756] fuse: Bad value for 'user_id' [ 235.567003][T13756] fuse: Bad value for 'user_id' [ 235.572136][T13756] fuse: Bad value for 'user_id' [ 235.577472][T13756] fuse: Bad value for 'user_id' [ 235.582606][T13756] fuse: Bad value for 'user_id' [ 235.583775][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.588172][T13756] fuse: Bad value for 'user_id' [ 235.600035][T13756] fuse: Bad value for 'user_id' [ 235.605355][T13756] fuse: Bad value for 'user_id' [ 235.610585][T13756] fuse: Bad value for 'user_id' [ 235.615775][T13756] fuse: Bad value for 'user_id' [ 235.620901][T13756] fuse: Bad value for 'user_id' [ 235.626057][T13756] fuse: Bad value for 'user_id' [ 235.631142][T13756] fuse: Bad value for 'user_id' [ 235.636584][T13756] fuse: Bad value for 'user_id' [ 235.636754][ T9] usb 2-1: device descriptor read/8, error -71 [ 235.641846][T13756] fuse: Bad value for 'user_id' [ 235.652873][T13756] fuse: Bad value for 'user_id' [ 235.657896][T13756] fuse: Bad value for 'user_id' [ 235.662770][T13756] fuse: Bad value for 'user_id' [ 235.669072][T13756] fuse: Bad value for 'user_id' [ 235.674240][T13756] fuse: Bad value for 'user_id' [ 235.679243][T13756] fuse: Bad value for 'user_id' [ 235.684377][T13756] fuse: Bad value for 'user_id' [ 235.691126][T13756] fuse: Bad value for 'user_id' [ 235.696295][T13756] fuse: Bad value for 'user_id' [ 235.701288][T13756] fuse: Bad value for 'user_id' [ 235.706412][T13756] fuse: Bad value for 'user_id' [ 235.711399][T13756] fuse: Bad value for 'user_id' [ 235.716528][T13756] fuse: Bad value for 'user_id' [ 235.721508][T13756] fuse: Bad value for 'user_id' [ 235.726391][T13756] fuse: Bad value for 'user_id' [ 235.731349][T13756] fuse: Bad value for 'user_id' [ 235.736237][T13756] fuse: Bad value for 'user_id' [ 235.741221][T13756] fuse: Bad value for 'user_id' [ 235.746113][T13756] fuse: Bad value for 'user_id' [ 235.751062][T13756] fuse: Bad value for 'user_id' [ 235.755953][T13756] fuse: Bad value for 'user_id' [ 235.760914][T13756] fuse: Bad value for 'user_id' [ 235.765812][T13756] fuse: Bad value for 'user_id' [ 235.770768][T13756] fuse: Bad value for 'user_id' [ 235.775657][T13756] fuse: Bad value for 'user_id' [ 235.780657][T13756] fuse: Bad value for 'user_id' [ 235.784647][ T9] usb 2-1: device descriptor read/8, error -71 [ 235.785566][T13756] fuse: Bad value for 'user_id' [ 235.796651][T13756] fuse: Bad value for 'user_id' [ 235.801505][T13756] fuse: Bad value for 'user_id' [ 235.806532][T13756] fuse: Bad value for 'user_id' [ 235.811407][T13756] fuse: Bad value for 'user_id' [ 235.816441][T13756] fuse: Bad value for 'user_id' [ 235.821354][T13756] fuse: Bad value for 'user_id' [ 235.826494][T13756] fuse: Bad value for 'user_id' [ 235.831376][T13756] fuse: Bad value for 'user_id' [ 235.836390][T13756] fuse: Bad value for 'user_id' [ 235.841266][T13756] fuse: Bad value for 'user_id' [ 235.846297][T13756] fuse: Bad value for 'user_id' [ 235.851184][T13756] fuse: Bad value for 'user_id' [ 235.856322][T13756] fuse: Bad value for 'user_id' [ 235.861199][T13756] fuse: Bad value for 'user_id' [ 235.866225][T13756] fuse: Bad value for 'user_id' [ 235.871120][T13756] fuse: Bad value for 'user_id' [ 235.876207][T13756] fuse: Bad value for 'user_id' [ 235.881107][T13756] fuse: Bad value for 'user_id' [ 235.886289][T13756] fuse: Bad value for 'user_id' [ 235.891376][T13756] fuse: Bad value for 'user_id' [ 235.896414][T13756] fuse: Bad value for 'user_id' [ 235.901287][T13756] fuse: Bad value for 'user_id' [ 235.906582][T13756] fuse: Bad value for 'user_id' [ 235.911472][T13756] fuse: Bad value for 'user_id' [ 235.982230][T13797] overlayfs: failed to clone upperpath [ 236.023564][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.054543][ T9] usb 2-1: device descriptor read/8, error -71 [ 236.076449][T13825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4692'. [ 236.194720][ T9] usb 2-1: device descriptor read/8, error -71 [ 236.303589][ T9] usb usb2-port1: unable to enumerate USB device [ 236.678042][T13866] overlayfs: failed to clone upperpath [ 236.965205][T13907] overlayfs: failed to clone upperpath [ 236.983067][ T36] audit: type=1326 audit(2000000280.718:67583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13909 comm="syz.2.4722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efee4d8eba9 code=0x0 [ 238.419741][T13936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13936 comm=syz.2.4731 [ 239.559256][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.682792][ T36] audit: type=1400 audit(2000000283.418:67584): avc: denied { listen } for pid=13990 comm="syz.6.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 240.041614][T14002] 9pnet_fd: Insufficient options for proto=fd [ 240.414570][T14014] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4763'. [ 240.491579][T14029] netlink: 680 bytes leftover after parsing attributes in process `syz.5.4769'. [ 240.994636][T14052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14052 comm=syz.6.4779 [ 241.007325][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4779'. [ 241.568824][ T36] audit: type=1400 audit(2000000285.308:67585): avc: denied { remount } for pid=14076 comm="syz.6.4789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 241.588966][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 241.593505][ T366] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.611452][T14083] rust_binder: Write failure EFAULT in pid:139 [ 241.748247][T14106] incfs: Backing dir is not set, filesystem can't be mounted. [ 241.766559][T14106] incfs: mount failed -2 [ 241.863575][T13630] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 242.013484][T13630] usb 2-1: Using ep0 maxpacket: 32 [ 242.019912][T13630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.022060][T14135] netlink: 'syz.2.4808': attribute type 46 has an invalid length. [ 242.031240][T13630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.048952][T13630] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 242.058105][T13630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.066802][T13630] usb 2-1: config 0 descriptor?? [ 242.233938][T14146] overlayfs: failed to clone upperpath [ 242.478845][T13630] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 242.788123][ T9] usb 2-1: USB disconnect, device number 11 [ 243.042406][ T36] audit: type=1400 audit(2000000286.778:67586): avc: denied { execute } for pid=14178 comm="syz.2.4822" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.210585][ T36] audit: type=1400 audit(2000000286.948:67587): avc: denied { nlmsg_read } for pid=14227 comm="syz.6.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.211625][T14228] 9pnet_fd: Insufficient options for proto=fd [ 243.286389][T14237] 9pnet_fd: Insufficient options for proto=fd [ 243.324956][T14241] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 243.448561][ T709] hid (null): global environment stack underflow [ 243.455973][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4848'. [ 243.466226][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.475653][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.483123][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.497929][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.506587][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.514224][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.521805][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.530706][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.539721][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.547577][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.555304][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.563633][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.571349][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.579455][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.587521][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.595564][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.603074][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.625946][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.634043][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.641699][ T36] audit: type=1400 audit(2000000287.378:67588): avc: denied { setattr } for pid=14262 comm="syz.5.4850" name="PACKET" dev="sockfs" ino=48498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.669964][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.677648][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.685572][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.693223][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.700759][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.708286][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.716052][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.723667][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.731457][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.739200][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.746889][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.754801][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.762482][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.770139][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.777755][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.792191][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.799998][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.807558][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.823390][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.832136][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.839813][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.847382][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.854843][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.862321][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.870062][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.877568][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.885151][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.892907][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.900378][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.908066][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.915541][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.923013][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.930474][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.937930][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.945379][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.952852][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.960307][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.967759][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.975184][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.982762][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.991095][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 243.998559][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.005995][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.013391][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.020869][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.028300][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.035725][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.043130][ T709] hid-generic 0003:0008:000F.0005: unknown main item tag 0x0 [ 244.050601][ T709] hid-generic 0003:0008:000F.0005: global environment stack underflow [ 244.058816][ T709] hid-generic 0003:0008:000F.0005: item 0 2 1 11 parsing failed [ 244.066975][ T709] hid-generic 0003:0008:000F.0005: probe with driver hid-generic failed with error -22 [ 244.094427][T14287] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4860'. [ 244.122367][T14292] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4861'. [ 244.132068][T14292] /dev/loop0: Can't lookup blockdev [ 244.154231][T14294] overlayfs: missing 'workdir' [ 244.241939][T14321] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4871'. [ 244.267758][ T36] audit: type=1400 audit(2000000288.012:67589): avc: denied { relabelfrom } for pid=14320 comm="syz.5.4871" name="NETLINK" dev="sockfs" ino=49627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 244.268706][T14321] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 244.302263][ T36] audit: type=1400 audit(2000000288.032:67590): avc: denied { relabelto } for pid=14320 comm="syz.5.4871" name="NETLINK" dev="sockfs" ino=49627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 244.353576][T13630] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 244.446878][ T36] audit: type=1326 audit(2000000288.182:67591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14322 comm="syz.5.4872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52a5b8eba9 code=0x0 [ 244.504596][T13630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.515645][T13630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.525906][T13630] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 244.535740][T13630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.547676][T13630] usb 2-1: config 0 descriptor?? [ 245.154781][ T36] audit: type=1400 audit(2000000288.892:67592): avc: denied { bind } for pid=14383 comm="syz.6.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.316371][T14406] fuse: Unknown parameter 'gd' [ 245.335010][ T36] audit: type=1400 audit(2000000289.072:67593): avc: denied { getopt } for pid=14400 comm="syz.6.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.335650][T14412] tmpfs: Unknown parameter 'r_blocks' [ 245.415079][T13630] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 245.443168][T13630] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 245.566484][T14442] tipc: Enabling of bearer rejected, failed to enable media [ 245.601499][T14444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14444 comm=syz.2.4917 [ 245.632455][ T713] usb 2-1: USB disconnect, device number 12 [ 246.005421][T14484] veth0_to_team: entered promiscuous mode [ 246.011227][T14484] veth0_to_team: entered allmulticast mode [ 246.072222][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4933'. [ 246.112111][T14505] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 246.174809][ T36] audit: type=1400 audit(2000000289.912:67594): avc: denied { append } for pid=14512 comm="syz.1.4940" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 246.179325][T14514] netlink: 'syz.1.4940': attribute type 13 has an invalid length. [ 246.245375][T14514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 246.245417][T14514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 246.333656][T14533] netlink: 'syz.6.4946': attribute type 4 has an invalid length. [ 246.374412][T14537] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4947'. [ 246.403561][T14533] netlink: 'syz.6.4946': attribute type 4 has an invalid length. [ 246.554199][T14544] cgroup: fork rejected by pids controller in /syz6 [ 246.605248][T14583] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4955'. [ 246.929194][T14592] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.950810][T14592] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.976102][T14592] bridge_slave_0: entered allmulticast mode [ 246.982990][T14592] bridge_slave_0: entered promiscuous mode [ 246.998129][T14592] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.013013][T14592] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.033607][T14592] bridge_slave_1: entered allmulticast mode [ 247.040064][T14592] bridge_slave_1: entered promiscuous mode [ 247.182395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.189618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.205174][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.212286][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.249995][T14592] veth0_vlan: entered promiscuous mode [ 247.267178][T14592] veth1_macvtap: entered promiscuous mode [ 247.322523][T14633] rust_binder: Error in use_page_slow: ESRCH [ 247.322549][T14633] rust_binder: use_range failure ESRCH [ 247.328877][T14633] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 247.334616][T14633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 247.342639][T14633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:173 [ 247.533515][T13630] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 247.641556][T14648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14648 comm=syz.5.4973 [ 247.673579][T13630] usb 3-1: device descriptor read/64, error -71 [ 247.713560][ T473] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 247.864896][ T473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.876084][ T473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.885981][ T473] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 247.895319][ T473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.904415][ T473] usb 2-1: config 0 descriptor?? [ 247.913828][T13630] usb 3-1: device descriptor read/64, error -71 [ 248.153514][T13630] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 248.293499][T13630] usb 3-1: device descriptor read/64, error -71 [ 248.356649][ T36] audit: type=1400 audit(2000000292.092:67595): avc: denied { connect } for pid=14661 comm="syz.5.4978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.363935][T14662] tipc: Resetting bearer [ 248.382919][T14662] veth1: entered allmulticast mode [ 248.543631][T13630] usb 3-1: device descriptor read/64, error -71 [ 248.653596][T13630] usb usb3-port1: attempt power cycle [ 248.712961][ T473] hid-led 0003:27B8:01ED.0007: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 248.727212][ T473] hid-led 0003:27B8:01ED.0007: ThingM blink(1) initialized [ 248.935992][T14646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.993539][T13630] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 249.006077][ T713] usb 2-1: USB disconnect, device number 13 [ 249.015061][T13630] usb 3-1: device descriptor read/8, error -71 [ 249.144767][T13630] usb 3-1: device descriptor read/8, error -71 [ 249.383626][T13630] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 249.404734][T13630] usb 3-1: device descriptor read/8, error -71 [ 249.534755][T13630] usb 3-1: device descriptor read/8, error -71 [ 249.643629][T13630] usb usb3-port1: unable to enumerate USB device [ 255.676408][T14673] /dev/rnullb0: Can't open blockdev [ 255.730296][T14679] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 255.739282][T14680] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 255.763733][T14680] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 255.780622][T14680] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 256.518786][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5001'. [ 256.539125][T14734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 256.539159][T14734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 256.823662][T14744] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5006'. [ 256.842049][T14744] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5006'. [ 256.851057][T14744] netlink: 'syz.6.5006': attribute type 5 has an invalid length. [ 256.858828][T14744] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5006'. [ 257.643493][ T709] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 257.794647][ T709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 97, changing to 7 [ 257.805662][ T709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 24929, setting to 1024 [ 257.818368][ T709] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.827565][ T709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.835620][ T709] usb 2-1: Product: syz [ 257.839829][ T709] usb 2-1: Manufacturer: syz [ 257.844464][ T709] usb 2-1: SerialNumber: syz [ 257.849746][ T709] usb 2-1: config 0 descriptor?? [ 257.940147][T14772] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5018'. [ 257.949316][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5018'. [ 258.056737][ T36] audit: type=1326 audit(2000000301.792:67596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14760 comm="syz.1.5013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5303b8eba9 code=0x0 [ 258.237149][T14789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5022'. [ 258.323660][T14808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14808 comm=syz.2.5027 [ 258.856587][T14815] fuse: Bad value for 'group_id' [ 258.861680][T14815] fuse: Bad value for 'group_id' [ 259.051147][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.058394][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.065703][T14824] bridge_slave_0: entered allmulticast mode [ 259.072137][T14824] bridge_slave_0: entered promiscuous mode [ 259.078937][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.086041][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.093162][T14824] bridge_slave_1: entered allmulticast mode [ 259.099636][T14824] bridge_slave_1: entered promiscuous mode [ 259.138351][ T13] bridge_slave_1: left allmulticast mode [ 259.144092][ T13] bridge_slave_1: left promiscuous mode [ 259.149745][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.157503][ T13] bridge_slave_0: left allmulticast mode [ 259.163171][ T13] bridge_slave_0: left promiscuous mode [ 259.169028][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.273149][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.280455][T14824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.287987][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.295126][T14824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.305991][ T13] tipc: Disabling bearer [ 259.311612][ T13] tipc: Left network mode [ 259.317216][ T13] veth1_macvtap: left promiscuous mode [ 259.322835][ T13] veth0_vlan: left promiscuous mode [ 259.386825][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.394357][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.409996][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.417095][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.425095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.432154][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.464234][T14824] veth0_vlan: entered promiscuous mode [ 259.481954][T14824] veth1_macvtap: entered promiscuous mode [ 259.808669][ T36] audit: type=1400 audit(2000000303.542:67597): avc: denied { setattr } for pid=14844 comm="syz.5.5039" name="binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.920944][T14861] /dev/rnullb0: Can't open blockdev [ 260.107463][T14893] overlayfs: failed to clone upperpath [ 260.158964][ T36] audit: type=1326 audit(2000000303.892:67598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14901 comm="syz.2.5057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42ef8eba9 code=0x0 [ 260.193555][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.262039][T14903] overlayfs: failed to clone upperpath [ 260.344606][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.355616][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.365433][ T45] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 260.374556][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.383338][ T45] usb 6-1: config 0 descriptor?? [ 260.429726][ T709] usb 2-1: USB disconnect, device number 14 [ 260.459626][T14907] udevd[14907]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.623782][ T36] audit: type=1400 audit(2000000304.352:67599): avc: denied { add_name } for pid=14935 comm="syz.6.5072" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 260.644682][ T36] audit: type=1400 audit(2000000304.362:67600): avc: denied { create } for pid=14935 comm="syz.6.5072" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 260.702436][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5074'. [ 260.779243][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5075'. [ 261.192561][ T45] hid-led 0003:27B8:01ED.0008: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 261.216087][ T45] hid-led 0003:27B8:01ED.0008: ThingM blink(1) initialized [ 261.404616][ T9] usb 6-1: USB disconnect, device number 2 [ 261.584757][T14994] incfs: Error accessing: ./file0. [ 261.589923][T14994] incfs: mount failed -20 [ 262.061147][T15045] netlink: 'syz.1.5108': attribute type 4 has an invalid length. [ 262.070851][T15045] netlink: 'syz.1.5108': attribute type 4 has an invalid length. [ 262.274776][ T36] audit: type=1326 audit(2000000306.012:67601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15052 comm="syz.6.5111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 262.353499][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 262.503519][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 262.510192][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.518807][ T9] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 262.526989][ T9] usb 6-1: config 0 has no interface number 0 [ 262.533165][ T9] usb 6-1: config 0 interface 93 has no altsetting 0 [ 262.541465][ T9] usb 6-1: New USB device found, idVendor=3285, idProduct=06b3, bcdDevice=64.3f [ 262.550611][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.558894][ T9] usb 6-1: Product: syz [ 262.563145][ T9] usb 6-1: Manufacturer: syz [ 262.567787][ T9] usb 6-1: SerialNumber: syz [ 262.573502][ T9] usb 6-1: config 0 descriptor?? [ 263.025673][T15060] binder: Unknown parameter '*jm!0RzP_nJ' [ 263.214032][T15089] netlink: 'syz.1.5123': attribute type 1 has an invalid length. [ 263.221962][T15089] netlink: 'syz.1.5123': attribute type 2 has an invalid length. [ 263.815514][T15121] rust_binder: 15120 RLIMIT_NICE not set [ 264.610821][T15137] fuseblk: Bad value for 'source' [ 264.691693][T15139] rust_binder: Write failure EFAULT in pid:266 [ 264.729959][T15143] rust_binder: got new transaction with bad transaction stack [ 264.736269][T15143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 264.895017][T15148] binder: Unknown parameter '0xffffffffffffffff' [ 264.968712][ T9] usb 6-1: USB disconnect, device number 3 [ 265.027586][T15154] /dev/rnullb0: Can't open blockdev [ 265.050038][T15156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.050291][T15156] rust_binder: Write failure EINVAL in pid:281 [ 265.202567][T15189] overlayfs: failed to clone lowerpath [ 265.239327][T15197] incfs: Options parsing error. -22 [ 265.244665][T15197] incfs: mount failed -22 [ 265.249796][T15197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=15197 comm=syz.6.5164 [ 265.363503][ T713] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 265.379216][ T36] audit: type=1400 audit(2000000309.112:67602): avc: denied { mounton } for pid=15201 comm="syz.2.5166" path="/file0" dev="ramfs" ino=53287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 265.513486][ T713] usb 2-1: Using ep0 maxpacket: 32 [ 265.519720][ T713] usb 2-1: config 1 interface 0 altsetting 203 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.532900][ T713] usb 2-1: config 1 interface 0 has no altsetting 0 [ 265.541001][ T713] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 265.550169][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.558228][ T713] usb 2-1: Product: Л [ 265.562361][ T713] usb 2-1: Manufacturer: 툛Ⳡ瓑碌灖瀞鎀껩㠶ᖘ疑ष靄弭蟻びꋔ廙놕ꡎᐈ峭郋猽Ꮎ赑૔縃礽갱䃬僚톨ᓔ袨欄㳒㫃ᶷⷊⶇ☷렐鴶失䷱筒⁗駯៍験ꮙ끃짌模 [ 265.583864][ T713] usb 2-1: SerialNumber: ⠊ [ 265.589745][T15171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.004589][ T713] usb 2-1: USB disconnect, device number 15 [ 266.044247][ T36] audit: type=1400 audit(2000000309.782:67603): avc: denied { mount } for pid=15218 comm="syz.6.5174" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 266.163673][T15224] rust_binder: Error while translating object. [ 266.163727][T15224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 266.169998][T15224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:48 [ 266.194284][T15226] __vm_enough_memory: pid: 15226, comm: syz.5.5177, bytes: 18014402804453376 not enough memory for the allocation [ 266.230433][ T36] audit: type=1400 audit(2000000309.962:67604): avc: denied { shutdown } for pid=15227 comm="syz.5.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.491376][T15247] overlayfs: failed to clone lowerpath [ 266.510166][T15249] 9pnet: Could not find request transport: fk [ 266.647623][T15270] overlayfs: failed to resolve './file1': -2 [ 266.673505][ T713] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 266.691440][T15284] netlink: 'syz.6.5198': attribute type 2 has an invalid length. [ 266.793736][T15294] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.825278][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5203'. [ 266.834288][T15298] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5203'. [ 266.836231][ T713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.844890][T15298] syz.6.5203: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 266.853588][ T713] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.853600][T15298] syz6 [ 266.854412][ T713] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.867073][T15298] ,mems_allowed=0 [ 266.875699][ T713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.878940][T15298] [ 266.887505][ T713] usb 6-1: SerialNumber: syz [ 266.906388][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 266.906891][T15298] CPU: 1 UID: 0 PID: 15298 Comm: syz.6.5203 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5 [ 266.906932][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.906950][T15298] Call Trace: [ 266.906959][T15298] [ 266.906970][T15298] __dump_stack+0x21/0x30 [ 266.907018][T15298] dump_stack_lvl+0x10c/0x190 [ 266.907054][T15298] ? __cfi_dump_stack_lvl+0x10/0x10 [ 266.907095][T15298] dump_stack+0x19/0x20 [ 266.907128][T15298] warn_alloc+0x1bc/0x2a0 [ 266.907162][T15298] ? stack_depot_save_flags+0x38/0x800 [ 266.907194][T15298] ? __cfi_warn_alloc+0x10/0x10 [ 266.907227][T15298] ? kasan_save_track+0x4f/0x80 [ 266.907254][T15298] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 266.907296][T15298] ? xskq_create+0x68/0x2a0 [ 266.907325][T15298] ? xsk_init_queue+0xb6/0x120 [ 266.907354][T15298] ? xsk_setsockopt+0x43f/0x6f0 [ 266.907380][T15298] ? do_sock_setsockopt+0x26d/0x400 [ 266.907410][T15298] ? __x64_sys_setsockopt+0x1b8/0x250 [ 266.907439][T15298] ? x64_sys_call+0x2adc/0x2ee0 [ 266.907477][T15298] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.907514][T15298] __vmalloc_node_range_noprof+0x135/0x1420 [ 266.907558][T15298] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 266.907595][T15298] ? avc_has_perm+0x144/0x220 [ 266.907631][T15298] ? kasan_save_alloc_info+0x40/0x50 [ 266.907668][T15298] ? __kasan_kmalloc+0x96/0xb0 [ 266.907698][T15298] vmalloc_user_noprof+0x77/0x90 [ 266.907735][T15298] ? xskq_create+0xdb/0x2a0 [ 266.907764][T15298] xskq_create+0xdb/0x2a0 [ 266.907793][T15298] xsk_init_queue+0xb6/0x120 [ 266.907823][T15298] xsk_setsockopt+0x43f/0x6f0 [ 266.907858][T15298] ? __cfi_xsk_setsockopt+0x10/0x10 [ 266.907889][T15298] ? do_futex+0x309/0x500 [ 266.907919][T15298] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 266.907955][T15298] ? security_socket_setsockopt+0x33/0xd0 [ 266.907984][T15298] ? __cfi_xsk_setsockopt+0x10/0x10 [ 266.908013][T15298] do_sock_setsockopt+0x26d/0x400 [ 266.908043][T15298] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 266.908075][T15298] __x64_sys_setsockopt+0x1b8/0x250 [ 266.908107][T15298] x64_sys_call+0x2adc/0x2ee0 [ 266.908145][T15298] do_syscall_64+0x58/0xf0 [ 266.908168][T15298] ? clear_bhb_loop+0x50/0xa0 [ 266.908206][T15298] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.908239][T15298] RIP: 0033:0x7f59aeb8eba9 [ 266.908276][T15298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.908301][T15298] RSP: 002b:00007f59afa92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.908331][T15298] RAX: ffffffffffffffda RBX: 00007f59aedd5fa0 RCX: 00007f59aeb8eba9 [ 266.908352][T15298] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 266.908370][T15298] RBP: 00007f59aec11e19 R08: 0000000000000004 R09: 0000000000000000 [ 266.908389][T15298] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.908407][T15298] R13: 00007f59aedd6038 R14: 00007f59aedd5fa0 R15: 00007fff3124e9d8 [ 266.908433][T15298] [ 266.908471][T15298] Mem-Info: [ 267.064619][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 267.069071][T15298] active_anon:26269 inactive_anon:742 isolated_anon:0 [ 267.069071][T15298] active_file:9784 inactive_file:14668 isolated_file:0 [ 267.069071][T15298] unevictable:20993 dirty:127 writeback:0 [ 267.069071][T15298] slab_reclaimable:5747 slab_unreclaimable:81837 [ 267.069071][T15298] mapped:29342 shmem:18815 pagetables:982 [ 267.069071][T15298] sec_pagetables:0 bounce:0 [ 267.069071][T15298] kernel_misc_reclaimable:0 [ 267.069071][T15298] free:1370193 free_pcp:1903 free_cma:0 [ 267.072766][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 267.077722][T15298] Node 0 active_anon:105076kB inactive_anon:2968kB active_file:39136kB inactive_file:58672kB unevictable:83972kB isolated(anon):0kB isolated(file):0kB mapped:117368kB dirty:508kB writeback:0kB shmem:75260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6812kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no [ 267.092028][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.095280][T15298] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:0kB free_cma:0kB [ 267.124844][ T10] usb 2-1: config 0 descriptor?? [ 267.130548][ T713] usb 6-1: 0:2 : does not exist [ 267.143802][T15274] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 267.158345][ T36] audit: type=1400 audit(2000000310.862:67605): avc: denied { listen } for pid=15243 comm="syz.5.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.168298][T15298] lowmem_reserve[]: [ 267.179617][ T713] usb 6-1: unit 48 not found! [ 267.189233][T15298] 0 [ 267.276334][ T713] usb 6-1: USB disconnect, device number 4 [ 267.285023][T15298] 3921 [ 267.404799][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.416270][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.425452][ T10] logitech 0003:046D:C298.0009: unknown main item tag 0x0 [ 267.432646][ T10] logitech 0003:046D:C298.0009: unknown global tag 0xe [ 267.440348][T15298] 3921 [ 267.446525][T15298] Normal free:2518996kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106056kB inactive_anon:2968kB active_file:39136kB inactive_file:58672kB unevictable:83972kB writepending:508kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1884kB local_pcp:628kB free_cma:0kB [ 267.449175][ T10] logitech 0003:046D:C298.0009: item 0 0 1 14 parsing failed [ 267.493896][ T10] logitech 0003:046D:C298.0009: parse failed [ 267.502718][ T10] logitech 0003:046D:C298.0009: probe with driver logitech failed with error -22 [ 267.524838][ T10] usb 2-1: USB disconnect, device number 16 [ 267.532006][T15303] fuse: Bad value for 'fd' [ 267.535115][T15298] lowmem_reserve[]: 0 0 0 [ 267.541889][T15298] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 267.575785][T15298] Normal: 609*4kB (UME) 886*8kB (UME) 493*16kB (UME) 92*32kB (UME) 90*64kB (UME) 44*128kB (UME) 31*256kB (UME) 23*512kB (UME) 24*1024kB (UM) 13*2048kB (UME) 590*4096kB (M) = 2519300kB [ 267.608384][T15298] 65006 total pagecache pages [ 267.614379][T15298] 745 pages in swap cache [ 267.640608][T15298] Free swap = 121688kB [ 267.650832][T15298] Total swap = 124996kB [ 267.659003][T15298] 2097051 pages RAM [ 267.663076][T15298] 0 pages HighMem/MovableOnly [ 267.668268][T15298] 351533 pages reserved [ 267.673701][T15298] 0 pages cma reserved [ 267.688051][T15298] Memory allocations: [ 267.692087][T15298] 0 B 0 init/main.c:1370 func:do_initcalls [ 267.713610][T15298] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 267.729949][T15298] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 267.739195][T15298] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 267.748153][T15298] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 267.756388][T15298] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 267.766669][T15298] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 267.772467][T15332] syzkaller0: entered promiscuous mode [ 267.774757][T15298] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 267.788554][T15332] syzkaller0: entered allmulticast mode [ 267.788651][T15298] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 267.788930][T15333] overlayfs: failed to clone upperpath [ 267.794587][T15298] 0 B 0 init/initramfs.c:101 func:find_link [ 267.901342][T15344] netlink: 'syz.6.5216': attribute type 27 has an invalid length. [ 267.920272][T15344] sit0: left promiscuous mode [ 268.359196][T15407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.359488][T15407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333 [ 268.503502][T15349] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 268.587465][T15412] sock: sock_timestamping_bind_phc: sock not bind to device [ 268.665449][T15349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 268.673931][T15349] usb 6-1: config 3 has no interfaces? [ 268.680923][T15349] usb 6-1: New USB device found, idVendor=1532, idProduct=f485, bcdDevice=e9.d5 [ 268.690198][T15349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.698505][T15349] usb 6-1: Product: syz [ 268.702880][T15349] usb 6-1: Manufacturer: syz [ 268.707709][T15349] usb 6-1: SerialNumber: syz [ 268.775493][T15441] batadv_slave_1: entered promiscuous mode [ 268.782223][T15441] netlink: 'syz.6.5245': attribute type 4 has an invalid length. [ 268.790352][T15441] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5245'. [ 268.800465][T15440] batadv_slave_1: left promiscuous mode [ 268.848043][T15448] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5247'. [ 268.858030][ T36] audit: type=1326 audit(2000000312.592:67606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15447 comm="syz.6.5247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 268.920837][T15349] usb 6-1: USB disconnect, device number 5 [ 269.449105][T15461] fuse: Unknown parameter 'smackfsfloor' [ 269.449164][T15462] fuseblk: Unknown parameter 'Ү' [ 269.477610][T15467] rust_binder: Error in use_page_slow: ESRCH [ 269.477633][T15467] rust_binder: use_range failure ESRCH [ 269.483949][T15467] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 269.489611][T15467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 269.498137][T15467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:89 [ 269.524613][T15477] cgroup2: Unknown parameter 'pids' [ 269.531990][T15479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5259'. [ 269.553487][T15356] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 269.592819][T15477] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 269.703508][T15356] usb 2-1: Using ep0 maxpacket: 8 [ 269.710202][T15356] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.718747][T15356] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 269.726989][T15356] usb 2-1: config 6 has no interface number 0 [ 269.733764][T15356] usb 2-1: config 6 interface 248 has no altsetting 0 [ 269.742094][T15356] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 269.751247][T15356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.759354][T15356] usb 2-1: Product: syz [ 269.763747][T15356] usb 2-1: Manufacturer: syz [ 269.768392][T15356] usb 2-1: SerialNumber: syz [ 269.977026][T15356] ums-karma 2-1:6.248: USB Mass Storage device detected [ 270.025503][T15356] usb 2-1: USB disconnect, device number 17 [ 270.189780][T15513] 9pnet_fd: Insufficient options for proto=fd [ 270.218660][T15517] netlink: 'syz.2.5272': attribute type 4 has an invalid length. [ 270.884055][T15553] overlayfs: failed to clone upperpath [ 271.242619][ T36] audit: type=1400 audit(2000000314.972:67607): avc: denied { load_policy } for pid=15559 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 271.258292][T15560] SELinux: ebitmap: truncated map [ 271.276715][T15560] SELinux: failed to load policy [ 271.283614][T15560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108 [ 271.341743][T15562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.351565][T15562] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 271.358172][T15562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 271.366292][T15562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:346 [ 271.623533][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 271.784815][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.795816][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.805693][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 271.814805][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.823406][ T9] usb 2-1: config 0 descriptor?? [ 272.088826][ T36] audit: type=1400 audit(2000000315.822:67608): avc: denied { setattr } for pid=15604 comm="syz.5.5303" name="/" dev="configfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.233658][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 272.239681][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 272.248461][ T9] usb 2-1: USB disconnect, device number 18 [ 272.390415][ T36] audit: type=1400 audit(2000000316.122:67609): avc: denied { create } for pid=15617 comm="syz.6.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 272.410464][T15349] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 272.564836][T15349] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 272.574695][T15349] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 272.587752][T15349] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 272.596966][T15349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.605021][T15349] usb 6-1: Product: syz [ 272.609204][T15349] usb 6-1: Manufacturer: syz [ 272.613847][T15349] usb 6-1: SerialNumber: syz [ 272.619139][T15349] usb 6-1: config 0 descriptor?? [ 272.624483][T15607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 272.631714][T15607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 272.776987][T15635] pim6reg1: entered promiscuous mode [ 272.782352][T15635] pim6reg1: entered allmulticast mode [ 272.832484][T15637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.835520][T15639] overlayfs: missing 'lowerdir' [ 272.839744][T15607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 272.854104][T15607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 272.922955][T15648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.974430][T15648] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 272.980937][T15648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 272.989135][T15648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:366 [ 273.038116][T15659] SELinux: Context /dev/fuse is not valid (left unmapped). [ 273.059949][ T36] audit: type=1400 audit(2000000316.792:67610): avc: denied { relabelto } for pid=15658 comm="syz.2.5322" name="file0" dev="tmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/dev/fuse" [ 273.087208][ T36] audit: type=1400 audit(2000000316.812:67611): avc: denied { associate } for pid=15658 comm="syz.2.5322" name="file0" dev="tmpfs" ino=758 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/dev/fuse" [ 273.094525][T15665] syzkaller1: entered promiscuous mode [ 273.118817][T15665] syzkaller1: entered allmulticast mode [ 273.180154][T15675] netlink: 'syz.6.5329': attribute type 3 has an invalid length. [ 273.219679][T15687] overlayfs: failed to clone upperpath [ 273.288079][T15349] Error reading MAC address [ 273.296613][T15357] usb 6-1: USB disconnect, device number 7 [ 273.771708][T15717] 9pnet_fd: Insufficient options for proto=fd [ 273.827614][T15712] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5339'. [ 273.828594][T15723] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 273.836721][T15723] rust_binder: Error while translating object. [ 273.845670][T15723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.852084][T15723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 273.863476][T15349] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 273.885436][T15726] /dev/rnullb0: Can't open blockdev [ 273.908514][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.915031][T15730] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.921993][T15730] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.936935][T15722] overlayfs: failed to clone upperpath [ 274.033479][T15349] usb 2-1: Using ep0 maxpacket: 16 [ 274.040319][T15349] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 274.049812][T15349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.058597][T15349] usb 2-1: config 0 descriptor?? [ 274.266125][T15349] kye 0003:0458:4018.000A: item fetching failed at offset 3/7 [ 274.273867][T15349] kye 0003:0458:4018.000A: parse failed [ 274.279488][T15349] kye 0003:0458:4018.000A: probe with driver kye failed with error -22 [ 274.867063][T15789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=15789 comm=syz.6.5369 [ 275.158458][T15793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21776 sclass=netlink_route_socket pid=15793 comm=syz.2.5371 [ 275.745023][ T36] audit: type=1326 audit(2000000319.482:67612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz.2.5385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42ef8eba9 code=0x0 [ 275.775858][T15845] 9pnet_fd: Insufficient options for proto=fd [ 275.983506][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 275.983500][ T366] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.253484][T13630] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 276.404710][T13630] usb 6-1: config 1 has an invalid interface number: 146 but max is 0 [ 276.412964][T13630] usb 6-1: config 1 has no interface number 0 [ 276.419133][T13630] usb 6-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 276.431501][T13630] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 276.440603][T13630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.448672][T13630] usb 6-1: Product: syz [ 276.452838][T13630] usb 6-1: Manufacturer: syz [ 276.457476][T13630] usb 6-1: SerialNumber: syz [ 276.464827][T13630] usbserial_generic 6-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 276.476304][T13630] usbserial_generic 6-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 276.487222][T13630] usbserial_generic 6-1:1.146: generic converter detected [ 276.495275][T13630] usb 6-1: generic converter now attached to ttyUSB0 [ 276.534254][T15356] usb 2-1: USB disconnect, device number 19 [ 276.576192][ T36] audit: type=1400 audit(2000000320.312:67613): avc: denied { mount } for pid=15865 comm="syz.1.5398" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 276.674244][T15859] /dev/rnullb0: Can't open blockdev [ 276.683918][T15859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.703175][T15859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.780896][T13630] usb 6-1: USB disconnect, device number 8 [ 276.789235][T13630] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 276.798270][T13630] usbserial_generic 6-1:1.146: device disconnected [ 276.872508][T15886] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5404'. [ 276.934792][T15897] overlayfs: missing 'lowerdir' [ 276.971647][T15900] netlink: 'syz.2.5410': attribute type 4 has an invalid length. [ 276.979864][T15900] netlink: 'syz.2.5410': attribute type 4 has an invalid length. [ 277.061335][T15918] overlayfs: failed to clone upperpath [ 277.087629][T15926] devtmpfs: Unknown parameter 'fuse' [ 277.145023][T15931] devpts: called with bogus options [ 277.186282][T15934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.187384][T15934] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 277.201922][T15934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 277.213475][T13630] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 277.218088][T15934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:422 [ 277.285058][T15936] can0: slcan on ttyS3. [ 277.384562][T13630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.395559][T13630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.412166][T13630] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.435860][T13630] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.447485][T13630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.463762][T13630] usb 6-1: config 0 descriptor?? [ 277.573516][ T473] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 277.682779][T13630] usbhid 6-1:0.0: can't add hid device: -71 [ 277.684464][T15960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15960 comm=syz.6.5425 [ 277.692523][T13630] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 277.709185][ T473] usb 2-1: device descriptor read/64, error -71 [ 277.718367][T13630] usb 6-1: USB disconnect, device number 9 [ 277.772892][ T36] audit: type=1400 audit(2000000321.502:67614): avc: denied { lock } for pid=15971 comm="syz.6.5431" path="socket:[55086]" dev="sockfs" ino=55086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.829008][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5431'. [ 277.838386][T15974] fuse: Bad value for 'rootmode' [ 277.953535][ T473] usb 2-1: device descriptor read/64, error -71 [ 278.193573][ T473] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 278.323507][ T473] usb 2-1: device descriptor read/64, error -71 [ 278.563517][ T473] usb 2-1: device descriptor read/64, error -71 [ 278.640090][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5443'. [ 278.673893][ T473] usb usb2-port1: attempt power cycle [ 279.013501][ T473] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.034587][ T473] usb 2-1: device descriptor read/8, error -71 [ 279.174465][ T473] usb 2-1: device descriptor read/8, error -71 [ 279.346442][T16109] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5461'. [ 279.365778][T16108] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5461'. [ 279.423474][ T473] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 279.454501][ T473] usb 2-1: device descriptor read/8, error -71 [ 279.584516][ T473] usb 2-1: device descriptor read/8, error -71 [ 279.693970][ T473] usb usb2-port1: unable to enumerate USB device [ 279.944342][T16138] overlayfs: failed to clone upperpath [ 279.964743][T16139] overlayfs: failed to clone upperpath [ 279.997475][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5470'. [ 280.079207][T16145] overlayfs: failed to clone upperpath [ 280.327118][T15936] can0 (unregistered): slcan off ttyS3. [ 280.355522][T16164] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5478'. [ 280.356625][ T36] audit: type=1107 audit(2000000324.092:67615): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 280.941178][T16233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.980736][ T36] audit: type=1326 audit(2000000324.712:67616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16243 comm="syz.6.5491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 281.082829][T16245] netlink: 'syz.6.5491': attribute type 4 has an invalid length. [ 281.340386][ T36] audit: type=1400 audit(2000000325.072:67617): avc: denied { relabelfrom } for pid=16252 comm="syz.1.5494" name="" dev="pipefs" ino=56442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 281.363328][ T36] audit: type=1401 audit(2000000325.072:67618): op=setxattr invalid_context="" [ 281.372558][ T36] audit: type=1401 audit(2000000325.072:67619): op=setxattr invalid_context="" [ 281.573496][T13630] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 281.723497][T13630] usb 2-1: Using ep0 maxpacket: 16 [ 281.729986][T13630] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 281.738300][T13630] usb 2-1: config 0 has no interface number 0 [ 281.744481][T13630] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 281.754497][T13630] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 281.766106][T13630] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 281.775641][T13630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.784550][T13630] usb 2-1: Product: syz [ 281.788849][T13630] usb 2-1: Manufacturer: syz [ 281.793545][T13630] usb 2-1: SerialNumber: syz [ 281.799704][T13630] usb 2-1: config 0 descriptor?? [ 281.807005][T16253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.821418][T16253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.849948][T16265] veth0_virt_wifi: entered allmulticast mode [ 281.912757][ T36] audit: type=1400 audit(2000000325.642:67620): avc: denied { getopt } for pid=16271 comm="syz.5.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 282.030929][T16253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.038531][T16253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.447536][T13630] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 282.457943][T13630] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 282.468829][T13630] asix 2-1:0.251: probe with driver asix failed with error -61 [ 282.648702][T15357] usb 2-1: USB disconnect, device number 24 [ 282.681583][T16264] veth0_virt_wifi: left allmulticast mode [ 282.731061][T16281] 9pnet_fd: Insufficient options for proto=fd [ 282.914281][T16288] pim6reg1: entered promiscuous mode [ 282.919693][T16288] pim6reg1: entered allmulticast mode [ 282.995769][T16291] input: syz0 as /devices/virtual/input/input12 [ 283.004992][T16291] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 283.013982][T16291] overlayfs: missing 'lowerdir' [ 283.165582][T16298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.173203][T16298] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 283.173235][T16298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 283.181350][T16298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:438 [ 283.228914][ T36] audit: type=1400 audit(2000000326.962:67621): avc: denied { mounton } for pid=16304 comm="syz.1.5512" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 283.285294][T16310] overlayfs: failed to clone upperpath [ 283.419395][T16319] /dev/md0: Can't lookup blockdev [ 283.723484][ T473] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 283.873505][ T473] usb 2-1: Using ep0 maxpacket: 16 [ 283.880021][ T473] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.890409][ T473] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 283.904460][ T473] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.913715][ T473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.922065][ T473] usb 2-1: Product: syz [ 283.926316][ T473] usb 2-1: Manufacturer: syz [ 283.930995][ T473] usb 2-1: SerialNumber: syz [ 283.944246][ T473] usb 2-1: config 0 descriptor?? [ 284.048264][ T36] audit: type=1326 audit(2000000327.782:67622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16347 comm="syz.2.5526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc42ef8eba9 code=0x0 [ 284.087838][T16351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 284.087878][T16351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:172 [ 284.121493][T16356] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 284.149724][T16360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5526'. [ 284.154286][T15357] usb 2-1: USB disconnect, device number 25 [ 284.789129][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5538'. [ 284.933512][T15355] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 285.025212][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5544'. [ 285.035646][T16405] rust_binder: 180: no such ref 3 [ 285.040734][T16405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 285.047941][T16405] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 285.055147][T16405] rust_binder: Write failure EFAULT in pid:180 [ 285.085136][T15355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.102318][T15355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.112221][T15355] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 285.121329][T15355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.130097][T15355] usb 2-1: config 0 descriptor?? [ 285.343497][T15355] usb 2-1: string descriptor 0 read error: -22 [ 285.355702][T16413] /dev/rnullb0: Can't open blockdev [ 285.380736][T16418] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 285.444903][T16429] /dev/rnullb0: Can't open blockdev [ 285.473054][T16440] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5556'. [ 285.475157][ T36] audit: type=1400 audit(2000000329.202:67623): avc: denied { read } for pid=16437 comm="syz.5.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.541481][T16378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.546387][T16379] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 285.557450][T16378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.564582][T16379] rust_binder: Write failure EINVAL in pid:456 [ 285.568750][T15355] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71 [ 285.589518][T15355] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 285.598354][T15355] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71 [ 285.606828][T15355] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 285.614830][T15355] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 285.624466][T16456] rust_binder: Write failure EFAULT in pid:213 [ 285.626950][T16465] incfs: Options parsing error. -22 [ 285.635818][T15355] usb 2-1: USB disconnect, device number 26 [ 285.642467][T16465] incfs: mount failed -22 [ 285.650352][T16465] netlink: 'syz.6.5564': attribute type 4 has an invalid length. [ 285.699981][T16475] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5567'. [ 285.943478][ T473] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 286.094713][ T473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.108452][ T473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.118580][ T473] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 286.129294][ T473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.141364][ T473] usb 6-1: config 0 descriptor?? [ 286.221513][T16495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.221671][T16495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:464 [ 286.228677][T16495] rust_binder: Error while translating object. [ 286.238198][T16495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 286.244496][T16495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 286.270627][T16497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.308156][T16501] overlay: Unknown parameter 'uid>00000000000000000000' [ 286.318023][T16502] SELinux: failed to load policy [ 286.346669][T16504] netlink: 'syz.6.5579': attribute type 16 has an invalid length. [ 286.355903][T16504] netlink: 'syz.6.5579': attribute type 25 has an invalid length. [ 286.365058][T16504] netlink: 64094 bytes leftover after parsing attributes in process `syz.6.5579'. [ 286.392843][T16512] /dev/nbd1: Can't lookup blockdev [ 286.404713][T16514] netlink: 'syz.6.5583': attribute type 27 has an invalid length. [ 286.433380][T16518] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5585'. [ 286.563797][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.573252][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.582114][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.590753][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.800666][ T473] usbhid 6-1:0.0: can't add hid device: -71 [ 286.806762][ T473] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 286.815489][ T473] usb 6-1: USB disconnect, device number 10 [ 287.350622][T16556] syz.5.5598: attempt to access beyond end of device [ 287.350622][T16556] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 287.363896][T16556] EXT4-fs (loop5): unable to read superblock [ 287.402110][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5600'. [ 287.551477][T16575] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 287.573798][T16577] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 287.593774][T16577] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 287.629743][T16577] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 287.679510][T16578] overlayfs: missing 'lowerdir' [ 287.998833][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5612'. [ 288.019235][ T36] audit: type=1400 audit(2000000331.752:67624): avc: denied { map } for pid=16590 comm="syz.1.5612" path="socket:[57897]" dev="sockfs" ino=57897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 288.262005][T16606] rust_binder: 224: no such ref 3 [ 288.638714][T16630] can0: slcan on ttyS3. [ 288.649545][T16630] netlink: 'syz.5.5626': attribute type 4 has an invalid length. [ 288.664995][T16630] netlink: 'syz.5.5626': attribute type 4 has an invalid length. [ 288.723106][T16637] overlayfs: failed to clone upperpath [ 288.753992][T16630] can0 (unregistered): slcan off ttyS3. [ 288.953485][ T473] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 289.103831][ T473] usb 2-1: Using ep0 maxpacket: 32 [ 289.110274][ T473] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 289.118428][ T473] usb 2-1: config 0 has no interface number 0 [ 289.124624][ T473] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.135644][ T473] usb 2-1: config 0 interface 85 has no altsetting 0 [ 289.156215][ T473] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 289.165489][ T473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.173722][ T473] usb 2-1: Product: syz [ 289.177922][ T473] usb 2-1: Manufacturer: syz [ 289.182545][ T473] usb 2-1: SerialNumber: syz [ 289.191716][ T473] usb 2-1: config 0 descriptor?? [ 289.192017][ T293] tipc: Subscription rejected, illegal request [ 289.289038][T16681] rust_binder: Error while translating object. [ 289.289088][T16681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.305296][T16681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 289.317914][T16685] tipc: Enabling of bearer rejected, failed to enable media [ 289.363458][ T36] audit: type=1400 audit(2000000333.092:67625): avc: denied { ioctl } for pid=16689 comm="syz.5.5639" path="pid:[4026532303]" dev="nsfs" ino=4026532303 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 289.400801][T16692] 9pnet_fd: Insufficient options for proto=fd [ 289.581939][T16736] tipc: Started in network mode [ 289.594654][T16736] tipc: Node identity 424d9aa5c5b8, cluster identity 4711 [ 289.610191][T16634] /dev/rnullb0: Can't open blockdev [ 289.612883][T16736] tipc: Enabled bearer , priority 0 [ 289.616428][T13630] usb 2-1: USB disconnect, device number 27 [ 289.636529][T16740] tipc: Disabling bearer [ 290.179874][T16794] usb usb8: selecting invalid altsetting 6 [ 290.183108][T16797] cgroup: No subsys list or none specified [ 290.284766][ T36] audit: type=1326 audit(2000000334.022:67626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.6.5660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 290.317365][T16816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.370249][T16821] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 290.376800][T16821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 290.385800][T16821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:527 [ 290.408250][ T36] audit: type=1400 audit(2000000334.142:67627): avc: denied { create } for pid=16826 comm="syz.2.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 291.170385][T16845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.170850][T16845] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 291.177523][T16845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 291.185882][T16845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:530 [ 291.262342][T16857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.282676][T16857] rust_binder: 534: no such ref 3 [ 291.294398][T16857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 291.295057][T16857] rust_binder: Error while translating object. [ 291.304567][T16857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.310762][T16857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 291.321000][T16860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.340269][ T36] audit: type=1326 audit(2000000335.072:67628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.6.5675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 291.392709][ T36] audit: type=1326 audit(2000000335.132:67629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16854 comm="syz.6.5675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 291.463561][T16866] binder: Binderfs stats mode cannot be changed during a remount [ 291.483622][T16868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.484597][T16869] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=16869 comm=syz.1.5679 [ 291.484907][T16868] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 291.503869][T16868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 291.511986][T16868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:541 [ 291.563757][T16883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.573646][T16883] rust_binder: Error while translating object. [ 291.580119][T16883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 291.586573][T16883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:547 [ 291.793566][T15356] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 291.813814][T16892] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5688'. [ 291.824077][T16892] overlayfs: failed to clone upperpath [ 291.842744][T16894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=16894 comm=syz.2.5689 [ 291.873513][T13630] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 291.964686][T15356] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.973486][T15356] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.983663][T15356] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.992653][T15356] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.006774][T15356] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.015913][T15356] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.023967][T15356] usb 6-1: Product: syz [ 292.028159][T15356] usb 6-1: Manufacturer: syz [ 292.034260][T13630] usb 2-1: Using ep0 maxpacket: 16 [ 292.035569][T15356] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 292.043671][T13630] usb 2-1: too many configurations: 97, using maximum allowed: 8 [ 292.055909][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.066182][T13630] usb 2-1: config 0 has no interfaces? [ 292.076372][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.086694][T13630] usb 2-1: config 0 has no interfaces? [ 292.092926][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.103185][T13630] usb 2-1: config 0 has no interfaces? [ 292.109453][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.119874][T13630] usb 2-1: config 0 has no interfaces? [ 292.126375][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.136885][T13630] usb 2-1: config 0 has no interfaces? [ 292.143344][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.153575][T13630] usb 2-1: config 0 has no interfaces? [ 292.159763][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.170081][T13630] usb 2-1: config 0 has no interfaces? [ 292.176288][T13630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.186590][T13630] usb 2-1: config 0 has no interfaces? [ 292.193797][T13630] usb 2-1: string descriptor 0 read error: -71 [ 292.200092][T13630] usb 2-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 292.209167][T13630] usb 2-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 292.218394][T13630] usb 2-1: config 0 descriptor?? [ 292.223672][T13630] usb 2-1: can't set config #0, error -71 [ 292.230396][T13630] usb 2-1: USB disconnect, device number 28 [ 292.440797][T16916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=16916 comm=syz.2.5697 [ 292.454983][T16916] tipc: Enabling of bearer rejected, failed to enable media [ 292.672185][T16952] overlayfs: failed to clone upperpath [ 292.893212][ T36] audit: type=1400 audit(2000000336.622:67630): avc: denied { execute } for pid=16982 comm="syz.6.5719" name="file0" dev="rootfs" ino=17852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 292.916090][ T36] audit: type=1400 audit(2000000336.622:67631): avc: denied { execute_no_trans } for pid=16982 comm="syz.6.5719" path="/file0" dev="rootfs" ino=17852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 293.352986][T16999] overlayfs: failed to clone upperpath [ 293.599200][T17010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.599727][T17010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 293.606511][T17010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:564 [ 293.758699][T17017] binder: Bad value for 'defcontext' [ 293.776270][ T36] audit: type=1400 audit(2000000337.512:67632): avc: denied { create } for pid=17016 comm="syz.1.5732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 293.835932][T17022] futex_wake_op: syz.6.5734 tries to shift op by -1; fix this program [ 293.921398][T17030] netlink: 'syz.6.5735': attribute type 4 has an invalid length. [ 294.560633][ T9] usb 6-1: USB disconnect, device number 11 [ 294.624792][T17068] binder: Bad value for 'stats' [ 294.685682][T17079] tipc: Enabling of bearer rejected, failed to enable media [ 294.722950][T17089] rust_binder: Error while translating object. [ 294.723044][T17089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 294.729330][T17089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:288 [ 294.870156][T17098] rust_binder: Error while translating object. [ 294.893312][T17098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 294.910123][T17098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295 [ 294.964005][T17102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.993976][T17104] netlink: 'syz.6.5763': attribute type 1 has an invalid length. [ 295.051814][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5771'. [ 295.223654][T17131] can0: slcan on ttyS3. [ 295.234987][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 295.265713][T17131] can0 (unregistered): slcan off ttyS3. [ 295.284606][T17143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.295423][T17143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.403479][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 295.414915][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 295.423115][ T9] usb 2-1: config 0 has no interface number 0 [ 295.431505][ T293] bridge_slave_1: left allmulticast mode [ 295.437286][ T293] bridge_slave_1: left promiscuous mode [ 295.447457][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.454758][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 295.465627][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.475374][ T293] bridge_slave_0: left allmulticast mode [ 295.481116][ T293] bridge_slave_0: left promiscuous mode [ 295.486733][ T9] usb 2-1: Product: syz [ 295.490932][ T9] usb 2-1: Manufacturer: syz [ 295.495714][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.503253][ T9] usb 2-1: SerialNumber: syz [ 295.513469][T15355] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 295.519634][ T9] usb 2-1: config 0 descriptor?? [ 295.544308][ T9] smsc95xx v2.0.0 [ 295.649848][ T293] veth1_macvtap: left promiscuous mode [ 295.655530][ T293] veth0_vlan: left promiscuous mode [ 295.673484][T15355] usb 6-1: Using ep0 maxpacket: 8 [ 295.684871][T15355] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 295.703467][T15355] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.725504][T15355] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 295.743451][T15355] usb 6-1: config 1 has no interface number 1 [ 295.759260][T15355] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.772508][T15355] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.787106][T15355] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.811515][T15355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.819849][T15355] usb 6-1: Product: syz [ 295.824299][T15355] usb 6-1: Manufacturer: syz [ 295.828988][T15355] usb 6-1: SerialNumber: syz [ 295.866447][T17177] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5784'. [ 295.897840][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.905222][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.912460][T17173] bridge_slave_0: entered allmulticast mode [ 295.919338][T17173] bridge_slave_0: entered promiscuous mode [ 295.926301][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.933392][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.940856][T17173] bridge_slave_1: entered allmulticast mode [ 295.947505][T17173] bridge_slave_1: entered promiscuous mode [ 296.014282][T17192] netlink: 1504 bytes leftover after parsing attributes in process `syz.6.5789'. [ 296.023683][T17192] netlink: 280 bytes leftover after parsing attributes in process `syz.6.5789'. [ 296.039312][ T36] audit: type=1326 audit(2000000339.772:67633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.6.5789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59aeb8eba9 code=0x0 [ 296.076856][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.084005][T17173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.091423][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.098523][T17173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.131383][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.139424][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.153083][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.160189][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.171318][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.178425][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.218223][T17173] veth0_vlan: entered promiscuous mode [ 296.234233][T17173] veth1_macvtap: entered promiscuous mode [ 296.275099][ T36] audit: type=1400 audit(2000000340.002:67634): avc: denied { remount } for pid=17141 comm="syz.5.5778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 296.303736][T17143] option changes via remount are deprecated (pid=17141 comm=syz.5.5778) [ 296.314083][T17143] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 296.336521][T15355] usb 6-1: USB disconnect, device number 12 [ 296.368128][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 296.465465][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5792'. [ 296.474793][T17208] rust_binder: Write failure EFAULT in pid:9 [ 296.539206][T17212] /dev/rnullb0: Can't open blockdev [ 296.569331][T17106] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 296.582191][T17216] SELinux: security_context_str_to_sid () failed with errno=-22 [ 296.591269][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 296.606557][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 296.627210][ T9] usb 2-1: USB disconnect, device number 29 [ 296.682063][T17218] usb usb1: usbfs: process 17218 (syz.5.5796) did not claim interface 2 before use [ 296.781781][T17231] rust_binder: 321: no such ref 1 [ 296.787630][T17231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 297.033484][T15357] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 297.117383][T17256] SELinux: failed to load policy [ 297.197274][T15357] usb 6-1: Using ep0 maxpacket: 16 [ 297.205884][T15357] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.216062][T15357] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.218966][T17264] netlink: 'syz.1.5810': attribute type 16 has an invalid length. [ 297.226372][T15357] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.247761][T15357] usb 6-1: config 1 interface 0 has no altsetting 0 [ 297.256898][T15357] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 297.267324][T15357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.275604][T15357] usb 6-1: Product: syz [ 297.280069][T15357] usb 6-1: Manufacturer: syz [ 297.284809][T15357] usb 6-1: SerialNumber: syz [ 297.465383][T17277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.465527][T17277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 297.472139][T17277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:615 [ 297.493357][T15357] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 297.844022][T17287] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 297.850775][T13630] usb 6-1: USB disconnect, device number 13 [ 297.865734][T13630] usblp0: removed [ 297.947210][T17296] rust_binder: pid 17296 performed invalid decrement on ref [ 297.976916][T17300] rust_binder: Error while translating object. [ 297.976952][T17300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.983266][T17300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 298.166209][ T36] audit: type=1400 audit(2000000341.902:67635): avc: denied { accept } for pid=17301 comm="syz.5.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.193652][T17310] binder: Unknown parameter 'defcontext01777777777777777777777' [ 298.460360][T17353] rust_binder: Write failure EFAULT in pid:640 [ 298.476244][T17355] rust_binder: 642: no such ref 3 [ 298.487618][T17355] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 298.494770][T17355] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 298.501879][T17355] rust_binder: Write failure EFAULT in pid:642 [ 298.590344][T17360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.596781][T17360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:647 [ 298.603244][T17360] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 298.612416][T17360] rust_binder: Read failure Err(EFAULT) in pid:647 [ 298.620890][T17360] rust_binder: Read failure Err(EAGAIN) in pid:647 [ 298.686774][T17369] tipc: Enabled bearer , priority 0 [ 298.706934][T17369] tipc: Disabling bearer [ 298.883541][T15355] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 299.034966][T15355] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.045063][T15355] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 299.054757][ T36] audit: type=1400 audit(2000000342.792:67636): avc: denied { shutdown } for pid=17391 comm="syz.6.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.055116][T15355] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.089633][T15355] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 299.098849][T15355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.107026][T15355] usb 2-1: Product: syz [ 299.111266][T15355] usb 2-1: Manufacturer: syz [ 299.115949][T15355] usb 2-1: SerialNumber: syz [ 299.124463][T15355] hub 2-1:1.0: bad descriptor, ignoring hub [ 299.130415][T15355] hub 2-1:1.0: probe with driver hub failed with error -5 [ 299.334152][T15355] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 299.374244][T15355] usb 2-1: USB disconnect, device number 30 [ 299.383701][T15355] usblp0: removed [ 299.442612][T17406] overlayfs: failed to clone upperpath [ 299.706112][T17462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17462 comm=syz.6.5880 [ 299.782472][T17468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 299.791283][T17468] overlayfs: missing 'lowerdir' [ 299.797263][T17468] overlayfs: failed to clone lowerpath [ 299.829340][T17472] overlayfs: failed to clone upperpath [ 299.899360][T17485] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 300.096297][ T36] audit: type=1400 audit(2000000343.832:67637): avc: denied { read } for pid=17513 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 300.185427][T17523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.194754][T17523] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 300.194854][T17523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 300.206025][T17523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:670 [ 300.334038][T17529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.363761][T17528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } Stopping sshd: [ 300.381223][T17528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:675 stopped /usr/sbi[ 300.516215][T17537] rust_binder: BINDER_SET_CONTEXT_MGR already set n/sshd (pid 201)[ 300.554281][T17540] overlayfs: "xino" feature enabled using 2 upper inode bits. OK Stopping crond: stopped /usr/sbin/crond (pid 194) [ 300.564162][T17537] rust_binder: Write failure EINVAL in pid:680 OK [ 300.658173][T17545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:680 [ 300.731189][T17555] bridge_slave_0: entered promiscuous mode Stopping dhcpcd... [ 300.753781][T17555] bridge_slave_0: entered allmulticast mode stopped /sbin/dhcpcd (pid 148) Stopping network: [ 300.939916][ T36] audit: type=1400 audit(2000000344.672:67638): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 300.992954][ T36] audit: type=1400 audit(2000000344.722:67639): avc: denied { read write } for pid=17584 comm="ip" path="/dev/console" dev="rootfs" ino=49 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping iptables: [ 301.090473][T17598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.122243][ T36] audit: type=1400 audit(2000000344.852:67640): avc: denied { read write } for pid=17601 comm="iptables" path="/dev/console" dev="rootfs" ino=49 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 301.164872][ T36] audit: type=1400 audit(2000000344.902:67641): avc: denied { search } for pid=17601 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK [ 301.187431][ T36] audit: type=1400 audit(2000000344.902:67642): avc: denied { write } for pid=17601 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 301.209957][ T36] audit: type=1400 audit(2000000344.902:67643): avc: denied { add_name } for pid=17601 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.215239][T17610] netlink: 'syz.7.5918': attribute type 6 has an invalid length. message bus: [ 301.241665][ T36] audit: type=1400 audit(2000000344.902:67644): avc: denied { create } for pid=17601 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 301.253473][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5918'. [ 301.264919][ T36] audit: type=1400 audit(2000000344.902:67645): avc: denied { read open } for pid=17601 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=4087 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 301.430284][T17627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.438227][T17627] rust_binder: inc_ref_done called when no active inc_refs Stopping klogd: OK Stopping acpid: [ 301.452090][T17627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358 [ 302.299191][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 302.317572][T17657] can0: slcan on ttyS3. [ 302.409145][T17657] can0 (unregistered): slcan off ttyS3. [ 302.412592][T17662] /dev/rnullb0: Can't open blockdev [ 302.432000][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5933'. [ 302.441639][T17664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.441663][T17664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:368 [ 302.475981][T17669] /dev/rnullb0: Can't open blockdev [ 302.501573][T17672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.501697][T17671] rust_binder: 375: no such ref 3 [ 302.513360][T17671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:375 [ 302.513999][T17671] rust_binder: Error while translating object. [ 302.523347][T17671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.530333][T17671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:375 [ 302.568481][ T293] Bluetooth: hci1: Frame reassembly failed (-84) OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.165 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 304.306891][ T366] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 304.307817][T17679] Bluetooth: hci0: command 0x1003 tx timeout [ 304.360435][ T293] bridge_slave_1: left allmulticast mode [ 304.366266][ T293] bridge_slave_1: left promiscuous mode [ 304.371953][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.379512][ T293] bridge_slave_0: left allmulticast mode [ 304.385443][ T293] bridge_slave_0: left promiscuous mode [ 304.391087][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.516604][ T293] veth1_macvtap: left promiscuous mode [ 304.522137][ T293] veth0_vlan: left promiscuous mode [ 304.623651][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 304.623781][ T366] Bluetooth: hci1: command 0x1003 tx timeout [ 304.844851][ T293] bridge_slave_1: left allmulticast mode [ 304.850529][ T293] bridge_slave_1: left promiscuous mode [ 304.856235][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.864007][ T293] bridge_slave_0: left allmulticast mode [ 304.869670][ T293] bridge_slave_0: left promiscuous mode [ 304.875377][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.883244][ T293] bridge_slave_1: left allmulticast mode [ 304.889036][ T293] bridge_slave_1: left promiscuous mode [ 304.894726][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.902216][ T293] bridge_slave_0: left allmulticast mode [ 304.907960][ T293] bridge_slave_0: left promiscuous mode [ 304.913669][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.953483][T17688] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 304.960377][T17688] ACPI: PM: Preparing to enter system sleep state S5 [ 304.967574][T17688] kvm: exiting hardware virtualization [ 304.973121][T17688] reboot: Power down serialport: VM disconnected.