last executing test programs: 5.148329646s ago: executing program 3 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 4.986151173s ago: executing program 3 (id=809): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f00000001c0)={0x20080522, r0}, &(0x7f0000000700)={0x7, 0x794, 0xd, 0x8, 0x8001, 0x6}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x149040, 0x40) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setlease(r3, 0x400, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="696e6f646533322c6e725f696e6f8765733d382c"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x804) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) 4.084640052s ago: executing program 3 (id=812): mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.938578579s ago: executing program 2 (id=813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000004000008510000006000000180a0000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.22377992s ago: executing program 2 (id=821): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x7}}, {}]}) 3.038528198s ago: executing program 0 (id=824): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.016019959s ago: executing program 0 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x1c00}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) unshare(0x60600) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2.849866236s ago: executing program 0 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001340)="0e9849f1"}) 2.806657228s ago: executing program 0 (id=829): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.966620204s ago: executing program 0 (id=834): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) r5 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f00000010c0)) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa68, 0x4e}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x80000000}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2e}, @NL80211_ATTR_PMKID={0x14, 0x55, "3b7f9a2b3c27c473b1554ea377c2f2e7"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c85225aebf29f4344f48e9c4473f9bac"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x800) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.966459295s ago: executing program 2 (id=835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.269787605s ago: executing program 4 (id=837): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x7}}, {}]}) 1.269416165s ago: executing program 1 (id=838): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc080) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) syz_open_procfs$namespace(0x0, 0x0) socket(0x21, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.263011885s ago: executing program 4 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x1c00}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) unshare(0x60600) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.222003177s ago: executing program 1 (id=840): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001340)="0e9849f1"}) 1.185599568s ago: executing program 1 (id=841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 1.104940722s ago: executing program 1 (id=842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.104659052s ago: executing program 4 (id=843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 1.104480152s ago: executing program 2 (id=844): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000d"], 0x0, 0x26}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0x2, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x0, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x4, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x3, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 1.044414674s ago: executing program 1 (id=845): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 944.162849ms ago: executing program 3 (id=846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 943.338979ms ago: executing program 2 (id=847): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)={[{@min_batch_time}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") 839.630713ms ago: executing program 3 (id=848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001340)="0e9849f1"}) 832.855154ms ago: executing program 2 (id=849): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x7}}, {}]}) 700.46639ms ago: executing program 3 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 234.26666ms ago: executing program 4 (id=851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001340)="0e9849f1"}) 114.767475ms ago: executing program 4 (id=852): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x2ca86d798c1fe4dd) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d}, 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r3 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000200060c10000000010000000000", 0x58}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = dup2(r2, r3) sendmmsg$unix(r3, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="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", 0xfd}, {&(0x7f00000007c0)}], 0x2, 0x0, 0x0, 0x10}}, {{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000980)="d069499183e34ff74dadfae97114efc8adcc4c05ffc526cbfee0587432ee23a269e4", 0x22}], 0x1, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x34, 0x1, 0x1, [r3, r2, 0xffffffffffffffff, r3, r3, r0, r2, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1, r4}}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r3, r5, r6, r2, r7, r0]}}], 0xc0, 0x4}}], 0x2, 0x20000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 49.875078ms ago: executing program 1 (id=853): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 49.525568ms ago: executing program 4 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x1c00}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) unshare(0x60600) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 0s ago: executing program 0 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 23.114721][ T28] audit: type=1400 audit(1778629092.837:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.118581][ T279] cgroup: Unknown subsys name 'net' [ 23.142782][ T28] audit: type=1400 audit(1778629092.837:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.164941][ T28] audit: type=1400 audit(1778629092.867:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.165253][ T279] cgroup: Unknown subsys name 'devices' [ 23.310227][ T279] cgroup: Unknown subsys name 'hugetlb' [ 23.316018][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.421498][ T28] audit: type=1400 audit(1778629093.147:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.444817][ T28] audit: type=1400 audit(1778629093.147:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.469794][ T28] audit: type=1400 audit(1778629093.147:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.494171][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.503620][ T28] audit: type=1400 audit(1778629093.227:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.529106][ T28] audit: type=1400 audit(1778629093.227:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.583451][ T28] audit: type=1400 audit(1778629093.307:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.584640][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.609036][ T28] audit: type=1400 audit(1778629093.307:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.466181][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.473315][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.480975][ T287] device bridge_slave_0 entered promiscuous mode [ 24.503108][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.510216][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.517601][ T288] device bridge_slave_0 entered promiscuous mode [ 24.524500][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.531682][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.539448][ T287] device bridge_slave_1 entered promiscuous mode [ 24.553825][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.560989][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.568502][ T288] device bridge_slave_1 entered promiscuous mode [ 24.612838][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.619990][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.627473][ T290] device bridge_slave_0 entered promiscuous mode [ 24.634300][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.641403][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.648937][ T291] device bridge_slave_0 entered promiscuous mode [ 24.657402][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.664520][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.672016][ T291] device bridge_slave_1 entered promiscuous mode [ 24.688118][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.695206][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.702830][ T290] device bridge_slave_1 entered promiscuous mode [ 24.740856][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.748082][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.755506][ T289] device bridge_slave_0 entered promiscuous mode [ 24.765578][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.772695][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.780233][ T289] device bridge_slave_1 entered promiscuous mode [ 24.929299][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.936397][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.943741][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.950798][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.004959][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.012069][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.019373][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.026413][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.045010][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.052127][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.059453][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.066525][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.076639][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.083831][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.091259][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.098419][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.123312][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.130422][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.137707][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.144773][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.178470][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.185913][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.193656][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.201893][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.209225][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.216548][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.224014][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.231228][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.238504][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.245675][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.253802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.261275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.290366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.298450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.306719][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.313815][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.321401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.330008][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.337047][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.344515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.352706][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.359809][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.367180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.375471][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.382526][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.389944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.397389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.404952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.413128][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.420216][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.438234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.450113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.458317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.466264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.474245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.485522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.494028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.502257][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.509321][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.533191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.541823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.550144][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.557175][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.565213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.574144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.582414][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.589462][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.596788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.605154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.613337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.621623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.629720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.637782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.660096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.668619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.677067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.685770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.694389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.702889][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.710090][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.717702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.726122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.734426][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.741510][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.749237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.759345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.768569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.776739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.789959][ T287] device veth0_vlan entered promiscuous mode [ 25.805282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.813637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.823028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.837518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.845552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.853429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.861803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.869899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.878193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.886135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.894453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.902749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.911242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.921376][ T287] device veth1_macvtap entered promiscuous mode [ 25.928963][ T289] device veth0_vlan entered promiscuous mode [ 25.936946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.944759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.953318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.966694][ T291] device veth0_vlan entered promiscuous mode [ 25.977272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.985798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.993605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.005645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.017009][ T289] device veth1_macvtap entered promiscuous mode [ 26.026171][ T291] device veth1_macvtap entered promiscuous mode [ 26.034222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.056207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.066879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.076562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.086408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.095308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.104417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.113055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.121783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.130254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.138718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.156995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.165601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.173881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.182355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.191235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.198799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.212714][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 26.230398][ T288] device veth0_vlan entered promiscuous mode [ 26.238324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.246751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.255370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.264255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.273552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.281612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.301161][ T290] device veth0_vlan entered promiscuous mode [ 26.319902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.331465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.341023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.354825][ T288] device veth1_macvtap entered promiscuous mode [ 26.372065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.383764][ T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.411627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.422481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.433351][ T290] device veth1_macvtap entered promiscuous mode [ 26.448003][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.456966][ T318] binder: 317:318 ioctl c0306201 2000000001c0 returned -14 [ 26.458816][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.848754][ T60] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.039153][ T60] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.050653][ T60] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.061076][ T60] usb 3-1: config 2 interface 0 has no altsetting 0 [ 27.067720][ T60] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 27.077169][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.127888][ T309] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.320614][ T309] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 27.329835][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.338133][ T309] usb 4-1: Product: syz [ 27.342434][ T309] usb 4-1: Manufacturer: syz [ 27.347063][ T309] usb 4-1: SerialNumber: syz [ 27.356382][ T309] usb 4-1: config 0 descriptor?? [ 27.429537][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.438211][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.446759][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.456256][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.494100][ T60] elo 0003:04E7:0009.0001: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0 [ 27.699408][ T60] usb 3-1: USB disconnect, device number 2 [ 28.028940][ T349] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12'. [ 28.045393][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.117905][ T339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.276791][ T19] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.285602][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.296457][ T19] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 28.306798][ T19] usb 2-1: config 1 has no interface number 1 [ 28.313924][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 28.314086][ T339] usb 1-1: config 0 has no interfaces? [ 28.335751][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.349343][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 28.349369][ T339] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.352504][ T28] audit: type=1400 audit(1778629098.067:128): avc: denied { create } for pid=350 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.355707][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.375340][ T28] audit: type=1400 audit(1778629098.067:129): avc: denied { write } for pid=350 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.385344][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.422080][ T19] usb 2-1: Product: syz [ 28.443692][ T19] usb 2-1: Manufacturer: syz [ 28.449125][ T19] usb 2-1: SerialNumber: syz [ 28.454067][ T339] usb 1-1: SerialNumber: syz [ 28.464858][ T339] usb 1-1: config 0 descriptor?? [ 28.494408][ T28] audit: type=1400 audit(1778629098.067:130): avc: denied { read } for pid=350 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.685643][ T19] usb 2-1: MIDIStreaming interface descriptor not found [ 28.719379][ T28] audit: type=1400 audit(1778629098.447:131): avc: denied { create } for pid=342 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 28.746464][ T19] usb 2-1: USB disconnect, device number 2 [ 28.754862][ T24] usb 1-1: USB disconnect, device number 2 [ 28.990396][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.024364][ T28] audit: type=1400 audit(1778629098.747:132): avc: denied { create } for pid=358 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.046042][ T28] audit: type=1400 audit(1778629098.767:133): avc: denied { ioctl } for pid=358 comm="syz.4.14" path="socket:[15230]" dev="sockfs" ino=15230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.156716][ T354] syz.2.13 (354) used greatest stack depth: 20272 bytes left [ 29.203656][ T28] audit: type=1400 audit(1778629098.907:134): avc: denied { write } for pid=361 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.223789][ T28] audit: type=1400 audit(1778629098.907:135): avc: denied { ioctl } for pid=361 comm="syz.4.15" path="socket:[15240]" dev="sockfs" ino=15240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.347507][ T28] audit: type=1400 audit(1778629099.067:136): avc: denied { create } for pid=367 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.406154][ T28] audit: type=1400 audit(1778629099.107:137): avc: denied { write } for pid=368 comm="syz.0.18" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.577124][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.838971][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.879879][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.892285][ T394] ======================================================= [ 29.892285][ T394] WARNING: The mand mount option has been deprecated and [ 29.892285][ T394] and is ignored by this kernel. Remove the mand [ 29.892285][ T394] option from the mount to silence this warning. [ 29.892285][ T394] ======================================================= [ 29.943776][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 29.958856][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.977414][ T382] usb 4-1: USB disconnect, device number 2 [ 30.107721][ T24] usb 5-1: config 0 descriptor?? [ 30.189629][ T39] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 30.389551][ T39] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 30.398516][ T39] usb 1-1: config 0 has no interface number 0 [ 30.415880][ T39] usb 1-1: config 0 interface 41 has no altsetting 0 [ 30.425182][ T39] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 30.434724][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.443979][ T39] usb 1-1: Product: syz [ 30.448846][ T39] usb 1-1: Manufacturer: syz [ 30.453542][ T39] usb 1-1: SerialNumber: syz [ 30.462572][ T39] usb 1-1: config 0 descriptor?? [ 30.527510][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.534586][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.541779][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.556072][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.563896][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.571932][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.579523][ T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 30.590739][ T24] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 30.728015][ T24] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 30.813935][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.033858][ T24] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 31.048588][ T24] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 31.059081][ T24] usb 5-1: USB disconnect, device number 2 [ 31.088443][ T411] fido_id[411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 31.139206][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.149591][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.158834][ T60] usb 4-1: config 1 has no interface number 0 [ 31.164986][ T60] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.179557][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 31.188684][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.196733][ T60] usb 4-1: Product: syz [ 31.201009][ T60] usb 4-1: Manufacturer: syz [ 31.205694][ T60] usb 4-1: SerialNumber: syz [ 31.212288][ T60] cdc_ncm 4-1:1.1: skipping garbage [ 31.217585][ T60] usb 4-1: selecting invalid altsetting 1 [ 31.461033][ T39] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 31.515507][ T39] CoreChips: probe of 1-1:0.41 failed with error -71 [ 31.523873][ T39] usb 1-1: USB disconnect, device number 3 [ 31.704847][ T434] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 31.733781][ T434] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 31.745542][ T434] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 31.818985][ T60] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 31.837969][ T60] usb 4-1: selecting invalid altsetting 1 [ 31.843833][ T60] cdc_ncm 4-1:1.1: bind() failure [ 31.854682][ T60] usb 4-1: USB disconnect, device number 3 [ 32.146232][ T19] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 32.357868][ T339] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 32.389800][ T19] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.178007][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.218877][ T462] mmap: syz.3.50 (462) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.311735][ T466] xt_bpf: check failed: parse error [ 33.367943][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 33.374371][ T39] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 33.383493][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.394119][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.404939][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.414429][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.422314][ T19] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.423457][ T39] usb 3-1: Product: syz [ 33.432542][ T19] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.437781][ T39] usb 3-1: Manufacturer: syz [ 33.450528][ T19] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.454299][ T39] usb 3-1: SerialNumber: syz [ 33.460622][ T19] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 33.460647][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.483787][ T19] usb 2-1: config 0 descriptor?? [ 33.489272][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 33.489305][ T28] audit: type=1400 audit(1778629103.217:162): avc: denied { create } for pid=461 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.519032][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.530138][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.547893][ T339] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 33.567866][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.590250][ T339] usb 5-1: config 0 descriptor?? [ 33.627914][ T60] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 33.663915][ T28] audit: type=1400 audit(1778629103.387:163): avc: denied { mount } for pid=461 comm="syz.3.50" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.689216][ T39] usb 3-1: 0:2 : does not exist [ 33.697672][ T39] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 33.719730][ T39] usb 3-1: USB disconnect, device number 3 [ 33.728044][ T28] audit: type=1400 audit(1778629103.387:164): avc: denied { remount } for pid=461 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.817954][ T60] usb 1-1: Invalid ep0 maxpacket: 64 [ 33.897435][ T19] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 33.904855][ T19] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 33.912158][ T19] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 33.919397][ T19] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 33.926514][ T19] holtek 0003:1241:5015.0003: unknown main item tag 0x0 [ 33.936194][ T19] holtek 0003:1241:5015.0003: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 33.947646][ T19] holtek 0003:1241:5015.0003: no inputs found [ 33.958854][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.974771][ T60] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 33.998735][ T339] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 34.010015][ T339] cp2112 0003:10C4:EA90.0004: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 34.117224][ T19] usb 2-1: USB disconnect, device number 3 [ 34.157925][ T60] usb 1-1: Invalid ep0 maxpacket: 64 [ 34.163356][ T60] usb usb1-port1: attempt power cycle [ 34.175853][ T28] audit: type=1400 audit(1778629103.897:165): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 34.198926][ T339] cp2112 0003:10C4:EA90.0004: error requesting version [ 34.207006][ T339] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 34.220270][ T28] audit: type=1400 audit(1778629103.947:166): avc: denied { set_context_mgr } for pid=471 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.243821][ T339] usb 5-1: USB disconnect, device number 3 [ 34.259421][ T28] audit: type=1400 audit(1778629103.967:167): avc: denied { map } for pid=471 comm="syz.3.52" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.288116][ T28] audit: type=1400 audit(1778629103.967:168): avc: denied { call } for pid=471 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.314705][ T474] fido_id[474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 34.316855][ T28] audit: type=1400 audit(1778629104.037:169): avc: denied { read append } for pid=476 comm="syz.3.54" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.352376][ T28] audit: type=1400 audit(1778629104.037:170): avc: denied { open } for pid=476 comm="syz.3.54" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.375351][ T28] audit: type=1400 audit(1778629104.037:171): avc: denied { ioctl } for pid=476 comm="syz.3.54" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.527899][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.577916][ T60] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 34.608480][ T60] usb 1-1: Invalid ep0 maxpacket: 64 [ 34.709448][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.728625][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.754330][ T39] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.763630][ T60] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 34.772447][ T39] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 34.784028][ T39] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 34.797462][ T39] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 34.808583][ T39] usb 3-1: config 1 interface 1 has no altsetting 0 [ 34.815459][ T60] usb 1-1: Invalid ep0 maxpacket: 64 [ 34.821257][ T60] usb usb1-port1: unable to enumerate USB device [ 34.829139][ T490] binder: 489:490 ioctl c0306201 200000000280 returned -14 [ 34.839289][ T39] usb 3-1: string descriptor 0 read error: -22 [ 34.853655][ T39] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 34.874817][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.122570][ T497] binder: 492:497 ioctl c00c620f 0 returned -14 [ 35.586570][ T505] kvm: pic: non byte read [ 35.595314][ T505] kvm: pic: non byte read [ 35.604496][ T505] kvm: pic: non byte read [ 35.617001][ T505] kvm: pic: non byte read [ 35.627461][ T505] kvm: pic: non byte read [ 35.632971][ T505] kvm: pic: non byte read [ 35.638692][ T505] kvm: pic: non byte read [ 35.643284][ T505] kvm: pic: non byte read [ 35.648086][ T505] kvm: pic: non byte read [ 35.652671][ T505] kvm: pic: non byte read [ 35.874163][ T515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 36.004050][ T532] Illegal XDP return value 1626506432 on prog (id 5) dev syz_tun, expect packet loss! [ 36.042683][ T39] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 36.070911][ T39] usb 3-1: USB disconnect, device number 4 [ 36.387941][ T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.447893][ T298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.605888][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 36.612522][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.623993][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.634272][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.647509][ T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.656885][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.667935][ T60] usb 4-1: config 0 descriptor?? [ 36.677386][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 36.683870][ T298] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 36.692711][ T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.702856][ T298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.708054][ T382] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.721003][ T298] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.730494][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.745497][ T298] usb 2-1: Product: syz [ 36.749763][ T298] usb 2-1: Manufacturer: syz [ 36.754437][ T298] usb 2-1: SerialNumber: syz [ 36.767037][ T555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.86'. [ 36.776219][ T555] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.783444][ T555] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.796610][ T555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.86'. [ 36.935531][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.946583][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.948719][ T562] fuse: root generation should be zero [ 36.956675][ T382] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 36.971113][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.984770][ T382] usb 1-1: config 0 descriptor?? [ 37.033109][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 37.040637][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 37.049889][ T298] usb 2-1: 0:2 : does not exist [ 37.057573][ T298] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 37.082203][ T298] usb 2-1: USB disconnect, device number 4 [ 37.092891][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input4 [ 37.289188][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.421544][ T382] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 37.433368][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 37.438477][ T382] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 37.442913][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 37.457961][ T382] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 37.468069][ T60] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 37.506718][ T60] usb 4-1: USB disconnect, device number 4 [ 37.566578][ T570] fido_id[570]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 37.601342][ T382] hid-led: probe of 0003:1D34:000A.0006 failed with error -71 [ 37.618886][ T382] usb 1-1: USB disconnect, device number 8 [ 37.879115][ T298] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.151571][ T298] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 38.164226][ T298] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 38.172764][ T298] usb 2-1: Product: syz [ 38.182792][ T298] usb 2-1: config 0 descriptor?? [ 38.192618][ T298] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 38.226992][ T298] usb 2-1: Detected FT232H [ 38.408310][ T298] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 38.417189][ T298] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 38.424629][ T298] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 38.432539][ T298] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 38.442289][ T298] usb 2-1: USB disconnect, device number 5 [ 38.462500][ T298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 38.472964][ T298] ftdi_sio 2-1:0.0: device disconnected [ 39.827820][ C0] sched: RT throttling activated [ 40.850508][ T382] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.988232][ T620] device bridge2 entered promiscuous mode [ 43.289682][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.310888][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.324702][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 43.324717][ T28] audit: type=1400 audit(1778629113.047:214): avc: denied { create } for pid=625 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 43.364494][ T382] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.387626][ T382] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.406137][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.419475][ T382] usb 1-1: config 0 descriptor?? [ 43.507595][ T638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.120'. [ 43.516777][ T298] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.525991][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.538884][ T28] audit: type=1400 audit(1778629113.267:215): avc: denied { create } for pid=639 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.567538][ T642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.121'. [ 43.717856][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 43.777932][ T298] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 43.826588][ T28] audit: type=1400 audit(1778629113.547:216): avc: denied { write } for pid=650 comm="syz.4.126" path="socket:[17200]" dev="sockfs" ino=17200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.830612][ T382] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 43.857751][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.872429][ T382] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 43.888846][ T298] usb 2-1: config 0 descriptor?? [ 43.894843][ T382] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input5 [ 43.905926][ T298] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 43.988914][ T28] audit: type=1400 audit(1778629113.717:217): avc: denied { map } for pid=653 comm="syz.4.127" path="socket:[17218]" dev="sockfs" ino=17218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 44.075784][ T382] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 44.096378][ T298] usb 2-1: Detected FT232B [ 44.128240][ T382] usb 1-1: USB disconnect, device number 9 [ 44.181257][ T28] audit: type=1400 audit(1778629113.907:218): avc: denied { mount } for pid=660 comm="syz.3.130" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.299103][ T298] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 44.321299][ T298] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 44.350408][ T298] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.389177][ T298] usb 2-1: USB disconnect, device number 6 [ 44.410680][ T298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.422358][ T298] ftdi_sio 2-1:0.0: device disconnected [ 44.618037][ T678] overlayfs: overlapping lowerdir path [ 45.004781][ T28] audit: type=1400 audit(1778629114.677:219): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.114488][ T28] audit: type=1400 audit(1778629114.837:220): avc: denied { create } for pid=709 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.134820][ T710] netlink: 'syz.1.149': attribute type 4 has an invalid length. [ 45.223383][ T721] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 45.225090][ T28] audit: type=1400 audit(1778629114.947:221): avc: denied { setopt } for pid=720 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.425557][ T747] netlink: 'syz.0.165': attribute type 4 has an invalid length. [ 45.450928][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 45.460011][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 45.469161][ T749] Zero length message leads to an empty skb [ 45.584548][ T28] audit: type=1400 audit(1778629115.307:222): avc: denied { write } for pid=768 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.616988][ T771] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 45.663737][ T28] audit: type=1400 audit(1778629115.387:223): avc: denied { shutdown } for pid=777 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.695629][ T783] netlink: 84 bytes leftover after parsing attributes in process `syz.3.185'. [ 46.345357][ T825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.204'. [ 46.444676][ T836] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 46.463246][ T836] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 46.493368][ T836] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 46.547413][ T844] overlayfs: overlapping lowerdir path [ 46.912604][ T861] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 46.996679][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.172690][ T863] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 47.180713][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.279414][ T882] overlayfs: overlapping lowerdir path [ 47.407860][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 47.414281][ T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 47.427496][ T888] overlayfs: overlapping lowerdir path [ 47.433635][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.515170][ T39] usb 5-1: config 0 descriptor?? [ 47.587372][ T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 47.751774][ T39] usb 5-1: Detected FT232B [ 47.851168][ T902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 47.865165][ T903] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 47.873909][ T903] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 47.961312][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 47.970648][ T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.979627][ T39] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.990676][ T39] usb 5-1: USB disconnect, device number 4 [ 48.025628][ T916] overlayfs: overlapping lowerdir path [ 48.032570][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.049381][ T39] ftdi_sio 5-1:0.0: device disconnected [ 49.155695][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.166362][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.186359][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 49.186376][ T28] audit: type=1400 audit(1778629118.907:236): avc: denied { bind } for pid=952 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.224787][ T28] audit: type=1400 audit(1778629118.937:237): avc: denied { setopt } for pid=952 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.319952][ T958] netlink: 10 bytes leftover after parsing attributes in process `syz.4.258'. [ 49.422922][ T965] device bridge1 entered promiscuous mode [ 50.692285][ T28] audit: type=1400 audit(1778629120.417:238): avc: denied { write } for pid=1042 comm="syz.2.292" name="unix" dev="proc" ino=4026532667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.761466][ T28] audit: type=1400 audit(1778629120.477:239): avc: denied { create } for pid=1048 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.814319][ T1056] netlink: 144 bytes leftover after parsing attributes in process `syz.1.295'. [ 50.838299][ T1059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.298'. [ 50.854656][ T1059] device bridge_slave_0 left promiscuous mode [ 50.866581][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.876063][ T1059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 50.907922][ T1064] validate_nla: 4 callbacks suppressed [ 50.907938][ T1064] netlink: 'syz.2.302': attribute type 4 has an invalid length. [ 50.929979][ T1064] netlink: 'syz.2.302': attribute type 4 has an invalid length. [ 50.940289][ T1064] netlink: 'syz.2.302': attribute type 4 has an invalid length. [ 51.059860][ T1079] netlink: 168 bytes leftover after parsing attributes in process `syz.0.310'. [ 51.369695][ T1082] device ip6gre1 entered promiscuous mode [ 51.376093][ T339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.384501][ T1082] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.392185][ T339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.399892][ T339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.487306][ T1094] netlink: 'syz.4.316': attribute type 32 has an invalid length. [ 51.564172][ T1104] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 51.610536][ T1112] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 51.618621][ T1112] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 51.633118][ T1114] overlayfs: missing 'lowerdir' [ 51.636194][ T1112] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 51.674518][ T28] audit: type=1400 audit(1778629121.397:240): avc: denied { map } for pid=1117 comm="syz.4.329" path="socket:[19856]" dev="sockfs" ino=19856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.714796][ T28] audit: type=1400 audit(1778629121.397:241): avc: denied { read } for pid=1117 comm="syz.4.329" path="socket:[19856]" dev="sockfs" ino=19856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.780833][ T28] audit: type=1400 audit(1778629121.507:242): avc: denied { setopt } for pid=1129 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.810219][ T28] audit: type=1400 audit(1778629121.527:243): avc: denied { write } for pid=1129 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.840252][ T339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.867479][ T1138] overlayfs: missing 'lowerdir' [ 51.982799][ T1159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 52.036109][ T1164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 52.117996][ T28] audit: type=1400 audit(1778629121.827:244): avc: denied { create } for pid=1163 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 52.394366][ T339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.441817][ T1175] overlayfs: missing 'lowerdir' [ 52.461279][ T1177] netlink: 'syz.3.354': attribute type 4 has an invalid length. [ 52.469425][ T1177] netlink: 'syz.3.354': attribute type 4 has an invalid length. [ 52.564047][ T1183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 52.724778][ T1017] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.987933][ T1017] usb 3-1: Using ep0 maxpacket: 16 [ 52.994538][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.025758][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.054184][ T1017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.069761][ T28] audit: type=1400 audit(1778629122.797:245): avc: denied { setopt } for pid=1199 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.114295][ T1017] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.126127][ T1204] overlayfs: unrecognized mount option "/" or missing value [ 53.133550][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.153639][ T1017] usb 3-1: config 0 descriptor?? [ 53.346628][ T1215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 53.623742][ T1017] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input6 [ 54.959430][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 54.959445][ T28] audit: type=1400 audit(1778629124.687:248): avc: denied { read } for pid=1242 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.013094][ T1017] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 55.051267][ T1017] usb 3-1: USB disconnect, device number 5 [ 55.231011][ T1254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 55.307905][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 55.706903][ T1264] netlink: 9 bytes leftover after parsing attributes in process `syz.1.385'. [ 55.717368][ T1264] device gretap0 entered promiscuous mode [ 55.782424][ T1264] netlink: 5 bytes leftover after parsing attributes in process `syz.1.385'. [ 55.813620][ T1264] 0ªî{X¹¦: renamed from gretap0 [ 55.818042][ T28] audit: type=1400 audit(1778629125.537:249): avc: denied { create } for pid=1251 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 56.162324][ T1264] device 30ªî{X¹¦ left promiscuous mode [ 56.168995][ T1264] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 56.186795][ T1266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 56.238159][ T1268] validate_nla: 1 callbacks suppressed [ 56.238176][ T1268] netlink: 'syz.1.389': attribute type 4 has an invalid length. [ 56.253878][ T1268] netlink: 'syz.1.389': attribute type 4 has an invalid length. [ 56.263622][ T1268] netlink: 'syz.1.389': attribute type 4 has an invalid length. [ 56.421956][ T1294] xt_bpf: check failed: parse error [ 56.445158][ T28] audit: type=1400 audit(1778629126.167:250): avc: denied { create } for pid=1293 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.488233][ T28] audit: type=1400 audit(1778629126.187:251): avc: denied { getopt } for pid=1293 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.626601][ T1307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 57.027914][ T339] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 57.110878][ T28] audit: type=1400 audit(1778629126.837:252): avc: denied { connect } for pid=1323 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.203901][ T1330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.415'. [ 57.217968][ T339] usb 3-1: Invalid ep0 maxpacket: 64 [ 57.308193][ T1344] netlink: 'syz.4.420': attribute type 2 has an invalid length. [ 57.332354][ T1346] netlink: 'syz.4.424': attribute type 12 has an invalid length. [ 57.346770][ T1346] netlink: 'syz.4.424': attribute type 5 has an invalid length. [ 57.355109][ T1346] netlink: 'syz.4.424': attribute type 2 has an invalid length. [ 57.363275][ T1346] netlink: 'syz.4.424': attribute type 7 has an invalid length. [ 57.367977][ T339] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 57.373480][ T1346] netlink: 320 bytes leftover after parsing attributes in process `syz.4.424'. [ 57.429007][ T1352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 57.471765][ T1360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1360 comm=syz.4.430 [ 57.488441][ T1362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 57.541990][ T1371] device syzkaller0 entered promiscuous mode [ 57.607921][ T339] usb 3-1: Invalid ep0 maxpacket: 64 [ 57.625997][ T339] usb usb3-port1: attempt power cycle [ 57.658501][ T28] audit: type=1400 audit(1778629127.367:253): avc: denied { ioctl } for pid=1374 comm="syz.1.436" path="socket:[20455]" dev="sockfs" ino=20455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.774752][ T1382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'. [ 58.158053][ T339] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 58.188480][ T339] usb 3-1: Invalid ep0 maxpacket: 64 [ 58.200978][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.208299][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.337862][ T339] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 58.378293][ T339] usb 3-1: Invalid ep0 maxpacket: 64 [ 58.383783][ T339] usb usb3-port1: unable to enumerate USB device [ 58.718941][ T28] audit: type=1400 audit(1778629128.447:254): avc: denied { read } for pid=1416 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.017770][ T1428] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 59.027597][ T1428] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 60.388724][ T1454] loop8: detected capacity change from 0 to 7 [ 60.399341][ T1452] device syzkaller0 entered promiscuous mode [ 60.515004][ T1466] binder: 1465:1466 ioctl c0306201 2000000003c0 returned -14 [ 60.532795][ T1466] binder: 1465:1466 ioctl c0306201 2000000003c0 returned -14 [ 60.620240][ T1489] __nla_validate_parse: 1 callbacks suppressed [ 60.620269][ T1489] netlink: 64 bytes leftover after parsing attributes in process `syz.4.483'. [ 61.529806][ T28] audit: type=1400 audit(1778629131.257:255): avc: denied { read } for pid=1524 comm="syz.0.498" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.572585][ T1527] validate_nla: 1 callbacks suppressed [ 61.572603][ T1527] netlink: 'syz.4.499': attribute type 4 has an invalid length. [ 61.587196][ T28] audit: type=1400 audit(1778629131.277:256): avc: denied { open } for pid=1524 comm="syz.0.498" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.619430][ T1527] netlink: 'syz.4.499': attribute type 4 has an invalid length. [ 61.637847][ T28] audit: type=1400 audit(1778629131.277:257): avc: denied { ioctl } for pid=1524 comm="syz.0.498" path="/dev/usbmon5" dev="devtmpfs" ino=174 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.953563][ T1562] binder: 1548:1562 ioctl c00c620f 0 returned -14 [ 62.999017][ T1603] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 63.007225][ T1603] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 63.017629][ T1603] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 63.052167][ T28] audit: type=1400 audit(1778629132.777:258): avc: denied { transfer } for pid=1608 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.263410][ T1619] binder: 1610:1619 ioctl c00c620f 0 returned -14 [ 63.467953][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.534170][ T28] audit: type=1400 audit(1778629133.257:259): avc: denied { write } for pid=1625 comm="syz.3.537" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.987913][ T339] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 64.193431][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.208279][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.220526][ T339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.235712][ T339] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.245433][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.262686][ T339] usb 1-1: config 0 descriptor?? [ 64.507266][ T1675] kvm: pic: non byte write [ 64.606245][ T28] audit: type=1400 audit(1778629134.327:260): avc: denied { name_bind } for pid=1681 comm="syz.1.561" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 64.678256][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.685769][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.693440][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.701098][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.708689][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.716168][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.723825][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.731425][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.739044][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.746542][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.754525][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.762234][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.769869][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.777363][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.785067][ T339] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 64.792952][ T339] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 64.802993][ T339] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 64.867935][ T1017] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 65.059195][ T1017] usb 2-1: config 0 has no interfaces? [ 65.064821][ T1017] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 65.074000][ T1017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.082855][ T1017] usb 2-1: config 0 descriptor?? [ 65.277872][ T339] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 65.292988][ T1017] usb 2-1: USB disconnect, device number 7 [ 65.458969][ T339] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.470884][ T339] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 65.481118][ T339] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 65.491916][ T339] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.501277][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.517678][ T339] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 65.533972][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.718980][ T1017] usb 3-1: USB disconnect, device number 10 [ 65.748509][ T1709] kvm: pic: non byte write [ 65.806357][ T1712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'. [ 65.909294][ T28] audit: type=1400 audit(1778629135.637:261): avc: denied { sys_module } for pid=1723 comm="syz.4.578" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.943881][ T28] audit: type=1400 audit(1778629135.657:262): avc: denied { write } for pid=1723 comm="syz.4.578" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.988742][ T1644] usb 1-1: string descriptor 0 read error: -71 [ 66.365032][ T1734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 66.603938][ T1739] kvm: pic: level sensitive irq not supported [ 66.605261][ T1739] kvm: pic: non byte write [ 66.637881][ T1017] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 66.822170][ T19] usb 1-1: USB disconnect, device number 10 [ 66.881042][ T1751] loop2: detected capacity change from 0 to 7 [ 66.927859][ T1017] usb 4-1: Using ep0 maxpacket: 32 [ 66.934364][ T1017] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 66.944733][ T1017] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 66.959557][ T1017] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 66.974446][ T1017] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 66.998957][ T1017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.013505][ T28] audit: type=1400 audit(1778629136.737:263): avc: denied { bind } for pid=1747 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.035298][ T1017] usb 4-1: Product: syz [ 67.039585][ T1017] usb 4-1: Manufacturer: syz [ 67.040801][ T1761] xt_bpf: check failed: parse error [ 67.044343][ T1017] usb 4-1: SerialNumber: syz [ 68.199379][ T1801] binder: 1799:1801 ioctl c0306201 2000000003c0 returned -14 [ 68.715186][ T1819] binder: 1818:1819 ioctl c0306201 200000001440 returned -11 [ 68.722860][ T60] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 68.907874][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 68.914601][ T60] usb 1-1: config index 0 descriptor too short (expected 18468, got 36) [ 68.924981][ T60] usb 1-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 68.936385][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 68.945371][ T60] usb 1-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 68.956598][ T60] usb 1-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 68.966320][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.975603][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.194406][ T60] usb 1-1: string descriptor 0 read error: -71 [ 69.201810][ T60] usb 1-1: USB disconnect, device number 11 [ 69.363841][ T19] usb 4-1: USB disconnect, device number 5 [ 69.514256][ T1017] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 69.645960][ T1844] kvm: pic: level sensitive irq not supported [ 69.646117][ T1844] kvm: pic: non byte write [ 69.714789][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.725927][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.740813][ T1017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.754166][ T1017] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.763340][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.776116][ T1017] usb 3-1: config 0 descriptor?? [ 70.208689][ T1017] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xe [ 70.225607][ T1017] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 70.254315][ T1017] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 70.269181][ T1866] usb usb8: usbfs: process 1866 (syz.4.627) did not claim interface 0 before use [ 70.285182][ T1017] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 70.479980][ T1017] usb 3-1: USB disconnect, device number 11 [ 70.515154][ T1885] binder: 1882:1885 ioctl c0306201 2000000003c0 returned -14 [ 70.541267][ T1885] binder: 1882:1885 ioctl c0306201 2000000003c0 returned -14 [ 70.634811][ T1879] kvm: pic: level sensitive irq not supported [ 70.635047][ T1879] kvm: pic: non byte write [ 71.289030][ T1906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 71.368586][ T1915] binder: 1913:1915 ioctl c0306201 2000000003c0 returned -14 [ 71.414987][ T1914] kvm: pic: non byte write [ 71.427912][ T1917] binder: 1913:1917 ioctl c0306201 2000000003c0 returned -14 [ 71.586632][ T1927] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 71.676466][ T28] audit: type=1400 audit(1778629141.357:264): avc: denied { view } for pid=1931 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 72.120295][ T1953] binder: 1951:1953 ioctl c0306201 2000000003c0 returned -14 [ 72.158377][ T1953] binder: 1951:1953 ioctl c0306201 2000000003c0 returned -14 [ 72.594203][ T1966] kvm: pic: non byte write [ 72.845903][ T1989] binder: 1987:1989 ioctl c0306201 2000000003c0 returned -14 [ 73.127086][ T1989] binder: 1987:1989 ioctl c0306201 2000000003c0 returned -14 [ 73.509888][ T2025] loop2: detected capacity change from 0 to 7 [ 74.864108][ T2036] fuse: Bad value for 'fd' [ 75.137937][ T28] audit: type=1400 audit(1778629144.847:265): avc: denied { create } for pid=2039 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.290655][ T2054] kvm: pic: non byte write [ 75.321906][ T28] audit: type=1400 audit(1778629145.047:266): avc: denied { remount } for pid=2046 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 75.360612][ T2061] process 'syz.2.692' launched './file1' with NULL argv: empty string added [ 75.399382][ T2068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 75.407328][ T28] audit: type=1400 audit(1778629145.107:267): avc: denied { execute_no_trans } for pid=2045 comm="syz.2.692" path="/122/file1" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.450347][ T2068] device ipip1 entered promiscuous mode [ 75.520038][ T2073] device syzkaller0 entered promiscuous mode [ 75.737900][ T60] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 75.927936][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 75.935029][ T60] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 75.989057][ T60] usb 4-1: New USB device found, idVendor=0582, idProduct=0101, bcdDevice= 0.40 [ 76.034374][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.141782][ T60] usb 4-1: Product: syz [ 76.160827][ T60] usb 4-1: Manufacturer: syz [ 76.183638][ T60] usb 4-1: SerialNumber: syz [ 76.547588][ T60] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 76.557958][ T60] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 76.580186][ T60] usb 4-1: USB disconnect, device number 6 [ 76.607666][ T327] udevd[327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.626502][ T2085] fuse: Bad value for 'fd' [ 76.774618][ T2096] kvm: pic: non byte write [ 76.914094][ T2109] binder: 2098:2109 ioctl c00c620f 0 returned -14 [ 77.256117][ T2120] kvm: pic: non byte write [ 77.302811][ T2124] binder: 2123:2124 ioctl c0306201 200000001440 returned -11 [ 77.337469][ T2128] binder: 2126:2128 ioctl c0306201 200000001440 returned -11 [ 77.372366][ T2134] fuse: Bad value for 'fd' [ 77.484504][ T2140] kvm: pic: non byte write [ 77.524479][ T2143] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.532084][ T2143] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.557561][ T2146] device syzkaller0 entered promiscuous mode [ 77.657144][ T2160] binder: 2158:2160 ioctl c0306201 200000001440 returned -11 [ 77.670230][ T2152] kvm: pic: non byte write [ 78.017877][ T298] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 78.199066][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.210130][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.220075][ T298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.233529][ T298] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.243605][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.253467][ T298] usb 3-1: config 0 descriptor?? [ 78.584875][ T2194] kvm: pic: non byte write [ 78.667007][ T298] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 78.676592][ T298] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 78.746441][ T2212] kvm: pic: non byte write [ 78.827878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.945255][ T2224] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.952853][ T2224] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.030748][ T60] usb 3-1: USB disconnect, device number 12 [ 79.030754][ T2172] usb 3-1: string descriptor 0 read error: -19 [ 79.031219][ T2227] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -19 [ 79.897967][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 80.108013][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 80.114379][ T60] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 80.134142][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.144454][ T60] usb 1-1: config 0 descriptor?? [ 80.152818][ T60] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 80.160784][ T60] usb 1-1: Detected FT4232H [ 80.221044][ T2275] kvm: pic: non byte write [ 80.353372][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 80.360790][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 80.368263][ T60] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.377252][ T60] usb 1-1: USB disconnect, device number 12 [ 80.383988][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.393876][ T60] ftdi_sio 1-1:0.0: device disconnected [ 80.467305][ T2282] netlink: 'syz.1.779': attribute type 4 has an invalid length. [ 80.477131][ T2282] netlink: 'syz.1.779': attribute type 4 has an invalid length. [ 80.504802][ T2284] netlink: 'syz.1.780': attribute type 13 has an invalid length. [ 80.521986][ T2284] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 80.530127][ T2284] device syzkaller0 entered promiscuous mode [ 82.149776][ T2341] xt_bpf: check failed: parse error [ 82.377906][ T28] audit: type=1400 audit(1778629152.017:268): avc: denied { setopt } for pid=2342 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.418723][ T28] audit: type=1400 audit(1778629152.067:269): avc: denied { create } for pid=2342 comm="syz.3.800" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.023614][ T2363] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 83.077095][ T28] audit: type=1400 audit(1778629152.797:270): avc: denied { unlink } for pid=287 comm="syz-executor" name="file7" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.136713][ T2367] binder: BINDER_SET_CONTEXT_MGR already set [ 83.156258][ T2367] binder: 2365:2367 ioctl 4018620d 200000000040 returned -16 [ 83.180564][ T2367] binder: 2365:2367 ioctl c0306201 2000000003c0 returned -14 [ 83.202961][ T2367] binder: 2365:2367 ioctl c0306201 2000000003c0 returned -14 [ 83.266330][ T2372] loop3: detected capacity change from 0 to 512 [ 83.296812][ T2372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.333395][ T2372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.381689][ T2372] EXT4-fs (loop3): 1 truncate cleaned up [ 83.390860][ T2372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.708134][ T28] audit: type=1400 audit(1778629153.357:271): avc: denied { write } for pid=2371 comm="syz.3.809" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.948245][ T28] audit: type=1400 audit(1778629153.357:272): avc: denied { add_name } for pid=2371 comm="syz.3.809" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.000793][ T28] audit: type=1400 audit(1778629153.357:273): avc: denied { create } for pid=2371 comm="syz.3.809" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.083209][ T2383] xt_bpf: check failed: parse error [ 84.099169][ T28] audit: type=1400 audit(1778629153.457:274): avc: denied { read write } for pid=2371 comm="syz.3.809" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.152675][ T287] EXT4-fs (loop3): unmounting filesystem. [ 84.217997][ T28] audit: type=1400 audit(1778629153.457:275): avc: denied { open } for pid=2371 comm="syz.3.809" path="/180/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.523224][ T2403] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 84.637028][ T2411] binder: BINDER_SET_CONTEXT_MGR already set [ 84.652976][ T2411] binder: 2410:2411 ioctl 4018620d 200000000040 returned -16 [ 84.676277][ T2411] binder: 2410:2411 ioctl c0306201 2000000003c0 returned -14 [ 84.702073][ T2411] binder: 2410:2411 ioctl c0306201 2000000003c0 returned -14 [ 85.079819][ T2424] device syzkaller0 entered promiscuous mode [ 85.248305][ T2431] xt_bpf: check failed: parse error [ 85.432009][ T2444] binder: BINDER_SET_CONTEXT_MGR already set [ 85.438125][ T2444] binder: 2443:2444 ioctl 4018620d 200000000040 returned -16 [ 85.445857][ T2444] binder: 2443:2444 ioctl c0306201 2000000003c0 returned -14 [ 86.547860][ T1017] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 86.729116][ T1017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.740296][ T1017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.750611][ T1017] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.763876][ T1017] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.773271][ T1017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.786952][ T1017] usb 1-1: config 0 descriptor?? [ 86.979080][ T2471] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 86.989906][ T2471] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 87.016173][ T2472] xt_bpf: check failed: parse error [ 87.016690][ T2475] binder_alloc: 2474: binder_alloc_buf, no vma [ 87.028500][ T2475] binder: 2474:2475 ioctl c0306201 200000001440 returned -11 [ 87.056647][ T2477] binder: BINDER_SET_CONTEXT_MGR already set [ 87.062908][ T2477] binder: 2476:2477 ioctl 4018620d 200000000040 returned -16 [ 87.070936][ T2477] binder: 2476:2477 ioctl c0306201 2000000003c0 returned -14 [ 87.134945][ T2485] loop2: detected capacity change from 0 to 128 [ 87.144926][ T2485] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.154293][ T2485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.163294][ T2485] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.191386][ T28] audit: type=1400 audit(1778629156.907:276): avc: denied { create } for pid=2483 comm="syz.2.844" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.206407][ T2485] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 87.221198][ T1017] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 87.232595][ T1017] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 87.288489][ T291] EXT4-fs (loop2): unmounting filesystem. [ 87.306611][ T28] audit: type=1400 audit(1778629157.027:277): avc: denied { mounton } for pid=2499 comm="syz.2.847" path="/149/bus" dev="incremental-fs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.329421][ T2500] loop2: detected capacity change from 0 to 2048 [ 87.350833][ T2500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.376851][ T2504] binder: BINDER_SET_CONTEXT_MGR already set [ 87.383053][ T2504] binder: 2503:2504 ioctl 4018620d 200000000040 returned -16 [ 87.390747][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 87.390763][ T28] audit: type=1400 audit(1778629157.107:282): avc: denied { remove_name } for pid=291 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.393512][ T2504] binder: 2503:2504 ioctl c0306201 200000001440 returned -11 [ 87.403250][ T28] audit: type=1400 audit(1778629157.117:283): avc: denied { unlink } for pid=291 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.453160][ T291] EXT4-fs (loop2): unmounting filesystem. [ 87.463888][ T291] ------------[ cut here ]------------ [ 87.469530][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 87.477483][ T291] Modules linked in: [ 87.481469][ T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted syzkaller #0 [ 87.489007][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.499166][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 87.504295][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0b 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 87.524025][ T291] RSP: 0018:ffffc9000dacfab8 EFLAGS: 00010293 [ 87.530307][ T291] RAX: ffffffff81c66845 RBX: ffff88811e230448 RCX: ffff88810e389440 [ 87.538705][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.546864][ T291] RBP: ffffc9000dacfae0 R08: 0000000000000003 R09: 0000000000000004 [ 87.554919][ T291] R10: dffffc0000000000 R11: fffff52001b59f48 R12: dffffc0000000000 [ 87.562951][ T291] R13: 1ffff11023c46092 R14: ffff88811e230490 R15: 0000000000000000 [ 87.570990][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 87.579983][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.586594][ T291] CR2: 0000001b2ec10ff8 CR3: 000000011ef75000 CR4: 00000000003526a0 [ 87.594631][ T291] Call Trace: [ 87.597959][ T291] [ 87.600920][ T291] shmem_rmdir+0x5b/0x90 [ 87.605215][ T291] vfs_rmdir+0x393/0x500 [ 87.609518][ T291] incfs_kill_sb+0x105/0x220 [ 87.614162][ T291] deactivate_locked_super+0xb5/0x120 [ 87.619597][ T291] deactivate_super+0xaf/0xe0 [ 87.624311][ T291] cleanup_mnt+0x474/0x500 [ 87.628806][ T291] ? __kasan_slab_free+0x11/0x20 [ 87.633786][ T291] __cleanup_mnt+0x19/0x20 [ 87.638257][ T291] task_work_run+0x1e1/0x250 [ 87.642903][ T291] ? __cfi_task_work_run+0x10/0x10 [ 87.644284][ T2462] usb 1-1: string descriptor 0 read error: -71 [ 87.648073][ T291] ? free_nsproxy+0x21f/0x270 [ 87.655245][ T298] usb 1-1: USB disconnect, device number 13 [ 87.658955][ T291] do_exit+0xa35/0x2660 [ 87.669081][ T291] ? __cfi_do_exit+0x10/0x10 [ 87.673730][ T291] ? __kasan_check_write+0x14/0x20 [ 87.678904][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 87.683987][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 87.689591][ T291] ? ksys_write+0x1e4/0x250 [ 87.694146][ T291] ? zap_other_threads+0x2c1/0x2f0 [ 87.699359][ T291] do_group_exit+0x210/0x2d0 [ 87.703999][ T291] __x64_sys_exit_group+0x3f/0x40 [ 87.709114][ T291] x64_sys_call+0x7b4/0x9a0 [ 87.713661][ T291] do_syscall_64+0x4c/0xa0 [ 87.718136][ T291] ? clear_bhb_loop+0x30/0x80 [ 87.722860][ T291] ? clear_bhb_loop+0x30/0x80 [ 87.727571][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.733558][ T291] RIP: 0033:0x7f861799ce59 [ 87.738023][ T291] Code: Unable to access opcode bytes at 0x7f861799ce2f. [ 87.745072][ T291] RSP: 002b:00007ffccfc309c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 87.753531][ T291] RAX: ffffffffffffffda RBX: 00007f8617a3222a RCX: 00007f861799ce59 [ 87.761562][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 87.769595][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8617a321ca [ 87.777595][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc31c80 [ 87.785612][ T291] R13: 00007f8617a321ca R14: 00005555716a54e8 R15: 00007ffccfc32d50 [ 87.793701][ T291] [ 87.796756][ T291] ---[ end trace 0000000000000000 ]--- [ 87.802550][ T291] ------------[ cut here ]------------ [ 87.808059][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 87.816000][ T291] Modules linked in: [ 87.819959][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 [ 87.828951][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.839064][ T291] RIP: 0010:drop_nlink+0xc5/0x110 [ 87.844129][ T291] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 ab f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0b 0e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 87.863805][ T291] RSP: 0018:ffffc9000dacfab8 EFLAGS: 00010293 [ 87.869909][ T291] RAX: ffffffff81c66845 RBX: ffff88811e231368 RCX: ffff88810e389440 [ 87.877938][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.885930][ T291] RBP: ffffc9000dacfae0 R08: 0000000000000003 R09: 0000000000000004 [ 87.893939][ T291] R10: dffffc0000000000 R11: fffff52001b59f48 R12: dffffc0000000000 [ 87.901998][ T291] R13: 1ffff11023c46276 R14: ffff88811e2313b0 R15: 0000000000000000 [ 87.910017][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 87.919091][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.925705][ T291] CR2: 0000001b2ec10ff8 CR3: 000000011c5c6000 CR4: 00000000003526a0 [ 87.933761][ T291] Call Trace: [ 87.937235][ T291] [ 87.940208][ T291] shmem_rmdir+0x5b/0x90 [ 87.944499][ T291] vfs_rmdir+0x393/0x500 [ 87.948814][ T291] incfs_kill_sb+0x198/0x220 [ 87.953433][ T291] deactivate_locked_super+0xb5/0x120 [ 87.958858][ T291] deactivate_super+0xaf/0xe0 [ 87.963563][ T291] cleanup_mnt+0x474/0x500 [ 87.968036][ T291] ? __kasan_slab_free+0x11/0x20 [ 87.973013][ T291] __cleanup_mnt+0x19/0x20 [ 87.977459][ T291] task_work_run+0x1e1/0x250 [ 87.982130][ T291] ? __cfi_task_work_run+0x10/0x10 [ 87.987332][ T291] ? free_nsproxy+0x21f/0x270 [ 87.992092][ T291] do_exit+0xa35/0x2660 [ 87.996448][ T291] ? __cfi_do_exit+0x10/0x10 [ 88.001388][ T291] ? __kasan_check_write+0x14/0x20 [ 88.006578][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 88.011752][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 88.017328][ T291] ? ksys_write+0x1e4/0x250 [ 88.021555][ T2514] binder: BINDER_SET_CONTEXT_MGR already set [ 88.021946][ T291] ? zap_other_threads+0x2c1/0x2f0 [ 88.028306][ T2514] binder: 2513:2514 ioctl 4018620d 2000000000c0 returned -16 [ 88.033007][ T291] do_group_exit+0x210/0x2d0 [ 88.042917][ T2514] binder: BINDER_SET_CONTEXT_MGR already set [ 88.045144][ T291] __x64_sys_exit_group+0x3f/0x40 [ 88.052636][ T2514] binder: 2513:2514 ioctl 4018620d 200000000040 returned -16 [ 88.056372][ T291] x64_sys_call+0x7b4/0x9a0 [ 88.067264][ T2514] binder: 2513:2514 ioctl c0306201 200000001440 returned -11 [ 88.068326][ T291] do_syscall_64+0x4c/0xa0 [ 88.080176][ T291] ? clear_bhb_loop+0x30/0x80 [ 88.084895][ T291] ? clear_bhb_loop+0x30/0x80 [ 88.089652][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.095583][ T291] RIP: 0033:0x7f861799ce59 [ 88.100096][ T291] Code: Unable to access opcode bytes at 0x7f861799ce2f. [ 88.107146][ T291] RSP: 002b:00007ffccfc309c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 88.115970][ T291] RAX: ffffffffffffffda RBX: 00007f8617a3222a RCX: 00007f861799ce59 [ 88.124327][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 88.132379][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8617a321ca [ 88.140397][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc31c80 [ 88.148429][ T291] R13: 00007f8617a321ca R14: 00005555716a54e8 R15: 00007ffccfc32d50 [ 88.156537][ T291] [ 88.159617][ T291] ---[ end trace 0000000000000000 ]--- [ 88.162733][ T2516] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 88.212212][ T2520] xt_bpf: check failed: parse error [ 88.234388][ T291] ================================================================== [ 88.242515][ T291] BUG: KASAN: use-after-free in fast_dput+0x1e9/0x290 [ 88.249338][ T291] Read of size 4 at addr ffff88814467fcc0 by task syz-executor/291 [ 88.257259][ T291] [ 88.259622][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 [ 88.268582][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.278667][ T291] Call Trace: [ 88.281971][ T291] [ 88.284927][ T291] __dump_stack+0x21/0x24 [ 88.289297][ T291] dump_stack_lvl+0x110/0x170 [ 88.294095][ T291] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.299150][ T291] ? fast_dput+0x1e9/0x290 [ 88.303614][ T291] print_address_description+0x71/0x200 [ 88.309204][ T291] print_report+0x4a/0x60 [ 88.313560][ T291] kasan_report+0x122/0x150 [ 88.318113][ T291] ? fast_dput+0x1e9/0x290 [ 88.322574][ T291] __asan_report_load4_noabort+0x14/0x20 [ 88.328234][ T291] fast_dput+0x1e9/0x290 [ 88.332507][ T291] dput+0x21/0x80 [ 88.336157][ T291] incfs_free_mount_info+0x60/0x200 [ 88.341380][ T291] incfs_kill_sb+0x1b8/0x220 [ 88.345987][ T291] deactivate_locked_super+0xb5/0x120 [ 88.351378][ T291] deactivate_super+0xaf/0xe0 [ 88.356160][ T291] cleanup_mnt+0x474/0x500 [ 88.360589][ T291] __cleanup_mnt+0x19/0x20 [ 88.365020][ T291] task_work_run+0x1e1/0x250 [ 88.369631][ T291] ? __cfi_task_work_run+0x10/0x10 [ 88.374753][ T291] ? free_nsproxy+0x21f/0x270 [ 88.379458][ T291] do_exit+0xa35/0x2660 [ 88.383632][ T291] ? __cfi_do_exit+0x10/0x10 [ 88.388232][ T291] ? __kasan_check_write+0x14/0x20 [ 88.393364][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 88.398398][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 88.404043][ T291] ? ksys_write+0x1e4/0x250 [ 88.408570][ T291] ? zap_other_threads+0x2c1/0x2f0 [ 88.413710][ T291] do_group_exit+0x210/0x2d0 [ 88.418328][ T291] __x64_sys_exit_group+0x3f/0x40 [ 88.423377][ T291] x64_sys_call+0x7b4/0x9a0 [ 88.427899][ T291] do_syscall_64+0x4c/0xa0 [ 88.432335][ T291] ? clear_bhb_loop+0x30/0x80 [ 88.437035][ T291] ? clear_bhb_loop+0x30/0x80 [ 88.441733][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.447653][ T291] RIP: 0033:0x7f861799ce59 [ 88.452076][ T291] Code: Unable to access opcode bytes at 0x7f861799ce2f. [ 88.459092][ T291] RSP: 002b:00007ffccfc309c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 88.467601][ T291] RAX: ffffffffffffffda RBX: 00007f8617a3222a RCX: 00007f861799ce59 [ 88.475586][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 88.483571][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8617a321ca [ 88.491551][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc31c80 [ 88.499540][ T291] R13: 00007f8617a321ca R14: 00005555716a54e8 R15: 00007ffccfc32d50 [ 88.507638][ T291] [ 88.510694][ T291] [ 88.513057][ T291] Allocated by task 2500: [ 88.517395][ T291] kasan_set_track+0x4b/0x70 [ 88.522019][ T291] kasan_save_alloc_info+0x25/0x30 [ 88.527140][ T291] __kasan_slab_alloc+0x72/0x80 [ 88.532003][ T291] slab_post_alloc_hook+0x4f/0x2d0 [ 88.537335][ T291] kmem_cache_alloc_lru+0x104/0x280 [ 88.542577][ T291] __d_alloc+0x34/0x6c0 [ 88.546759][ T291] d_alloc_parallel+0xe2/0x12e0 [ 88.551631][ T291] __lookup_slow+0x14f/0x410 [ 88.556255][ T291] lookup_one_len+0x19d/0x2e0 [ 88.560972][ T291] incfs_lookup_dentry+0x60/0xb0 [ 88.565934][ T291] open_or_create_special_dir+0x4f/0x1d0 [ 88.571588][ T291] incfs_mount_fs+0x42f/0x890 [ 88.576276][ T291] legacy_get_tree+0xfe/0x1a0 [ 88.580960][ T291] vfs_get_tree+0x9a/0x270 [ 88.585400][ T291] do_new_mount+0x251/0xb30 [ 88.589929][ T291] path_mount+0x659/0xfc0 [ 88.594281][ T291] __se_sys_mount+0x320/0x390 [ 88.598995][ T291] __x64_sys_mount+0xbf/0xd0 [ 88.603623][ T291] x64_sys_call+0x65d/0x9a0 [ 88.608139][ T291] do_syscall_64+0x4c/0xa0 [ 88.612573][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.618501][ T291] [ 88.620833][ T291] Freed by task 2520: [ 88.624814][ T291] kasan_set_track+0x4b/0x70 [ 88.629412][ T291] kasan_save_free_info+0x31/0x50 [ 88.634445][ T291] ____kasan_slab_free+0x132/0x180 [ 88.639579][ T291] __kasan_slab_free+0x11/0x20 [ 88.644458][ T291] slab_free_freelist_hook+0xc2/0x190 [ 88.649925][ T291] kmem_cache_free+0x12d/0x300 [ 88.654791][ T291] __d_free+0x23/0x30 [ 88.658780][ T291] rcu_do_batch+0x52a/0xbc0 [ 88.663290][ T291] rcu_core+0x5c3/0xe80 [ 88.667450][ T291] rcu_core_si+0x9/0x10 [ 88.671634][ T291] handle_softirqs+0x1d7/0x600 [ 88.676421][ T291] __irq_exit_rcu+0x52/0xf0 [ 88.680937][ T291] irq_exit_rcu+0x9/0x10 [ 88.685186][ T291] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 88.690828][ T291] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 88.696827][ T291] [ 88.699154][ T291] Last potentially related work creation: [ 88.704867][ T291] kasan_save_stack+0x3a/0x60 [ 88.709557][ T291] __kasan_record_aux_stack+0xb6/0xc0 [ 88.714931][ T291] kasan_record_aux_stack_noalloc+0xb/0x10 [ 88.720743][ T291] call_rcu+0xcf/0xf90 [ 88.724826][ T291] dentry_free+0xbd/0x150 [ 88.729170][ T291] __dentry_kill+0x529/0x670 [ 88.733793][ T291] dentry_kill+0xc0/0x2a0 [ 88.738152][ T291] dput+0x42/0x80 [ 88.741799][ T291] incfs_free_mount_info+0x60/0x200 [ 88.747018][ T291] incfs_kill_sb+0x1b8/0x220 [ 88.751637][ T291] deactivate_locked_super+0xb5/0x120 [ 88.757021][ T291] deactivate_super+0xaf/0xe0 [ 88.761715][ T291] cleanup_mnt+0x474/0x500 [ 88.766174][ T291] __cleanup_mnt+0x19/0x20 [ 88.770638][ T291] task_work_run+0x1e1/0x250 [ 88.775248][ T291] do_exit+0xa35/0x2660 [ 88.779421][ T291] do_group_exit+0x210/0x2d0 [ 88.784027][ T291] __x64_sys_exit_group+0x3f/0x40 [ 88.789073][ T291] x64_sys_call+0x7b4/0x9a0 [ 88.793590][ T291] do_syscall_64+0x4c/0xa0 [ 88.798018][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.803928][ T291] [ 88.806349][ T291] The buggy address belongs to the object at ffff88814467fcc0 [ 88.806349][ T291] which belongs to the cache dentry of size 208 [ 88.819973][ T291] The buggy address is located 0 bytes inside of [ 88.819973][ T291] 208-byte region [ffff88814467fcc0, ffff88814467fd90) [ 88.833080][ T291] [ 88.835409][ T291] The buggy address belongs to the physical page: [ 88.841846][ T291] page:ffffea0005119fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14467f [ 88.852093][ T291] flags: 0x4000000000000200(slab|zone=1) [ 88.857764][ T291] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001ec480 [ 88.866356][ T291] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 88.874942][ T291] page dumped because: kasan: bad access detected [ 88.881363][ T291] page_owner tracks the page as allocated [ 88.887087][ T291] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 291, tgid 291 (syz-executor), ts 87298794329, free_ts 33255538593 [ 88.906894][ T291] post_alloc_hook+0x1f5/0x210 [ 88.911680][ T291] prep_new_page+0x1c/0x110 [ 88.916205][ T291] get_page_from_freelist+0x2d12/0x2d80 [ 88.921771][ T291] __alloc_pages+0x1fa/0x610 [ 88.926376][ T291] alloc_slab_page+0x6e/0xf0 [ 88.930971][ T291] new_slab+0x98/0x3d0 [ 88.935056][ T291] ___slab_alloc+0x6bd/0xb20 [ 88.939688][ T291] __slab_alloc+0x5e/0xa0 [ 88.944035][ T291] kmem_cache_alloc_lru+0x144/0x280 [ 88.949289][ T291] __d_alloc+0x34/0x6c0 [ 88.953475][ T291] d_alloc_cursor+0x41/0xd0 [ 88.957999][ T291] dcache_dir_open+0x3b/0x80 [ 88.962592][ T291] do_dentry_open+0x88e/0x1260 [ 88.967372][ T291] vfs_open+0x73/0x80 [ 88.971362][ T291] path_openat+0x2700/0x2f80 [ 88.975964][ T291] do_filp_open+0x1f1/0x430 [ 88.980496][ T291] page last free stack trace: [ 88.985184][ T291] free_unref_page_prepare+0x7f8/0x800 [ 88.990654][ T291] free_unref_page_list+0x117/0x8c0 [ 88.995865][ T291] release_pages+0xc93/0xcf0 [ 89.000480][ T291] __pagevec_release+0x71/0xe0 [ 89.005347][ T291] shmem_undo_range+0x574/0x1540 [ 89.010313][ T291] shmem_evict_inode+0x255/0xa50 [ 89.015270][ T291] evict+0x4d7/0x8f0 [ 89.019199][ T291] iput+0x620/0x670 [ 89.023026][ T291] dentry_unlink_inode+0x33d/0x3f0 [ 89.028149][ T291] __dentry_kill+0x460/0x670 [ 89.032755][ T291] dentry_kill+0xc0/0x2a0 [ 89.037120][ T291] dput+0x42/0x80 [ 89.040857][ T291] __fput+0x5be/0x8f0 [ 89.044859][ T291] ____fput+0x15/0x20 [ 89.048871][ T291] task_work_run+0x1e1/0x250 [ 89.053476][ T291] do_exit+0xa35/0x2660 [ 89.057654][ T291] [ 89.059987][ T291] Memory state around the buggy address: [ 89.065625][ T291] ffff88814467fb80: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 89.073696][ T291] ffff88814467fc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.081769][ T291] >ffff88814467fc80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 89.089836][ T291] ^ [ 89.096011][ T291] ffff88814467fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.104081][ T291] ffff88814467fd80: fb fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 89.112148][ T291] ================================================================== [ 89.121070][ T291] Disabling lock debugging due to kernel taint [ 89.127335][ T291] ------------[ cut here ]------------ [ 89.132968][ T291] WARNING: CPU: 1 PID: 291 at fs/dcache.c:794 fast_dput+0x210/0x290 [ 89.141147][ T291] Modules linked in: [ 89.145068][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 [ 89.154164][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.164253][ T291] RIP: 0010:fast_dput+0x210/0x290 [ 89.169317][ T291] Code: 9c f1 ff e9 46 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 99 fe ff ff 48 89 df e8 5a 9c f1 ff e9 8c fe ff ff e8 70 01 ac ff <0f> 0b e9 0b ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e4 fe ff [ 89.188968][ T291] RSP: 0018:ffffc9000dacfad0 EFLAGS: 00010293 [ 89.195137][ T291] RAX: ffffffff81c574e0 RBX: ffff88814467fcc0 RCX: ffff88810e389440 [ 89.203131][ T291] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 89.211211][ T291] RBP: ffffc9000dacfb00 R08: 0000000000000003 R09: 0000000000000004 [ 89.219216][ T291] R10: dffffc0000000000 R11: fffff52001b59f4c R12: 00000000ffffff80 [ 89.227216][ T291] R13: dffffc0000000000 R14: ffff88814467fd18 R15: 1ffff110288cffa3 [ 89.235362][ T291] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 89.244315][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.250927][ T291] CR2: 00007fac7bb48060 CR3: 000000012f78a000 CR4: 00000000003526a0 [ 89.258931][ T291] Call Trace: [ 89.262229][ T291] [ 89.265191][ T291] dput+0x21/0x80 [ 89.268859][ T291] incfs_free_mount_info+0x60/0x200 [ 89.274162][ T291] incfs_kill_sb+0x1b8/0x220 [ 89.278798][ T291] deactivate_locked_super+0xb5/0x120 [ 89.284190][ T291] deactivate_super+0xaf/0xe0 [ 89.288986][ T291] cleanup_mnt+0x474/0x500 [ 89.293425][ T291] __cleanup_mnt+0x19/0x20 [ 89.297867][ T291] task_work_run+0x1e1/0x250 [ 89.302561][ T291] ? __cfi_task_work_run+0x10/0x10 [ 89.307694][ T291] ? free_nsproxy+0x21f/0x270 [ 89.312413][ T291] do_exit+0xa35/0x2660 [ 89.316611][ T291] ? __cfi_do_exit+0x10/0x10 [ 89.321252][ T291] ? __kasan_check_write+0x14/0x20 [ 89.326381][ T291] ? _raw_spin_lock_irq+0x95/0xf0 [ 89.331533][ T291] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 89.337098][ T291] ? ksys_write+0x1e4/0x250 [ 89.341684][ T291] ? zap_other_threads+0x2c1/0x2f0 [ 89.346858][ T291] do_group_exit+0x210/0x2d0 [ 89.351604][ T291] __x64_sys_exit_group+0x3f/0x40 [ 89.356659][ T291] x64_sys_call+0x7b4/0x9a0 [ 89.361292][ T291] do_syscall_64+0x4c/0xa0 [ 89.365727][ T291] ? clear_bhb_loop+0x30/0x80 [ 89.370467][ T291] ? clear_bhb_loop+0x30/0x80 [ 89.375178][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.381113][ T291] RIP: 0033:0x7f861799ce59 [ 89.385547][ T291] Code: Unable to access opcode bytes at 0x7f861799ce2f. [ 89.392670][ T291] RSP: 002b:00007ffccfc309c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 89.401132][ T291] RAX: ffffffffffffffda RBX: 00007f8617a3222a RCX: 00007f861799ce59 [ 89.409226][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 89.417213][ T291] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f8617a321ca [ 89.425218][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccfc31c80 [ 89.433224][ T291] R13: 00007f8617a321ca R14: 00005555716a54e8 R15: 00007ffccfc32d50 [ 89.441240][ T291] [ 89.444280][ T291] ---[ end trace 0000000000000000 ]--- [ 89.478419][ T28] audit: type=1400 audit(1778629159.197:284): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.500564][ T28] audit: type=1400 audit(1778629159.197:285): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.547864][ T28] audit: type=1400 audit(1778629159.197:286): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.597846][ T28] audit: type=1400 audit(1778629159.197:287): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.621413][ T28] audit: type=1400 audit(1778629159.197:288): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.642099][ T28] audit: type=1400 audit(1778629159.197:289): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.665766][ T28] audit: type=1400 audit(1778629159.207:290): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.089338][ T10] device bridge_slave_1 left promiscuous mode [ 90.095539][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.103418][ T10] device bridge_slave_0 left promiscuous mode [ 90.109668][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.118989][ T10] device veth1_macvtap left promiscuous mode [ 90.125114][ T10] device veth0_vlan left promiscuous mode