last executing test programs: 9m28.451124808s ago: executing program 32 (id=31): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x6, "88481c9520c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010400000000000000000400000008000000a3"], 0x1c}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x8001, 0x83, 0x2}}) modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x20000800, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x1, 0x20000800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 9m26.984984722s ago: executing program 33 (id=46): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f00000000c0), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async) read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/128, 0xffffffffffffff70) 9m25.643157394s ago: executing program 34 (id=55): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$rfkill(r0, 0x0, 0xfffffffffffffead) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) setuid(0xee01) unshare(0x28000600) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 8m56.491383239s ago: executing program 35 (id=465): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r0, 0x0, 0x700) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100a}) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302fe7f00030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2000000000000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 8m51.666119076s ago: executing program 36 (id=557): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001"], 0x14}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101", @ANYRESOCT], 0x0) ptrace(0x10, r2) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '&j'}, {}, {0x20, '{'}, {0x20, '.[.'}], 0xa, "b7d59f8371969f7f030ffe97ea8d8cfbd33d489159f56c8d9e8e36c36392fe058ebf17939d2ead862dee531a6c4542f2881732bfb92c6dd0702a819e7102b3e20207faf0d682e099529a29ddc630091c2c01c6b9be04872fd530d04170354ac5daa3253bf79def6516e085fc06612baa0be71e54b003761d43f98d6f5b0aeab339ddc534ac389739c27cad8b574e17c6117bce34b14876e5c92b7fe484dcc1bb87a538795f78c3e926ff0a21faa968169f883b1f1c6f355ed294a84132a7ff4ddacf03f1c172617354e3062089175283e2618e28bec4b6c6bb50e94c9f9510f21de09fabf52dec"}, 0xfc) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000040)={&(0x7f0000000140)=""/16, 0x10}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) r3 = socket$inet(0x2, 0x5, 0xffffffff) sendto$inet(r3, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101902, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000096000040"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r9, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)='[=', 0x2}, {&(0x7f0000000380)="6ff889b16e896fd19c79f437739c", 0xe}], 0x2, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r11, r12}}}], 0x20, 0x4044040}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x3079408, &(0x7f0000000440)={[{@index_on}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}], [{@audit}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, 'mountinfo\x00'}}, {@euid_eq={'euid', 0x3d, r12}}, {@audit}, {@flag='nomand'}, {@pcr={'pcr', 0x3d, 0x1b}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r8, r10, 0x0, 0x4) flistxattr(0xffffffffffffffff, 0x0, 0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x80000) 7m41.31283696s ago: executing program 37 (id=1776): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1802, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r3, &(0x7f0000000040), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7m33.059569872s ago: executing program 9 (id=1883): r0 = socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0918"], 0x18, 0x4000080}, 0x14004084) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x1000, 0xd, 0x200, 0x5e, 0xcd, 0x73, 0x1, 0xfb, 0x6, 0x8, 0x4, 0x3ff, 0x9, 0x4, 0x6e, [0x7, 0x1]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001200050b"], 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setresuid(0x0, 0x0, 0x0) setreuid(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500), 0x8, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@mmap}, {@version_L}, {@access_client}, {@access_any}, {@privport}], [{@fowner_eq}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x33, 0x39, 0x63, 0x35, 0x65, 0x30, 0x63], 0x2d, [0x32, 0x61, 0x30, 0x36], 0x2d, [0x38, 0x63, 0x50, 0x34], 0x2d, [0x37, 0x34, 0x14, 0x61], 0x2d, [0x32, 0x38, 0x34, 0x30, 0x33, 0x64, 0x66, 0x66]}}}, {@context={'context', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '{//%'}}, {@subj_type={'subj_type', 0x3d, '!%/'}}, {@smackfshat={'smackfshat', 0x3d, '(%$'}}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsfloor}]}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x3}, @decrefs={0x40046307, 0x2}], 0x98, 0x0, &(0x7f0000000440)="b6bece7d2e250c9f69ae32d6e5aeaf2b7ee56b0d616af2cd48e167d533842bd9ee3cec61d6270e4e60fc7c9793f02c26426438183889c753b528fb2319496aa29907ab9d4ce8b532e0d897d6c918daaf2fa76bea00c2caf6616abc7330dc06f84a2a21db6bae6a713074c9f5f515814be4ae76c9f7894cffffd9424362b740775ca847ac14b7d0a3045675e01f2dacf56ef97fc8dba0d828"}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket(0x1d, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x865eb32f679876f5, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0xf51d, 0x3, 0x55, 0x2}]}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0xeff, 0x0, [@sadb_key={0x3, 0x9, 0x48, 0x0, "7026405ea9be49fa35"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff00000000000000", 0x23) recvmmsg(r6, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m33.021156223s ago: executing program 9 (id=1885): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1}, 0x8}, {{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000980)=""/199, 0xc7}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/29, 0x1d}], 0x5, &(0x7f0000000540)=""/146, 0x92}, 0x5}], 0x2, 0x10140, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) r4 = fcntl$dupfd(r1, 0x406, r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000002b40)={0x8, {"50f100f99a23b001a33440ee6e678afe8492600754ff4421ed85b485268611fd3c184eb1c195f10ff5feb182ef2be74fcc1b3fe3502c01f6efffd7aaeb23ea14c30e5097e7c60116af2551e6a5af67d2b5cf4f86029c7177bb77f6485eece3b638c5c7bf3d5319c516f1c1089b3dda4472eafb5aa6769e3c8c4164e4738c0b6d353c00ac5dbb326530fd5d8c5ae609051baa5d6b89b6c3af72550e889251051f3765eca3059ea037f1674896efe2bd854896e1ba940f879edcd9bdfd00f85ccc8bdf1d19d7854a472b04e77a91ccfcb1cbb13b2c81383c08df09b1717664929d59256ccc1551d5c6eed05174ffe9c6dbe6b61cd55bce92efa0690ab27c6fc7caac4ce146083d705d8d37f36bdddd040b6df08c52a68a688b78dded24d5d0430f40f6312a865336fe984828622b4fb46acc0f0975a885b22f4b76d2381982c6231db200f2220fcf3227e7ce4d740aefa0f0abfcae7e71afee628915e30d296c27864bffa13dedf83c0b06821b4fef52411c07e9eb2afb63576f7ba953bcfcc732776d9323428fe68bcb625bd253d5a70c9b306fc4eec95b1eec2776115aee824b66d4143c0440abf8df5668e35b826b42fc004def6b7ac1126c17257579ebca5b545bfdb0c60213068f18629b56d0be9a528ff7cee035704b19bc75173395454b6187c4c796fabd8b200378d4e9d95db98a6abb5e875882f0a86d05a01ffac6be8a8713346072ffb011ba7a92fcdc48651cdec2942ccbc8c57fdac94d4d6972bc00ab40a965b6c5150ec5e3b0a79a5a4532b2cdd6a1d08bce9f53f97dbe5440900d516119c0ec9b3804df86f72b7a5925bdbc04da11662ea3605a169a3f4e874091f1a596d12e735223a277844a9828f1b9e75254a0810fe6c2c08ba8a260ed8e596bb8aa811b0a585521fe997ea34c934db651e4504386d68aa20c47f53de96b1becc7578aefe00a443e0e1cc1c2c0381ab65b17d876b86670d59fc7cf3f39a408c3bf8a43843fd8032e20c0b2542f3d464fb6a427653e9f47f3fcd627613df3d6523b548a129aa1487748d0fd3c9b61f6bef24e7e5aaa2fe12f8b0a25eff8951f760dc1fd278f7357f004f483dc7f0e556c41a743e711db89ceb77b8b58a9d4453af79a197712f3ca67545a1a491a3d6d3bd8c2e1a1bea41fbf375a143938b46a9e7fe3277696799ff1c7f866853027462a27bce752dc3ba10f920367f34505729f020d1882c4bcdb54c5f4774359f5301e434c2139baeb3010c74c558ea768e7eb11d8a7d77fa82eea22b6f856cab99d63e06130344b56cf2859171c45c76a464ea873f41f76adbd59ef8151e4deda16179b46c83ade42935a221b462ee946831a579805d0b2c46df3f1eeb7218156abf1aeea86a6dbaf53ad81ddbd7a86a6aada73f8330df00a02a3c64fabcf6ed92446172a1ee53187c9bf89a3be808701360afaf78e295389864912e78d9131f4966c66793bbe3afb8b7c657ee04d38d46a521d07aa57eda1f3eb690e4b4af3fb633c09d8cf89c22baf3f7f87f060947bc432036ebd9e2ddfa89793203372f3c21e26fd073ba9673fe7a492e6f22d44bbae5a5e872fe702edf61ba28ee0b05862e435332fd8e0474396a4a1125de9ff5aa071c7a802e74fc8b114c06ee7b0d4da1bb5c1b2a832a51ffb2767e10b39e6d80bfe7ca14ecc6c503655208492756b84264b28bada22c3d608d4f42fcfd9246fcbbbae6c753c8d01e40bde6db46e20a32ed56ef81a14b67584f89c944fa4afdbc1649c300590fe31d152470081090dd45dfbbec43cbae47bac0febbb8d943a89c5ec9da21afff075c6d7db4a667fb8a2b89122d36d4790c35f2611e227c7363ab855f7a9fd7b963d2aab3d18d20f8a7f2320f7446de9f73595f0c19170883eca4e9f9194ea6a2b0ba2f8107dc48bc18a3ab68082c868ce0e0f33a1b90f2c0712392ce7fa2fcb1cbe2fec9915c3723b9928ef02a26e41c28cbcae972de68a849d9cdccf4ca6ebd412aaeaffbc5c77266d957833a84ac18c6e88e86ed5a81f653f799b99e9293fac4511c220ce673b602d0232ba64f32a080d5fc8598778d77bdd232959413d9ede9e2acec86b7229ce548e0e07d0a62f27bd11ab5834fc5bd7078f3fae16cf99bce55fa7ae94ea1a5d4c3ea2c6cd6450e7cd5a2a69634648745422056fb2e4b268a2d59c903d9f6b6f51a1603266dcf94184cfe8f321794fc63bbc0f2927a4200bfdb75114c803a81de12b67407d50d92aeaebac89fb9259b6345997182a525df3f9d95b406d61df61621065cab0791cf2f4ca2b9ccffd4c8df79534ad0fab1cf15558221b2e4a41219d7fa0a523b869c7a83b956a7962fc46a5ec45f6acf95be2b67726bce277da85e8daa6b49fd6681684522972ef1cf0f2eb9f99e7f14777a134051b08a1479be2846676a2d592907e94e9a3a912fbabf70e8861b9ea4bf618fe2901563a37d0395f135658322185e17443cce1255572846ec555b60ab7f5f8d9d1d2193fe4d036f2bd50f1564875b9b70cc789b9ced1f2694bbb431499d0a11d237aaffcd8b1cc9a9f4bc049d5a7897076c9cb6016c4db3a0d4fcda8a369fa258fae55a79099f3f4112b07433b5b9590f653e5636cb284df46c897450e4f0bfb3c33ad0a05a02d1330185c54e536d99f08c416ce029c68274eae07e4af6a91b8cca576024fb5ee4588b7081b563cdf517b690443f5807bd9f3764aa39e4fa7f15378ae3d89ec7b6ac6e3896496f09077a739b72d6bb5a4d4876b3a9f090173b97c62a6367bdd7b2da2201bb0591586b068a7d518cd4eae1cb04e71d1a0af4fae8082b86d8537451ffe8a03272b0d82d4acc02f3dc4bc6ed63be3a3fe1df5978c5f42883d9d7ce01ae7f9fe01cb436480c13fa8c25f4a10af8e563a1b95f5bacb7a2c96f0f52efff49b061f373ea1de00e57d0227d3538ff0c4f88cfde8b346b43e3f353e8ae5186948152073d8ca260cd1e7e2510367a18234bf41d6ddf840f537a5e7d07dcaffc2810c95fb96f51c6526a696f35279f45019a0ca40074dd8ae3c9901b63a71ed0a888115e3ddf1ee60a0c0c7f05215f0aa55b2dfac3b613a96a28f3207ec1362a74033f39a7cc839929edc7441963f21d502de0edbc189e969d2e7a7180ccd18b539511cb4bbfcf63ee41932a38209d41162502fc7cc4b6aded383d51f5aeeec2dbc5671293a67588a43ebfc1b69cbdd3264f536fc830dc4fafa69a3a71749a4487cf0827967347ae9b6d132a42e906880b3ceea45796c77699ccae1f05d42ce7626302bcdac1489a36e243f919cec3d875655f06b2d56a007023cb739f80db3a3471c2aae82ca288a811f648ab00e54debeff1fd769d0a4f8dfeb27c72239595ed325158a4b97b04cbdc05fb6a270334b7dc5212fcc371340e0d5a26fa51f14939cd9e9a0e890bd4e7807f9187a15abfb5a552ab84dd8167d0ef6675789460a01d65df51a07d0f130ea88f39eba70f2a96fd77902e988c476c64be779e1c45252ed5e33f3129b29f22ee8b6a9b575f467644136cc1e4cb4c3e45b1b8159704f5dc86a6b8504ab9ce548d7c7cba0d6c7dfa406fa0f79e159ab03f2288508e536a316ee59cded14856b34b2960e5cbc1d2cb3b68f8c7bdbedf64c5d08ae82aabd0aa0cf7e445aff1de01071e2af3f0c5e7ec49702cb7dfbc20a262791c4c9e10b3b11597c1c79af2b4cc831797bf666e4ef86ea1b47a4195688cd095d020790283bd7bd00eb1bcd51653888ad861132e9e8b50e41ab7f06622b7953b054e4a165cf519dfc5fd0aa38f8bee2fd76c33410d88c29d7d2542f45fc8dad4583fe927ef3107ac9028374e5e865f1476abe2bc93ec11733d31348c629d5d2587169ba3274b505d310f806edea1d5d3f39f2d5156bf2b89f3a41ea4a658b309ef01aa27f7de8792514bd0dad5483ab4b6e964a1ba40fa817a6e73e423f757adfb3de027e081297a077d8b374f7887733bec429ba388224ca1a57d67e5753dbcba3dc7571577ed06b4b887219d2107e018ab757bb1f5acf974a8fc5ddf064e6913d9d2b391ad535c13c33d58506f52242fb90a61370304855002a3da925b66bd891c59aae60df0864827b1e030d5a00ae8b926f11dc09c20279589337ed2f1a780bc8dfa91018e1dbedc009a9d14fb8e54c412229bb24410929b670b23a34761cf58377d757f4b6d7599c7dbac61cf238f69252713df3305132d2276cc5d48cb86aa4188a9d64d7a27f6ac39583e93488fae19c05b039d6349f470b47cdc0bfcce4590669b145dc5887cbff39c26d85491805c69ed9d2133272edd48abb4aeb03d5b4a14cf20105c21f77d96f2dc769199a23d1abeddf8c9a8aff9d2a3a4370f01483177ca896b518dcb681c9ac4009858018d1dcd698b49c89973c35fd2d2bff5afb06b5838ac6559bf62bab26c82bb23113650add20d0453b1e8c8189f81da84ae0c6492a5f89154214afa9ded74d7a354de3c762176f95df5d69154f6a62ae3135507ab1ab87065d797673485f12c9b717275e6da81bac58e88313d0f8e17dae2e4c5d3b14a15e82d9e2bd7b6caef1125c68665d410ffe7c73f20587d07af54087ba8e49fbf41c6d00238ca54d8113c99c8e003faba5832285cdee0ed69a896d9c466b574e3536054a800305b0be35901969dff5da1caeadb711fbc770b20947ab84baaf539c15b5e6d2bcf0ac9256c2007ddf0d0935d9d6673d0244ff1fda8254564561f3b39c9290ec87479782a9e3ea98836f6136f059c700e755dddffa9f23974ec54fbec859964491b9a8799996a417abc42ba16d3cd9396b21a1a7de9134916e1d75c1471eee92830a002cdc6c749bfecb4f29a46d199306fcb9a2f057aabf3b453283ba1d51763b25cd6bec6688f06fd58042d296235767d72ef14f67e3514134a36a57e02e6e8909f23bdc0d5442bd8e836aa188bf820774e7443fb7ad0bc84666a592799a76005f877f0587af9896970bfd6e75003711bcbfc68ddca9459e19218692432b2f9e3ec7bbe7ca8fc5029098575fed76fdba387bccb4b907f0c0d3acb2764a2a71d718b9a9a89b991cc2addfa5cfe8dd5398907c65fcfada8a1a43e4acb54399fcc0ec79871abc1f5a077e382853e49dd7ba4806646703ea534ac84cbabebb5800c354da26f80066c17121d88230b52d2100dca4ac4e4d37f009accaeec0e5164866328aba410262e07f4daa0f4b46bb18cdc77af1405f84f143958167065beee34047063e2308288795d4facf0c525a87746850cdc6e86c3d74f99bd5dec8c2ce7d2f03e12363cdee2e6204e9a5766caff882269b86bcd49e6c1c1899adb6376861dfc1617a8c9b746de0b6fc85f0e3b0c56ac136b03bd72949421f125be7ec747f71ce897ea40308b34634cedf7bc63fff961f446a1617ed001631f7d938cf337827e76dde10216e4e02e3aa2ee93d2ff9a892aee92f552766bea1fc13cf0c6af9e512902f9988dbcac5e967ce3a10880b978702f4b7028bb155b46e2d9e64a1dd6a063cf4806cc94925e5fa6775cd54c73307e36da3852070c5bdee381788ea12ad6efa6e4ecb16fe13e2a3c42822198d6552653d9658a842730146a2dc33435f644a24d42bf80760a4cb71c1cd5bd5381d2600de46a0764ce592c328a397ec401de1ea636bff1702a09b0912b7012df01ed7e17257f53b0ca4234b079408f0baf8ae0307fb57d36abb46bc06c7493e651b82b1b8254bd6baa0637019d7661ed593d6ae9c382c47fec985f2a87e3e534cae621df061f5453c57b08cae0eea5048f2d2fb52bf58d57b84", 0x1000}}, 0x1006) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002640)=ANY=[@ANYBLOB="3000001f", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25020000001c000180150001006574683a626f6e645f736c6176655f3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008014) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x4) 7m32.138227117s ago: executing program 9 (id=1896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000640)={{0x2, 0x4e21, @private=0xa010101}, {0x0, @broadcast}, 0x2e, {0x2, 0x4e21, @multicast2}, 'nr0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x123000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r7, 0x38f54000) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2cdccea5e7b92ff9b13d30303030303030303030303430303030303034303030302c75596572aedd643d", @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) r8 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r8, 0x400, 0x1) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000200)={0xeeee8000, 0x105000}) close_range(r2, 0xffffffffffffffff, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) shutdown(r9, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x39) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, &(0x7f0000000380)={0x6000, 0x1000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 7m32.106003178s ago: executing program 9 (id=1897): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x29, 0x10, 0x0, 0x1, 0x20, @private2, @loopback, 0x8, 0x40, 0x8, 0x6}}) writev(r0, &(0x7f0000000800)=[{&(0x7f00000004c0)="dd9ae5b6351918ff6dc3640863c774f0b52db3987356412dad53778935268ae96be4cea2f1bac73bbcbd1c21b82c755eb7a656fe902040be1f98aaa7b0cd722da9aec2a76d711056a3d038b7d6ea5fd8566b5e61fbcf6f3936b9046be69c5e88949f43d014effa08c1e0d79f63d3a1504b4e4a472c30d7be5bd037dc6cde7b7aac77f8003f89cf092a6388cdfe1dd273773ac549c0e5e502b8e6bf3ac6f20b99a866dfa0e7b5a0214b51782f588dd951bdec7d82257c2aeaef7090f5c7d615b8e1f93f82d92efd05cc314e8adfd810ebd87b8dd5865cb349e2f43dad2938", 0xde}, {&(0x7f0000000600)="290befdfd0f90c04687384240796cfa707b49b1851985b997f9ed4b5c2bc07eb4f2145b478b3937b5f0f331adf77b35e2a3b67f4c23a28c5c63492260c746877583991bb5ac29a665b92e21d36e0fca4ad126032c338f7f2c736a6a57ab3817d9b0b5fb2aa833548cef96afbd7f314ecd861b38d0a0b65b382edb55c0a8460bc907df1ee571db6bb7aee9a090feed947b51c7902b0c8b8253d4eeab8e8951530e8aad3a8c6829788e2a1ea49cfc6a30354004e1fc32e161347dd6028fbc458e4b4138253b2dcd8a77611e0a4ba694420881ac15f3e95812afdd53b2656c2317c3bc9052672016557d36b414a313efbdfcaeae892095dace3e864be7697", 0xfd}, {&(0x7f0000000700)="8376b0128b81edc0744abcd8babe11", 0xf}, {&(0x7f0000000740)="21a643ee072b3da2d618eb90467d57ce91cf0e28c67ec39ca55124f87411fe7fedcc46b62b0f198688315d723a69dddc6e193d68d146f676a1f39ccfe37aa752842bf9a86797e093fac0333502058a4ad49f2a7bc1b3200ceec332118f464d98e14c048506b53d3503567db5d1aed18e97cda6097928188b507dd1fa398d6f29f1473084ca0a320424c094f959bd15580e34caec8476415e07172d474cbc86e63bf3e885a230338a52b8bcfd7052c5fb6ec0301ad2e64bffb44a88d31b", 0xbd}], 0x4) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000fcb000), 0x4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x9041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x2908081, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0xe}, 0x5, 0x0, 0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)="856569984aa98c59b03be773f1ba017863f8830635c3862f20c42ca930fa9fb508051c6a2d334aa7297fd9c18303587fbd10a6ac0342f84b853f6901e00911a049a0b8d0efe64478ccb84288bf974ddc3db073a187cc38698d799e00ffe3557a64434b", 0x63, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x273}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) socket$inet6(0xa, 0x80003, 0xff) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x29, 0x10, 0x0, 0x1, 0x20, @private2, @loopback, 0x8, 0x40, 0x8, 0x6}}) (async) writev(r0, &(0x7f0000000800)=[{&(0x7f00000004c0)="dd9ae5b6351918ff6dc3640863c774f0b52db3987356412dad53778935268ae96be4cea2f1bac73bbcbd1c21b82c755eb7a656fe902040be1f98aaa7b0cd722da9aec2a76d711056a3d038b7d6ea5fd8566b5e61fbcf6f3936b9046be69c5e88949f43d014effa08c1e0d79f63d3a1504b4e4a472c30d7be5bd037dc6cde7b7aac77f8003f89cf092a6388cdfe1dd273773ac549c0e5e502b8e6bf3ac6f20b99a866dfa0e7b5a0214b51782f588dd951bdec7d82257c2aeaef7090f5c7d615b8e1f93f82d92efd05cc314e8adfd810ebd87b8dd5865cb349e2f43dad2938", 0xde}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="8376b0128b81edc0744abcd8babe11", 0xf}, {&(0x7f0000000740)="21a643ee072b3da2d618eb90467d57ce91cf0e28c67ec39ca55124f87411fe7fedcc46b62b0f198688315d723a69dddc6e193d68d146f676a1f39ccfe37aa752842bf9a86797e093fac0333502058a4ad49f2a7bc1b3200ceec332118f464d98e14c048506b53d3503567db5d1aed18e97cda6097928188b507dd1fa398d6f29f1473084ca0a320424c094f959bd15580e34caec8476415e07172d474cbc86e63bf3e885a230338a52b8bcfd7052c5fb6ec0301ad2e64bffb44a88d31b", 0xbd}], 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000fcb000), 0x4) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x9041, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x2908081, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0xe}, 0x5, 0x0, 0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)="856569984aa98c59b03be773f1ba017863f8830635c3862f20c42ca930fa9fb508051c6a2d334aa7297fd9c18303587fbd10a6ac0342f84b853f6901e00911a049a0b8d0efe64478ccb84288bf974ddc3db073a187cc38698d799e00ffe3557a64434b", 0x63, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x273}) (async) 7m32.039686119s ago: executing program 9 (id=1898): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d000107000000090400050503000000092100020801229403090581030000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f00000000c0)) (async) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) (async) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r7) (async) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r7) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8) (async) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8) keyctl$KEYCTL_MOVE(0x1e, r9, r6, r8, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r9, r6, r8, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffff8, 0x0, 0x0, 0x8, 0x6, 0x95, 0x1, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x2, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x21, 0x84, 0x40, 0x0, 0x5f, 0x1, 0x0, 0xfe, 0x0, 0x5, 0xfffffffffffffffd}], 0x1ffffff}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r10, &(0x7f0000000180), 0x3ef, 0x0) vmsplice(r0, 0x0, 0x0, 0xb) truncate(&(0x7f0000000100)='./file0\x00', 0x2) (async) truncate(&(0x7f0000000100)='./file0\x00', 0x2) 7m32.006505989s ago: executing program 9 (id=1900): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x1f) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x800000, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 7m31.95124693s ago: executing program 38 (id=1900): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x1f) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x800000, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 6m45.359646545s ago: executing program 8 (id=2277): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f000000af40)={0xa000000a}) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 6m43.271037018s ago: executing program 8 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup2(r2, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01030000faffffffffff3300"], 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m43.270521878s ago: executing program 8 (id=2280): r0 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x6}], 0xaaaaaaaaaaaad64, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) 6m43.270109288s ago: executing program 8 (id=2281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x2}, @enter_looper, @free_buffer={0x40086303, r1}], 0x806, 0x0, &(0x7f0000000e40)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa73b9f8563614d21ec008a11a9275d116faffb02f56e62e8c511ab117003350a8e34e0dff85abe85dfe7e00e8c6ba573ff8486c5cdf8649bab88c46026c722950ce298158974ff93f7ed107cb334e4fbbb2b823d56b4a4d0140834e20ef50092717fc2caae69b05add4a77cb88aade9eb1b305f6ebb618eebdad37297eba61173942d0d0dd95e6fc656a78eef2ec45f1aefc0f7a027f8ea631ead5a502d4b74feae74acc8dba104d0d5ce4dcbc98a3f23740500d2ad8e098c138db2f972bc2739136471c4bcd5c33e00103ffe3e83fbb48accb1aad2fdb59aa0661bc029d544b5c7df3f5f3641389f178a5430ccac02c0ccfa1aba45feb79cb29cfa9143348c9bbc0bbec90c647a5059d8bcc8e2d9294b1e25d5c23886bdf31b9bc4e9a07f0ed7055513d466bbe880f9f13e9cf83b7b2be68100bf96c6df973b636843b7b6c74328377fc8f02ff8124c163bf1fbb12748b91ba70ed9c64ea5db30303551aa804267c6fd0fe14d9b3ce46ff6895e11a9cd99c31a1690d0ec31d448580451ed47a7f72622999f995cded7a03b0a07d8024540ef3b6aa7ef24f60b610be57775fb54dc4161e60d71e8bd8a941657ff8b8a1ae1a3a9969eeffc20d1cefa6c277b0e6b4f073092ce54679ea8e24b66f8524f03104707a9d5e1a749f12af13edf1b1f9f76997ba1c07621a206b338a5e1e41be4bfefd9b49bf0339a07ce51ef0ed28db18086f1941463c29445afd2918cb3d9abf29dbe8f259e8257257d2ba311dc29af39c298d1b660951ef3e329fd945f4ca4eeb8279a7149735417d1aa7a62db95938f00a1f47a34dab5c2c15295e2579455ae740eaf28441d80641dec7f11465b9b02a171dd23abd51eae8c5ad2ab22b18b4217e643f60fd9fc47958706ccbeba9d1ba7b2afb2892eeaafe5311ebeb92d4ff06372f21fd944055b1da2977c2138d07ec247c2ba911e93d7033c3f33c721ae1cf016cd205a732930c8c4f5a808a292071e4e9031948dd0c84e87751a1156299bae75ebf45d4032621b8a371d19c5d3301d44d10835b80df1701a2ff33e35ff507e3993aabad9405f511365f166d2ca695ca8a55590c11968458a2b793df601c68159af122defe611f8a9554db3ecfd1074526b64f8dc8267557b5a270d90a46beb7d7bcf6c0b45750fb343d2d91504741e076debb9d88ade7c02671675ac629d99cae7f331c19d42cd52a5da6ef350616d3d1b139294775910e6df583a8179c0d873ba63d1aef0aa6365fb41ba09c6d065fc5d0fde90c3ed76327f3237daa11e1c67596692205a4e1838e8c5860c4577602c732217fb902b870fae58a379e1fc25d11188f936e9d407488dd9b41989650a00081acb8757993742131741d64c552124df612dd662292042e95251c95d4fce380585412c17e29d25821f2f6f16c26b87fcc02d3bc37f0d659195fe930240c2643715936863d465a902e17b71c46e12f3479551c192e852a1b19687a94518f714280379bc98c86d6f91a78cb70d34182e385d0c42ddbd68945a7546ad074dd79d3de1f11e01f8bda5a527eecdd4f45dd2a35e2f53e049205b0139a4372cf99f3ddf5bc5c6174d255eef59b41af5ee1ffc62b995e9c9f484c408bb71d9cb3c69aa2a1af8e092e3c450fa5a8e6ef87ef8006da67332b8a587f0a55ad7cb59b1c010d19e4147e31ba0ae1b4069dbbab9861f54b74f986fbe080620e4b43e7c937e02f4cd6e07d5762ee9f3b09b4f5ba15b5df617e4b7cefd103e0ec1d1eee1e417c0e758900876475a3f01928f91b9b0c2b057eed95687359534a1b347ffedd91a3e328ddec102c6ab3c9958c79ca002578f849188cca92ca96b510b940d78d2aca334ec233299e16fc7bbd2fca134e38ee3187553bc1eb442948cbb7d6ff71a88f9266e051a445dd7889788bb460d85777b47f8cb416d630c13970bfaa927219d0328441f38bc35d35bc44f2fa5fdbe433e5ffd3babe81fe67a9c9346b12b6a408b516b9628512f6feeeb164c2635b6a9d57996264e6592971823d37f92d3068655ec278f0e0124a7ef071af73a68f37ca814136fee8ab07e46888a43ba3d17f69122e75bb6f170a4e76e5b662e0f45072876c66c5eb248dc2a2bbdca521fc19da85dd4a8b895452f9f6046ac830d0e4b61277988ea568e80430487aec51919ed35e26fea69720e45339d452d29ec13aa2bb72bb4c8a51a1f39165d625101ba126faa4018e055d06ebc82a2e1d062a9f78c0452b2855bba34492a1d9c49e1032b946869a16baebbe9c4a3ac1a8432629275b953a9c88941b3692e961bbd86cfe9be80db612f15d30c1f05028dbf173a24e4988a05b2210ed794e24be864bef4c27b41c9b9d474458f8812295a43f5338888d86dae63e5c9c3ba5431b353640d43e7b77ab4383713383c301291448730e929b41b7b6f47317fb918bb422423f8215c03d9e9772bb00f5da04c9539a85d04695ac8d125ab8634ad92e025315a68ff31337fb6ff3286a9d674ba1cb2c117c20b5ec107615e2d35d4fa3801f634cd2f2cff78b16c05f73c9b837e63597e9f3931fd22084a278a146618418399cd5a16aef925339a3ed3f402f9a19ccdf25d0808779f07d7ed760e7d8e6481c3c47a6aeee4945b38dcb5e935eba9af45faa3b3738331b028a133f08b87eb9bf86d4c90d5039824bc9f247e5cc1e622cbcfee5f7e4019980a4bcf4e6d2aa91ff691c3dd59d0bbbc9f9380d69367eefd1d584dd7eae09585d888b6ea0c339f99515e7e3cbef6ed77e2c1bd526b330"}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x2b, 0x7f, 0xffffffff81c00001, 0x0, 0x4, 0x9, 0x2, 0x0, 0x0, 0x40, 0x8000}}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x163, 0x0, &(0x7f00000003c0)="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"}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4219, r4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xd0900, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 6m43.269751008s ago: executing program 8 (id=2282): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x161900, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x32) socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r1, 0x0, 0x0, 0x2100, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0xad8040, &(0x7f00000000c0)=ANY=[@ANYBLOB="64030a6ac458ec5db299ee13e30400fb9e00", @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d3030303230303030303030303030303030b8b36f8f171f9724133322048f46", @ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="6eb3dd488211940f9cffedc9c49893b4b8d383c8bd12a921c3db0375740a9f8fade1da03eac14c2fd93692d6a77e17b8d74084000000791d5ec178162441115d99e6a0c8d59b5ea0fcfffff68c"]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'pimreg0\x00', @local}) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000340)=r3) umount2(&(0x7f0000000240)='./file0\x00', 0x1) write$vga_arbiter(r0, &(0x7f0000000280)=@other={'lock', ' ', 'none'}, 0xa) 6m43.16717698s ago: executing program 8 (id=2285): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x32db4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/213, 0x0, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000a00)}, 0x1000}, @decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 6m43.122941161s ago: executing program 39 (id=2285): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x32db4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/213, 0x0, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000a00)}, 0x1000}, @decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 2m37.639799409s ago: executing program 1 (id=5963): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r1, 0xd, &(0x7f00000000c0)={0xbe8, 0x9}, &(0x7f0000000100)) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040), 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x9800, &(0x7f0000001dc0)={0x0, 0x0, 0x100000}, 0x4a) timerfd_settime(r2, 0x3, &(0x7f0000000280), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000a00)={[0x8001]}, 0x8, 0x80800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r4, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2m37.639403189s ago: executing program 1 (id=5964): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='@\\-\x8d\x93|\xbbs\xd7\xcc|\x03\xd2\x02U@\x8cx\xbd\xf1\x1c\"') r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = signalfd4(r0, &(0x7f0000000140)={[0x5]}, 0x8, 0x80800) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/156) 2m37.638182449s ago: executing program 1 (id=5965): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4c, 0x1, 0x3, 0x6, 0x73, 0x8, 0x2, 0x1, 0x9, 0x4, [0xffffffff, 0x7fff, 0xa1f, 0x7, 0x7, 0x10, 0xe9, 0xffffffff]}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x129c2000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4c, 0x1, 0x3, 0x6, 0x73, 0x8, 0x2, 0x1, 0x9, 0x4, [0xffffffff, 0x7fff, 0xa1f, 0x7, 0x7, 0x10, 0xe9, 0xffffffff]}}) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x129c2000) (async) 2m37.635916829s ago: executing program 1 (id=5966): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) syz_io_uring_setup(0x71c4, &(0x7f0000001300)={0x0, 0xe0c8, 0x3175c66a96059d45, 0x0, 0x25d, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000001380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = inotify_init1(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeb8, &(0x7f0000000340)={&(0x7f00000013c0)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x62}, {@in=@remote, 0xfffffffd, 0x32}, @in=@multicast1, {0x0, 0x0, 0xb347, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1000}, 0x2, 0x3507, 0xa, 0x4, 0x0, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0x0, "973dff8fbfb35662752c9cc911fd3af8d6b6fcb7151dbf6357b262aa95654d75095d47b13562f8fb2cfd7de31f8285bceae4b68cf36f21a2216f0423c76b34377b0ea73e25659b53d379088b276d208ac46c615d0fb88195256ee9f1ff8a872301e087cff5a96a69e2620878a68747fa2f8cccd06b06b4ccd13b6cb09946456bae9e734b995c6c0ca83eec1ac1bf455a899d368aa3265dd680aa4fbf491d9dc79a7e08ba006468cbf7be562a67a0e87d74d0f5a418bb1b7bcf8e098ccb6b370b"}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) read(r3, 0x0, 0x0) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x9f7, 0x729d40) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000300)=""/4096) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) vmsplice(r1, &(0x7f0000000140), 0x0, 0x4) fcntl$setpipe(r1, 0x407, 0x10ae) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 2m37.436673482s ago: executing program 1 (id=5970): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[]) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@allow_other}, {@allow_other}, {@allow_other}], [{@smackfshat={'smackfshat', 0x3d, 'binder\x00'}}, {@dont_measure}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'user_id'}}, {@audit}]}}) 2m37.151985357s ago: executing program 1 (id=5972): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="260f01c9c4e27d177caad20f0f1e8a64f30f09b93f0b0000b81ca90000ba000000000f3066ba4000ecc4e36d6ff2f866baf80cb8d4fd208def66bafc0cb81a9a0000ef66baf80cb8a6dfd78def66bafc0c66b8002066efc4c219b7a300000000", 0x60}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)=@secondary) (async) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_access\x00') (async) getsockopt(r6, 0xab, 0x1, &(0x7f0000000300)=""/246, &(0x7f0000000100)=0xf6) (async) fchdir(r7) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_subtree(r9, 0x0, 0x32600) (async) keyctl$clear(0x7, r0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000840)=[@acquire], 0x0, 0x0, 0x0}) 2m37.151637647s ago: executing program 40 (id=5972): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="260f01c9c4e27d177caad20f0f1e8a64f30f09b93f0b0000b81ca90000ba000000000f3066ba4000ecc4e36d6ff2f866baf80cb8d4fd208def66bafc0cb81a9a0000ef66baf80cb8a6dfd78def66bafc0c66b8002066efc4c219b7a300000000", 0x60}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)=@secondary) (async) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_access\x00') (async) getsockopt(r6, 0xab, 0x1, &(0x7f0000000300)=""/246, &(0x7f0000000100)=0xf6) (async) fchdir(r7) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_subtree(r9, 0x0, 0x32600) (async) keyctl$clear(0x7, r0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000840)=[@acquire], 0x0, 0x0, 0x0}) 1m41.662270639s ago: executing program 3 (id=7149): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x80284504, &(0x7f0000000000)=""/56) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4014}, @fda={0x66646185, 0x8, 0x400, 0x9}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m41.62110677s ago: executing program 3 (id=7150): fallocate(0xffffffffffffffff, 0x1, 0x8000, 0xde5d) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000640)=0x5, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r1, &(0x7f0000000600)=@known='user.incfs.size\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, 0x0, 0x4000000) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000d801ee97d583e07e72d3e205fd8ac762c7b282c37b6b1eb09b4ed6f8d5c22b21f4654b372eef7fc9095e79", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf250d00000008000d000100000008000d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000855}, 0x48800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x40010, r4, 0x1558a000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000480)={0x9, r5, 'id0\x00'}) syz_io_uring_setup(0x1cf3, &(0x7f0000000500)={0x0, 0xc8d3, 0x10, 0x0, 0x373, 0x0, r6}, &(0x7f0000000580), &(0x7f00000005c0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="00000000000000a90ba5", 0xa}], 0x2}, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x100000000000d2) setsockopt(r5, 0x6, 0x4, &(0x7f0000000200)="d61012d533096195eb05c80180d42fceb66b32fdb721b6ebb36f8fdf3b1071cd5b90918490e701a5b8a4079276998a5297b719f194d1fc69e2edec48c0aa07961ba4bbb8b66132d9deac42732dd1858c2b35df6eb66606c47efb7f097c8886377a9bf5a20dba66f909028041ecbad5da28f687d410bb55ecb6ae29322107e2172eb83462d20680ce5a4489348fcec82a987fda6cd23d30c734084b3cedc8c8e7bd5336690733688558b432de808c479cdda61c316d9f30b9dd89e306b24743baea09ffc25874a365a25f17d74f9a1a97ead377aa91edc3221c206f", 0xdb) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x4c80, 0x7000000) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.535917071s ago: executing program 3 (id=7151): inotify_add_watch(0xffffffffffffffff, 0x0, 0x81000010) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000540)={{0x4000, 0xdddd1000, 0x0, 0x0, 0x18, 0x7, 0xfe, 0x2, 0x0, 0x6, 0x9, 0x11}, {0x8080000, 0x6000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}, {0xf000, 0x80a0000, 0xd, 0x0, 0x8, 0x1, 0x0, 0x0, 0x3, 0x0, 0xa, 0x5}, {0x100000, 0x1000, 0x0, 0x6, 0x6, 0x7, 0x0, 0x2, 0x0, 0x0, 0x44}, {0x2, 0xeeef0000, 0x10, 0x0, 0x6, 0x4, 0x0, 0xe, 0xfd, 0x3c}, {0x8080000, 0xeeee0000, 0xd, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x4}, {0x8080000, 0xdddd0000, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0xfe, 0xfd}, {0x80a0000, 0x4, 0xb, 0x0, 0x0, 0x1, 0x0, 0x8, 0x26}, {0xeeef0000, 0x81}, {0x3000}, 0xfdfcffd3, 0x0, 0x0, 0x2a, 0x7, 0x8800, 0x8000000, [0x1fffc, 0x1000000000000, 0x9, 0xfffffffffffffffa]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0700000000040000fa00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="01000080010000be"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) fallocate(r6, 0x0, 0x0, 0x400001) (async) fcntl$addseals(r6, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) (async) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) (async) fcntl$setlease(r7, 0x400, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, 0x0) (async) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40043d0d, 0x0) (async) ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0xfe, 0x1}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001200010101000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 1m41.501628322s ago: executing program 3 (id=7152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'], 0x70}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.468321793s ago: executing program 3 (id=7153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r0) r2 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/176, 0xb0}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000280)=""/121, 0x79}], 0x3, &(0x7f0000000380)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)=""/120, 0x78}, {&(0x7f0000000300)=""/15, 0xf}], 0x2, &(0x7f0000001440)=""/255, 0xff}, 0x3}, {{&(0x7f0000001540)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/229, 0xe5}], 0x1, &(0x7f0000001700)=""/78, 0x4e}, 0x2}], 0x3, 0x10001, &(0x7f0000001840)) umount2(&(0x7f0000000240)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000001880)='./file0\x00', 0x14001, 0x4a) mknodat$loop(r3, &(0x7f00000018c0)='./file0\x00', 0x1000, 0x0) 1m41.253766346s ago: executing program 3 (id=7161): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x401, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0x2, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0xfffffff9, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x5, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0xff, 0x0, 0x800, 0xa, 0x4, 0xffff, 0x4000006, 0x2, 0x1000, 0x0, 0x4, 0xc, 0x1, 0x2, 0x1, 0x9c, 0x80000001, 0xeb5, 0x2f, 0x6, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x361d1cd9, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x4, 0x5, 0x3ff, 0xfffff241, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0x4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x3, 0x1, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0xc, 0x5, 0x7, 0x62e, 0x2c0, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0x8, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x553, 0x1, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0xe30, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xc, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x4, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0xed6d, 0x2, 0x200, 0x4}, 0x28, [0x1, 0x1ff, 0x6, 0x1, 0xc00000, 0x52df, 0x5e1b, 0x7, 0x4, 0x400, 0x4, 0x7f, 0x8, 0x6, 0x5, 0x2, 0x38000000, 0x1, 0x4, 0x7f, 0x2, 0xad2, 0x9, 0x9, 0xfffffff8, 0xfff, 0x7, 0x1, 0x0, 0xe, 0x97, 0xfffffffe, 0x58, 0x3, 0x1, 0x2bf, 0x8, 0x5b, 0x7, 0x2, 0x1000, 0xeac, 0x3, 0xc, 0x7, 0x3, 0x4, 0x3, 0xfac, 0x0, 0x3, 0x5, 0x3, 0x6, 0x1, 0xb, 0x6, 0x1, 0x9, 0xfffffff9, 0x0, 0x9a0d, 0x40, 0x3], [0xff, 0x2, 0x8, 0x7f, 0x6, 0xc3, 0x2, 0x4, 0x6, 0x57, 0x9, 0xd8, 0xf3cd, 0x3, 0x6, 0x81, 0x8, 0x94ff, 0x5, 0x0, 0x8, 0x9, 0x1ff, 0x2, 0x7e, 0xaf6, 0x96, 0x6, 0x3, 0x9, 0xe6, 0x5, 0x10000, 0x3, 0x9, 0x3, 0x55dd, 0x5, 0xbf, 0x4, 0x4, 0x200, 0xd6, 0x7, 0x7, 0x6, 0x18, 0x8e, 0x3, 0x2, 0x6, 0x8, 0x3454, 0x2, 0x5, 0x2, 0x9, 0x7, 0x7, 0x3, 0x14000000, 0x7, 0xffffffff, 0xe76], [0x100, 0x3, 0x6, 0x5, 0xb6, 0x7, 0x8, 0x0, 0x1b22, 0xc, 0xdce, 0x9, 0xcc, 0x2, 0x7, 0x8000, 0x9, 0x101, 0x3, 0x9, 0x257b, 0x8, 0x6, 0x3ff, 0x7, 0x1, 0x90, 0x10001, 0x6, 0x9, 0x0, 0x400, 0x2f757c33, 0xf, 0x2, 0x5, 0x8, 0x5, 0x6, 0x1000, 0x9f, 0x0, 0x2a24, 0x5d, 0x1, 0x4, 0xe, 0x2, 0x6, 0xe, 0xfff, 0x0, 0x3, 0xffffffff, 0x5, 0x401, 0x1a0000, 0x6, 0x10, 0x5, 0xfffff5f7, 0x6, 0x5, 0x4562], [0x0, 0x5, 0x7, 0x4fda, 0xffffffff, 0xe8, 0x0, 0x1, 0x92, 0x1, 0x6, 0x8, 0x0, 0x5, 0xb11, 0xc, 0x9, 0x37989e1b, 0xa91, 0x8, 0xfffffffb, 0x1, 0x6, 0xfffffff7, 0x9, 0x3, 0x9, 0xd62, 0x0, 0xfffff000, 0x4, 0x4, 0x46, 0x7fff, 0x6, 0x101, 0x1, 0x401, 0x3, 0x2, 0x7f, 0x0, 0x2, 0x3, 0x5, 0x4, 0x1, 0x1ff, 0x8b4c, 0x3, 0x8, 0x2, 0x5, 0xffffff7f, 0x5, 0x8, 0x3, 0x0, 0xfffffff9, 0x3, 0x1ff, 0x2, 0x8, 0x5]}, 0x45c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) gettid() (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8a00", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c58d86b8d37dfd3223972d00", "9064c662", "bb10000000000001"}, 0x28) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r7, 0x0) (async) clock_adjtime(0x0, &(0x7f00000000c0)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) sendmsg$key(r6, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003400)={0x2, 0x9, 0x5, 0x2, 0x2, 0x0, 0x70bd29, 0x25dbdbfe}, 0x10}}, 0x200040c0) 1m41.219391297s ago: executing program 41 (id=7161): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x401, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0x2, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0xfffffff9, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x5, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0xff, 0x0, 0x800, 0xa, 0x4, 0xffff, 0x4000006, 0x2, 0x1000, 0x0, 0x4, 0xc, 0x1, 0x2, 0x1, 0x9c, 0x80000001, 0xeb5, 0x2f, 0x6, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x361d1cd9, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x4, 0x5, 0x3ff, 0xfffff241, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0x4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x3, 0x1, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0xc, 0x5, 0x7, 0x62e, 0x2c0, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0x8, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x553, 0x1, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0xe30, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xc, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x4, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0xed6d, 0x2, 0x200, 0x4}, 0x28, [0x1, 0x1ff, 0x6, 0x1, 0xc00000, 0x52df, 0x5e1b, 0x7, 0x4, 0x400, 0x4, 0x7f, 0x8, 0x6, 0x5, 0x2, 0x38000000, 0x1, 0x4, 0x7f, 0x2, 0xad2, 0x9, 0x9, 0xfffffff8, 0xfff, 0x7, 0x1, 0x0, 0xe, 0x97, 0xfffffffe, 0x58, 0x3, 0x1, 0x2bf, 0x8, 0x5b, 0x7, 0x2, 0x1000, 0xeac, 0x3, 0xc, 0x7, 0x3, 0x4, 0x3, 0xfac, 0x0, 0x3, 0x5, 0x3, 0x6, 0x1, 0xb, 0x6, 0x1, 0x9, 0xfffffff9, 0x0, 0x9a0d, 0x40, 0x3], [0xff, 0x2, 0x8, 0x7f, 0x6, 0xc3, 0x2, 0x4, 0x6, 0x57, 0x9, 0xd8, 0xf3cd, 0x3, 0x6, 0x81, 0x8, 0x94ff, 0x5, 0x0, 0x8, 0x9, 0x1ff, 0x2, 0x7e, 0xaf6, 0x96, 0x6, 0x3, 0x9, 0xe6, 0x5, 0x10000, 0x3, 0x9, 0x3, 0x55dd, 0x5, 0xbf, 0x4, 0x4, 0x200, 0xd6, 0x7, 0x7, 0x6, 0x18, 0x8e, 0x3, 0x2, 0x6, 0x8, 0x3454, 0x2, 0x5, 0x2, 0x9, 0x7, 0x7, 0x3, 0x14000000, 0x7, 0xffffffff, 0xe76], [0x100, 0x3, 0x6, 0x5, 0xb6, 0x7, 0x8, 0x0, 0x1b22, 0xc, 0xdce, 0x9, 0xcc, 0x2, 0x7, 0x8000, 0x9, 0x101, 0x3, 0x9, 0x257b, 0x8, 0x6, 0x3ff, 0x7, 0x1, 0x90, 0x10001, 0x6, 0x9, 0x0, 0x400, 0x2f757c33, 0xf, 0x2, 0x5, 0x8, 0x5, 0x6, 0x1000, 0x9f, 0x0, 0x2a24, 0x5d, 0x1, 0x4, 0xe, 0x2, 0x6, 0xe, 0xfff, 0x0, 0x3, 0xffffffff, 0x5, 0x401, 0x1a0000, 0x6, 0x10, 0x5, 0xfffff5f7, 0x6, 0x5, 0x4562], [0x0, 0x5, 0x7, 0x4fda, 0xffffffff, 0xe8, 0x0, 0x1, 0x92, 0x1, 0x6, 0x8, 0x0, 0x5, 0xb11, 0xc, 0x9, 0x37989e1b, 0xa91, 0x8, 0xfffffffb, 0x1, 0x6, 0xfffffff7, 0x9, 0x3, 0x9, 0xd62, 0x0, 0xfffff000, 0x4, 0x4, 0x46, 0x7fff, 0x6, 0x101, 0x1, 0x401, 0x3, 0x2, 0x7f, 0x0, 0x2, 0x3, 0x5, 0x4, 0x1, 0x1ff, 0x8b4c, 0x3, 0x8, 0x2, 0x5, 0xffffff7f, 0x5, 0x8, 0x3, 0x0, 0xfffffff9, 0x3, 0x1ff, 0x2, 0x8, 0x5]}, 0x45c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) gettid() (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8a00", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c58d86b8d37dfd3223972d00", "9064c662", "bb10000000000001"}, 0x28) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r7, 0x0) (async) clock_adjtime(0x0, &(0x7f00000000c0)={0x800, 0xffff, 0x4, 0x100000001, 0x9, 0xfffffffffffffffd, 0xf, 0x4, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x8000, 0x4, 0x9, 0x6, 0x5, 0x1000, 0x9, 0x3, 0x6, 0x7, 0x2, 0x10000, 0x4}) sendmsg$key(r6, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003400)={0x2, 0x9, 0x5, 0x2, 0x2, 0x0, 0x70bd29, 0x25dbdbfe}, 0x10}}, 0x200040c0) 1m21.269117604s ago: executing program 4 (id=7653): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@loose}, {@cache_readahead}], [{@dont_appraise}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302ef5"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1m21.253811284s ago: executing program 4 (id=7654): exit_group(0x6) exit_group(0x7) exit_group(0x5) exit_group(0xffffffffffff0001) exit_group(0x10) exit_group(0x9) exit_group(0xfffffffffffffff9) exit_group(0x0) exit_group(0x400) exit_group(0x0) exit_group(0x6) keyctl$join(0x1, 0x0) exit_group(0x0) exit_group(0x2) exit_group(0x7fffffffffffffff) exit_group(0x4) exit_group(0x8000) exit_group(0x8) exit_group(0x7f) exit_group(0xfffffffffffffff5) exit_group(0x1) exit_group(0x9) exit_group(0x7) exit_group(0x5) exit_group(0x7f) exit_group(0x0) exit_group(0x3) exit_group(0x1) exit_group(0x2) exit_group(0x0) 1m21.127596917s ago: executing program 4 (id=7656): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x101042, 0x4) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x61) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000cc0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB='Tid=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x153c00, 0x182) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m21.123989347s ago: executing program 4 (id=7659): prctl$PR_SET_IO_FLUSHER(0x39, 0x1ffffffffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chroot(&(0x7f0000000000)='./file0\x00') move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m21.031935968s ago: executing program 4 (id=7662): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) (async, rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async, rerun: 64) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xc0000000, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000140)={0x8f, 0x9}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0x8010aebc, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) (async, rerun: 64) r10 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (rerun: 64) sendfile(r10, r0, 0x0, 0x80000000) 1m21.021960859s ago: executing program 4 (id=7667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x265, 0x0, &(0x7f0000000600)="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"}) (async) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @remote}}) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_int(r3, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT=r3], 0x27) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r5}, @register_looper], 0x0, 0x0, 0x0}) 1m20.980251509s ago: executing program 42 (id=7667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x265, 0x0, &(0x7f0000000600)="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"}) (async) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @remote}}) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r4 = openat$cgroup_int(r3, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT=r3], 0x27) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r5}, @register_looper], 0x0, 0x0, 0x0}) 25.110008458s ago: executing program 5 (id=8455): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x12000, 0x100) openat2(r0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)={0x400000, 0x128, 0x8}, 0x18) 25.094384678s ago: executing program 5 (id=8456): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd032dbd7000fbdbdf25080020000c009900fbffffff1c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x200040d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x100000) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) close(0x3) listen(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r6, 0x6e78340ffdda27db, 0x70bd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) r7 = socket(0x10, 0x3, 0x0) bind$bt_hci(r7, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="6cb7a12f35205eae3f4d934ad07e2c0e91e9b2a55859922b5991ed6cd21e231ad6b20c7322dcba2ed5188f9bb40d42fb82c8bfbb17bfe058c7d53863ea58f4cc7a717174744292b026619f1b1a3b435f2a395c3c8f5052cc8864823e09d377be59b5722e47e1df31a6493880f0b5cab20303c57b", 0x74}], 0x1) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="6cb7a12f35205eae3f4d934ad07e2c0e91e9b2a55859922b5991ed6cd21e231ad6b20c7322dcba2ed5188f9bb40d42fb82c8bfbb17bfe058c7d53863ea58f4cc7a717174744292b026619f1b1a3b435f2a395c3c8f5052cc8864823e09d377be59b5722e47e1df31a6493880f0b5cab20303c57b", 0x74}], 0x1) shutdown(r8, 0x1) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 25.079033048s ago: executing program 5 (id=8457): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x7fffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, 0x0, 0x40) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x6c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x1, 0x0, {0x2}}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000400)={0x7, 0xffffffffffffffff, 'id1\x00'}) (async) futex_waitv(&(0x7f0000001a40), 0x0, 0x0, 0x0, 0x1) (async) r7 = socket$inet(0x2, 0x2, 0x1) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0xc, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x2, 0x4000}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0xfffffffffffffd47, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$BLKRRPART(r9, 0x125f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r9, 0x147a5000) (async) ioctl$BLKPG(r9, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0}) 24.903776161s ago: executing program 5 (id=8458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x80000005, 0x4) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80, 0x0, 0x30}, 0x18) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x401, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0x2, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0xfffffff9, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x2, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0xff, 0x0, 0x800, 0xa, 0x4, 0xffff, 0x6, 0x2, 0x1000, 0x0, 0x4, 0xc, 0x1, 0x2, 0x1, 0x9c, 0x80000001, 0xeb3, 0x2f, 0x6, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x361d1cd9, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x5, 0x5, 0x3ff, 0xfffff241, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0x4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x3, 0x1, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0x8, 0x5, 0x7, 0x62e, 0x2c0, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0x8, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x1000, 0x1, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0xe30, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xc, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x4, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') pread64(r4, 0x0, 0x0, 0x76) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x7fffffff, 0x3, 0x1, 0x5, 0x32c7]}, &(0x7f0000000100)=0x78) (async) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz1\x00', {0xed6d, 0x2, 0x200, 0x4}, 0x26, [0x1, 0x1ff, 0x6, 0x1, 0xc00000, 0x52df, 0x5e1b, 0x7, 0x4, 0x400, 0x4, 0x7f, 0x8, 0x6, 0x5, 0x2, 0x38000000, 0x1, 0x4, 0x7f, 0x2, 0xad2, 0x9, 0x9, 0xfffffff8, 0xfff, 0x7, 0x1, 0x0, 0xe, 0x97, 0xfffffffe, 0x58, 0x3, 0x1, 0x2bf, 0x8, 0x5b, 0x7, 0x2, 0x1000, 0xeac, 0x3, 0xc, 0x7, 0x3, 0x4, 0x3, 0xfac, 0x0, 0x3, 0x5, 0x3, 0x6, 0x1, 0xb, 0x6, 0x1, 0x9, 0xfffffff9, 0x0, 0x9a0d, 0x40, 0x3], [0xff, 0x2, 0x8, 0x7f, 0x6, 0xc3, 0x2, 0x4, 0x6, 0x57, 0x9, 0xd8, 0xf3cd, 0x3, 0x6, 0x81, 0x8, 0x94ff, 0x5, 0x0, 0x8, 0x9, 0x1ff, 0x2, 0x7e, 0xaf6, 0x96, 0x6, 0x3, 0x9, 0xe6, 0x5, 0x10000, 0x3, 0x9, 0x3, 0x55dd, 0x5, 0xbf, 0x4, 0x4, 0x200, 0xd6, 0x7, 0x7, 0x6, 0x18, 0x8e, 0x3, 0x2, 0x6, 0x8, 0x3454, 0x2, 0x5, 0x2, 0x9, 0x7, 0x7, 0x3, 0x14000000, 0x7, 0xffffffff, 0xe76], [0x100, 0x3, 0x6, 0x5, 0xb6, 0x7, 0x8, 0x0, 0x1b22, 0xc, 0xdce, 0x9, 0xcc, 0x2, 0x7, 0x8000, 0x9, 0x101, 0x3, 0x9, 0x257b, 0x8, 0x6, 0x3ff, 0x7, 0x1, 0x90, 0x10001, 0x6, 0x9, 0x0, 0x400, 0x2f757c33, 0xf, 0x2, 0x5, 0x8, 0x5, 0x6, 0x1000, 0x9f, 0x0, 0x2a24, 0x5d, 0x1, 0x1000004, 0xe, 0x2, 0x6, 0xe, 0xfff, 0x0, 0x3, 0xffffffff, 0x5, 0x401, 0x1a0000, 0x6, 0x10, 0x5, 0xfffff5f7, 0x6, 0x5, 0xc60], [0x0, 0x5, 0x7, 0x4fda, 0xffffffff, 0xe8, 0x0, 0x1, 0x92, 0x1, 0x6, 0x8, 0x0, 0x5, 0xb11, 0xc, 0x9, 0x37989e1b, 0xa91, 0x8, 0xfffffffb, 0x1, 0x6, 0xfffffff7, 0x9, 0x3, 0x9, 0xd62, 0x0, 0xfffff000, 0x4, 0x4, 0x46, 0x7fff, 0x6, 0x101, 0x1, 0x401, 0x3, 0x2, 0x7f, 0x0, 0x2, 0x3, 0x5, 0x4, 0x1, 0x1ff, 0x8b4c, 0x3, 0x8, 0x2, 0x5, 0xffffff7f, 0x5, 0x8, 0x3, 0x0, 0xfffffff9, 0x3, 0x1ff, 0x2, 0x8, 0x5]}, 0x45c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8a00", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, '\x00', "c0b6c58d86b8d37dfd3223972d00", "9064c662", "bb10000000000001"}, 0x28) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020905020200000029bd7000fedbdbaf9e85b825"], 0x10}}, 0x200040c0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 24.901911581s ago: executing program 5 (id=8459): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 24.838434752s ago: executing program 5 (id=8460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 24.760832784s ago: executing program 43 (id=8460): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 10.235772832s ago: executing program 7 (id=8461): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket(0x10, 0x1, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584f}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xfead}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 8.53302217s ago: executing program 2 (id=8550): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x29, 0x2, 0x80, 0x5, 0x48, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa0, 0x40, 0x4, 0xfffffffd}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)={0x8542, 0x0, 0x4}, 0x53) read$rfkill(r0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x204080, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) setresuid(0x0, 0xee00, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000001000100"/107], 0x78) setuid(0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r6, 0x5608) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r10, &(0x7f0000003100)=ANY=[], 0x10448) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r11 = fcntl$dupfd(r6, 0x0, r6) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) ioctl$TCFLSH(r11, 0x400455c8, 0x0) 8.287628094s ago: executing program 7 (id=8461): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket(0x10, 0x1, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584f}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xfead}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 6.414865175s ago: executing program 7 (id=8461): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket(0x10, 0x1, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584f}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xfead}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 4.570331175s ago: executing program 0 (id=8568): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000000100c0"]) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000425ac201"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x20040004) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000002bc0)=""/90, 0x5a}], 0x3, 0x0, 0x21}, 0x10}, {{0x0, 0x0, 0x0, 0xfffffffffffffe27}, 0x2be9}], 0x3, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000100)=""/170, 0x26000, 0x0, 0x7, 0x2}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {r6, r7+60000000}}, 0x0) timer_delete(r5) timer_settime(r5, 0x1, &(0x7f0000000780)={{0x0, 0x3938700}}, &(0x7f00000007c0)) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r9, &(0x7f0000000100)={&(0x7f00000002c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, 0x0}, 0x810) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'dvmrp1\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x2, 0x8, 0xa0, 0x1, 0x6, 0x5, 0x3, 0x6, 0x54, [0x0, 0x3, 0x9, 0x28, 0x3, 0x100, 0x603d, 0x80000001], [0xfd]}}) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs2\x00', &(0x7f00000000c0), 0x40404, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) 4.569060445s ago: executing program 2 (id=8569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'syz_tun\x00', {}, 0x1790}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/162) 4.548224916s ago: executing program 2 (id=8571): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x179000, 0x0) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x179000, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) (async) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) sendfile(r4, r0, 0x0, 0x80000000) 4.455950927s ago: executing program 2 (id=8573): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x933, 0xfffffffd, 0x10000, 0xfffffffd}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10ae) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 4.389129668s ago: executing program 7 (id=8461): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket(0x10, 0x1, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584f}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xfead}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 2.389240001s ago: executing program 0 (id=8574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1800, 0x0) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) ftruncate(r1, 0xffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x327800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.387013001s ago: executing program 2 (id=8575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) fallocate(r1, 0x0, 0x0, 0x400001) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0xa1, 0x0, 0x14}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/186, 0xba, 0x1, 0x11}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 2.356562291s ago: executing program 6 (id=8577): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f00000003c0)={0xd3, 0x9, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0xfe, 0x7ffffffb}]}) close_range(r5, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000040)={[0xfffffffffffff91a]}, 0x8, 0x800) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x18, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4e, 0xf5, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@main=@item_012={0x2, 0x0, 0xc, 'f\v'}, @global=@item_4={0x3, 0x1, 0x4, "336995e4"}, @global=@item_4={0x3, 0x1, 0x6, "a3ba547d"}]}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r5, 0x147a5000) ioctl$BLKPG(r0, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0}) 2.307895643s ago: executing program 0 (id=8578): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x29, 0x2, 0x80, 0x5, 0x48, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa0, 0x40, 0x4, 0xfffffffd}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)={0x8542, 0x0, 0x4}, 0x53) read$rfkill(r0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x204080, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"], 0x390) setresuid(0x0, 0xee00, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000001000100"/107], 0x78) setuid(0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r6, 0x5608) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r10, &(0x7f0000003100)=ANY=[], 0x10448) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r11 = fcntl$dupfd(r6, 0x0, r6) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) ioctl$TCFLSH(r11, 0x400455c8, 0x0) 2.248597964s ago: executing program 7 (id=8461): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket(0x10, 0x1, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584f}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xfead}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 179.435037ms ago: executing program 0 (id=8579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') recvmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, &(0x7f0000000200)=""/214, 0xd6}, 0x2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x800000, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 178.104877ms ago: executing program 2 (id=8580): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) close_range(r0, r0, 0x0) 175.275807ms ago: executing program 6 (id=8581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 99.902949ms ago: executing program 6 (id=8582): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2100, 0x0) getdents(r1, 0x0, 0x58) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x50, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x93}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1000}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x800) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[], 0xffee) flock(r0, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r5, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x40100) 99.500569ms ago: executing program 0 (id=8583): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r2], 0x60}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r2], 0x60}}, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 97.404229ms ago: executing program 6 (id=8584): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="200000000000fcdbdf254900000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2404c002}, 0x8010) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, 0x28}], 0x1}, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) vmsplice(r2, 0x0, 0x0, 0x0) 82.113019ms ago: executing program 0 (id=8585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0xc0000, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070c0702"], 0x10}}, 0x4400c030) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x0, 0x4}}, 0xe8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 66.896459ms ago: executing program 6 (id=8586): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240)=ANY=[], 0x12) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000080)) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) 41.20583ms ago: executing program 7 (id=8461): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket(0x10, 0x1, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584f}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xfead}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x7}, 0x2}, {{0x0, 0x0, 0x0}, 0x800}], 0x5, 0x40000020, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 0s ago: executing program 6 (id=8587): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x80010, &(0x7f00000001c0)=ANY=[@ANYBLOB="6dcd1753ba"]) kernel console output (not intermixed with test programs): src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 512.212888][T24773] 9pnet_fd: Insufficient options for proto=fd [ 512.317934][T24780] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 512.317956][T24780] rust_binder: Read failure Err(EFAULT) in pid:136 [ 512.564164][T24803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 512.571423][T24803] rust_binder: Error in use_page_slow: ESRCH [ 512.579886][T24803] rust_binder: use_range failure ESRCH [ 512.586753][T24803] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 512.592774][T24803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 512.601121][T24803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:141 [ 512.656750][T24812] netlink: 'syz.4.7647': attribute type 27 has an invalid length. [ 512.686173][T24812] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.693434][T24812] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.724908][T24817] __vm_enough_memory: pid: 24817, comm: syz.4.7647, bytes: 140741783322624 not enough memory for the allocation [ 512.783356][ T36] audit: type=1400 audit(2000000055.610:2629): avc: denied { ioctl } for pid=24824 comm="syz.4.7652" path="socket:[130512]" dev="sockfs" ino=130512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 512.982927][T24835] rust_binder: Error in use_page_slow: ESRCH [ 512.982957][T24835] rust_binder: use_range failure ESRCH [ 512.989319][T24835] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 512.994901][T24835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 513.002974][T24835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:159 [ 513.028435][T24846] fuse: Unknown parameter 'grop' [ 513.028543][T24845] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 513.039240][T24846] fuse: Bad value for 'fd' [ 513.042766][T24845] rust_binder: Read failure Err(EFAULT) in pid:161 [ 513.276209][T24868] /dev/rnullb0: Can't lookup blockdev [ 513.339525][ T12] bridge_slave_1: left allmulticast mode [ 513.347482][ T12] bridge_slave_1: left promiscuous mode [ 513.355393][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.365201][ T12] bridge_slave_0: left allmulticast mode [ 513.373219][ T12] bridge_slave_0: left promiscuous mode [ 513.378930][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.448329][T24871] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.460230][T24871] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.471753][T24871] bridge_slave_0: entered allmulticast mode [ 513.481472][T24871] bridge_slave_0: entered promiscuous mode [ 513.491018][ T12] tipc: Disabling bearer [ 513.498709][T24871] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.505869][ T12] tipc: Left network mode [ 513.510704][T24871] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.518449][T24871] bridge_slave_1: entered allmulticast mode [ 513.525286][T24871] bridge_slave_1: entered promiscuous mode [ 513.670956][T24871] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.678075][T24871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.685379][T24871] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.692483][T24871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.727676][T19648] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.735167][T19648] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.746185][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.753378][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.763207][T19648] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.770313][T19648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.807410][T24871] veth0_vlan: entered promiscuous mode [ 513.821318][T24871] veth1_macvtap: entered promiscuous mode [ 513.867901][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 513.898480][ T45] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 514.209068][T24918] 9pnet_fd: Insufficient options for proto=fd [ 514.326257][T24927] 9pnet_fd: Insufficient options for proto=fd [ 514.343404][T24929] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 514.385715][T24936] incfs: Options parsing error. -22 [ 514.391005][T24936] incfs: mount failed -22 [ 515.142581][T24944] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.149679][T24944] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.156755][T24944] bridge_slave_0: entered allmulticast mode [ 515.163582][T24944] bridge_slave_0: entered promiscuous mode [ 515.170254][T24944] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.177301][T24944] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.184670][T24944] bridge_slave_1: entered allmulticast mode [ 515.191128][T24944] bridge_slave_1: entered promiscuous mode [ 515.256994][T24944] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.264095][T24944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.271391][T24944] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.278451][T24944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.301071][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.308661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.317852][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.324939][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.334909][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.341982][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.368276][T24944] veth0_vlan: entered promiscuous mode [ 515.380401][T24944] veth1_macvtap: entered promiscuous mode [ 515.414157][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 515.414177][ T36] audit: type=1400 audit(2000000058.240:2636): avc: denied { write } for pid=24962 comm="syz.0.7694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 515.440409][ T36] audit: type=1400 audit(2000000058.250:2637): avc: denied { getopt } for pid=24962 comm="syz.0.7694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.483101][T24968] netlink: 'syz.2.7699': attribute type 4 has an invalid length. [ 515.491085][T24968] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.7699'. [ 515.518606][T24974] /dev/rnullb0: Can't lookup blockdev [ 515.642639][ T36] audit: type=1326 audit(2000000058.470:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24995 comm="syz.0.7708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13ae58e9a9 code=0x0 [ 515.942780][ T36] audit: type=1400 audit(2000000058.770:2639): avc: denied { accept } for pid=25023 comm="syz.2.7718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 516.064140][ T36] audit: type=1400 audit(2000000058.890:2640): avc: denied { getopt } for pid=25032 comm="syz.2.7722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 516.336959][T25043] overlayfs: failed to clone upperpath [ 516.412282][ T36] audit: type=1400 audit(2000000059.240:2641): avc: denied { mount } for pid=25057 comm="syz.2.7731" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 516.451738][ T36] audit: type=1400 audit(2000000059.280:2642): avc: denied { bind } for pid=25059 comm="syz.2.7732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 516.471943][ T36] audit: type=1400 audit(2000000059.280:2643): avc: denied { name_bind } for pid=25059 comm="syz.2.7732" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 516.493480][ T36] audit: type=1400 audit(2000000059.280:2644): avc: denied { node_bind } for pid=25059 comm="syz.2.7732" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 516.607459][ T36] audit: type=1400 audit(2000000059.430:2645): avc: denied { setopt } for pid=25062 comm="syz.0.7733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 516.622696][T25071] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 516.684617][T25084] 9pnet_fd: Insufficient options for proto=fd [ 517.023089][T25105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7747'. [ 517.264762][T25134] rust_binder: 14: no such ref 1 [ 517.269854][T25134] rust_binder: 14: no such ref 2 [ 517.274812][T25134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 517.367955][T25145] SELinux: security_context_str_to_sid () failed with errno=-22 [ 517.737453][T25154] 9pnet_fd: Insufficient options for proto=fd [ 517.744525][T25154] netlink: 'syz.2.7763': attribute type 11 has an invalid length. [ 517.753337][T25154] /dev/rnullb0: Can't lookup blockdev [ 518.362757][T25161] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7766'. [ 518.362755][T25162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7766'. [ 518.398099][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 518.528106][ T10] usb 6-1: device descriptor read/64, error -71 [ 518.768090][ T10] usb 6-1: device descriptor read/64, error -71 [ 518.961096][T25178] 9pnet_fd: Insufficient options for proto=fd [ 519.008131][ T10] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 519.012632][T25182] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7773'. [ 519.138075][ T10] usb 6-1: device descriptor read/64, error -71 [ 519.378156][ T10] usb 6-1: device descriptor read/64, error -71 [ 519.488213][ T10] usb usb6-port1: attempt power cycle [ 519.567728][T25209] /dev/rnullb0: Can't lookup blockdev [ 519.598235][T25215] 9pnet_fd: Insufficient options for proto=fd [ 519.635778][T25227] 9pnet_fd: Insufficient options for proto=fd [ 519.828106][ T10] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 519.849149][ T10] usb 6-1: device descriptor read/8, error -71 [ 519.979377][ T10] usb 6-1: device descriptor read/8, error -71 [ 520.218172][ T10] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 520.239235][ T10] usb 6-1: device descriptor read/8, error -71 [ 520.369299][ T10] usb 6-1: device descriptor read/8, error -71 [ 520.478237][ T10] usb usb6-port1: unable to enumerate USB device [ 520.978513][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 520.978531][ T36] audit: type=1400 audit(2000000063.810:2654): avc: denied { mount } for pid=25262 comm="syz.2.7802" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 521.007143][ T36] audit: type=1400 audit(2000000063.810:2655): avc: denied { write } for pid=25262 comm="syz.2.7802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 521.083538][T25269] overlayfs: failed to clone upperpath [ 521.090376][ T36] audit: type=1400 audit(2000000063.920:2656): avc: denied { accept } for pid=25268 comm="syz.2.7805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.353913][ T36] audit: type=1400 audit(2000000064.180:2657): avc: denied { setopt } for pid=25290 comm="syz.5.7812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 521.397835][T25297] 9pnet_fd: Insufficient options for proto=fd [ 521.535520][T25310] overlayfs: failed to clone upperpath [ 521.542566][ T36] audit: type=1400 audit(2000000064.370:2658): avc: denied { create } for pid=25309 comm="syz.6.7818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 521.654801][ T36] audit: type=1400 audit(2000000064.480:2659): avc: denied { lock } for pid=25316 comm="syz.6.7821" path="socket:[132374]" dev="sockfs" ino=132374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 521.803503][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7829'. [ 522.180540][T25358] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 165) [ 522.180561][T25358] rust_binder: Error while translating object. [ 522.191272][T25358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 522.197463][T25358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 522.222410][T25360] rust_binder: Write failure EFAULT in pid:52 [ 522.421395][T25369] netlink: 'syz.5.7838': attribute type 10 has an invalid length. [ 522.520653][T25371] netlink: 'syz.2.7839': attribute type 1 has an invalid length. [ 522.528571][T25371] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7839'. [ 522.538266][ T36] audit: type=1400 audit(2000000065.360:2660): avc: denied { map } for pid=25370 comm="syz.2.7839" path="socket:[132449]" dev="sockfs" ino=132449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 522.705250][ T36] audit: type=1400 audit(2000000065.530:2661): avc: denied { append } for pid=25380 comm="syz.0.7842" name="file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.734315][ T36] audit: type=1400 audit(2000000065.560:2662): avc: denied { associate } for pid=25380 comm="syz.0.7842" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 523.057204][T25393] rust_binder: Got transaction with invalid offset. [ 523.057393][T25393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 523.064419][T25393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 523.234982][ T36] audit: type=1400 audit(2000000066.060:2663): avc: denied { accept } for pid=25395 comm="syz.5.7848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 523.235565][T25397] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 523.264671][T25397] rust_binder: Read failure Err(EFAULT) in pid:63 [ 523.292769][T25400] netlink: 'syz.0.7849': attribute type 1 has an invalid length. [ 523.307907][T25406] /dev/rnullb0: Can't lookup blockdev [ 523.308277][T25405] rust_binder: Read failure Err(EAGAIN) in pid:65 [ 523.316866][T25405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 523.323681][T25405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 523.708073][ T66] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 523.848094][ T66] usb 6-1: device descriptor read/64, error -71 [ 524.088078][ T66] usb 6-1: device descriptor read/64, error -71 [ 524.328077][ T66] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 524.458282][ T66] usb 6-1: device descriptor read/64, error -71 [ 524.698163][ T66] usb 6-1: device descriptor read/64, error -71 [ 524.808171][ T66] usb usb6-port1: attempt power cycle [ 525.148089][ T66] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 525.189084][ T66] usb 6-1: device descriptor read/8, error -71 [ 525.202845][T25472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7870'. [ 525.319268][ T66] usb 6-1: device descriptor read/8, error -71 [ 525.558080][ T66] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 525.579173][ T66] usb 6-1: device descriptor read/8, error -71 [ 525.709165][ T66] usb 6-1: device descriptor read/8, error -71 [ 525.817046][T25476] fuse: Unknown parameter 'grmuCHsop_id$7I>*DD*(h51(hCR |pMH)TI ZK1e7Qg' [ 525.831383][ T66] usb usb6-port1: unable to enumerate USB device [ 525.833023][T25476] devpts: called with bogus options [ 526.493011][T25510] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7882'. [ 526.525874][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 526.525893][ T36] audit: type=1326 audit(2000000069.350:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25519 comm="syz.6.7885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb671d8e9a9 code=0x0 [ 527.647863][T25550] rust_binder: 25549 RLIMIT_NICE not set [ 527.663529][ T10] rust_binder: 25548: removing orphan mapping 0:40 [ 527.701943][ T36] audit: type=1400 audit(2000000070.530:2750): avc: denied { read } for pid=25559 comm="syz.2.7897" name="file0" dev="tmpfs" ino=3092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 527.889578][ T36] audit: type=1400 audit(2000000070.720:2751): avc: denied { create } for pid=25572 comm="syz.5.7902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 527.929116][T25573] veth0_vlan: entered allmulticast mode [ 527.992201][T25577] batadv_slave_1: entered promiscuous mode [ 528.016526][T25576] batadv_slave_1: left promiscuous mode [ 528.410512][ T31] rust_binder: 25597: removing orphan mapping 0:4120 [ 528.720935][ T36] audit: type=1326 audit(2000000071.545:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="syz.5.7917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x0 [ 529.104742][T25631] bond_slave_1: entered allmulticast mode [ 529.111196][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7919'. [ 529.196236][T25647] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 529.204301][T25649] x_tables: unsorted underflow at hook 3 [ 529.211811][T25651] rust_binder: 25652 RLIMIT_NICE not set [ 529.226018][ T10] rust_binder: 25650: removing orphan mapping 0:4240 [ 529.254347][T25659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=25659 comm=syz.0.7928 [ 529.262893][T25661] tipc: Trying to set illegal importance in message [ 529.300507][ T36] audit: type=1400 audit(2000000072.125:2753): avc: denied { checkpoint_restore } for pid=25668 comm="syz.0.7930" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 529.360691][ T36] audit: type=1400 audit(2000000072.185:2754): avc: denied { shutdown } for pid=25679 comm="syz.6.7934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.576229][T25693] rust_binder: 107: no such ref 2 [ 529.596149][ T36] audit: type=1400 audit(2000000072.415:2755): avc: denied { setattr } for pid=25694 comm="syz.5.7939" name="CAN_RAW" dev="sockfs" ino=134260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 529.788337][T25701] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 529.813331][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.829867][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.838838][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.847544][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.856251][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.864980][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.874950][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.883709][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.892462][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.901178][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.909940][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.918697][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.927391][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.936119][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.944828][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.953541][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.962276][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.971089][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.979959][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.988679][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 529.997482][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.006223][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.014933][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.023656][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.032360][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.041114][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.049808][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.058492][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.067201][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.077051][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.085844][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.094557][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.103290][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.111992][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.120842][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.129537][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.138246][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.146906][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.155593][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.164274][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.173001][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.181894][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.190612][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.199632][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.208663][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.217412][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.226241][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.235189][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.243925][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.252767][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.261468][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.270284][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.279057][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.287744][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.296421][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.305107][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.313844][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.322527][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.331220][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.339913][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.348620][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.357293][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.365982][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.374663][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.383396][T25703] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 530.879323][T25762] overlayfs: failed to clone upperpath [ 530.887060][T25764] netlink: 336 bytes leftover after parsing attributes in process `syz.6.7958'. [ 530.896237][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 531.048072][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 531.054254][ T31] usb 6-1: config 1 interface 0 altsetting 125 bulk endpoint 0x1 has invalid maxpacket 64 [ 531.064241][ T31] usb 6-1: config 1 interface 0 altsetting 125 bulk endpoint 0x82 has invalid maxpacket 16 [ 531.074276][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 531.082296][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 531.091386][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.099428][ T31] usb 6-1: Product: syz [ 531.103594][ T31] usb 6-1: Manufacturer: syz [ 531.108243][ T31] usb 6-1: SerialNumber: syz [ 531.113877][T25737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 531.121137][T25737] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 531.329362][T25737] rust_binder: Error while translating object. [ 531.329403][T25737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 531.335638][T25737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:132 [ 531.347880][ T31] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 125 proto 2 vid 0x0525 pid 0xA4A8 [ 531.369316][ T31] usb 6-1: USB disconnect, device number 16 [ 531.376969][ T31] usblp0: removed [ 531.622397][T25797] 9pnet_fd: Insufficient options for proto=fd [ 531.672211][T25808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.679502][T25808] IPv6: NLM_F_CREATE should be set when creating new route [ 531.686766][T25808] IPv6: NLM_F_CREATE should be set when creating new route [ 531.779281][T25829] 9pnet_fd: Insufficient options for proto=fd [ 531.796329][T25832] devpts: called with bogus options [ 531.884520][ T36] audit: type=1400 audit(2000000075.710:2756): avc: denied { bpf } for pid=25840 comm="syz.5.7983" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.972107][T25846] rust_binder: 25844 RLIMIT_NICE not set [ 531.972234][T25846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 532.040639][T25852] 9pnet_fd: Insufficient options for proto=fd [ 532.041855][ T36] audit: type=1400 audit(2000000075.870:2757): avc: denied { listen } for pid=25857 comm="syz.6.7988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 532.075685][ T36] audit: type=1400 audit(2000000075.880:2758): avc: denied { accept } for pid=25857 comm="syz.6.7988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 532.114639][T25865] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 532.121881][T25865] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 532.129052][T25865] rust_binder: 150: no such ref 2 [ 532.134114][T25865] rust_binder: Read failure Err(EAGAIN) in pid:150 [ 532.686890][ T36] audit: type=1400 audit(2000000076.510:2759): avc: denied { read write } for pid=25911 comm="syz.0.7997" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 532.719609][ T45] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 532.752283][ T36] audit: type=1400 audit(2000000076.510:2760): avc: denied { open } for pid=25911 comm="syz.0.7997" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 532.828472][ T36] audit: type=1400 audit(2000000076.660:2761): avc: denied { append } for pid=25911 comm="syz.0.7997" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 533.691625][T25943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 534.363818][T25965] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.387736][T25965] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.395344][ T366] rust_binder: 25941: removing orphan mapping 0:1048 [ 534.403051][T25965] bridge_slave_0: entered allmulticast mode [ 534.409696][T25965] bridge_slave_0: entered promiscuous mode [ 534.416631][T25965] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.424082][T25965] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.433997][T25965] bridge_slave_1: entered allmulticast mode [ 534.444520][T25965] bridge_slave_1: entered promiscuous mode [ 534.500959][T19648] bridge_slave_1: left allmulticast mode [ 534.506706][T19648] bridge_slave_1: left promiscuous mode [ 534.513530][T19648] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.528663][T19648] bridge_slave_0: left allmulticast mode [ 534.535405][T19648] bridge_slave_0: left promiscuous mode [ 534.545587][T19648] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.651461][T19648] tipc: Disabling bearer [ 534.666354][T19648] tipc: Left network mode [ 534.677971][T19648] veth1_macvtap: left promiscuous mode [ 534.684022][T19648] veth0_vlan: left promiscuous mode [ 534.764094][ T36] audit: type=1400 audit(2000000078.590:2762): avc: denied { lock } for pid=25969 comm="syz.5.8011" path="socket:[134958]" dev="sockfs" ino=134958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 534.793889][T25965] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.800986][T25965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.808331][T25965] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.815442][T25965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.889868][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.900926][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.915461][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.922590][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.941054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.948147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.000044][T25965] veth0_vlan: entered promiscuous mode [ 535.017859][T25965] veth1_macvtap: entered promiscuous mode [ 535.059824][ T36] audit: type=1400 audit(2000000078.880:2763): avc: denied { mount } for pid=25972 comm="syz.6.8012" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 535.060280][T25973] overlayfs: failed to clone lowerpath [ 535.280410][ T36] audit: type=1400 audit(2000000079.110:2764): avc: denied { accept } for pid=25981 comm="syz.2.8014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 535.619344][T25887] syz.5.7991 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 535.653011][T25887] CPU: 0 UID: 0 PID: 25887 Comm: syz.5.7991 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 535.653056][T25887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.653073][T25887] Call Trace: [ 535.653081][T25887] [ 535.653092][T25887] __dump_stack+0x21/0x30 [ 535.653129][T25887] dump_stack_lvl+0x10c/0x190 [ 535.653158][T25887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 535.653195][T25887] ? ___ratelimit+0x3f7/0x5a0 [ 535.653227][T25887] dump_stack+0x19/0x20 [ 535.653255][T25887] dump_header+0xd7/0x490 [ 535.653291][T25887] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 535.653318][T25887] oom_kill_process+0x4c0/0x7e0 [ 535.653341][T25887] ? sched_clock_cpu+0x75/0x400 [ 535.653398][T25887] out_of_memory+0x7ee/0xbd0 [ 535.653417][T25887] ? __cfi_out_of_memory+0x10/0x10 [ 535.653436][T25887] ? mutex_lock_killable+0x92/0x1c0 [ 535.653467][T25887] ? __cfi_mutex_lock_killable+0x10/0x10 [ 535.653496][T25887] mem_cgroup_out_of_memory+0x279/0x350 [ 535.653525][T25887] ? drain_obj_stock+0xed0/0xed0 [ 535.653553][T25887] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 535.653581][T25887] try_charge_memcg+0x8f7/0xde0 [ 535.653604][T25887] ? __cfi_try_charge_memcg+0x10/0x10 [ 535.653638][T25887] ? __alloc_pages_noprof+0x30d/0x6c0 [ 535.653659][T25887] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 535.653691][T25887] ? __folio_batch_add_and_move+0x2ab/0x370 [ 535.653711][T25887] __mem_cgroup_charge+0xf6/0x410 [ 535.653733][T25887] ? __kasan_check_write+0x18/0x20 [ 535.653756][T25887] ? _raw_spin_lock+0x8c/0x120 [ 535.653793][T25887] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 535.653819][T25887] shmem_alloc_and_add_folio+0x86d/0x1050 [ 535.653852][T25887] ? put_swap_device+0x130/0x130 [ 535.653890][T25887] ? shmem_huge_global_enabled+0x2da/0x360 [ 535.653920][T25887] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 535.653949][T25887] ? __kasan_check_write+0x18/0x20 [ 535.653972][T25887] ? _raw_spin_lock+0x8c/0x120 [ 535.653992][T25887] shmem_get_folio_gfp+0x5f0/0x1380 [ 535.654023][T25887] ? shmem_get_folio+0xc0/0xc0 [ 535.654049][T25887] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 535.654073][T25887] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 535.654096][T25887] ? inode_to_bdi+0x6d/0x100 [ 535.654118][T25887] shmem_write_begin+0xf4/0x270 [ 535.654149][T25887] generic_perform_write+0x330/0x960 [ 535.654174][T25887] ? __cfi_generic_perform_write+0x10/0x10 [ 535.654204][T25887] ? down_write+0xe9/0x2a0 [ 535.654236][T25887] ? mnt_get_write_access_file+0x1af/0x3b0 [ 535.654261][T25887] ? mnt_put_write_access_file+0xc2/0x100 [ 535.654286][T25887] ? file_update_time+0x1ef/0x220 [ 535.654312][T25887] shmem_file_write_iter+0x105/0x130 [ 535.654336][T25887] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 535.654362][T25887] __kernel_write_iter+0x395/0x830 [ 535.654392][T25887] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 535.654418][T25887] ? __cfi___kernel_write_iter+0x10/0x10 [ 535.654448][T25887] ? get_dump_page+0x160/0x220 [ 535.654471][T25887] ? __asan_memset+0x39/0x50 [ 535.654498][T25887] ? iov_iter_bvec+0xc0/0x180 [ 535.654531][T25887] dump_user_range+0xb06/0xdf0 [ 535.654562][T25887] ? __cfi_dump_emit+0x10/0x10 [ 535.654590][T25887] ? __cfi_dump_user_range+0x10/0x10 [ 535.654620][T25887] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 535.654661][T25887] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 535.654691][T25887] elf_core_dump+0x2cd9/0x3810 [ 535.654715][T25887] ? __cfi_elf_core_dump+0x10/0x10 [ 535.654742][T25887] ? dump_interrupted+0xf0/0xf0 [ 535.654767][T25887] ? filp_open+0x182/0x1d0 [ 535.654789][T25887] ? 0xffffffffff600000 [ 535.654807][T25887] do_coredump+0x1bfa/0x2bd0 [ 535.654836][T25887] ? __cfi_do_coredump+0x10/0x10 [ 535.654862][T25887] ? asm_exc_page_fault+0x2b/0x30 [ 535.654898][T25887] ? __kasan_slab_free+0x6a/0x80 [ 535.654929][T25887] ? kmem_cache_free+0x1c1/0x510 [ 535.654957][T25887] ? get_signal+0xa75/0x14f0 [ 535.654980][T25887] get_signal+0x11fd/0x14f0 [ 535.655014][T25887] arch_do_signal_or_restart+0x96/0x720 [ 535.655043][T25887] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 535.655075][T25887] irqentry_exit_to_user_mode+0x4e/0xb0 [ 535.655107][T25887] irqentry_exit+0x16/0x60 [ 535.655137][T25887] exc_page_fault+0x66/0xc0 [ 535.655168][T25887] asm_exc_page_fault+0x2b/0x30 [ 535.655205][T25887] RIP: 0033:0x7f36ecd8e9b1 [ 535.655223][T25887] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 535.655242][T25887] RSP: 002b:fffffffffffffea0 EFLAGS: 00010217 [ 535.655262][T25887] RAX: 0000000000000000 RBX: 00007f36ecfb5fa0 RCX: 00007f36ecd8e9a9 [ 535.655280][T25887] RDX: 0000000000000000 RSI: fffffffffffffea0 RDI: 0000000000000000 [ 535.655295][T25887] RBP: 00007f36ece10d69 R08: 0000000000000000 R09: 0000000000000000 [ 535.655311][T25887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.655324][T25887] R13: 0000000000000000 R14: 00007f36ecfb5fa0 R15: 00007ffc9829ab48 [ 535.655342][T25887] [ 535.655351][T25887] memory: usage 307200kB, limit 307200kB, failcnt 17446 [ 536.147819][T25887] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0 [ 536.156582][T25887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 536.164559][T25887] Memory cgroup stats for /syz5: [ 536.164722][T25887] cache 314384384 [ 536.175904][T25887] rss 143360 [ 536.179347][T25887] rss_huge 0 [ 536.182611][T25887] shmem 314384384 [ 536.186328][T25887] mapped_file 0 [ 536.190955][T25887] dirty 0 [ 536.194101][T25887] writeback 0 [ 536.197618][T25887] workingset_refault_anon 19 [ 536.204503][ T36] audit: type=1400 audit(2000000080.030:2765): avc: denied { write } for pid=25998 comm="syz.0.8019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.210852][T25887] workingset_refault_file 16 [ 536.230253][T25887] swap 127918080 [ 536.233835][T25887] swapcached 77824 [ 536.237567][T25887] pgpgin 237376 [ 536.241099][T25887] pgpgout 160576 [ 536.244657][T25887] pgfault 73268 [ 536.248176][T25887] pgmajfault 16 [ 536.251649][T25887] inactive_anon 133386240 [ 536.255966][T25887] active_anon 181186560 [ 536.260179][T25887] inactive_file 0 [ 536.263824][T25887] active_file 0 [ 536.267276][T25887] unevictable 0 [ 536.270806][T25887] hierarchical_memory_limit 314572800 [ 536.276271][T25887] hierarchical_memsw_limit 9223372036854771712 [ 536.282500][T25887] total_cache 314384384 [ 536.286669][T25887] total_rss 143360 [ 536.290461][T25887] total_rss_huge 0 [ 536.294225][T25887] total_shmem 314384384 [ 536.298414][T25887] total_mapped_file 0 [ 536.302402][T25887] total_dirty 0 [ 536.305872][T25887] total_writeback 0 [ 536.309732][T25887] total_workingset_refault_anon 19 [ 536.314852][T25887] total_workingset_refault_file 16 [ 536.320028][T25887] total_swap 127918080 [ 536.324106][T25887] total_swapcached 77824 [ 536.328452][T25887] total_pgpgin 237376 [ 536.333577][T25887] total_pgpgout 160576 [ 536.337699][T25887] total_pgfault 73268 [ 536.341734][T25887] total_pgmajfault 16 [ 536.345727][T25887] total_inactive_anon 133386240 [ 536.350644][T25887] total_active_anon 181186560 [ 536.355378][T25887] total_inactive_file 0 [ 536.359714][T25887] total_active_file 0 [ 536.363998][T25887] total_unevictable 0 [ 536.372217][T25887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7991,pid=25894,uid=0 [ 536.375223][T26008] rust_binder: 18: no such ref 1 [ 536.392727][T25887] Memory cgroup out of memory: Killed process 25894 (syz.5.7991) total-vm:90100kB, anon-rss:956kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 536.455520][T26010] fuse: Unknown parameter ''' [ 536.538841][T26012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 536.545823][T25877] syz.5.7991 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 536.568575][T26012] rust_binder: Error while translating object. [ 536.568613][T26012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 536.574931][T26012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:128 [ 536.585760][T25877] CPU: 1 UID: 0 PID: 25877 Comm: syz.5.7991 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 536.585795][T25877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.585810][T25877] Call Trace: [ 536.585817][T25877] [ 536.585826][T25877] __dump_stack+0x21/0x30 [ 536.585857][T25877] dump_stack_lvl+0x10c/0x190 [ 536.585883][T25877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 536.585927][T25877] ? ___ratelimit+0x3f7/0x5a0 [ 536.585956][T25877] dump_stack+0x19/0x20 [ 536.586005][T25877] dump_header+0xd7/0x490 [ 536.586039][T25877] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 536.586065][T25877] oom_kill_process+0x4c0/0x7e0 [ 536.586087][T25877] ? sched_clock_cpu+0x75/0x400 [ 536.586115][T25877] out_of_memory+0x7ee/0xbd0 [ 536.586144][T25877] ? __cfi_out_of_memory+0x10/0x10 [ 536.586165][T25877] ? mutex_lock_killable+0x92/0x1c0 [ 536.586197][T25877] ? __cfi_mutex_lock_killable+0x10/0x10 [ 536.586230][T25877] mem_cgroup_out_of_memory+0x279/0x350 [ 536.586262][T25877] ? drain_obj_stock+0xed0/0xed0 [ 536.586293][T25877] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 536.586323][T25877] try_charge_memcg+0x8f7/0xde0 [ 536.586349][T25877] ? __cfi_try_charge_memcg+0x10/0x10 [ 536.586373][T25877] ? __alloc_pages_noprof+0x30d/0x6c0 [ 536.586399][T25877] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 536.586423][T25877] ? __folio_batch_add_and_move+0x2ab/0x370 [ 536.586448][T25877] __mem_cgroup_charge+0xf6/0x410 [ 536.586475][T25877] ? __kasan_check_write+0x18/0x20 [ 536.586522][T25877] ? _raw_spin_lock+0x8c/0x120 [ 536.586546][T25877] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 536.586577][T25877] shmem_alloc_and_add_folio+0x86d/0x1050 [ 536.586617][T25877] ? put_swap_device+0x130/0x130 [ 536.586654][T25877] ? shmem_huge_global_enabled+0x2da/0x360 [ 536.586690][T25877] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 536.586724][T25877] ? __kasan_check_write+0x18/0x20 [ 536.586753][T25877] ? _raw_spin_lock+0x8c/0x120 [ 536.586779][T25877] shmem_get_folio_gfp+0x5f0/0x1380 [ 536.586815][T25877] ? shmem_get_folio+0xc0/0xc0 [ 536.586847][T25877] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 536.586875][T25877] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 536.586904][T25877] ? inode_to_bdi+0x6d/0x100 [ 536.586932][T25877] shmem_write_begin+0xf4/0x270 [ 536.586969][T25877] generic_perform_write+0x330/0x960 [ 536.587001][T25877] ? __cfi_generic_perform_write+0x10/0x10 [ 536.587030][T25877] ? down_write+0xe9/0x2a0 [ 536.587064][T25877] ? mnt_get_write_access_file+0x1af/0x3b0 [ 536.587090][T25877] ? mnt_put_write_access_file+0xc2/0x100 [ 536.587116][T25877] ? file_update_time+0x1ef/0x220 [ 536.587152][T25877] shmem_file_write_iter+0x105/0x130 [ 536.587178][T25877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 536.587205][T25877] __kernel_write_iter+0x395/0x830 [ 536.587237][T25877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 536.587264][T25877] ? __cfi___kernel_write_iter+0x10/0x10 [ 536.587295][T25877] ? get_dump_page+0x160/0x220 [ 536.587319][T25877] ? __asan_memset+0x39/0x50 [ 536.587347][T25877] ? iov_iter_bvec+0xc0/0x180 [ 536.587384][T25877] dump_user_range+0xb06/0xdf0 [ 536.587416][T25877] ? __cfi_dump_emit+0x10/0x10 [ 536.587445][T25877] ? __cfi_dump_user_range+0x10/0x10 [ 536.587475][T25877] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 536.587505][T25877] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 536.587538][T25877] elf_core_dump+0x2cd9/0x3810 [ 536.587564][T25877] ? __cfi_elf_core_dump+0x10/0x10 [ 536.587594][T25877] ? dump_interrupted+0xf0/0xf0 [ 536.587623][T25877] ? filp_open+0x182/0x1d0 [ 536.587649][T25877] ? 0xffffffffff600000 [ 536.587668][T25877] do_coredump+0x1bfa/0x2bd0 [ 536.587701][T25877] ? __cfi_do_coredump+0x10/0x10 [ 536.587729][T25877] ? asm_exc_page_fault+0x2b/0x30 [ 536.587768][T25877] ? __kasan_slab_free+0x6a/0x80 [ 536.587802][T25877] ? kmem_cache_free+0x1c1/0x510 [ 536.587834][T25877] ? get_signal+0xa75/0x14f0 [ 536.587861][T25877] get_signal+0x11fd/0x14f0 [ 536.587891][T25877] arch_do_signal_or_restart+0x96/0x720 [ 536.587925][T25877] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 536.587962][T25877] irqentry_exit_to_user_mode+0x4e/0xb0 [ 536.587998][T25877] irqentry_exit+0x16/0x60 [ 536.588046][T25877] exc_page_fault+0x66/0xc0 [ 536.588077][T25877] asm_exc_page_fault+0x2b/0x30 [ 536.588103][T25877] RIP: 0033:0x7f36ecd8e9b1 [ 536.588127][T25877] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 536.588148][T25877] RSP: 002b:fffffffffffffea0 EFLAGS: 00010217 [ 536.588168][T25877] RAX: 0000000000000000 RBX: 00007f36ecfb5fa0 RCX: 00007f36ecd8e9a9 [ 536.588185][T25877] RDX: 0000000000000000 RSI: fffffffffffffea0 RDI: 0000000000000000 [ 536.588201][T25877] RBP: 00007f36ece10d69 R08: 0000000000000000 R09: 0000000000000000 [ 536.588215][T25877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.588230][T25877] R13: 0000000000000000 R14: 00007f36ecfb5fa0 R15: 00007ffc9829ab48 [ 536.588250][T25877] [ 537.107766][ T36] audit: type=1400 audit(2000000080.930:2766): avc: denied { create } for pid=26016 comm="syz.6.8023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 537.138509][T25877] memory: usage 295860kB, limit 307200kB, failcnt 18895 [ 537.196608][T25877] memory+swap: usage 418436kB, limit 9007199254740988kB, failcnt 0 [ 537.282723][T25877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 537.327129][T25877] Memory cgroup stats for /syz5: [ 537.327288][T25877] cache 302010368 [ 537.372273][T25877] rss 135168 [ 537.375594][T25877] rss_huge 0 [ 537.379117][T25877] shmem 301944832 [ 537.382787][T25877] mapped_file 61440 [ 537.386604][T25877] dirty 0 [ 537.389839][T25877] writeback 8192 [ 537.393404][T25877] workingset_refault_anon 22 [ 537.399672][T25877] workingset_refault_file 32 [ 537.414497][T25877] swap 127954944 [ 537.418159][T25877] swapcached 40960 [ 537.432174][T25877] pgpgin 239283 [ 537.445611][ T36] audit: type=1400 audit(2000000081.270:2767): avc: denied { create } for pid=26042 comm="syz.6.8033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 537.457486][T25877] pgpgout 165499 [ 537.515752][T25877] pgfault 73338 [ 537.519334][T25877] pgmajfault 20 [ 537.522811][T25877] inactive_anon 298246144 [ 537.527199][T25877] active_anon 3829760 [ 537.531282][T25877] inactive_file 4096 [ 537.535300][T25877] active_file 61440 [ 537.539208][T25877] unevictable 0 [ 537.542690][T25877] hierarchical_memory_limit 314572800 [ 537.548110][T25877] hierarchical_memsw_limit 9223372036854771712 [ 537.554325][T25877] total_cache 302010368 [ 537.558763][T25877] total_rss 135168 [ 537.570605][T25877] total_rss_huge 0 [ 537.574565][T25877] total_shmem 301944832 [ 537.578799][T25877] total_mapped_file 61440 [ 537.580415][ T36] audit: type=1400 audit(2000000081.410:2768): avc: denied { bind } for pid=26053 comm="syz.2.8036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.583195][T25877] total_dirty 0 [ 537.607622][T25877] total_writeback 8192 [ 537.627505][T25877] total_workingset_refault_anon 22 [ 537.641412][T25877] total_workingset_refault_file 32 [ 537.644040][T26057] binder: Bad value for 'max' [ 537.651611][T25877] total_swap 127954944 [ 537.656106][T25877] total_swapcached 40960 [ 537.680649][T25877] total_pgpgin 239283 [ 537.684686][T25877] total_pgpgout 165499 [ 537.709226][T25877] total_pgfault 73338 [ 537.716471][T25877] total_pgmajfault 20 [ 537.720565][T25877] total_inactive_anon 298246144 [ 537.725481][T25877] total_active_anon 3829760 [ 537.730060][T25877] total_inactive_file 4096 [ 537.734528][T25877] total_active_file 61440 [ 537.738940][T25877] total_unevictable 0 [ 537.742935][T25877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7991,pid=25878,uid=0 [ 537.757955][T25877] Memory cgroup out of memory: Killed process 25878 (syz.5.7991) total-vm:89836kB, anon-rss:948kB, file-rss:56148kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 537.918093][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 537.958292][T25879] syz.5.7991 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 537.988509][T25879] CPU: 1 UID: 0 PID: 25879 Comm: syz.5.7991 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 537.988548][T25879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.988563][T25879] Call Trace: [ 537.988571][T25879] [ 537.988582][T25879] __dump_stack+0x21/0x30 [ 537.988615][T25879] dump_stack_lvl+0x10c/0x190 [ 537.988643][T25879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 537.988671][T25879] ? ___ratelimit+0x3f7/0x5a0 [ 537.988700][T25879] dump_stack+0x19/0x20 [ 537.988725][T25879] dump_header+0xd7/0x490 [ 537.988758][T25879] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 537.988783][T25879] oom_kill_process+0x4c0/0x7e0 [ 537.988805][T25879] ? sched_clock_cpu+0x75/0x400 [ 537.988832][T25879] out_of_memory+0x7ee/0xbd0 [ 537.988853][T25879] ? __cfi_out_of_memory+0x10/0x10 [ 537.988874][T25879] ? mutex_lock_killable+0x92/0x1c0 [ 537.988905][T25879] ? __cfi_mutex_lock_killable+0x10/0x10 [ 537.988938][T25879] mem_cgroup_out_of_memory+0x279/0x350 [ 537.988970][T25879] ? drain_obj_stock+0xed0/0xed0 [ 537.989001][T25879] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 537.989040][T25879] try_charge_memcg+0x8f7/0xde0 [ 537.989065][T25879] ? __cfi_try_charge_memcg+0x10/0x10 [ 537.989088][T25879] ? __alloc_pages_noprof+0x30d/0x6c0 [ 537.989111][T25879] ? update_curr+0x821/0xaa0 [ 537.989139][T25879] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 537.989164][T25879] __mem_cgroup_charge+0xf6/0x410 [ 537.989190][T25879] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 537.989229][T25879] ? __cfi___switch_to+0x10/0x10 [ 537.989271][T25879] shmem_alloc_and_add_folio+0x86d/0x1050 [ 537.989308][T25879] ? put_swap_device+0x130/0x130 [ 537.989342][T25879] ? shmem_huge_global_enabled+0x2da/0x360 [ 537.989376][T25879] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 537.989410][T25879] ? __kasan_check_write+0x18/0x20 [ 537.989438][T25879] ? _raw_spin_lock+0x8c/0x120 [ 537.989464][T25879] shmem_get_folio_gfp+0x5f0/0x1380 [ 537.989500][T25879] ? shmem_get_folio+0xc0/0xc0 [ 537.989532][T25879] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 537.989560][T25879] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 537.989588][T25879] ? inode_to_bdi+0x6d/0x100 [ 537.989615][T25879] shmem_write_begin+0xf4/0x270 [ 537.989651][T25879] generic_perform_write+0x330/0x960 [ 537.989682][T25879] ? __cfi_generic_perform_write+0x10/0x10 [ 537.989710][T25879] ? down_write+0xe9/0x2a0 [ 537.989744][T25879] ? mnt_get_write_access_file+0x1af/0x3b0 [ 537.989770][T25879] ? mnt_put_write_access_file+0xc2/0x100 [ 537.989795][T25879] ? file_update_time+0x1ef/0x220 [ 537.989822][T25879] shmem_file_write_iter+0x105/0x130 [ 537.989847][T25879] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 537.989871][T25879] __kernel_write_iter+0x395/0x830 [ 537.989901][T25879] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 537.989926][T25879] ? __cfi___kernel_write_iter+0x10/0x10 [ 537.989955][T25879] ? get_dump_page+0x160/0x220 [ 537.989978][T25879] ? __asan_memset+0x39/0x50 [ 537.990011][T25879] ? iov_iter_bvec+0xc0/0x180 [ 537.990040][T25879] dump_user_range+0xb06/0xdf0 [ 537.990066][T25879] ? __cfi_dump_emit+0x10/0x10 [ 537.990090][T25879] ? __cfi_dump_user_range+0x10/0x10 [ 537.990115][T25879] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 537.990140][T25879] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 537.990167][T25879] elf_core_dump+0x2cd9/0x3810 [ 537.990188][T25879] ? __cfi_elf_core_dump+0x10/0x10 [ 537.990214][T25879] ? dump_interrupted+0xf0/0xf0 [ 537.990240][T25879] ? filp_open+0x182/0x1d0 [ 537.990263][T25879] ? 0xffffffffff600000 [ 537.990283][T25879] do_coredump+0x1bfa/0x2bd0 [ 537.990316][T25879] ? __cfi_do_coredump+0x10/0x10 [ 537.990343][T25879] ? asm_exc_page_fault+0x2b/0x30 [ 537.990391][T25879] ? __kasan_slab_free+0x6a/0x80 [ 537.990440][T25879] ? kmem_cache_free+0x1c1/0x510 [ 537.990471][T25879] ? get_signal+0xa75/0x14f0 [ 537.990498][T25879] get_signal+0x11fd/0x14f0 [ 537.990526][T25879] arch_do_signal_or_restart+0x96/0x720 [ 537.990559][T25879] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 537.990593][T25879] irqentry_exit_to_user_mode+0x4e/0xb0 [ 537.990629][T25879] irqentry_exit+0x16/0x60 [ 537.990663][T25879] exc_page_fault+0x66/0xc0 [ 537.990695][T25879] asm_exc_page_fault+0x2b/0x30 [ 537.990724][T25879] RIP: 0033:0x7f36ecd8e9b1 [ 537.990744][T25879] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 537.990765][T25879] RSP: 002b:fffffffffffffea0 EFLAGS: 00010217 [ 537.990789][T25879] RAX: 0000000000000000 RBX: 00007f36ecfb5fa0 RCX: 00007f36ecd8e9a9 [ 537.990807][T25879] RDX: 0000000000000000 RSI: fffffffffffffea0 RDI: 0000000000000000 [ 537.990824][T25879] RBP: 00007f36ece10d69 R08: 0000000000000000 R09: 0000000000000000 [ 537.990841][T25879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.990857][T25879] R13: 0000000000000000 R14: 00007f36ecfb5fa0 R15: 00007ffc9829ab48 [ 537.990879][T25879] [ 537.990922][T25879] memory: usage 306032kB, limit 307200kB, failcnt 21475 [ 538.081084][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.098055][T25879] memory+swap: usage 421600kB, limit 9007199254740988kB, failcnt 0 [ 538.118095][ T10] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 538.158054][T25879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 538.166152][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.191492][T25879] Memory cgroup stats for [ 538.261096][ T10] usb 3-1: config 0 descriptor?? [ 538.275829][T25879] /syz5: [ 538.539071][T25879] cache 284532736 [ 538.545587][T25879] rss 143360 [ 538.555551][T25879] rss_huge 0 [ 538.558983][T25879] shmem 284467200 [ 538.562805][T25879] mapped_file 0 [ 538.574527][T25879] dirty 0 [ 538.577502][T25879] writeback 0 [ 538.590023][T26095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 538.590051][T26095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:187 [ 538.604418][T25879] workingset_refault_anon 24 [ 538.618431][T25879] workingset_refault_file 1071 [ 538.634079][T25879] swap 114081792 [ 538.637703][T25879] swapcached 237568 [ 538.641666][T25879] pgpgin 251120 [ 538.645200][T25879] pgpgout 181557 [ 538.667861][T25879] pgfault 73466 [ 538.668604][T26102] netlink: 'syz.6.8055': attribute type 4 has an invalid length. [ 538.672857][T25879] pgmajfault 26 [ 538.686957][T25879] inactive_anon 471040 [ 538.692514][T26102] netlink: 'syz.6.8055': attribute type 4 has an invalid length. [ 538.717792][T25879] active_anon 284319744 [ 538.726940][T25879] inactive_file 0 [ 538.730581][T26106] batadv_slave_0: mtu less than device minimum [ 538.733982][T25879] active_file 0 [ 538.742623][T25879] unevictable 0 [ 538.747518][T25879] hierarchical_memory_limit 314572800 [ 538.753320][T25879] hierarchical_memsw_limit 9223372036854771712 [ 538.764137][T25879] total_cache 284532736 [ 538.768642][T25879] total_rss 143360 [ 538.772677][T25879] total_rss_huge 0 [ 538.780239][ T10] usb 3-1: USB disconnect, device number 7 [ 538.786627][T25879] total_shmem 284467200 [ 538.792547][T25879] total_mapped_file 0 [ 538.796821][T25879] total_dirty 0 [ 538.806818][T25879] total_writeback 0 [ 538.815854][T25879] total_workingset_refault_anon 24 [ 538.828083][T25879] total_workingset_refault_file 1071 [ 538.833824][T26109] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 538.848065][T25879] total_swap 114081792 [ 538.852162][T25879] total_swapcached 237568 [ 538.863685][T25879] total_pgpgin 251120 [ 538.872080][T25879] total_pgpgout 181557 [ 538.877466][T25879] total_pgfault 73466 [ 538.881639][T25879] total_pgmajfault 26 [ 538.885699][T25879] total_inactive_anon 471040 [ 538.890368][T25879] total_active_anon 284319744 [ 538.895139][T25879] total_inactive_file 0 [ 538.899357][T25879] total_active_file 0 [ 538.903412][T25879] total_unevictable 0 [ 538.907498][T25879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7991,pid=25887,uid=0 [ 538.929559][T25879] Memory cgroup out of memory: Killed process 25887 (syz.5.7991) total-vm:90100kB, anon-rss:956kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 539.493496][T26137] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8066'. [ 539.632044][T26150] virtio-fs: tag not found [ 539.796830][T26155] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8071'. [ 540.000881][ T36] audit: type=1400 audit(2000000083.830:2769): avc: denied { audit_control } for pid=26158 comm="syz.2.8072" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 540.459846][ T36] audit: type=1400 audit(2000000084.280:2770): avc: denied { ioctl } for pid=26165 comm="syz.5.8075" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 540.841543][T25889] syz.5.7991 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 540.882961][T25889] CPU: 0 UID: 0 PID: 25889 Comm: syz.5.7991 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 540.883010][T25889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.883027][T25889] Call Trace: [ 540.883035][T25889] [ 540.883045][T25889] __dump_stack+0x21/0x30 [ 540.883078][T25889] dump_stack_lvl+0x10c/0x190 [ 540.883106][T25889] ? __cfi_dump_stack_lvl+0x10/0x10 [ 540.883134][T25889] ? ___ratelimit+0x3f7/0x5a0 [ 540.883165][T25889] dump_stack+0x19/0x20 [ 540.883192][T25889] dump_header+0xd7/0x490 [ 540.883227][T25889] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 540.883259][T25889] oom_kill_process+0x4c0/0x7e0 [ 540.883282][T25889] ? sched_clock_cpu+0x75/0x400 [ 540.883312][T25889] out_of_memory+0x7ee/0xbd0 [ 540.883334][T25889] ? __cfi_out_of_memory+0x10/0x10 [ 540.883357][T25889] ? mutex_lock_killable+0x92/0x1c0 [ 540.883391][T25889] ? __cfi_mutex_lock_killable+0x10/0x10 [ 540.883425][T25889] mem_cgroup_out_of_memory+0x279/0x350 [ 540.883458][T25889] ? drain_obj_stock+0xed0/0xed0 [ 540.883491][T25889] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 540.883524][T25889] try_charge_memcg+0x8f7/0xde0 [ 540.883551][T25889] ? _raw_spin_lock+0x8c/0x120 [ 540.883588][T25889] ? __cfi_try_charge_memcg+0x10/0x10 [ 540.883614][T25889] ? __alloc_pages_noprof+0x30d/0x6c0 [ 540.883650][T25889] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 540.883673][T25889] ? __folio_batch_add_and_move+0x2ab/0x370 [ 540.883695][T25889] __mem_cgroup_charge+0xf6/0x410 [ 540.883722][T25889] ? __kasan_check_write+0x18/0x20 [ 540.883747][T25889] ? _raw_spin_lock+0x8c/0x120 [ 540.883770][T25889] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 540.883799][T25889] shmem_alloc_and_add_folio+0x86d/0x1050 [ 540.883835][T25889] ? put_swap_device+0x130/0x130 [ 540.883888][T25889] ? shmem_huge_global_enabled+0x2da/0x360 [ 540.883922][T25889] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 540.883956][T25889] ? __kasan_check_write+0x18/0x20 [ 540.883983][T25889] ? _raw_spin_lock+0x8c/0x120 [ 540.884014][T25889] shmem_get_folio_gfp+0x5f0/0x1380 [ 540.884049][T25889] ? shmem_get_folio+0xc0/0xc0 [ 540.884081][T25889] ? follow_page_pte+0xa5c/0xb90 [ 540.884105][T25889] ? inode_to_bdi+0x6d/0x100 [ 540.884132][T25889] shmem_write_begin+0xf4/0x270 [ 540.884168][T25889] generic_perform_write+0x330/0x960 [ 540.884198][T25889] ? __cfi_generic_perform_write+0x10/0x10 [ 540.884226][T25889] ? down_write+0xe9/0x2a0 [ 540.884260][T25889] ? file_update_time+0xa3/0x220 [ 540.884286][T25889] shmem_file_write_iter+0x105/0x130 [ 540.884311][T25889] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 540.884336][T25889] __kernel_write_iter+0x395/0x830 [ 540.884367][T25889] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 540.884392][T25889] ? __cfi___kernel_write_iter+0x10/0x10 [ 540.884422][T25889] ? get_dump_page+0x160/0x220 [ 540.884445][T25889] ? __asan_memset+0x39/0x50 [ 540.884473][T25889] ? iov_iter_bvec+0xc0/0x180 [ 540.884508][T25889] dump_user_range+0xb06/0xdf0 [ 540.884540][T25889] ? __cfi_dump_emit+0x10/0x10 [ 540.884569][T25889] ? __cfi_dump_user_range+0x10/0x10 [ 540.884617][T25889] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 540.884659][T25889] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 540.884691][T25889] elf_core_dump+0x2cd9/0x3810 [ 540.884717][T25889] ? __cfi_elf_core_dump+0x10/0x10 [ 540.884748][T25889] ? dump_interrupted+0xf0/0xf0 [ 540.884777][T25889] ? filp_open+0x182/0x1d0 [ 540.884802][T25889] ? 0xffffffffff600000 [ 540.884822][T25889] do_coredump+0x1bfa/0x2bd0 [ 540.884856][T25889] ? __cfi_do_coredump+0x10/0x10 [ 540.884884][T25889] ? asm_exc_page_fault+0x2b/0x30 [ 540.884924][T25889] ? __kasan_slab_free+0x6a/0x80 [ 540.884958][T25889] ? kmem_cache_free+0x1c1/0x510 [ 540.884988][T25889] ? get_signal+0xa75/0x14f0 [ 540.885020][T25889] get_signal+0x11fd/0x14f0 [ 540.885048][T25889] arch_do_signal_or_restart+0x96/0x720 [ 540.885081][T25889] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 540.885119][T25889] irqentry_exit_to_user_mode+0x4e/0xb0 [ 540.885155][T25889] irqentry_exit+0x16/0x60 [ 540.885189][T25889] exc_page_fault+0x66/0xc0 [ 540.885222][T25889] asm_exc_page_fault+0x2b/0x30 [ 540.885252][T25889] RIP: 0033:0x7f36ecd8e9b1 [ 540.885271][T25889] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 540.885292][T25889] RSP: 002b:fffffffffffffea0 EFLAGS: 00010217 [ 540.885315][T25889] RAX: 0000000000000000 RBX: 00007f36ecfb5fa0 RCX: 00007f36ecd8e9a9 [ 540.885335][T25889] RDX: 0000000000000000 RSI: fffffffffffffea0 RDI: 0000000000000000 [ 540.885352][T25889] RBP: 00007f36ece10d69 R08: 0000000000000000 R09: 0000000000000000 [ 540.885369][T25889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.885385][T25889] R13: 0000000000000000 R14: 00007f36ecfb5fa0 R15: 00007ffc9829ab48 [ 540.885418][T25889] [ 540.897490][T25889] memory: usage 307200kB, limit 307200kB, failcnt 30568 [ 541.365218][T25889] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 541.373388][T25889] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 541.380491][T25889] Memory cgroup stats for /syz5: [ 541.380652][T25889] cache 314347520 [ 541.389832][ T36] audit: type=1400 audit(2000000085.210:2771): avc: denied { sqpoll } for pid=26180 comm="syz.6.8079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 541.415462][T25889] rss 225280 [ 541.418899][T25889] rss_huge 0 [ 541.422119][T25889] shmem 314335232 [ 541.425827][T25889] mapped_file 716800 [ 541.431052][T25889] dirty 0 [ 541.434012][T25889] writeback 0 [ 541.437360][T25889] workingset_refault_anon 54 [ 541.442490][T25889] workingset_refault_file 2952 [ 541.448148][T25889] swap 127991808 [ 541.451801][T25889] swapcached 4096 [ 541.455452][T25889] pgpgin 309188 [ 541.461000][T25889] pgpgout 232388 [ 541.461257][T26186] Unsupported ieee802154 address type: 0 [ 541.464582][ T36] audit: type=1400 audit(2000000085.290:2772): avc: denied { bind } for pid=26185 comm="syz.2.8081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 541.486283][T25889] pgfault 80184 [ 541.493255][ T36] audit: type=1400 audit(2000000085.300:2773): avc: denied { map } for pid=26185 comm="syz.2.8081" path="socket:[136746]" dev="sockfs" ino=136746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 541.494201][T25889] pgmajfault 71 [ 541.520686][ T36] audit: type=1400 audit(2000000085.300:2774): avc: denied { read } for pid=26185 comm="syz.2.8081" path="socket:[136746]" dev="sockfs" ino=136746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 541.522701][T25889] inactive_anon 7757824 [ 541.545120][ T36] audit: type=1400 audit(2000000085.300:2775): avc: denied { append } for pid=26185 comm="syz.2.8081" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.550088][T25889] active_anon 306802688 [ 541.575569][T25889] inactive_file 12288 [ 541.579860][T25889] active_file 0 [ 541.588013][T25889] unevictable 0 [ 541.591648][T25889] hierarchical_memory_limit 314572800 [ 541.597050][T25889] hierarchical_memsw_limit 9223372036854771712 [ 541.603261][T25889] total_cache 314347520 [ 541.607427][T25889] total_rss 225280 [ 541.611206][T25889] total_rss_huge 0 [ 541.614974][T25889] total_shmem 314335232 [ 541.619188][T25889] total_mapped_file 716800 [ 541.623616][T25889] total_dirty 0 [ 541.627094][T25889] total_writeback 0 [ 541.630953][T25889] total_workingset_refault_anon 54 [ 541.637806][T25889] total_workingset_refault_file 2952 [ 541.643396][T25889] total_swap 127991808 [ 541.647500][T25889] total_swapcached 4096 [ 541.651933][T25889] total_pgpgin 309188 [ 541.656055][T25889] total_pgpgout 232388 [ 541.660200][T25889] total_pgfault 80184 [ 541.664203][T25889] total_pgmajfault 71 [ 541.668241][T25889] total_inactive_anon 7757824 [ 541.672933][T25889] total_active_anon 306802688 [ 541.677626][T25889] total_inactive_file 12288 [ 541.682270][T25889] total_active_file 0 [ 541.686311][T25889] total_unevictable 0 [ 541.690369][T25889] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7991,pid=25877,uid=0 [ 541.705387][T25889] Memory cgroup out of memory: Killed process 25877 (syz.5.7991) total-vm:89836kB, anon-rss:948kB, file-rss:53764kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 541.724989][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 541.808448][T25888] syz.5.7991 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 541.858134][T25888] CPU: 0 UID: 0 PID: 25888 Comm: syz.5.7991 Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 541.858175][T25888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.858190][T25888] Call Trace: [ 541.858198][T25888] [ 541.858208][T25888] __dump_stack+0x21/0x30 [ 541.858246][T25888] dump_stack_lvl+0x10c/0x190 [ 541.858274][T25888] ? __cfi_dump_stack_lvl+0x10/0x10 [ 541.858301][T25888] ? ___ratelimit+0x3f7/0x5a0 [ 541.858330][T25888] dump_stack+0x19/0x20 [ 541.858356][T25888] dump_header+0xd7/0x490 [ 541.858389][T25888] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 541.858416][T25888] oom_kill_process+0x4c0/0x7e0 [ 541.858438][T25888] ? sched_clock_cpu+0x75/0x400 [ 541.858465][T25888] out_of_memory+0x7ee/0xbd0 [ 541.858487][T25888] ? __cfi_out_of_memory+0x10/0x10 [ 541.858508][T25888] ? mutex_lock_killable+0x92/0x1c0 [ 541.858540][T25888] ? __cfi_mutex_lock_killable+0x10/0x10 [ 541.858574][T25888] mem_cgroup_out_of_memory+0x279/0x350 [ 541.858606][T25888] ? drain_obj_stock+0xed0/0xed0 [ 541.858638][T25888] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 541.858669][T25888] try_charge_memcg+0x8f7/0xde0 [ 541.858703][T25888] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 541.858734][T25888] ? __cfi_try_charge_memcg+0x10/0x10 [ 541.858760][T25888] ? __alloc_pages_noprof+0x30d/0x6c0 [ 541.858787][T25888] __mem_cgroup_charge+0xf6/0x410 [ 541.858815][T25888] ? filemap_get_entry+0x3fb/0x460 [ 541.858838][T25888] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 541.858868][T25888] filemap_add_folio+0x57/0x2d0 [ 541.858904][T25888] __filemap_get_folio+0x4c2/0x7c0 [ 541.858929][T25888] filemap_fault+0xb41/0x16b0 [ 541.858956][T25888] ? __cfi_filemap_fault+0x10/0x10 [ 541.858980][T25888] ? __cfi_filemap_map_pages+0x10/0x10 [ 541.859005][T25888] ? __cfi_lru_add+0x10/0x10 [ 541.859027][T25888] ? _raw_spin_lock+0x8c/0x120 [ 541.859051][T25888] ? __cfi__raw_spin_lock+0x10/0x10 [ 541.859076][T25888] do_pte_missing+0x376b/0x3e50 [ 541.859101][T25888] ? pte_marker_clear+0x1b0/0x1b0 [ 541.859122][T25888] ? __pte_offset_map+0x1b0/0x230 [ 541.859149][T25888] ? pte_offset_map_rw_nolock+0xba/0x110 [ 541.859177][T25888] handle_mm_fault+0x1166/0x1b90 [ 541.859210][T25888] ? __kasan_check_write+0x18/0x20 [ 541.859243][T25888] ? __cfi_handle_mm_fault+0x10/0x10 [ 541.859276][T25888] ? follow_page_pte+0x2bd/0xb90 [ 541.859302][T25888] ? gup_must_unshare+0x1e0/0x1e0 [ 541.859325][T25888] ? vma_is_secretmem+0x11/0x50 [ 541.859353][T25888] __get_user_pages+0x1169/0x22d0 [ 541.859376][T25888] ? __kasan_check_write+0x18/0x20 [ 541.859407][T25888] ? populate_vma_page_range+0x230/0x230 [ 541.859430][T25888] ? __kernel_write_iter+0x65e/0x830 [ 541.859461][T25888] get_dump_page+0x107/0x220 [ 541.859484][T25888] ? __cfi_get_dump_page+0x10/0x10 [ 541.859507][T25888] ? __asan_memset+0x39/0x50 [ 541.859536][T25888] dump_user_range+0x181/0xdf0 [ 541.859567][T25888] ? __cfi_dump_emit+0x10/0x10 [ 541.859597][T25888] ? __cfi_dump_user_range+0x10/0x10 [ 541.859627][T25888] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 541.859658][T25888] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 541.859690][T25888] elf_core_dump+0x2cd9/0x3810 [ 541.859716][T25888] ? __cfi_elf_core_dump+0x10/0x10 [ 541.859782][T25888] ? dump_interrupted+0xf0/0xf0 [ 541.859810][T25888] ? filp_open+0x182/0x1d0 [ 541.859833][T25888] ? 0xffffffffff600000 [ 541.859853][T25888] do_coredump+0x1bfa/0x2bd0 [ 541.859884][T25888] ? __cfi_do_coredump+0x10/0x10 [ 541.859918][T25888] ? asm_exc_page_fault+0x2b/0x30 [ 541.859956][T25888] ? __kasan_slab_free+0x6a/0x80 [ 541.859989][T25888] ? kmem_cache_free+0x1c1/0x510 [ 541.860017][T25888] ? get_signal+0xa75/0x14f0 [ 541.860047][T25888] get_signal+0x11fd/0x14f0 [ 541.860075][T25888] arch_do_signal_or_restart+0x96/0x720 [ 541.860108][T25888] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 541.860144][T25888] irqentry_exit_to_user_mode+0x4e/0xb0 [ 541.860179][T25888] irqentry_exit+0x16/0x60 [ 541.860211][T25888] exc_page_fault+0x66/0xc0 [ 541.860244][T25888] asm_exc_page_fault+0x2b/0x30 [ 541.860273][T25888] RIP: 0033:0x7f36ecd8e9b1 [ 541.860292][T25888] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 541.860314][T25888] RSP: 002b:fffffffffffffea0 EFLAGS: 00010217 [ 541.860337][T25888] RAX: 0000000000000000 RBX: 00007f36ecfb5fa0 RCX: 00007f36ecd8e9a9 [ 541.860355][T25888] RDX: 0000000000000000 RSI: fffffffffffffea0 RDI: 0000000000000000 [ 541.860372][T25888] RBP: 00007f36ece10d69 R08: 0000000000000000 R09: 0000000000000000 [ 541.860389][T25888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.860404][T25888] R13: 0000000000000000 R14: 00007f36ecfb5fa0 R15: 00007ffc9829ab48 [ 541.860424][T25888] [ 541.860511][T25888] memory: usage 306980kB, limit 307200kB, failcnt 31201 [ 542.329975][ T10] usb 3-1: config 1 has an invalid descriptor of length 12, skipping remainder of the config [ 542.340295][ T10] usb 3-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 542.353404][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 542.363024][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 542.372145][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.387025][ T10] usb 3-1: Product: 朓ツ掔姉酪祴ງ᫞骲◹눹㗵礞砮杍푽ꌟⱹ沕鎂頻빀쏈혙﫸䳽쇑꯯▍ᒶ㩲妨 [ 542.399678][ T10] usb 3-1: Manufacturer: ᐇ [ 542.402641][T25888] memory+swap: usage 334172kB, limit 9007199254740988kB, failcnt 0 [ 542.407939][ T10] usb 3-1: SerialNumber: ꁚ賹觚姻涿䢠櫚纨妯㒆嗭⓯쐬쿚㡄ﱞ檀Ộ꠾暆噓㑳膮뾐枬Ы魋も⑶ﺪ妉͛ഃ걅ꚟ녟㨨鏖蓷蟣㸪⧿벺ꃫ武䕒臐叽旝濅嵧‘ᬶ幌윎陱텣윰痱뤱咽頩Ｘ诟퍆旇ݩﱆ狴憨# [ 542.431829][T25888] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 542.477613][ T36] audit: type=1400 audit(2000000086.300:2776): avc: denied { getopt } for pid=26228 comm="syz.0.8094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 542.500469][T25888] Memory cgroup stats for /syz5: [ 542.500652][T25888] cache 230084608 [ 542.528049][T25888] rss 225280 [ 542.538989][T25888] rss_huge 0 [ 542.550985][T25888] shmem 228872192 [ 542.564904][T25888] mapped_file 716800 [ 542.595828][T26236] rust_binder: 168: no such ref 3 [ 542.597534][T25888] dirty 0 [ 542.604011][T25888] writeback 147456 [ 542.607736][T25888] workingset_refault_anon 88 [ 542.612375][T25888] workingset_refault_file 3484 [ 542.617202][T25888] swap 89751552 [ 542.620906][T25888] swapcached 397312 [ 542.624732][T25888] pgpgin 312141 [ 542.628326][T25888] pgpgout 255817 [ 542.631882][T25888] pgfault 80380 [ 542.635350][T25888] pgmajfault 105 [ 542.638973][T25888] inactive_anon 0 [ 542.642741][T25888] active_anon 229351424 [ 542.646908][T25888] inactive_file 331776 [ 542.651023][T25888] active_file 880640 [ 542.655987][ T10] usb 3-1: USB disconnect, device number 8 [ 542.657180][T25888] unevictable 0 [ 542.687183][T26242] overlayfs: failed to clone upperpath [ 542.698054][T25888] hierarchical_memory_limit 314572800 [ 542.726511][T25888] hierarchical_memsw_limit 9223372036854771712 [ 542.748165][T25888] total_cache 230084608 [ 542.752371][T25888] total_rss 225280 [ 542.756140][T25888] total_rss_huge 0 [ 542.764826][T25888] total_shmem 228872192 [ 542.780354][T25888] total_mapped_file 716800 [ 542.791565][T26255] 9pnet: Could not find request transport: fjvd0x0000000000000003 [ 542.799905][T25888] total_dirty 0 [ 542.803383][T25888] total_writeback 147456 [ 542.807638][T25888] total_workingset_refault_anon 88 [ 542.832675][T25888] total_workingset_refault_file 3484 [ 542.848070][T25888] total_swap 89751552 [ 542.852156][T25888] total_swapcached 397312 [ 542.856500][T25888] total_pgpgin 312141 [ 542.868055][T25888] total_pgpgout 255817 [ 542.877085][T25888] total_pgfault 80380 [ 542.890491][T25888] total_pgmajfault 105 [ 542.894911][T26260] wg1: left promiscuous mode [ 542.902300][T26260] wg1: left allmulticast mode [ 542.918917][T25888] total_inactive_anon 0 [ 542.923102][T25888] total_active_anon 229351424 [ 542.937918][T25888] total_inactive_file 331776 [ 542.942586][T25888] total_active_file 880640 [ 542.947020][T25888] total_unevictable 0 [ 542.953179][T25888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7991,pid=25875,uid=0 [ 542.978102][T25888] Memory cgroup out of memory: OOM victim 25875 (syz.5.7991) is already exiting. Skip killing the task [ 543.438064][ T31] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 543.589136][ T31] usb 3-1: config 1 has an invalid interface number: 146 but max is 0 [ 543.597363][ T31] usb 3-1: config 1 has no interface number 0 [ 543.608269][ T31] usb 3-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 543.628061][ T45] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 543.637201][ T31] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 543.647427][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.667394][ T31] usb 3-1: Product: syz [ 543.677701][ T31] usb 3-1: Manufacturer: syz [ 543.686004][ T31] usb 3-1: SerialNumber: syz [ 543.701110][ T31] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 543.712795][ T31] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 543.734801][ T31] usbserial_generic 3-1:1.146: generic converter detected [ 543.743328][ T31] usb 3-1: generic converter now attached to ttyUSB0 [ 543.789113][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.800702][ T45] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 543.818303][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.826345][ T45] usb 6-1: Product: syz [ 543.830788][ T45] usb 6-1: Manufacturer: syz [ 543.835410][ T45] usb 6-1: SerialNumber: syz [ 543.845614][ T45] usb 6-1: config 0 descriptor?? [ 543.853447][ T45] asix 6-1:0.0: probe with driver asix failed with error -22 [ 543.914213][ T366] usb 3-1: USB disconnect, device number 9 [ 543.921347][ T366] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 543.930398][ T366] usbserial_generic 3-1:1.146: device disconnected [ 544.054990][ T10] usb 6-1: USB disconnect, device number 18 [ 544.179517][ T36] audit: type=1400 audit(2000000088.010:2777): avc: denied { mount } for pid=26280 comm="syz.6.8111" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 544.524850][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.531022][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.537043][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.543143][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.549394][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.555390][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.561579][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.567612][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.573751][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.579781][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.585800][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.591834][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.598073][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.604138][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.610173][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.616267][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.622324][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.628361][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.634349][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.643547][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.647965][T26292] rust_binder: Failed to allocate buffer. len:4128, is_oneway:true [ 544.649738][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.663656][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.669690][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.676302][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.682492][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.688553][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.694540][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.700569][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.709570][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.711701][T26298] rust_binder: 215: no such ref 3 [ 544.718498][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.734706][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.743242][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.749669][T26287] binder: Unknown parameter 'rƑ)vAw' [ 544.881253][T26319] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 165) [ 544.881281][T26319] rust_binder: Error while translating object. [ 544.892012][T26319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 544.898321][T26319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 545.006355][ T36] audit: type=1400 audit(2000000088.830:2778): avc: denied { read } for pid=26335 comm="syz.5.8128" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 545.047055][ T36] audit: type=1400 audit(2000000088.830:2779): avc: denied { open } for pid=26335 comm="syz.5.8128" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 545.078080][ T36] audit: type=1400 audit(2000000088.870:2780): avc: denied { ioctl } for pid=26335 comm="syz.5.8128" path="/dev/usbmon3" dev="devtmpfs" ino=100 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 545.154190][T26344] overlayfs: failed to clone upperpath [ 545.173280][ T36] audit: type=1400 audit(2000000089.000:2781): avc: denied { map } for pid=26345 comm="syz.6.8131" path="socket:[137024]" dev="sockfs" ino=137024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 545.243010][ T36] audit: type=1400 audit(2000000089.070:2782): avc: denied { read } for pid=26356 comm="syz.6.8134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 545.263768][ T366] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 545.418093][ T366] usb 3-1: Using ep0 maxpacket: 8 [ 545.424365][ T366] usb 3-1: config 253 has an invalid interface number: 4 but max is 1 [ 545.432764][ T366] usb 3-1: config 253 has an invalid interface number: 49 but max is 1 [ 545.441083][ T366] usb 3-1: config 253 has no interface number 0 [ 545.447347][ T366] usb 3-1: config 253 has no interface number 1 [ 545.453676][ T366] usb 3-1: config 253 interface 4 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 545.464669][ T366] usb 3-1: config 253 interface 4 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 545.475656][ T366] usb 3-1: config 253 interface 4 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 545.486418][ T366] usb 3-1: config 253 interface 49 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 545.497656][ T366] usb 3-1: config 253 interface 4 has no altsetting 0 [ 545.504476][ T366] usb 3-1: config 253 interface 49 has no altsetting 0 [ 545.512903][ T366] usb 3-1: New USB device found, idVendor=2001, idProduct=7e35, bcdDevice=87.a9 [ 545.521999][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.530029][ T366] usb 3-1: Product: ᎝Ӟ揷쓹 [ 545.534901][ T366] usb 3-1: Manufacturer: 額늶珝싖쐘煳ꚻ傏鲂藯ﮛ혦렼ዦ轪狷⪇ꄏ࢑⎿禶ဠ㻉ᠲ絻࿒㬧穫퉆ᇗ傐灠㔇ᐅ퉵觷謻紮닧㯮꛱뗀ⰹﶸ戢랱龸嘂薅풹꫾첶⥌ㆼ纊꣺䞒⸰葻苷ሎ꧵ᘦ첽䎗菉ጻ䱶傃胧ṍ鹆鿉뙜ᛰ웹萭쮍뾗᝟㥹炜䙁ᕲ㿯꾫◶판踖 [ 545.568674][ T366] usb 3-1: SerialNumber: ￂ摶危兝㨶㙔㹙᫃쒼䬬욚砲茖䥓霂窚∿ɦ啚覅ᨚ㠍䠜㪣ꈤ㹜뒤盀쿙說ବꬻㇺ㥖ꂹ럏삸죫꺱獗㩾鲳梶瓫盪㦜抰橚ꍄᦆ䃔鲙ꥤ귵獸쏿ⰴ牿ꁟ弬♍묚 [ 545.797187][ T36] audit: type=1400 audit(2000000089.620:2783): avc: denied { read } for pid=26328 comm="syz.2.8127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 545.806405][ T366] usb 3-1: USB disconnect, device number 10 [ 546.495288][T26394] rust_binder: 186: no such ref 1 [ 546.504481][T26396] rust_binder: 26399 RLIMIT_NICE not set [ 546.504582][T26394] rust_binder: Write failure EINVAL in pid:186 [ 546.516409][ T45] rust_binder: 26393: removing orphan mapping 0:1048 [ 546.524869][T26401] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 546.549090][T26403] /dev/rnullb0: Can't open blockdev [ 546.592459][T26406] fuse: Unknown parameter 'fsuuid' [ 546.592661][T26407] fuse: Unknown parameter 'fsuuid' [ 546.606081][ T36] audit: type=1400 audit(2000000090.430:2784): avc: denied { map } for pid=26405 comm="syz.2.8149" path="socket:[137167]" dev="sockfs" ino=137167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 546.629651][ T36] audit: type=1400 audit(2000000090.430:2785): avc: denied { map } for pid=26405 comm="syz.2.8149" path="socket:[137167]" dev="sockfs" ino=137167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 546.710843][T26415] sock: sock_timestamping_bind_phc: sock not bind to device [ 546.718515][T26415] rust_binder: Error while translating object. [ 546.718545][T26415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 546.724825][T26415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:119 [ 547.310399][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8166'. [ 547.352141][T26458] netlink: 'syz.6.8168': attribute type 46 has an invalid length. [ 547.381034][T26462] fuse: Bad value for 'fd' [ 547.768089][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 547.918124][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 547.924412][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.935234][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.944328][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 547.952366][ T10] usb 3-1: SerialNumber: syz [ 547.958491][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 547.964418][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 548.161576][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 548.161597][ T36] audit: type=1400 audit(2000000091.990:2789): avc: denied { read } for pid=26465 comm="syz.2.8172" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 548.191309][ T36] audit: type=1400 audit(2000000091.990:2790): avc: denied { open } for pid=26465 comm="syz.2.8172" path="/36/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 548.215895][ T36] audit: type=1400 audit(2000000091.990:2791): avc: denied { ioctl } for pid=26465 comm="syz.2.8172" path="/36/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 548.418354][ T66] usb 3-1: USB disconnect, device number 11 [ 548.708090][ T66] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 548.727156][ T36] audit: type=1400 audit(2000000092.550:2792): avc: denied { accept } for pid=26479 comm="syz.6.8176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.858812][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 548.867420][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 548.878445][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 548.891200][ T66] usb 3-1: string descriptor 0 read error: -22 [ 548.897393][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.906479][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.118987][ T66] cdc_ncm 3-1:1.0: bind() failure [ 549.124929][ T66] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 549.131797][ T66] cdc_ncm 3-1:1.1: bind() failure [ 549.137923][ T66] usb 3-1: USB disconnect, device number 12 [ 549.663902][ T36] audit: type=1400 audit(2000000093.490:2793): avc: denied { map } for pid=26520 comm="syz.2.8187" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 549.668830][T26521] netlink: 'syz.2.8187': attribute type 27 has an invalid length. [ 549.719991][T26524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=26524 comm=syz.2.8187 [ 549.749183][T26521] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.756423][T26521] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.864569][T26533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8191'. [ 550.028058][ T366] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 550.153519][T26537] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.160736][T26537] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.167935][T26537] bridge_slave_0: entered allmulticast mode [ 550.174409][T26537] bridge_slave_0: entered promiscuous mode [ 550.181151][T26537] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.188300][T26537] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.195466][T26537] bridge_slave_1: entered allmulticast mode [ 550.198369][ T366] usb 3-1: Using ep0 maxpacket: 8 [ 550.202005][T26537] bridge_slave_1: entered promiscuous mode [ 550.218838][ T366] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.230679][ T366] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 550.239873][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.247882][ T366] usb 3-1: Product: syz [ 550.252473][ T366] usb 3-1: Manufacturer: syz [ 550.257105][ T366] usb 3-1: SerialNumber: syz [ 550.270401][ T366] usb 3-1: config 0 descriptor?? [ 550.311582][T26537] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.318702][T26537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.326013][T26537] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.333079][T26537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.354287][T19648] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.361874][T19648] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.371205][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.378288][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.387642][T19648] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.394745][T19648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.421582][T26537] veth0_vlan: entered promiscuous mode [ 550.433188][T26537] veth1_macvtap: entered promiscuous mode [ 550.486463][ T45] usb 3-1: USB disconnect, device number 13 [ 550.653444][T26558] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 550.703050][ T36] audit: type=1400 audit(2000000094.530:2794): avc: denied { read } for pid=26563 comm="syz.0.8198" path="socket:[138197]" dev="sockfs" ino=138197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 551.009027][T26567] rust_binder: 130: no such ref 3 [ 551.027689][T26569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8200'. [ 551.048102][ T10] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 551.134434][T26573] rust_binder: 135: no such ref 2 [ 551.198088][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 551.204616][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 551.214560][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 551.224274][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 551.234828][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.244551][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 551.252587][ T10] usb 7-1: SerialNumber: syz [ 551.258288][T26560] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 551.386131][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 551.392655][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 551.678634][ T10] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 551.691242][ T10] usb 7-1: USB disconnect, device number 60 [ 551.762773][T26588] binder: Bad value for 'stats' [ 551.921649][ T31] rust_binder: 26571: removing orphan mapping 0:1048 [ 551.935312][ T31] rust_binder: 26594: removing orphan mapping 0:1048 [ 551.948949][ T31] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 551.956987][ T31] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.050554][T26605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 552.256585][ T36] audit: type=1400 audit(2000000096.080:2795): avc: denied { append } for pid=26622 comm="syz.6.8216" name="pfkey" dev="proc" ino=4026532741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 552.298941][ T36] audit: type=1400 audit(2000000096.130:2796): avc: denied { connect } for pid=26630 comm="syz.6.8219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 552.365651][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8220'. [ 552.375155][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8220'. [ 552.385964][T26639] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 552.386543][T26635] rust_binder: 26633 RLIMIT_NICE not set [ 552.393315][T26639] rust_binder: 35: no such ref 3 [ 552.454168][ T366] rust_binder: 26632: removing orphan mapping 0:4096 [ 552.462724][T26646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 552.463136][T26645] rust_binder: pid 26645 performed invalid decrement on ref [ 552.477197][T26646] rust_binder: pid 26646 performed invalid decrement on ref [ 552.505086][ T45] rust_binder: 26642: removing orphan mapping 0:4120 [ 552.566822][T26657] rust_binder: 26650 RLIMIT_NICE not set [ 552.576726][ T45] rust_binder: 26648: removing orphan mapping 0:4240 [ 552.693780][T26669] binder: Unknown parameter 'context' [ 552.720495][T26671] rust_binder: Failed copying remainder into alloc: EFAULT [ 552.720521][T26671] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 552.727857][T26671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 552.736188][T26671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:55 [ 553.028100][ T366] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 553.189159][ T366] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.199469][ T366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.209073][ T366] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.218162][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.226161][ T366] usb 3-1: SerialNumber: syz [ 553.398081][ T3667] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 553.398090][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 553.427080][T26681] rust_binder: Failed copying remainder into alloc: EFAULT [ 553.427106][T26681] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 553.434570][T26681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 553.443130][T26681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:255 [ 553.454746][ T366] usb 3-1: 0:2 : does not exist [ 553.475952][ T366] usb 3-1: USB disconnect, device number 14 [ 553.495367][T24012] udevd[24012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 553.646530][T26691] netlink: 'syz.5.8238': attribute type 12 has an invalid length. [ 553.654910][T26691] /dev/rnullb0: Can't open blockdev [ 553.679486][ T31] rust_binder: 26676: removing orphan mapping 0:1048 [ 553.686770][T26693] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 553.693947][T26693] rust_binder: 267: no such ref 2 [ 553.699093][T26693] rust_binder: Read failure Err(EAGAIN) in pid:267 [ 553.700823][T26693] /dev/rnullb0: Can't open blockdev [ 553.724234][T26701] overlayfs: missing 'workdir' [ 553.818929][T26710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 553.824810][ T31] rust_binder: 26706: removing orphan mapping 0:1024 [ 553.872923][ T36] audit: type=1400 audit(2000000097.700:2797): avc: denied { listen } for pid=26721 comm="syz.6.8250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.893737][ T36] audit: type=1400 audit(2000000097.700:2798): avc: denied { map } for pid=26721 comm="syz.6.8250" path="socket:[140392]" dev="sockfs" ino=140392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 553.919004][ T36] audit: type=1400 audit(2000000097.730:2799): avc: denied { write } for pid=26723 comm="syz.6.8251" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 553.941210][ T36] audit: type=1400 audit(2000000097.730:2800): avc: denied { remove_name } for pid=26723 comm="syz.6.8251" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 553.964210][ T36] audit: type=1400 audit(2000000097.730:2801): avc: denied { unlink } for pid=26723 comm="syz.6.8251" name="binder0" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 554.063207][T26738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 554.078952][T26743] devtmpfs: Cannot disable swap on remount [ 554.079281][T26742] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8256'. [ 554.086224][T26743] Invalid ELF header len 16 [ 554.091356][ T36] audit: type=1400 audit(2000000097.910:2802): avc: denied { module_load } for pid=26741 comm="syz.2.8257" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 554.140394][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 554.308108][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 554.314866][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 554.323758][ T31] usb 6-1: config 143 has an invalid interface number: 213 but max is 1 [ 554.332415][ T31] usb 6-1: config 143 has an invalid interface number: 2 but max is 1 [ 554.340903][ T31] usb 6-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 554.351547][ T31] usb 6-1: config 143 has no interface number 0 [ 554.357802][ T31] usb 6-1: config 143 has no interface number 1 [ 554.364229][ T31] usb 6-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 554.382029][ T31] usb 6-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 554.399725][ T31] usb 6-1: config 143 interface 213 has no altsetting 0 [ 554.408940][ T31] usb 6-1: config 143 interface 2 has no altsetting 0 [ 554.429431][ T31] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 554.438547][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.446564][ T31] usb 6-1: Product: syz [ 554.458060][ T31] usb 6-1: Manufacturer: syz [ 554.462700][ T31] usb 6-1: SerialNumber: syz [ 554.674897][T26717] /dev/rnullb0: Can't open blockdev [ 554.683523][ T31] asix 6-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 554.693903][ T31] asix 6-1:143.213: probe with driver asix failed with error -71 [ 554.702539][ T31] asix 6-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 554.712758][ T31] asix 6-1:143.2: probe with driver asix failed with error -71 [ 554.721953][ T31] usb 6-1: USB disconnect, device number 19 [ 555.128918][T26761] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8262'. [ 555.144056][ T36] audit: type=1400 audit(2000000098.970:2803): avc: denied { unmount } for pid=25965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 555.160625][T26765] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 555.215615][T26772] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 555.222183][T26772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 555.230527][T26774] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 555.236741][T26772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:169 [ 555.240167][T26774] rust_binder: Read failure Err(EFAULT) in pid:279 [ 555.686776][T26788] rust_binder: Write failure EFAULT in pid:274 [ 556.043487][T26808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 556.193907][T26815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 556.200911][T26815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 556.207693][T26816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 556.235396][ T31] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 556.249943][ T31] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.405337][ T36] audit: type=1400 audit(2000000100.230:2804): avc: denied { mounton } for pid=26825 comm="syz.2.8284" path="/59/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 556.406128][T26826] overlay: filesystem on ./file0 not supported as upperdir [ 556.487780][ T36] audit: type=1400 audit(2000000100.310:2805): avc: denied { listen } for pid=26825 comm="syz.2.8284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 556.487896][T26827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 556.509645][T26827] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 556.516084][T26827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 556.524208][T26827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 556.578147][ T366] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 556.739281][ T366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.750380][ T366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.760212][ T366] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 556.769422][ T366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.778282][ T366] usb 6-1: config 0 descriptor?? [ 557.141056][ T12] veth0_vlan: left promiscuous mode [ 557.185684][ T366] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0 [ 557.195866][ T366] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0 [ 557.202784][ T366] pyra 0003:1E7D:2CF6.0033: unbalanced collection at end of report description [ 557.211977][ T366] pyra 0003:1E7D:2CF6.0033: parse failed [ 557.217637][ T366] pyra 0003:1E7D:2CF6.0033: probe with driver pyra failed with error -22 [ 557.249618][ T36] audit: type=1400 audit(2000000101.080:2806): avc: denied { unmount } for pid=25965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 557.281398][T26829] overlayfs: missing 'lowerdir' [ 557.359015][T26844] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 557.368893][T26844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 557.393328][ T366] usb 6-1: USB disconnect, device number 20 [ 557.491290][T26848] binfmt_misc: register: failed to install interpreter file ./cgroup [ 558.260417][T26868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8295'. [ 558.261797][T26869] overlayfs: missing 'workdir' [ 558.271039][T26868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8295'. [ 558.285961][T26874] overlay: ./file1 is not a directory [ 558.300217][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8297'. [ 558.472886][T26904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.473957][T26904] rust_binder: pid 26904 performed invalid decrement on ref [ 558.586779][T26914] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8310'. [ 558.622299][T26916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 558.622645][T26916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.647884][T26902] netlink: 'syz.6.8305': attribute type 11 has an invalid length. [ 558.882939][T26944] fuse: Unknown parameter 'fd0x0000000000000005' [ 558.980611][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8326'. [ 558.989925][T26957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62824 sclass=netlink_route_socket pid=26957 comm=syz.0.8326 [ 559.109031][T26974] fuse: Bad value for 'group_id' [ 559.118124][T26974] fuse: Bad value for 'group_id' [ 559.147289][T26972] rust_binder: 294: no such ref 1 [ 559.152760][T26973] 9pnet_fd: Insufficient options for proto=fd [ 559.185817][T26972] rust_binder: 294: no such ref 2 [ 559.190988][T26979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 559.201025][T26972] rust_binder: inc_ref_done called when no active inc_refs [ 559.217623][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 559.217641][ T36] audit: type=1326 audit(2000000103.040:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.242845][T26986] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 559.260622][T26984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57423 sclass=netlink_route_socket pid=26984 comm=syz.6.8332 [ 559.269095][T26986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 559.284073][ T36] audit: type=1326 audit(2000000103.040:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.292700][T26986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:239 [ 559.293557][ T36] audit: type=1326 audit(2000000103.040:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.367477][ T36] audit: type=1326 audit(2000000103.040:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.391082][ T36] audit: type=1326 audit(2000000103.040:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.414843][ T36] audit: type=1326 audit(2000000103.040:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.438649][ T36] audit: type=1326 audit(2000000103.040:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.472348][ T36] audit: type=1326 audit(2000000103.040:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.500805][ T36] audit: type=1326 audit(2000000103.040:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.525590][ T36] audit: type=1326 audit(2000000103.040:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26981 comm="syz.5.8333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ecd8e9a9 code=0x7ffc0000 [ 559.550019][T26993] 9pnet_fd: Insufficient options for proto=fd [ 559.651543][T26996] netlink: 'syz.6.8335': attribute type 29 has an invalid length. [ 560.227073][T27022] /dev/rnullb0: Can't open blockdev [ 560.379904][T27037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27037 comm=syz.2.8349 [ 560.758115][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 560.909240][ T9] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 560.917394][ T9] usb 3-1: config 0 has no interface number 0 [ 560.925393][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 560.934530][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.943092][ T9] usb 3-1: Product: syz [ 560.947257][ T9] usb 3-1: Manufacturer: syz [ 560.951879][ T9] usb 3-1: SerialNumber: syz [ 560.957170][ T9] usb 3-1: config 0 descriptor?? [ 561.031740][T27052] netlink: 324 bytes leftover after parsing attributes in process `syz.6.8354'. [ 561.071326][T27058] random: crng reseeded on system resumption [ 561.675443][ T9] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 561.682363][ T9] usb 3-1: No valid video chain found. [ 561.689443][ T9] usb 3-1: USB disconnect, device number 15 [ 562.135235][T27123] binfmt_misc: register: failed to install interpreter file ./file0 [ 562.154482][T27128] devpts: called with bogus options [ 562.161363][T27128] devpts: called with bogus options [ 562.180663][T27133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=21823 sclass=netlink_tcpdiag_socket pid=27133 comm=syz.2.8373 [ 562.193753][T27133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65059 sclass=netlink_tcpdiag_socket pid=27133 comm=syz.2.8373 [ 562.291028][T27138] /dev/rnullb0: Can't open blockdev [ 562.548090][ T66] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 562.678087][ T66] usb 7-1: device descriptor read/64, error -71 [ 562.918104][ T66] usb 7-1: device descriptor read/64, error -71 [ 563.168099][ T66] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 563.298104][ T66] usb 7-1: device descriptor read/64, error -71 [ 563.548061][ T66] usb 7-1: device descriptor read/64, error -71 [ 563.658203][ T66] usb usb7-port1: attempt power cycle [ 563.811555][T27194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 563.811588][T27194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:323 [ 563.821085][T27194] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 563.830257][T27194] rust_binder: Read failure Err(EFAULT) in pid:323 [ 563.998072][ T66] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 564.029095][ T66] usb 7-1: device descriptor read/8, error -71 [ 564.159127][ T66] usb 7-1: device descriptor read/8, error -71 [ 564.398073][ T66] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 564.419100][ T66] usb 7-1: device descriptor read/8, error -71 [ 564.549221][ T66] usb 7-1: device descriptor read/8, error -71 [ 564.656579][T27202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 564.656979][T27202] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 564.663878][T27202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 564.671954][ T66] usb usb7-port1: unable to enumerate USB device [ 564.671953][T27202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:326 [ 564.990195][T27209] veth0_vlan: entered allmulticast mode [ 565.019199][T27213] binder: Unknown parameter '' [ 565.344507][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 565.344527][ T36] audit: type=1107 audit(2000000109.170:2902): pid=27252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='k8SZەzRPo!' [ 565.399153][T27261] overlayfs: cannot append lower layer [ 565.470416][ T36] audit: type=1400 audit(2000000109.300:2903): avc: denied { read } for pid=27280 comm="syz.2.8409" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 565.490858][T27281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 565.491459][T27281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8409'. [ 565.508398][T27281] rust_binder: Failed copying remainder into alloc: EFAULT [ 565.508424][T27281] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 565.516098][T27281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 565.524501][T27281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:331 [ 565.534580][ T36] audit: type=1400 audit(2000000109.360:2904): avc: denied { mounton } for pid=27287 comm="syz.6.8410" path="/proc/226/task" dev="proc" ino=143971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 565.645124][ T36] audit: type=1400 audit(2000000109.470:2905): avc: denied { name_bind } for pid=27302 comm="syz.6.8413" src=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 566.088103][ T66] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 566.238080][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 566.247936][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.259127][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.269090][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 566.278341][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.287350][ T66] usb 3-1: config 0 descriptor?? [ 566.298610][ T66] hub 3-1:0.0: USB hub found [ 566.504537][ T66] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 566.574142][T27374] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8432'. [ 566.714923][ T66] hid-generic 0003:046D:C31C.0034: item fetching failed at offset 0/1 [ 566.723430][ T66] hid-generic 0003:046D:C31C.0034: probe with driver hid-generic failed with error -22 [ 568.697893][T27401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8440'. [ 568.722292][ T36] audit: type=1400 audit(2000000112.550:2906): avc: denied { connect } for pid=27402 comm="syz.5.8441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 568.868171][ T366] usb 3-1: USB disconnect, device number 16 [ 568.872456][T27417] netlink: 5820 bytes leftover after parsing attributes in process `syz.0.8446'. [ 568.930199][T27430] binder: Bad value for 'stats' [ 568.936146][T27431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 568.983329][T27442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8452'. [ 569.023574][T27452] /dev/rnullb0: Can't open blockdev [ 569.070292][ T36] audit: type=1400 audit(2000000112.900:2907): avc: denied { write } for pid=27456 comm="syz.5.8457" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 569.075843][T27450] Invalid logical block size (2) [ 569.111144][ T36] audit: type=1400 audit(2000000112.940:2908): avc: denied { read } for pid=27456 comm="syz.5.8457" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 569.134740][ T36] audit: type=1400 audit(2000000112.940:2909): avc: denied { open } for pid=27456 comm="syz.5.8457" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 569.191857][ T366] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 569.213362][T27462] /dev/rnullb0: Can't open blockdev [ 569.301066][ T305] bridge_slave_1: left allmulticast mode [ 569.306766][ T305] bridge_slave_1: left promiscuous mode [ 569.312530][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.320299][ T305] bridge_slave_0: left allmulticast mode [ 569.326063][ T305] bridge_slave_0: left promiscuous mode [ 569.331890][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.359134][ T366] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.369554][ T366] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.386777][ T366] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.396033][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.405452][ T366] usb 3-1: SerialNumber: syz [ 569.462076][ T305] veth1_macvtap: left promiscuous mode [ 569.467715][ T305] veth0_vlan: left promiscuous mode [ 569.633611][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8462'. [ 569.643377][T27469] fuse: Unknown parameter '' [ 569.670594][ T366] usb 3-1: 0:2 : does not exist [ 569.675805][ T366] usb 3-1: unit 5: unexpected type 0x0d [ 569.685329][ T366] usb 3-1: USB disconnect, device number 17 [ 569.701639][T24012] udevd[24012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 569.850712][T27479] fuse: Bad value for 'fd' [ 570.005674][T27490] rust_binder: Read failure Err(EAGAIN) in pid:429 [ 570.039474][T27492] /dev/rnullb0: Can't open blockdev [ 570.093591][T27494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8469'. [ 570.601586][T27501] netlink: 277 bytes leftover after parsing attributes in process `syz.2.8471'. [ 570.608445][T27502] overlay: Unknown parameter 'obj_type' [ 570.618840][T27501] netlink: 'syz.2.8471': attribute type 3 has an invalid length. [ 570.638063][T27501] netlink: 944 bytes leftover after parsing attributes in process `syz.2.8471'. [ 570.698617][T27508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 570.700791][T27507] 9p: Unknown access argument 18446744073709551615 version=9p2Z0: -22 [ 570.823978][T27505] overlayfs: conflicting lowerdir path [ 571.292818][T27516] netlink: 'syz.6.8476': attribute type 4 has an invalid length. [ 571.337166][T27520] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8478'. [ 571.358065][T27521] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8478'. [ 572.058819][ T9] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 572.072816][ T9] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 572.268701][T27549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27549 comm=syz.2.8485 [ 572.284578][ T36] audit: type=1400 audit(2000000116.110:2910): avc: denied { accept } for pid=27545 comm="syz.2.8485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 572.989058][T27553] SELinux: security_context_str_to_sid () failed with errno=-22 [ 574.158106][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 574.309148][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.319358][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.332269][ T9] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 574.341347][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.350024][ T9] usb 3-1: config 0 descriptor?? [ 574.581759][ T9] usb 3-1: USB disconnect, device number 18 [ 575.019589][T27589] binder: Unknown parameter 'fscontext?}' [ 576.226010][T27620] /dev/rnullb0: Can't open blockdev [ 576.250078][T27622] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8509'. [ 576.261007][T27622] /dev/rnullb0: Can't open blockdev [ 576.285803][T27624] fuse: Bad value for 'rootmode' [ 576.313334][T27626] binder: Bad value for 'stats' [ 576.448113][ T1030] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 576.578138][ T1030] usb 3-1: device descriptor read/64, error -71 [ 576.818157][ T1030] usb 3-1: device descriptor read/64, error -71 [ 577.058151][ T1030] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 577.188122][ T1030] usb 3-1: device descriptor read/64, error -71 [ 577.428134][ T1030] usb 3-1: device descriptor read/64, error -71 [ 577.538386][ T1030] usb usb3-port1: attempt power cycle [ 577.575296][T27639] 9pnet_fd: Insufficient options for proto=fd [ 577.649448][T27647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8519'. [ 577.898105][ T1030] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 577.919135][ T1030] usb 3-1: device descriptor read/8, error -71 [ 578.049175][ T1030] usb 3-1: device descriptor read/8, error -71 [ 578.288104][ T1030] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 578.309240][ T1030] usb 3-1: device descriptor read/8, error -71 [ 578.439070][ T1030] usb 3-1: device descriptor read/8, error -71 [ 578.548271][ T1030] usb usb3-port1: unable to enumerate USB device [ 579.050862][T27672] netlink: 'syz.0.8526': attribute type 3 has an invalid length. [ 580.408418][T27679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 580.408582][T27679] rust_binder: Write failure EINVAL in pid:388 [ 580.418473][T27683] rust_binder: Write failure EINVAL in pid:388 [ 580.478791][T27692] netlink: 'syz.0.8530': attribute type 4 has an invalid length. [ 580.517224][T27691] /dev/rnullb0: Can't open blockdev [ 580.798094][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 580.949353][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.960346][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.970126][ T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 580.979193][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.987878][ T45] usb 3-1: config 0 descriptor?? [ 581.395375][ T45] uclogic 0003:5543:0042.0036: unknown main item tag 0x0 [ 581.403313][ T45] uclogic 0003:5543:0042.0036: No inputs registered, leaving [ 581.411450][ T45] uclogic 0003:5543:0042.0036: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 581.638859][ T512] usb 3-1: USB disconnect, device number 23 [ 582.068716][T27706] 9pnet_fd: Insufficient options for proto=fd [ 582.081710][T27709] input: syz0 as /devices/virtual/input/input73 [ 582.208581][T27725] netlink: 'syz.0.8540': attribute type 29 has an invalid length. [ 585.630175][ T36] audit: type=1400 audit(2000000129.460:2911): avc: denied { accept } for pid=27764 comm="syz.0.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 585.646537][T27768] 9pnet_fd: Insufficient options for proto=fd [ 585.650667][ T36] audit: type=1400 audit(2000000129.460:2912): avc: denied { watch_reads } for pid=27759 comm="syz.6.8551" path="/121/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 585.827190][T27788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8558'. [ 585.889981][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8559'. [ 586.238042][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 586.389098][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.400558][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 586.409642][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.417643][ T9] usb 3-1: Product: syz [ 586.421853][ T9] usb 3-1: Manufacturer: syz [ 586.426474][ T9] usb 3-1: SerialNumber: syz [ 586.431985][ T9] usb 3-1: config 0 descriptor?? [ 586.438129][ T9] asix 3-1:0.0: probe with driver asix failed with error -22 [ 587.673457][T27807] fuse: Bad value for 'fd' [ 588.625317][ T9] usb 3-1: USB disconnect, device number 24 [ 589.606725][T27826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23106 sclass=netlink_route_socket pid=27826 comm=syz.0.8568 [ 591.763464][T27848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 591.806240][T27848] rust_binder: Failed copying remainder into alloc: EFAULT [ 591.815648][T27848] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 591.835958][T27848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 591.856130][T27848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:418 [ 593.999442][T27867] 9pnet_fd: Insufficient options for proto=fd [ 594.025065][T27868] 9pnet_fd: Insufficient options for proto=fd SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=7 req=8461 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 594.178628][ T36] audit: type=1400 audit(2000000138.000:2913): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2696]" dev="pipefs" ino=2696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 594.208755][T27874] netlink: 'syz.0.8585': attribute type 13 has an invalid length. [ 594.341042][ T305] bridge_slave_1: left allmulticast mode [ 594.346746][ T305] bridge_slave_1: left promiscuous mode [ 594.368533][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.398251][ T305] bridge_slave_0: left allmulticast mode [ 594.403942][ T305] bridge_slave_0: left promiscuous mode [ 594.409737][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.550625][ T305] veth1_macvtap: left promiscuous mode [ 594.556153][ T305] veth0_vlan: left promiscuous mode [ 594.840383][ T305] bridge_slave_1: left allmulticast mode [ 594.846099][ T305] bridge_slave_1: left promiscuous mode [ 594.851857][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.859392][ T305] bridge_slave_0: left allmulticast mode [ 594.865029][ T305] bridge_slave_0: left promiscuous mode [ 594.870791][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.878583][ T305] bridge_slave_1: left allmulticast mode [ 594.884238][ T305] bridge_slave_1: left promiscuous mode [ 594.889973][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.897450][ T305] bridge_slave_0: left allmulticast mode [ 594.903147][ T305] bridge_slave_0: left promiscuous mode [ 594.908802][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.052101][ T305] veth1_macvtap: left promiscuous mode [ 595.057642][ T305] veth0_vlan: left promiscuous mode