last executing test programs: 2m12.480932751s ago: executing program 0 (id=102): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "d41a468b571a4a4c02968e19d9e512afa024f6c0da49bc887c2301f3da403b67290f08aec91dbc4309bc528d412e1f066d29f2d2f042a526338fe81eb25fe42f4d"}, 0x4c) readv(r2, &(0x7f0000000140), 0x0) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000180)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) pipe(&(0x7f0000000080)) (async) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "d41a468b571a4a4c02968e19d9e512afa024f6c0da49bc887c2301f3da403b67290f08aec91dbc4309bc528d412e1f066d29f2d2f042a526338fe81eb25fe42f4d"}, 0x4c) (async) readv(r2, &(0x7f0000000140), 0x0) (async) 2m12.456282712s ago: executing program 0 (id=103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x2103) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xd4, 0x0, &(0x7f0000000580)=[@decrefs, @register_looper, @increfs_done={0x40106308, 0x1}, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0xa, 0x1, 0xe}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0xa, 0x1, 0x1e}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}, @increfs={0x40046304, 0x2}, @clear_death={0x400c630f, 0x2}, @decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x0, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/81, 0x51, 0x0, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/216, 0xd8, 0x2}}, &(0x7f0000000380)={0x0, 0x20, 0x48}}, 0x400}], 0x1e, 0x0, &(0x7f00000003c0)="7a11ffbdd76f9624182f7ebac52da598ffe319f28181ae451e6d7cc06cee"}) 2m11.565119529s ago: executing program 0 (id=111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c01, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m11.564433769s ago: executing program 0 (id=112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8fe69000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000137000/0x400000)=nil) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 2m11.52319835s ago: executing program 0 (id=113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 2m11.465717651s ago: executing program 0 (id=114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x111) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40900, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x0, 0x1e1) preadv(r4, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000680)=""/156, 0x9c}], 0x2, 0x1, 0x801) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x4d, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xfffffffffffffc73, @lang_id={0x0, 0x3, 0x1404}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x9, 0xa, {0xa, 0x24, "dbd298b878a50386"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x50, 0x6, 0x3b, "0c48e8ccfd19cfc91b2ae4cbd6c355eb040e82f8d10bd93645a417214dde3e84dfee5646a343ab4657a15a44e3a7d4bbd58abe769fa6b7dd5da0f2"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x0, 0x3c, {0x3a, "8283b863fa68bd1c2b83eb4a6ee93ce217c68b9da6430092c10e4ec2c9af28cbd747d04634610b1ad1ea49caac23db4663e1068e5743a20f79e4"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x7b}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x8}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m11.394812632s ago: executing program 32 (id=114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x111) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40900, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x0, 0x1e1) preadv(r4, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000680)=""/156, 0x9c}], 0x2, 0x1, 0x801) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io(r5, &(0x7f0000000300)={0x4d, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xfffffffffffffc73, @lang_id={0x0, 0x3, 0x1404}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x9, 0xa, {0xa, 0x24, "dbd298b878a50386"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x50, 0x6, 0x3b, "0c48e8ccfd19cfc91b2ae4cbd6c355eb040e82f8d10bd93645a417214dde3e84dfee5646a343ab4657a15a44e3a7d4bbd58abe769fa6b7dd5da0f2"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x0, 0x3c, {0x3a, "8283b863fa68bd1c2b83eb4a6ee93ce217c68b9da6430092c10e4ec2c9af28cbd747d04634610b1ad1ea49caac23db4663e1068e5743a20f79e4"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x7b}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x8}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m9.525123649s ago: executing program 2 (id=148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) ptrace(0x4208, r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@local, @dev={0xfe, 0x80, '\x00', 0x22}, @private0, 0x6, 0xa, 0x95, 0x0, 0x6, 0x88, r4}) 2m9.516080759s ago: executing program 2 (id=149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4}, 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 2m9.340982692s ago: executing program 2 (id=151): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async, rerun: 32) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = gettid() (rerun: 32) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xe23}, 0x6e) (async) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x10001) (async) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffb, 0x0, 0xb3, 0xfffffffd}) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x810) (async) ioctl$BLKRRPART(r4, 0x125f, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async, rerun: 32) close_range(r0, r1, 0x2) (rerun: 32) 2m9.339107252s ago: executing program 2 (id=152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000340)) shutdown(r4, 0x0) epoll_wait(r3, &(0x7f0000000200)=[{}], 0x1, 0xc4) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f00000000c0)={0x20002000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140)=0x4, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000099000040"]) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.181462075s ago: executing program 2 (id=153): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mincore(&(0x7f000011c000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/68) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000300)=0x80, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000040)={@mcast2}, 0x14) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 2m9.132141626s ago: executing program 2 (id=154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.084485397s ago: executing program 33 (id=154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.603122347s ago: executing program 5 (id=155): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x8) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000af4000004000000140001"], 0x44}}, 0x40800) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 2m8.524814318s ago: executing program 5 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee01) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0x6, 0x4) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001e0021ffff000000000000000a00000005000000000000000800078004003f80"], 0x24}}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="00006005ffffffffffffaaaaaaaaaabb81000000080045990016006840ca9379c80e093390780a010101e0000001a93aa63c17185506c180b5656ba32e4e41470d8c00824d3755e156e9b0f9fb02594a9a6c777f46afcbe849fc9409a7cc63c1cc4008c50db64b178ab0491c6aa72688431b2f12e029aee0447c5ae64dcccbb94274031343da43eff3dc249b2dd37c75ce4659bd97c85ab87628af8a0e360d66f736f905744460448500"/182], 0x2c) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@ipv4, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000140)=@nullb, r6, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000004a00)={0x2020}, 0x207b) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x60000600) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x13, @empty, @dev, 0x80, 0x0, 0x0, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x13, @empty, @dev, 0x80, 0x0, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf4e) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000280)="913efcb4d678", 0x6}], 0x1) 2m8.384435491s ago: executing program 5 (id=167): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8fe69000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 2m8.294308552s ago: executing program 5 (id=171): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x729840, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000280)=0x9, 0x401) (async) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) statx(r6, 0x0, 0x1000, 0x20, 0x0) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) (async) pwrite64(r0, &(0x7f0000000400)="b110ea49657dbc207b38848334de520989e2e50c02dda8cfcf62950455077e3d05e1b85c392699ff7b8357942cc09b950f6ef1c2074cba5da05b56ef3c5f1093334efa3961d8adb47c19065d9934c1969fa9237a6219ddac8a404a5a053c70a13b5a67d90f3fa9f37ad929cde7743ddac87b5b7f5383eedafb345acfd98ec3bff240f75205947779e369c084b884425f9d17ad4861544cbd8b02d9e0e4546cd80abcf5f4ea89910e9db3de07b9d9280c2329b487ec2bdcd0338bd60dcc370cd6cc457f3ab8a7e54e9db5f059e949c66c2a23e068e89f532cd769f138400a197f92f60710", 0xe4, 0x7fff) (async) symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') (async) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000000), 0x4) listen(r7, 0x1ff) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r9, r9, 0x0) setfsuid(0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf250d0000002c00078008000200560700000c00030060b10a7a000000000c00030004000000000000000800010003000000380002800400040008000200fcffffff080001004000000008000200d214ffff00000380000001000104000000000100010000008000020009000000080001000800000008000200070000004c00038008000200f800000008000200ff7f0000080003002e50e5320800030009000000080001000700000008000200050000000800010000000000080001000008000008000300090000001400028004000400040004000800010002000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800) 2m8.221539054s ago: executing program 5 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0xff, 0x0, @remote, @empty, 0x8000, 0x7800, 0x8, 0x3}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="4d01000000000000ff8400e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @multicast}, 0x14) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000400)=0x1, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYRESOCT], 0xf4}, 0x1, 0x0, 0x0, 0x40498d4}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) pread64(r6, &(0x7f0000000780)=""/131, 0x83, 0x302a4edd) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x3, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0}}) r10 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r10, &(0x7f00000001c0)=""/171, 0xab) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r11 = socket(0x10, 0x3, 0x0) close(r8) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c0000001600010a10000040000000000207"], 0x1c}}, 0x0) 2m8.148892496s ago: executing program 34 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0xff, 0x0, @remote, @empty, 0x8000, 0x7800, 0x8, 0x3}}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="4d01000000000000ff8400e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @multicast}, 0x14) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000400)=0x1, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESOCT=r2, @ANYRESOCT], 0xf4}, 0x1, 0x0, 0x0, 0x40498d4}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) pread64(r6, &(0x7f0000000780)=""/131, 0x83, 0x302a4edd) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540), 0x3, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0}}) r10 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r10, &(0x7f00000001c0)=""/171, 0xab) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r11 = socket(0x10, 0x3, 0x0) close(r8) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c0000001600010a10000040000000000207"], 0x1c}}, 0x0) 24.306990475s ago: executing program 1 (id=1722): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0097305e07af0300000000000000c7"], 0x1c}], 0x1, 0x0, 0x0, 0x8050}, 0x8850) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') 24.290471636s ago: executing program 1 (id=1723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) futex(&(0x7f0000000000)=0x2, 0x8, 0x1, 0x0, 0x0, 0x2) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 24.207220627s ago: executing program 1 (id=1725): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8010, r1, 0xefff8000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0xf24d, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_NMI(r0, 0xae9a) recvmmsg(r6, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x40000012, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, 0x0, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23.341028064s ago: executing program 1 (id=1745): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0x9, 0x4}}, 0xa) socket(0x840000000002, 0x3, 0xff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x485, 0x0, 0xa}]}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket(0x1e, 0x2, 0x9) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000001c0)) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000003000000000005200", 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000000000000000000000000ac1e00010000000000000000119e9c66c88d4a6a4e2300040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2208c1, 0x100) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) unlink(&(0x7f0000000080)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) 23.331798664s ago: executing program 1 (id=1746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x98, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x1}, @fda={0x66646185, 0x7, 0x0, 0x13}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/241, 0xf1, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0x3c}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 23.295777675s ago: executing program 1 (id=1747): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 23.252712876s ago: executing program 35 (id=1747): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 15.349475507s ago: executing program 7 (id=1892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 15.268817638s ago: executing program 7 (id=1893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) epoll_create1(0x0) setuid(0xee00) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) r2 = syz_io_uring_setup(0x1e10, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 15.222463139s ago: executing program 7 (id=1894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000021000100"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0xfffc, 0x8, 0x3, 0x0, 0x2}}) recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 15.1650944s ago: executing program 7 (id=1895): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x61e803, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xee00, &(0x7f0000000040)) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x0, r0, 'id0\x00'}) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) mount_setattr(r1, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000180)={0x180, 0x2, 0x1c0000, {r3}}, 0x20) 15.16388945s ago: executing program 7 (id=1896): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10004, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x77, 0x28, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 15.119795321s ago: executing program 7 (id=1900): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2f2c40, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ashmem\x00') 15.062020862s ago: executing program 36 (id=1900): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x2f2c40, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/ashmem\x00') 4.883727516s ago: executing program 4 (id=2067): r0 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xf2d8, 0x13090, 0x0, 0x382}, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x4, 0x3}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x2, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10001, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f000041e000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.415767596s ago: executing program 6 (id=2072): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x28, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1000000}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 4.399100186s ago: executing program 6 (id=2073): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unshare(0x64000400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000400)="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", 0x200}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000100001002bbd7000fbdbdf2504004f80040071801000bc800400c3806eb8c3c030170359"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.960047954s ago: executing program 4 (id=2081): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5204) setuid(0xee01) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a47ef470900be0083"], 0x0}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5204) (async) setuid(0xee01) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a47ef470900be0083"], 0x0}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) (async) 3.516895192s ago: executing program 6 (id=2083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x240000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000100)=""/72, &(0x7f00000002c0)=""/152, &(0x7f0000000380)=""/173, 0x4}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109025c0002018010060904000001020d000005240600010524002aab0d240f0105000000ff0f0800a906241a0400020905aac4561fe386ab810310007981010904010000020d00000904010102020d0000090582020002070023090503020002060909"], 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r4) close_range(r0, 0xffffffffffffffff, 0x0) 2.957128363s ago: executing program 6 (id=2085): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 64) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 2.956820174s ago: executing program 6 (id=2086): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x60088, &(0x7f0000000000)=ANY=[@ANYBLOB="c3e8d9163d30303030303030303030303030050000000000000033312c00"]) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async, rerun: 32) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:tmpfs_t:s0\x00', 0x1d, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x40008c1, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) (async) recvmmsg(r1, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002163, 0x0) lseek(r0, 0x40, 0x0) 2.947171574s ago: executing program 6 (id=2087): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/92, 0x5c}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/165, 0xa5}, {&(0x7f0000000300)=""/239, 0xef}], 0x6, 0x3f, 0xa) syz_usb_connect(0x0, 0x6b6, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x3f, 0xfd, 0x4c, 0x20, 0x12d1, 0x14f1, 0x3c37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a4, 0x3, 0x3, 0x9, 0xb0, 0x5, [{{0x9, 0x4, 0xff, 0x1, 0x3, 0x6d, 0x30, 0xb6, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x81, 0x74, 0x7, [@generic={0xf3, 0x7, "12867015d9be3cfa4581b4a6637b8021c7b65bf7915a2fe0ea497b18324442471113dfb55cc30e1d32f7473367d8b1bc73b8e70ed780e359fe547690b4a38b69dd73a3842600140ee09dd7bbea3ac00b7de23b8b828f3405b753006fa5c1e5e99bf3019c592c3a8be68fcaeb60089db943a107a43b1db449f9e6d63de6ab89cf73b8ae605aa0f4345f53ee888940cff7000ebff83640b848fd7e1a784e6f7e17d6bdd3e9a01e757a7e062858fe4dcea3be984a3b81e4379a05ddd588510aee4f8b008132a519f162f6bd97c0c3996a100b8fb0b8cd1220ec89fcc09db4239a60eb1037e582c22cda3eeca11803dcfd7175"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1b, 0x7}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xd, 0x10, 0xef, [@generic={0x4, 0xf, "c861"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x618, 0x6, 0x6, 0x7f, [@generic={0x45, 0x5, "d2be978823a8086d389419c121ccfd3a0a7c38749ab22af31539542ba61c39b21dfd28f022913124a9e13c7ef30e1d7e07a4bf5b05f56b1f1da82fcff1baf398e43e1c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0x35, 0x0, 0x2, 0x1, 0xc8, 0x3, 0x9, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x4, 0xfc, 'UJ'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb, 0x3, 0x81, 0x9, "", '9'}, @as_header={0x7, 0x24, 0x1, 0xf, 0x81, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe2, 0x4, 0x80, 0x6, "a354"}]}, @hid_hid={0x9, 0x21, 0x5e, 0xd, 0x1, {0x22, 0x7ff}}], [{{0x9, 0x5, 0x0, 0x8, 0x40, 0x5, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x8, 0xe, [@generic={0xc2, 0xa, "dec5c8dd7b6be4b45e1fba7e90acb30d5c135b759a2d04074423d18d131fd26f25ab53a017f1399f5e91c60d6a94aaba66c082dabe4bb3f588657ba0e36978e27e58c36fd79b5130d7d5fdb8fbd4e8f396f10cb45ad5535ae91707716e1d13f309d947695fa318b489eb48692b9bac7ad3520764cf92333b40fbf296d19972f96e34865dfd2a58d9a33b81e60dd1a343e4db702a78cfc9f679190da05ef76c2d5fcc06f33cfda32623dcbb30e349591db200d4552fbb89942b432cbd6cf22eaf"}]}}]}}, {{0x9, 0x4, 0x3, 0x0, 0x8, 0x2, 0x22, 0xf9, 0xfb, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "41c2"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xa, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x1d9, 0x14}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf, 0x5, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, @generic={0xef, 0x2c, "545c0d4f865361805dc4477411e32e0072adced48407202f82b5520167a0d3a1e9f493807c8eafcae41a360379a84f9ce778d3787d832adad2fa09535c307cbe90300545be0973f21abf5f9c088726712ba68ef5a7e0098085bb1a7eb877cd5582e1e037021f1763011516b86a16351fe6d6ffbbe1222a01e80c3ed8823f4d6f2d5c3d4dc8f624518672a5c217ce4f8e7d5c9a1c7084058e6fac3d026aa69f359e77d64f5e154ce65d246819b97e6315f1ecf13fb9697dddb58abebe7becd7ef0eb99960f299f96aea0f69763f3e1193fbb972f2ccbd472ecebdeba4df0bb6f221ad8b005e882f8efa7e565377"}], [{{0x9, 0x5, 0x3, 0x83cb8b6148c151ee, 0x40, 0x4, 0xfa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8001}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0xf, 0xd, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x21, 0x4}, @generic={0x34, 0x7, "d05ea8223fe41c9a3aff84530a566e47a84beaf141ea2f4684206824926137cf90c4597c3267d9f5141bfceafeac000841d4"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}, @generic={0x48, 0x21, "f50c5d9d59d4406abcba3532838b7d14822aecdbb8dee24bb63c861676b59acd58c294f23fe6e92b75fc86f70174eb3ab01a54776f9ddaa874f47c17a59474bdddf608009372"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8, 0xf7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xa7c674276842b0ec, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xcb, 0xc, 0x40, [@generic={0x7d, 0xe, "551abe75490b5ec93a73698b3234d9b88458d9f8c117a4d92f520063a6fb9cefbaa7b929d641a50c2c7caa86824849a9c6ded1be607644fd2d1b4e16d9635b4cfc804295ae613104b23fbfff26c92e5d0773d2a44e3f6552e4e3245f2292bd40aa3f269ddd60336b98bced046a394ae63b20997f33ab68fc274090"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x9, 0x2, 0x33, [@generic={0xb6, 0x4, "dcb3d0f47b28b16f242317cfd7f07a5a694e5d7f5b457c2ec26fa828980d2590b01284f8ce1d0086997c1d8740d78390ff8c485267b5fbafb03e8bad0a7a0cc566063555e9a3c840836a956a983d36b7504dfa41aed2f15d9e9a93d167111018fab88e298c97d099cf591de4d10ed36e80ee4df63c103962a6ae715f8038ea7d3d0df247596d075e19a751e81db6dafbb044818125a485210ba736eec22dc5f5e6526dd7d12036f659f3b783a63a7e4354804fce"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x2, 0x7f, 0x4, [@generic={0xc2, 0x2a, "3fa9b7e01fd55a97ca6faee93433ce4056ef1b8e86c62512552f0e7d153e82cd836769ad6b8e7d81778028b6101af0550d4e8ccb5de77bce55880d99afbceccb9d171d1c1424cb2425d061eed61d93f87b8ef7c049d1e89193f730307f6509a887c3101adcecd687f20b1ec74633f09ee04fb926ab78b756e40460b225a340583b32426ec833291d9c3234c4e110e6087e381cdcb6fa602a02b167ba8cdc9eadaeceb6864e129deb0720bf41a028d18e46134a90affc78f3af8c7be51229f3dc"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x25, 0x11, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xcc, 0x60e9}]}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x110, 0x2, 0x92, 0x4, 0x20, 0x6}, 0x3e, &(0x7f0000000b80)={0x5, 0xf, 0x3e, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "ad979196724be86decef7ec5285aa368"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xe6, 0x3, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "57e6864678b55713b6af27a9a005e205"}, @ptm_cap={0x3}]}, 0x3, [{0xe3, &(0x7f0000000bc0)=@string={0xe3, 0x3, "b00163ca509458e43ca1950051c567a962260579f35f47faed7255191cb53b8ddd395bd830931478a3205c096209e0ac3b24b0ab87c6674cc5edf03a4dd76fc88d6f332907752432dc4d49526e339d2469ccc31da04fd6d1116a790f606ceb73ab8bedb97269e6bb1c16067cdb4fef1b817d7c1ffad3d2c35a95c664a1d18e3c5d3526b6788bf5e71a700cbc929df55b16b0a559b5d972b4bbfc4a90656e379a8290422952228378a0536c20d6a36a1dadda431b9cbaf72f1a29df4adef1fa2e0db7c8e336094a6b199e5756ff1cf5bda8a3982f2fc58175ec3e8bebdc2b32838a"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x408}}, {0x18, &(0x7f0000000d00)=@string={0x18, 0x3, "36d27b3c898dc4a514159e2a4109809d9661690a6562"}}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000d80)='.log\x00', 0x0, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000dc0)={0x2710, 0x2, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x31) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000e00)=0x31e) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000e40)={{0x10000, 0x8000000, 0xb, 0x1, 0x24, 0x2, 0x34, 0x5, 0x6, 0x7, 0x9, 0x9}, {0xeeee0000, 0x0, 0xd, 0x0, 0x2, 0x2, 0x7, 0xe, 0x8, 0x9, 0x6, 0x4}, {0x1, 0xdddd0000, 0x3, 0xfa, 0x4, 0xc1, 0x7, 0x3, 0xc, 0x0, 0x7, 0x3}, {0xdddd0000, 0xeeee0000, 0xb, 0x72, 0x8, 0x8, 0x0, 0x73, 0x9, 0x1, 0x11}, {0x5000, 0xdddd0000, 0x9, 0xb9, 0xb, 0xa0, 0x7, 0x7, 0x6a, 0x0, 0xb, 0x4}, {0xd000, 0xeeef0000, 0xd, 0x9, 0x2, 0x81, 0xe0, 0xe6, 0x9, 0x6, 0x8, 0x6}, {0x4, 0x2, 0x8, 0x3d, 0xd, 0x2, 0x8, 0x9, 0x7, 0x70, 0xf, 0xf9}, {0xeeee0000, 0x4, 0xc, 0x81, 0x7, 0x3, 0x7f, 0x2, 0x6, 0x8, 0x4}, {0x80a0000, 0x8}, {0x4, 0x1000}, 0x10010, 0x0, 0x4000, 0x2410, 0x0, 0x8000, 0xeeee0000, 0x0, [0x20, 0xff, 0x0, 0xb6]}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000f80)) clock_gettime(0x0, &(0x7f0000001fc0)={0x0, 0x0}) ppoll(&(0x7f0000001f80)=[{r3, 0x2450}, {r2, 0x8210}], 0x2, &(0x7f0000002000)={r5, r6+60000000}, &(0x7f0000002040)={[0x6]}, 0x8) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002480)={0xe4, 0x0, &(0x7f0000002300)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x9}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000020c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/62, 0x3e, 0x0, 0x27}}, &(0x7f0000002140)={0x0, 0x18, 0x30}}}, @enter_looper, @free_buffer={0x40086303, r7}, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002240)={@ptr={0x70742a85, 0x0, &(0x7f0000002180)=""/139, 0x8b, 0x2, 0x2f}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f00000022c0)={0x0, 0x28, 0x40}}, 0x400}, @free_buffer, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x3}], 0x6a, 0x0, &(0x7f0000002400)="d32b0fd4536e3f4831116d1c28168bbb6e8c166211568f78fdbebfe29520609439c3160cb5d7582ce922a1470e895f7dd0dc9f55cbcd3238f0cbb285f55d618288f5d6004d622b0b3e32db4053b708acc44c1398857c2029df5833aeb29adcd484ab5aafd891815f4875"}) syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f00000024c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x4, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x7, 0x7e5, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x3b}, [@mbim={0xc, 0x24, 0x1b, 0x4c1, 0x1, 0xc0, 0x0, 0x58}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xa, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0xfc, 0xfa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0xd, 0x55}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x59, 0x4a, 0x6}}}}}}}]}}, &(0x7f0000002800)={0xa, &(0x7f0000002580)={0xa, 0x6, 0x200, 0x10, 0x3a, 0x69, 0x20, 0xb4}, 0xa3, &(0x7f00000025c0)={0x5, 0xf, 0xa3, 0x5, [@generic={0x79, 0x10, 0xb, "fcea5f17478b32faba17e4fe7ff0fc4efbe741106373ac648ffb0f03a20d7eaf6f871b624d48ac60b33db2f3d410edfce16e9681bb05494bfeb3dbb8c41147c376a97db47f015f5d315cae7b3995162050af822a6cc4deaf5c5b752f13046deaffd6d3927e02b26ee3515c28e7764fcbc76ab1a02502"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x90, 0x9, 0x1, 0xfff8, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6551b2b99ab1efceff50f7ad3855e0df"}]}, 0x5, [{0x64, &(0x7f0000002680)=@string={0x64, 0x3, "139ae660b0dc87279594abc15866b6c46accfa58a1ca7aa5ef6190eeb57df84befdaa18a33b62445e60645775dfdde8c8190073cfb677fc71ab9d2ed83ff560da8d3ca14f91077d12f6019ec028a39b16fadc453b46dbdd72ec6a06aff93dfbe072a"}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000027c0)=@lang_id={0x4, 0x3, 0x42d}}]}) ioctl$KVM_NMI(r3, 0xae9a) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002ac0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002900)={0x150, r8, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6381}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x48840}, 0x40000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000d, 0x10, 0xffffffffffffffff, 0x62787000) r9 = accept4(r3, &(0x7f0000002b00)=@ax25={{0x3, @null}, [@rose, @rose, @default, @default, @rose, @null, @netrom, @rose]}, &(0x7f0000002b80)=0x80, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r3) sendmsg$NL80211_CMD_DEL_MPATH(r9, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x44, r10, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8001) userfaultfd(0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002d80), r9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r12, 0xc020aa04, &(0x7f0000002e80)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) write$P9_RLOCK(r3, &(0x7f0000002ec0)={0x8, 0x35, 0x1}, 0x8) 2.813966466s ago: executing program 4 (id=2089): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x10, 0x2e}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}}, 0x0}, 0x400}, @dead_binder_done, @register_looper], 0x51, 0x0, &(0x7f0000000980)="1d597002c52f656f7527abe01ee41920a6a2fae7958f3ab1072ab29e1593bd90951979f0078e74bf553b055163ef78a314a007aad5762fe8392ee7c3806cc6deeee06171dc997de54169f1b9bbf3ea191f"}) 2.813141486s ago: executing program 4 (id=2090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r1, r3, 0x0, 0x1000000201004) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.500693181s ago: executing program 8 (id=2106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_gettime(r1, &(0x7f0000000100)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) splice(r2, 0x0, r4, 0x0, 0x100000004, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1.104853209s ago: executing program 3 (id=2110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000440), 0x4) (async) r2 = fcntl$dupfd(r1, 0x0, r1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x4000) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "3fb72a932325d560", "d2754beb616fd79605d84ccd1b3a91afae845cc075a59702f89188e0fcf97b96", "035c65b8", "ee2404089ab78eed"}, 0x38) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000001010100000000000000000a0000073c0001802c000180140003002e24676f00000000000000000000000114000400fe8000000000000000000000000000bb0c0002"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) r5 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x4, 0x1, 0xfffffffffffffff1, 0x1000, r5}) (async) chdir(0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000680)={{0x3, 0x0, 0x80, {0xdddd0000, 0xffff1000, 0x1}}, "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", "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"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x100, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @acquire={0x40046305, 0x3}, @free_buffer={0x40086303, r3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1.097555619s ago: executing program 3 (id=2111): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000000)="f0c18a1bb30bc87592acbaff1292bf683a2db0ad0d1ea9572de90d7b90a7139c75d73b47f051d6403bca842187fd9447e94ce5d39d4085b54d32c9", 0x3b}], 0x2) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xe2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0x25, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xbee, 0x80, 0x1, {0x22, 0x1bb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfb, 0x4, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0x6, 0xa}}]}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x7, 0x0, 0x8, 0x30}, 0xc7, &(0x7f0000000100)={0x5, 0xf, 0xc7, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "ebdd6069c4d5673dcaaca932b354200e"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "8a5f211f6998e7bda621b9dd31ac872f"}, @generic={0x9b, 0x10, 0x2, "98cdfe6e67bd7c0aaeabc5adf985b8964fd7f11f26bb4d66f3137fd231f846a2d24452ead87f44f110ad380623f9d285d7111cc4ba9f71e37820d2e0a960e03238c9c646c7480eb7f438df2430f26bfa8aa0bc302aff4d80e1207a3f932d1debcda79ae3bfc8b5490f6c8644fe921b85429421de4e07c06ea11922b9822587bbb87071ccc43050e4f9"}]}, 0x4, [{0xfb, &(0x7f0000000240)=@string={0xfb, 0x3, "bc645124a4b864039a4687988643d9b0736d04a6e5964d3b2c4e8234840aa3863438b84db578863fe695eddf381ab6a323ffb54086fe89d38ad8fb0a55b54a810af719773bf14b525cff5ba5948d8720fc1da957962d79d5b7ec9b478b00cf516fbd337c50da94c29b17e27e9a12e0f3b39bc950964c8aebac9ac1aaf82cbda811685241252b5774390cb2c2483a8435cca9e826182ceaabddd563875a691e17cbe3e357fa9f1ca1c81c68ca83c82eac0a208cccaff911be91a4a50724e67e7523f556755912a22874370c761fb9b186cb720841ae866d4c96db9ac7b6147ec6a1be46d36a7397d3b01623b8ffad3274bc7187229af9185046"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xec9c}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x40c}}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) capset(&(0x7f0000000040), 0x0) creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d820000000000000001000000ffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x11) stat(&(0x7f0000000a00)='./file0\x00', 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001700)={0x24, &(0x7f00000014c0)={0x0, 0x7, 0x8a, {0x8a, 0x21, "ca4af82368fc03f5318675d7f629b6e2cfcc93b3c738db4d42e6e7d4c593bcbb6ebb2a0d6e658e0c60140f966fe7ae9956540f82338a30d0b1270b370b0355e9900e3cb8f52c5fec4abc65be8a2667f0e95f3ee1e9c701c11160b65647514d1490ba98309ff7ef4b003623b978a72751d46dbbeccebb05265172d2ed105f367ce3c8ba099a37527b"}}, &(0x7f0000001580)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "6a924145aae0a599ee7c3496971c49daaabcc254e4c1d01e3323e2d124193e691d1b4afa61d542bbb28aee1999e70cc569730398be42f2dbc5c1c45bbf22a605f99482a3e654988934bfcf05f2a9f57fcb800010fe16623e82a330e0b58bd480abdf0c33f992bb83f7d77b28a6b9fe853c68919af2b2cea9742d1988bda58db2d395a3a6a898ffe3d69d1d18eb089b5eb2e127549c90c404ac32e4fbc3d8539129e4e16027202da8b4ec2693a4edc00adcec547feca14baf820c6554bbcb926c43bca39e08947b9e8a193f25647209e28adba777e8e8126cc2c30b17c7aa37603e6bc5508205eb8c9f5295df8dbd44b696507f"}}, &(0x7f0000001a40)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x8, "9ca0"}, @main=@item_4={0x3, 0x0, 0xb, "19d1169b"}, @main=@item_012={0x1, 0x0, 0x6, 'A'}, @main=@item_012={0x2, 0x0, 0xc, "83b8"}, @main=@item_012={0x1, 0x0, 0x8, "ba"}, @local=@item_4={0x3, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x3, "1f197422"}, @local=@item_4={0x3, 0x2, 0x9, "78f6cd56"}, @local=@item_4={0x3, 0x2, 0xa, "de525e91"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f00000016c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x8cf}}}}, &(0x7f0000001a00)={0x2c, &(0x7f0000001740)={0x0, 0x18, 0xa7, "e395fc99766ecc5b73fdadc33fddd889a8fda1ad491c5d97230362534d640c3e5cf3dcfb4885e0cd685c84850c4f5219e57bc986ed962cfd78a1804bc59b3b6932986dab740a9cb04b471005f2fe9c6fcb1cfada817a9074501bacb3a9ef242d2b642fa6d3f8841a1bd48a0874be894d27b2b724c1087652a9049e648d7b5a55067ca11e4217731e9353f4c187e3199c16a8578db780b0db2df976e61c4ec521f53264daae1d13"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001880)={0x20, 0x1, 0xfb, "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"}, &(0x7f00000019c0)={0x20, 0x3, 0x1, 0xa1}}) 777.659405ms ago: executing program 3 (id=2112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r2, 0xc33, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 749.484456ms ago: executing program 3 (id=2113): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_socket_connect_nvme_tcp() ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000000080)) 737.698306ms ago: executing program 3 (id=2114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000500)=""/191, 0x1}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0xa000) ioctl$HIDIOCSREPORT(r3, 0x400c4808, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1c}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 644.968098ms ago: executing program 8 (id=2115): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) (async) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e24, 0x49, 0x2, 0x80, 0xa0, 0x33, r3, r4}, {0x87fe, 0xfffffffffffffff7, 0x52, 0xb, 0x9, 0x0, 0xfff0000000000000, 0x8000000000000001}, {0xfffffffffffffffe, 0x8, 0x8, 0xec45}, 0xffffffff, 0x6e6bb6, 0x2, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d4, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3503, 0x4, 0x1, 0x7, 0x200, 0x5, 0x6}}, 0xe8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) (async) socket(0x6, 0x2, 0x81) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x100000000) (async) sendfile(r5, r6, 0x0, 0x20000023896) (async) poll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x4010}, {r5}], 0x2, 0x7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 642.983158ms ago: executing program 8 (id=2116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000003c0)={0x5, 0x16, 0x1c, 0x800, 0x0, 0x1, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8d}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x15}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x43}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x10000010) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000000bec0)={0x0, 0x0, &(0x7f000000be80)={&(0x7f0000000400)=ANY=[@ANYBLOB="c800000028000100"], 0xc8}, 0x1, 0x0, 0x0, 0x48090}, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@request_death={0x400c6313}, @release={0x40046306, 0x2}, @enter_looper], 0x34, 0x0, 0x0}) 601.315229ms ago: executing program 8 (id=2117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async, rerun: 32) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (rerun: 32) fcntl$lock(r3, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) (async) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000002c0)={0x0, 0x7, 0xb46}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r7, 0x8, 0x4, 0x1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 522.94225ms ago: executing program 8 (id=2118): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000001ab40)={'ip6_vti0\x00', &(0x7f000001aac0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x36, 0xfdffffff, 0x0, @local, @loopback, 0x20, 0x7, 0x65, 0xaa}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x4000c0) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) (async) r2 = epoll_create(0x5) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000940)={@private2, 0x4, 0x0, 0x1, 0x9, 0x81, 0x8}, &(0x7f0000000980)=0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3801000010000100000000f086db050000000000000000000000000000000001ac1414bb0000000000000000000000000000fff9200000010000002003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000190000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000020000100000000000002fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000042000000000000000027bd7000000000000a0000fe0000000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x44}, 0x4810) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x1, {0xa, 0x4e24, 0x7, @private2, 0xf}}}, 0x3a) (async) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2e00cdf482a4d3808222efb13161b3e4bdaed1cf119d228e5fab"]) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12015002f09760082ebd200f0904e808000804500500"/36], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = socket(0x10, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x1, 0x0, 0x40000, 0x0, 0x2, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x3b, 0x6, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) inotify_add_watch(r7, &(0x7f0000000400)='./file0\x00', 0x21000490) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000126bd7000fedbdf250a0000000c00890001000000060000000a00060008021100000000000500080002000000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20008814) (async) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x22300, 0x95, 0x1}, 0x18) (async) ioctl$KVM_CREATE_VCPU(r7, 0x40047705, 0x2) 224.627476ms ago: executing program 4 (id=2119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f7) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3, 0xfffbffec, 0x4000336, 0x40, 0xf5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0xfffa}, [{0x3, 0xf97, 0x3, 0xd, 0x282, 0xe2, 0xfe10, 0x3}]}, 0x78) close(r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'batadv_slave_0\x00', 0x1000}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0xeeee8000, 0x100000, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x14}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 181.107347ms ago: executing program 3 (id=2120): r0 = epoll_create(0x400) epoll_pwait(r0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0xa6b7, &(0x7f0000000040)={[0xce70392]}, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x1e, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x62080, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 130.442707ms ago: executing program 4 (id=2121): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 0s ago: executing program 8 (id=2122): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x40000) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=readahead']) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r6, r6, 0x0, 0x7a680000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) kernel console output (not intermixed with test programs): 00 audit(1759722899.975:425): avc: denied { mount } for pid=3394 comm="syz.6.1026" name="/" dev="ramfs" ino=20679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 123.723868][ T3395] Invalid ELF header magic: != ELF [ 123.735652][ T36] audit: type=1400 audit(1759722899.985:426): avc: denied { module_load } for pid=3394 comm="syz.6.1026" path="/bus" dev="ramfs" ino=20687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 123.764130][ T65] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.775049][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.781669][ T65] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 123.790740][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.799352][ T65] usb 5-1: config 0 descriptor?? [ 123.987377][ T3399] netlink: 8540 bytes leftover after parsing attributes in process `syz.1.1027'. [ 123.996766][ T3399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 124.149873][ T3426] __vm_enough_memory: pid: 3426, comm: syz.3.1036, bytes: 18014402804453376 not enough memory for the allocation [ 124.200459][ T479] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 124.208309][ T65] hid (null): invalid report_count 22533 [ 124.215264][ T479] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.227120][ T65] nintendo 0003:057E:2009.000E: invalid report_count 22533 [ 124.244051][ T65] nintendo 0003:057E:2009.000E: item 0 2 1 9 parsing failed [ 124.251786][ T65] nintendo 0003:057E:2009.000E: HID parse failed [ 124.258439][ T65] nintendo 0003:057E:2009.000E: probe - fail = -22 [ 124.262444][ T3435] fido_id[3435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.274253][ T65] nintendo 0003:057E:2009.000E: probe with driver nintendo failed with error -22 [ 124.338893][ T36] audit: type=1400 audit(1759722900.605:427): avc: denied { getattr } for pid=3453 comm="syz.3.1046" path="cgroup:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.342024][ T3454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=3454 comm=syz.3.1046 [ 124.411091][ T3366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.422025][ T3366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.450613][ T3463] rust_binder: Error while translating object. [ 124.450637][ T3463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 124.456945][ T3463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:537 [ 124.480448][ T3465] binder: Bad value for 'max' [ 124.532478][ T3470] kvm: pic: non byte write [ 124.624087][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 124.778282][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 124.787528][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.795584][ T9] usb 4-1: Product: syz [ 124.799805][ T9] usb 4-1: Manufacturer: syz [ 124.804603][ T9] usb 4-1: SerialNumber: syz [ 124.858023][ T3484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1054'. [ 124.898213][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 125.431444][ T36] audit: type=1400 audit(1759722901.695:428): avc: denied { getopt } for pid=3493 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.753747][ T36] audit: type=1400 audit(1759722902.015:429): avc: denied { bind } for pid=3524 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.773104][ T36] audit: type=1400 audit(1759722902.015:430): avc: denied { name_bind } for pid=3524 comm="syz.6.1069" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 125.793878][ T36] audit: type=1400 audit(1759722902.015:431): avc: denied { node_bind } for pid=3524 comm="syz.6.1069" saddr=2001:: src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 125.858397][ T36] audit: type=1400 audit(1759722902.125:432): avc: denied { create } for pid=3531 comm="syz.6.1072" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.879886][ T36] audit: type=1400 audit(1759722902.125:433): avc: denied { mounton } for pid=3531 comm="syz.6.1072" path="/183/file0" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.915097][ T3534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.916083][ T3534] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 126.060551][ T3539] /dev/rnullb0: Can't open blockdev [ 126.101289][ T46] tipc: Subscription rejected, illegal request [ 126.121502][ T3545] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 126.355172][ T479] usb 5-1: USB disconnect, device number 20 [ 126.435472][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.435583][ T3582] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 126.442050][ T3582] rust_binder: Error while translating object. [ 126.451200][ T3582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.457484][ T3582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 126.471413][ T3582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.477431][ T3584] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 126.483972][ T3584] rust_binder: Error while translating object. [ 126.492668][ T3584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.498929][ T3584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 126.652768][ T3592] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 126.683559][ T3594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 126.808493][ T3598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3598 comm=syz.1.1097 [ 127.333770][ T3600] overlayfs: failed to clone upperpath [ 127.381770][ T3602] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1099'. [ 127.411641][ T9] usb 4-1: USB disconnect, device number 31 [ 127.529810][ T3624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.530012][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 127.545412][ T3624] erspan0: default FDB implementation only supports local addresses [ 127.554468][ T3624] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 127.562436][ T3624] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 127.562456][ T3624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 127.570554][ T3624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:534 [ 127.580948][ T3625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.619339][ T3632] rust_binder: Write failure EFAULT in pid:542 [ 127.671806][ T1550] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.844101][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 127.977401][ T9] usb 4-1: device descriptor read/64, error -71 [ 128.214051][ T9] usb 4-1: device descriptor read/64, error -71 [ 128.454056][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 128.584050][ T9] usb 4-1: device descriptor read/64, error -71 [ 128.824079][ T9] usb 4-1: device descriptor read/64, error -71 [ 128.834482][ T3666] overlay: ./file0 is not a directory [ 128.934881][ T9] usb usb4-port1: attempt power cycle [ 129.250403][ T3676] tipc: Enabled bearer , priority 0 [ 129.274070][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 129.295159][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.425011][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.454318][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 129.454337][ T36] audit: type=1326 audit(1759722905.725:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3692 comm="syz.1.1128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff37bd8eec9 code=0x0 [ 129.556415][ T3694] tipc: Enabled bearer , priority 0 [ 129.664431][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 129.685328][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.744057][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 129.744057][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.815196][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.924159][ T9] usb usb4-port1: unable to enumerate USB device [ 130.270984][ T3696] fuse: Bad value for 'fd' [ 130.313261][ T36] audit: type=1400 audit(1759722906.575:437): avc: denied { wake_alarm } for pid=3707 comm="syz.4.1132" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.339886][ T3710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.413251][ T36] audit: type=1400 audit(1759722906.675:438): avc: denied { mounton } for pid=3717 comm="syz.4.1137" path="/190/file0" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.413256][ T3718] fuse: Unknown parameter '' [ 130.464452][ T3720] rust_binder: 3720 RLIMIT_NICE not set [ 130.469232][ T65] rust_binder: 3719: removing orphan mapping 0:1144 [ 130.919517][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 131.263010][ T36] audit: type=1400 audit(1759722907.525:439): avc: denied { read } for pid=3749 comm="syz.3.1146" name="/" dev="configfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.285459][ T36] audit: type=1400 audit(1759722907.525:440): avc: denied { open } for pid=3749 comm="syz.3.1146" path="/" dev="configfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.345461][ T3752] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 131.450490][ T36] audit: type=1400 audit(1759722907.715:441): avc: denied { load_policy } for pid=3762 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 131.450559][ T3763] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.480506][ T3763] SELinux: failed to load policy [ 131.734056][ T65] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 131.884048][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 131.890292][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.900620][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 131.914416][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.923481][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 131.931515][ T65] usb 4-1: SerialNumber: syz [ 131.937730][ T65] usb 4-1: bad CDC descriptors [ 132.190583][ T3776] rust_binder: 715: no such ref 3 [ 132.195841][ T3776] rust_binder: 715: no such ref 3 [ 132.200934][ T3776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:715 [ 132.201827][ T65] usb 4-1: USB disconnect, device number 36 [ 132.216974][ T36] audit: type=1400 audit(1759722908.475:442): avc: denied { read } for pid=96 comm="acpid" name="mouse2" dev="devtmpfs" ino=662 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 132.234710][ T3781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.239396][ T36] audit: type=1400 audit(1759722908.475:443): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=662 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 132.268365][ T36] audit: type=1400 audit(1759722908.475:444): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=662 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 132.293070][ T3782] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 132.293113][ T3782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 132.301358][ T3782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:583 [ 132.313525][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1159'. [ 132.332951][ T1553] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.549061][ T36] audit: type=1400 audit(1759722908.815:445): avc: denied { execute } for pid=3788 comm="syz.1.1160" path="/dev/ashmem" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.726061][ T3791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3791 comm=syz.1.1160 [ 132.756731][ T3793] netlink: 'syz.3.1161': attribute type 30 has an invalid length. [ 133.162113][ T3807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.176000][ T3812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.183094][ T3812] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 133.189672][ T3812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 133.197762][ T3812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:597 [ 133.207663][ T3813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.412018][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 133.564038][ T65] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 133.715105][ T65] usb 5-1: config index 0 descriptor too short (expected 19492, got 36) [ 133.723546][ T65] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 133.732196][ T65] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 133.741202][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.752220][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.761990][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.774824][ T65] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 133.783883][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.792779][ T65] usb 5-1: config 0 descriptor?? [ 134.010306][ T3842] 9pnet_fd: Insufficient options for proto=fd [ 134.199111][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 134.208740][ T65] usbhid 5-1:0.0: can't add hid device: -71 [ 134.214801][ T65] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 134.223540][ T65] usb 5-1: USB disconnect, device number 21 [ 134.384059][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.384067][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 134.433468][ T3856] rust_binder: Read failure Err(EAGAIN) in pid:611 [ 134.433507][ T3855] EXT4-fs: dax option not supported [ 134.627276][ T3876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1188'. [ 134.851055][ T3883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.917353][ T3884] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 134.931544][ T3884] netlink: 'syz.4.1190': attribute type 2 has an invalid length. [ 134.940195][ T3884] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 134.940225][ T3884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 134.948318][ T3884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:621 [ 135.714612][ T3903] rust_binder: Write failure EFAULT in pid:629 [ 135.765801][ T3905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2932343455 (187669981120 ns) > initial count (82894967680 ns). Using initial count to start timer. [ 135.811124][ T3908] rust_binder: Error in use_page_slow: ESRCH [ 135.811143][ T3908] rust_binder: use_range failure ESRCH [ 135.817250][ T3908] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 135.822822][ T3908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 135.830869][ T3908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:726 [ 135.887251][ T3910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 135.905579][ T3911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 136.034067][ T65] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 136.195137][ T65] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.203270][ T65] usb 5-1: config 0 has no interface number 0 [ 136.209438][ T65] usb 5-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 136.220187][ T65] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 136.233236][ T65] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 136.242343][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.251158][ T65] usb 5-1: config 0 descriptor?? [ 136.457221][ T3905] rust_binder: Write failure EINVAL in pid:631 [ 136.521361][ T65] usb 5-1: string descriptor 0 read error: -71 [ 136.538163][ T65] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 136.548701][ T65] usb 5-1: USB disconnect, device number 22 [ 136.551704][ T561] udevd[561]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.598917][ T3927] 9pnet_fd: Insufficient options for proto=fd [ 136.851672][ T3948] rust_binder: Write failure EFAULT in pid:741 [ 137.054435][ T36] audit: type=1326 audit(1776500358.321:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff37bd8eec9 code=0x0 [ 137.118758][ T3967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.118920][ T3967] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 137.125472][ T3967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 137.133552][ T3967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:639 [ 137.155582][ T3969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.165522][ T3969] rust_binder: Read failure Err(EAGAIN) in pid:641 [ 137.187556][ T3971] overlayfs: missing 'lowerdir' [ 137.250498][ T3972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.250620][ T3972] rust_binder: 643: no such ref 1 [ 137.262189][ T3972] rust_binder: Write failure EINVAL in pid:643 [ 137.412157][ T3983] rust_binder: 747: no such ref 1 [ 137.423828][ T3983] rust_binder: 747: no such ref 3 [ 137.428931][ T3983] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 137.436199][ T3983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:747 [ 137.684039][ T65] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 137.824353][ T65] usb 4-1: device descriptor read/64, error -71 [ 137.943228][ T3994] netlink: 'syz.6.1228': attribute type 27 has an invalid length. [ 137.951279][ T3994] lo: entered promiscuous mode [ 137.956286][ T3994] lo: entered allmulticast mode [ 137.961738][ T3994] tunl0: entered promiscuous mode [ 137.966814][ T3994] tunl0: entered allmulticast mode [ 137.972262][ T3994] gre0: entered promiscuous mode [ 137.977257][ T3994] gre0: entered allmulticast mode [ 137.982767][ T3994] gretap0: entered promiscuous mode [ 137.988264][ T3994] gretap0: entered allmulticast mode [ 137.994237][ T3994] erspan0: entered promiscuous mode [ 137.999504][ T3994] erspan0: entered allmulticast mode [ 138.005183][ T3994] ip_vti0: entered promiscuous mode [ 138.010441][ T3994] ip_vti0: entered allmulticast mode [ 138.016090][ T3994] ip6_vti0: entered promiscuous mode [ 138.021400][ T3994] ip6_vti0: entered allmulticast mode [ 138.027137][ T3994] sit0: entered promiscuous mode [ 138.032251][ T3994] sit0: entered allmulticast mode [ 138.037835][ T3994] ip6tnl0: entered promiscuous mode [ 138.043198][ T3994] ip6tnl0: entered allmulticast mode [ 138.048948][ T3994] ip6gre0: entered promiscuous mode [ 138.054285][ T3994] ip6gre0: entered allmulticast mode [ 138.059832][ T3994] ip6gretap0: entered promiscuous mode [ 138.065403][ T3994] ip6gretap0: entered allmulticast mode [ 138.071648][ T3994] vcan0: entered promiscuous mode [ 138.074088][ T65] usb 4-1: device descriptor read/64, error -71 [ 138.076763][ T3994] vcan0: entered allmulticast mode [ 138.088274][ T3994] dummy0: entered promiscuous mode [ 138.093400][ T3994] dummy0: entered allmulticast mode [ 138.099090][ T3994] veth0: entered promiscuous mode [ 138.104253][ T3994] veth0: entered allmulticast mode [ 138.109687][ T3994] veth1: entered promiscuous mode [ 138.114814][ T3994] veth1: entered allmulticast mode [ 138.120330][ T3994] wg0: entered promiscuous mode [ 138.125396][ T3994] wg0: entered allmulticast mode [ 138.130644][ T3994] wg1: entered promiscuous mode [ 138.135879][ T3994] wg1: entered allmulticast mode [ 138.141104][ T3994] wg2: entered promiscuous mode [ 138.146209][ T3994] wg2: entered allmulticast mode [ 138.151446][ T3994] veth0_to_bridge: entered promiscuous mode [ 138.157437][ T3994] veth0_to_bridge: entered allmulticast mode [ 138.164590][ T3994] bridge_slave_0: entered promiscuous mode [ 138.170414][ T3994] bridge_slave_0: entered allmulticast mode [ 138.176742][ T3994] veth1_to_bridge: entered promiscuous mode [ 138.182666][ T3994] veth1_to_bridge: entered allmulticast mode [ 138.189285][ T3994] bridge_slave_1: entered promiscuous mode [ 138.195325][ T3994] bridge_slave_1: entered allmulticast mode [ 138.201607][ T3994] veth0_to_bond: entered promiscuous mode [ 138.207513][ T3994] veth0_to_bond: entered allmulticast mode [ 138.213775][ T3994] bond_slave_0: entered promiscuous mode [ 138.219725][ T3994] bond_slave_0: entered allmulticast mode [ 138.226139][ T3994] veth1_to_bond: entered promiscuous mode [ 138.231894][ T3994] veth1_to_bond: entered allmulticast mode [ 138.238193][ T3994] bond_slave_1: entered promiscuous mode [ 138.244064][ T3994] bond_slave_1: entered allmulticast mode [ 138.250129][ T3994] veth0_to_team: entered promiscuous mode [ 138.255935][ T3994] veth0_to_team: entered allmulticast mode [ 138.262253][ T3994] team_slave_0: entered promiscuous mode [ 138.268030][ T3994] team_slave_0: entered allmulticast mode [ 138.274484][ T3994] veth1_to_team: entered promiscuous mode [ 138.280245][ T3994] veth1_to_team: entered allmulticast mode [ 138.286802][ T3994] team_slave_1: entered promiscuous mode [ 138.292665][ T3994] team_slave_1: entered allmulticast mode [ 138.298849][ T3994] veth0_to_batadv: entered promiscuous mode [ 138.304905][ T3994] veth0_to_batadv: entered allmulticast mode [ 138.311402][ T3994] batadv_slave_0: entered promiscuous mode [ 138.317273][ T3994] batadv_slave_0: entered allmulticast mode [ 138.323469][ T3994] veth1_to_batadv: entered promiscuous mode [ 138.329431][ T3994] veth1_to_batadv: entered allmulticast mode [ 138.335958][ T3994] batadv_slave_1: entered promiscuous mode [ 138.341794][ T3994] batadv_slave_1: entered allmulticast mode [ 138.344050][ T65] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 138.348567][ T3994] xfrm0: entered promiscuous mode [ 138.361028][ T3994] xfrm0: entered allmulticast mode [ 138.366649][ T3994] veth0_to_hsr: entered promiscuous mode [ 138.372335][ T3994] veth0_to_hsr: entered allmulticast mode [ 138.378674][ T3994] hsr_slave_0: entered promiscuous mode [ 138.384317][ T3994] hsr_slave_0: entered allmulticast mode [ 138.390451][ T3994] veth1_to_hsr: entered promiscuous mode [ 138.396257][ T3994] veth1_to_hsr: entered allmulticast mode [ 138.402425][ T3994] hsr_slave_1: entered promiscuous mode [ 138.408207][ T3994] hsr_slave_1: entered allmulticast mode [ 138.414517][ T3994] veth1_virt_wifi: entered promiscuous mode [ 138.420441][ T3994] veth1_virt_wifi: entered allmulticast mode [ 138.427021][ T3994] veth0_virt_wifi: entered promiscuous mode [ 138.432945][ T3994] veth0_virt_wifi: entered allmulticast mode [ 138.439430][ T3994] veth1_vlan: entered promiscuous mode [ 138.444981][ T3994] veth1_vlan: entered allmulticast mode [ 138.451035][ T3994] veth0_vlan: entered allmulticast mode [ 138.457560][ T3994] vlan0: entered promiscuous mode [ 138.462859][ T3994] vlan0: entered allmulticast mode [ 138.468437][ T3994] vlan1: entered promiscuous mode [ 138.473571][ T3994] vlan1: entered allmulticast mode [ 138.479281][ T3994] veth1_macvtap: entered allmulticast mode [ 138.485469][ T65] usb 4-1: device descriptor read/64, error -71 [ 138.485925][ T3994] veth0_macvtap: entered promiscuous mode [ 138.497755][ T3994] veth0_macvtap: entered allmulticast mode [ 138.504197][ T3994] macsec0: entered promiscuous mode [ 138.509550][ T3994] macsec0: entered allmulticast mode [ 138.524904][ T3994] syzkaller0: entered promiscuous mode [ 138.530404][ T3994] syzkaller0: entered allmulticast mode [ 138.590929][ T36] audit: type=1400 audit(1776500359.851:447): avc: denied { execute_no_trans } for pid=4007 comm="syz.6.1232" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 138.748061][ T65] usb 4-1: device descriptor read/64, error -71 [ 138.770111][ T4016] tipc: Enabling of bearer rejected, already enabled [ 138.874138][ T65] usb usb4-port1: attempt power cycle [ 139.224053][ T65] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 139.245111][ T65] usb 4-1: device descriptor read/8, error -71 [ 139.375228][ T65] usb 4-1: device descriptor read/8, error -71 [ 139.615132][ T65] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 139.622806][ T36] audit: type=1400 audit(1776500360.881:448): avc: denied { create } for pid=4049 comm="syz.6.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 139.655040][ T65] usb 4-1: device descriptor read/8, error -71 [ 139.785768][ T65] usb 4-1: device descriptor read/8, error -71 [ 139.814057][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 139.894136][ T65] usb usb4-port1: unable to enumerate USB device [ 139.965299][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 139.974431][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.983413][ T9] usb 5-1: config 0 descriptor?? [ 140.150824][ T4079] overlayfs: unescaped trailing colons in lowerdir mount option. [ 140.208340][ T36] audit: type=1400 audit(1776500361.471:449): avc: denied { create } for pid=4089 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 140.211683][ T9] usb 5-1: Cannot read MAC address [ 140.236273][ T9] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 140.262348][ T9] usb 5-1: USB disconnect, device number 23 [ 140.724710][ T4138] fuse: Unknown parameter 'fd»pÒúHiN©-Œ-ùì' [ 141.220882][ T4163] binder: Unknown parameter 'ƒFT' [ 141.293217][ T4169] 9pnet_fd: Insufficient options for proto=fd [ 141.300649][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1293'. [ 141.438487][ T4194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=4194 comm=syz.6.1300 [ 141.492902][ T36] audit: type=1400 audit(1776500362.751:450): avc: denied { create } for pid=4202 comm="syz.3.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 141.520952][ T4210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.521292][ T4210] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 141.533861][ T4210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 141.542078][ T4210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:655 [ 141.560912][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1307'. [ 141.579302][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1307'. [ 141.834044][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 141.953474][ T4227] netlink: 'syz.1.1310': attribute type 30 has an invalid length. [ 141.984168][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 141.990581][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.998993][ T9] usb 4-1: config 0 has no interface number 0 [ 142.005857][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 142.014372][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.023681][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.032854][ T9] usb 4-1: Product: syz [ 142.037271][ T9] usb 4-1: Manufacturer: syz [ 142.041895][ T9] usb 4-1: SerialNumber: syz [ 142.047635][ T9] usb 4-1: config 0 descriptor?? [ 142.053512][ T9] smsc75xx v1.0.0 [ 142.196964][ T4255] tipc: Enabling of bearer rejected, already enabled [ 142.654413][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 142.665362][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.750761][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1327'. [ 143.213933][ T4280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.213966][ T4280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.252479][ T4292] SELinux: Context system_u:object_r:anacron_exec_t:s0 is not valid (left unmapped). [ 143.268944][ T36] audit: type=1400 audit(1776500364.531:451): avc: denied { relabelto } for pid=4291 comm="syz.4.1333" name="cgroup" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:anacron_exec_t:s0" [ 143.297297][ T36] audit: type=1400 audit(1776500364.531:452): avc: denied { associate } for pid=4291 comm="syz.4.1333" name="cgroup" dev="tmpfs" ino=1206 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:anacron_exec_t:s0" [ 143.325649][ T4292] rust_binder: Write failure EFAULT in pid:681 [ 143.333403][ T36] audit: type=1400 audit(1776500364.591:453): avc: denied { unlink } for pid=686 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:anacron_exec_t:s0" [ 143.371628][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 143.381275][ T4304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1336'. [ 143.515932][ T4331] rust_binder: Write failure EFAULT in pid:700 [ 143.682120][ T4333] binder: Unknown parameter 'di' [ 143.741800][ T4336] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.1347' sets config #1 [ 143.998502][ T4345] fuse: Bad value for 'fd' [ 144.281528][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 144.292581][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 144.302455][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 144.311989][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 144.321610][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 144.330899][ T9] usb 4-1: USB disconnect, device number 41 [ 144.566840][ T36] audit: type=1326 audit(1776500365.831:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e258eec9 code=0x7fc00000 [ 144.590664][ T36] audit: type=1326 audit(1776500365.831:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35e258eec9 code=0x7fc00000 [ 144.619165][ T36] audit: type=1326 audit(1776500365.831:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4335 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e258eec9 code=0x7fc00000 [ 144.679889][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 144.692403][ T4380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.692808][ T4380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:713 [ 144.865373][ T4412] fuse: Bad value for 'fd' [ 144.871862][ T4412] overlayfs: overlapping lowerdir path [ 144.965635][ T4425] cgroup: release_agent respecified [ 145.063751][ T4435] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 145.063771][ T4435] rust_binder: Error while translating object. [ 145.072602][ T4435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.078825][ T4435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:798 [ 145.094041][ T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 145.200563][ T4439] sock: sock_timestamping_bind_phc: sock not bind to device [ 145.255389][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 145.263882][ T9] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.276885][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 145.285117][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 145.294253][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.302263][ T9] usb 5-1: Product: syz [ 145.306466][ T9] usb 5-1: Manufacturer: á°‰ [ 145.311087][ T9] usb 5-1: SerialNumber: syz [ 145.354060][ T65] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 145.504042][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 145.510414][ T65] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.520404][ T65] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.527626][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 145.530281][ T65] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.537156][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 145.549467][ T65] usb 4-1: config 1 interface 0 has no altsetting 0 [ 145.559103][ T9] usb 5-1: USB disconnect, device number 24 [ 145.573447][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.582630][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.590653][ T65] usb 4-1: Product: syz [ 145.595067][ T65] usb 4-1: Manufacturer: syz [ 145.599662][ T65] usb 4-1: SerialNumber: syz [ 145.806387][ T65] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 145.928847][ T36] audit: type=1400 audit(1776500367.191:457): avc: denied { ioctl } for pid=4445 comm="syz.6.1386" path="socket:[26208]" dev="sockfs" ino=26208 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.008041][ T36] audit: type=1400 audit(1776500367.271:458): avc: denied { read write } for pid=4436 comm="syz.3.1382" name="lp0" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 146.031605][ T36] audit: type=1400 audit(1776500367.271:459): avc: denied { open } for pid=4436 comm="syz.3.1382" path="/dev/usb/lp0" dev="devtmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 146.055397][ T36] audit: type=1400 audit(1776500367.271:460): avc: denied { ioctl } for pid=4436 comm="syz.3.1382" path="/dev/usb/lp0" dev="devtmpfs" ino=676 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 146.062701][ T4452] netlink: 'syz.3.1382': attribute type 12 has an invalid length. [ 146.100697][ T4454] netlink: 'syz.1.1390': attribute type 11 has an invalid length. [ 146.152344][ T4460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.152494][ T4460] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 146.159291][ T4460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 146.167372][ T4460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:730 [ 146.189577][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.198854][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.205623][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.212125][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.218618][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.225177][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.231633][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.238311][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.244917][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.251388][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.257955][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.264479][ T4437] usblp0:failed reading printer status (-32) [ 146.265440][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.274069][ T65] usb 4-1: USB disconnect, device number 42 [ 146.277375][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.287617][ T65] usblp0: removed [ 146.289668][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.299516][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.306130][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.312652][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.319175][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.325659][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.332206][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.338708][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.345201][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.351668][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.358243][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.364780][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.371291][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.377850][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.384335][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.390786][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.397318][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.403793][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.410392][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.416942][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.423374][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.429839][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.436362][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.442786][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.449234][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.455972][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.462437][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.468909][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.475394][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.481853][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.488371][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.494856][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.501323][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.507813][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.514379][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.520877][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.527383][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.533844][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.540336][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.546805][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.553261][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.559755][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.566223][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.572652][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.579105][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.585553][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.591971][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.598435][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.604905][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.611327][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.617809][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.624291][ T4462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.837340][ T4497] rust_binder: 807: no such ref 0 [ 146.848921][ T4497] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 146.855985][ T4497] rust_binder: 807: no such ref 2 [ 146.861080][ T4497] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 146.884128][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 146.905665][ T4499] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1406'. [ 147.039574][ T4502] 8021q: VLANs not supported on lo [ 147.054048][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 147.064067][ T10] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 147.074340][ T10] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.085641][ T10] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.095666][ T10] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.108791][ T10] usb 5-1: config 7 interface 0 has no altsetting 0 [ 147.115822][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 147.124997][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.616091][ T10] usbhid 5-1:7.0: can't add hid device: -71 [ 147.622115][ T10] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 147.637563][ T10] usb 5-1: USB disconnect, device number 25 [ 147.692272][ T4517] tipc: Enabling of bearer rejected, already enabled [ 148.044098][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 148.081087][ T4549] netlink: 'syz.6.1424': attribute type 16 has an invalid length. [ 148.089077][ T4549] netlink: 'syz.6.1424': attribute type 25 has an invalid length. [ 148.096970][ T4549] netlink: 64094 bytes leftover after parsing attributes in process `syz.6.1424'. [ 148.152065][ T4557] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1428'. [ 148.161313][ T4557] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1428'. [ 148.181183][ T4557] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1428'. [ 148.190451][ T4557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.205649][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 148.211953][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.222919][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.232912][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 148.242159][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.254135][ T10] usb 4-1: config 0 descriptor?? [ 148.337427][ T4570] /dev/loop0: Can't lookup blockdev [ 148.355309][ T4572] 9pnet: Could not find request transport: nd [ 148.361912][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 148.361929][ T36] audit: type=1400 audit(1776500369.621:465): avc: denied { accept } for pid=4571 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.369063][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 148.414107][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 148.429314][ T4578] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 148.437381][ T4578] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 148.458058][ T4580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1438'. [ 148.467217][ T4580] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1438'. [ 148.476404][ T4580] netlink: 'syz.1.1438': attribute type 4 has an invalid length. [ 148.564040][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 148.570371][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.581854][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 148.590977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.599047][ T9] usb 5-1: Product: syz [ 148.603254][ T9] usb 5-1: Manufacturer: syz [ 148.607888][ T9] usb 5-1: SerialNumber: syz [ 148.613232][ T9] usb 5-1: config 0 descriptor?? [ 148.619035][ T9] usb 5-1: bad CDC descriptors [ 148.624098][ T9] usb 5-1: unsupported MDLM descriptors [ 148.677503][ T10] elecom 0003:056E:010D.000F: unknown main item tag 0x7 [ 148.685092][ T10] elecom 0003:056E:010D.000F: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 148.820036][ T4559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.820328][ T4559] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 148.826856][ T4559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 148.834916][ T4559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:737 [ 148.845207][ T9] usb 5-1: USB disconnect, device number 26 [ 148.878644][ T4526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.887324][ T4526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.048472][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 149.059414][ T36] audit: type=1400 audit(1776500370.331:466): avc: denied { create } for pid=4602 comm="syz.1.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 149.646899][ T4641] fuse: Unknown parameter './file0' [ 149.985092][ T36] audit: type=1400 audit(1776500371.251:467): avc: denied { nlmsg_read } for pid=4662 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 150.013168][ T4666] netlink: 'syz.1.1468': attribute type 27 has an invalid length. [ 150.021099][ T4666] lo: entered promiscuous mode [ 150.026155][ T4666] lo: entered allmulticast mode [ 150.031468][ T4666] tunl0: entered promiscuous mode [ 150.036625][ T4666] tunl0: entered allmulticast mode [ 150.042030][ T4666] gre0: entered promiscuous mode [ 150.047059][ T4666] gre0: entered allmulticast mode [ 150.052323][ T4666] gretap0: entered promiscuous mode [ 150.057618][ T4666] gretap0: entered allmulticast mode [ 150.063289][ T4666] erspan0: entered promiscuous mode [ 150.068954][ T4666] erspan0: entered allmulticast mode [ 150.074631][ T4666] ip_vti0: entered promiscuous mode [ 150.079865][ T4666] ip_vti0: entered allmulticast mode [ 150.086735][ T4666] ip6_vti0: entered promiscuous mode [ 150.092060][ T4666] ip6_vti0: entered allmulticast mode [ 150.097796][ T4666] sit0: entered promiscuous mode [ 150.102744][ T4666] sit0: entered allmulticast mode [ 150.108181][ T4666] ip6tnl0: entered promiscuous mode [ 150.113422][ T4666] ip6tnl0: entered allmulticast mode [ 150.119051][ T4666] ip6gre0: entered promiscuous mode [ 150.124348][ T4666] ip6gre0: entered allmulticast mode [ 150.129997][ T4666] ip6gretap0: entered promiscuous mode [ 150.135489][ T4666] ip6gretap0: entered allmulticast mode [ 150.141378][ T4666] dummy0: entered promiscuous mode [ 150.146591][ T4666] dummy0: entered allmulticast mode [ 150.152091][ T4666] veth0: entered promiscuous mode [ 150.157251][ T4666] veth0: entered allmulticast mode [ 150.162742][ T4666] veth1: entered promiscuous mode [ 150.168423][ T4666] veth1: entered allmulticast mode [ 150.173911][ T4666] wg0: entered promiscuous mode [ 150.178808][ T4666] wg0: entered allmulticast mode [ 150.184224][ T4666] wg1: entered promiscuous mode [ 150.189190][ T4666] wg1: entered allmulticast mode [ 150.194590][ T4666] wg2: entered promiscuous mode [ 150.199485][ T4666] wg2: entered allmulticast mode [ 150.204886][ T4666] veth1_to_bridge: entered promiscuous mode [ 150.210828][ T4666] veth1_to_bridge: entered allmulticast mode [ 150.217208][ T4666] bridge_slave_1: entered promiscuous mode [ 150.223042][ T4666] bridge_slave_1: entered allmulticast mode [ 150.229590][ T4666] veth0_to_bond: entered promiscuous mode [ 150.235413][ T4666] veth0_to_bond: entered allmulticast mode [ 150.241750][ T4666] bond_slave_0: entered promiscuous mode [ 150.247691][ T4666] bond_slave_0: entered allmulticast mode [ 150.253857][ T4666] veth1_to_bond: entered promiscuous mode [ 150.259912][ T4666] veth1_to_bond: entered allmulticast mode [ 150.266347][ T4666] bond_slave_1: entered promiscuous mode [ 150.272025][ T4666] bond_slave_1: entered allmulticast mode [ 150.278260][ T4666] veth0_to_team: entered promiscuous mode [ 150.284056][ T4666] veth0_to_team: entered allmulticast mode [ 150.290404][ T4666] team_slave_0: entered promiscuous mode [ 150.296154][ T4666] team_slave_0: entered allmulticast mode [ 150.302267][ T4666] veth1_to_team: entered promiscuous mode [ 150.308073][ T4666] veth1_to_team: entered allmulticast mode [ 150.314365][ T4666] team_slave_1: entered promiscuous mode [ 150.320013][ T4666] team_slave_1: entered allmulticast mode [ 150.326124][ T4666] veth0_to_batadv: entered promiscuous mode [ 150.332044][ T4666] veth0_to_batadv: entered allmulticast mode [ 150.338403][ T4666] batadv_slave_0: entered promiscuous mode [ 150.344255][ T4666] batadv_slave_0: entered allmulticast mode [ 150.350519][ T4666] veth1_to_batadv: entered promiscuous mode [ 150.356465][ T4666] veth1_to_batadv: entered allmulticast mode [ 150.362801][ T4666] batadv_slave_1: entered promiscuous mode [ 150.368903][ T4666] batadv_slave_1: entered allmulticast mode [ 150.375260][ T4666] xfrm0: entered promiscuous mode [ 150.380328][ T4666] xfrm0: entered allmulticast mode [ 150.386006][ T4666] veth0_to_hsr: entered promiscuous mode [ 150.391661][ T4666] veth0_to_hsr: entered allmulticast mode [ 150.397849][ T4666] hsr_slave_0: entered promiscuous mode [ 150.403430][ T4666] hsr_slave_0: entered allmulticast mode [ 150.409576][ T4666] veth1_to_hsr: entered promiscuous mode [ 150.415333][ T4666] veth1_to_hsr: entered allmulticast mode [ 150.421434][ T4666] hsr_slave_1: entered promiscuous mode [ 150.427100][ T4666] hsr_slave_1: entered allmulticast mode [ 150.433191][ T4666] veth1_virt_wifi: entered promiscuous mode [ 150.439200][ T4666] veth1_virt_wifi: entered allmulticast mode [ 150.445637][ T4666] veth0_virt_wifi: entered promiscuous mode [ 150.451667][ T4666] veth0_virt_wifi: entered allmulticast mode [ 150.458256][ T4666] veth1_vlan: entered promiscuous mode [ 150.463810][ T4666] veth1_vlan: entered allmulticast mode [ 150.469917][ T4666] veth0_vlan: entered allmulticast mode [ 150.476204][ T4666] vlan0: entered promiscuous mode [ 150.481271][ T4666] vlan0: entered allmulticast mode [ 150.486955][ T4666] vlan1: entered promiscuous mode [ 150.492303][ T4666] vlan1: entered allmulticast mode [ 150.497792][ T4666] veth1_macvtap: entered allmulticast mode [ 150.503841][ T4666] veth0_macvtap: entered promiscuous mode [ 150.509630][ T4666] veth0_macvtap: entered allmulticast mode [ 150.515832][ T4666] macsec0: entered promiscuous mode [ 150.521079][ T4666] macsec0: entered allmulticast mode [ 150.526725][ T4666] syztnl0: entered promiscuous mode [ 150.531938][ T4666] syztnl0: entered allmulticast mode [ 150.534085][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 150.538135][ T4666] veth0_vlan.4094: entered promiscuous mode [ 150.551103][ T4666] veth0_vlan.4094: entered allmulticast mode [ 150.557545][ T4666] syzkaller0: entered promiscuous mode [ 150.563096][ T4666] syzkaller0: entered allmulticast mode [ 150.569344][ T4666] : entered promiscuous mode [ 150.574180][ T4666] : entered allmulticast mode [ 150.593164][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1471'. [ 150.706261][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 150.717312][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 150.728290][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 150.739133][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 150.753068][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.762182][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.766895][ T65] usb 4-1: USB disconnect, device number 43 [ 150.770211][ T9] usb 5-1: SerialNumber: syz [ 150.794399][ T4671] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 150.801738][ T4671] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 151.013888][ T36] audit: type=1326 audit(1776500372.271:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.4.1470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35e258eec9 code=0x0 [ 151.088514][ T4680] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 151.088575][ T4680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 151.096932][ T4680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:751 [ 151.148805][ T4685] veth0_to_team: mtu greater than device maximum [ 151.253598][ T4706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=4706 comm=syz.6.1483 [ 151.253608][ T4707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=4707 comm=syz.6.1483 [ 151.254096][ T4707] overlayfs: conflicting options: userxattr,verity=require [ 151.340769][ T4718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60186 sclass=netlink_route_socket pid=4718 comm=syz.6.1487 [ 151.686030][ T36] audit: type=1400 audit(1776500372.951:469): avc: denied { setattr } for pid=4724 comm="syz.3.1490" name="XDP" dev="sockfs" ino=27695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.688698][ T4725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.715802][ T4725] IPv6: NLM_F_CREATE should be set when creating new route [ 151.723007][ T4725] IPv6: NLM_F_CREATE should be set when creating new route [ 152.115222][ T4770] __nla_validate_parse: 2 callbacks suppressed [ 152.115243][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'. [ 152.552304][ T4778] 9pnet_fd: Insufficient options for proto=fd [ 152.746025][ T4800] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1516'. [ 152.840293][ T36] audit: type=1400 audit(1776500374.101:470): avc: denied { create } for pid=4817 comm="syz.1.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 153.082745][ T36] audit: type=1400 audit(1776500374.341:471): avc: denied { create } for pid=4853 comm="syz.3.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.321715][ T9] usb 5-1: USB disconnect, device number 27 [ 153.375826][ T4871] 9pnet_fd: Insufficient options for proto=fd [ 153.650186][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.658790][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.670797][ T36] audit: type=1400 audit(1776500374.931:472): avc: denied { connect } for pid=4881 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.744044][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 154.062070][ T36] audit: type=1400 audit(1776500375.321:473): avc: denied { map } for pid=4894 comm="syz.1.1547" path="socket:[27904]" dev="sockfs" ino=27904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.264504][ T4914] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1553'. [ 155.262881][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 155.554045][ T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 155.705138][ T9] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.716150][ T9] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.729145][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 155.737188][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.746305][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.754412][ T9] usb 5-1: Product: з [ 155.758479][ T9] usb 5-1: Manufacturer: ᑜê¥æ”€í€è €ã™†á§–é•©ï¸ç±Šë¾Šì¬±æ£’귕館喯邸쾲é§á¾ªìž°âŒ«á¨³ç¢ì‘šáµš [ 155.770224][ T9] usb 5-1: SerialNumber: à „ [ 155.780241][ T4928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.787612][ T4928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.146092][ T36] audit: type=1400 audit(1776500377.411:474): avc: denied { lock } for pid=4980 comm="syz.1.1578" path="socket:[28794]" dev="sockfs" ino=28794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 156.198649][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 156.209074][ T9] usb 5-1: USB disconnect, device number 29 [ 156.389345][ T4992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1581'. [ 156.452352][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 156.471286][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.484094][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.496796][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.509354][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.522131][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.534860][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.547686][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.560241][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.572815][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.585442][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.3.1588 [ 156.826506][ T36] audit: type=1326 audit(1776500378.091:475): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.4.1600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35e258eec9 code=0x0 [ 156.953454][ T5059] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1601'. [ 157.003471][ T5073] netlink: 'syz.3.1605': attribute type 46 has an invalid length. [ 157.035278][ T5077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.036149][ T5077] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 157.042762][ T5077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 157.050885][ T5077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:783 [ 157.075925][ T5079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.085513][ T5079] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 157.088980][ T5080] 9pnet_fd: Insufficient options for proto=fd [ 157.091986][ T5079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 157.092019][ T5079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:785 [ 157.434034][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 157.594032][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 157.600212][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.608638][ T9] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 157.618978][ T9] usb 5-1: config 179 has no interface number 0 [ 157.625270][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.638537][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.647639][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.859587][ T65] usb 5-1: USB disconnect, device number 30 [ 158.304050][ C0] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 158.512035][ T5143] No source specified [ 158.516789][ T5144] No source specified [ 158.592595][ T5152] overlayfs: failed to resolve './file0': -40 [ 159.022442][ T36] audit: type=1400 audit(1776500380.281:476): avc: denied { create } for pid=5165 comm="syz.6.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 159.082668][ T36] audit: type=1400 audit(1776500380.341:477): avc: denied { create } for pid=5176 comm="syz.6.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.102884][ T36] audit: type=1400 audit(1776500380.361:478): avc: denied { write } for pid=5176 comm="syz.6.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.394044][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 159.585757][ T10] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 159.594925][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.602546][ T10] usb 5-1: can't read configurations, error -61 [ 159.734110][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 159.884414][ T10] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 159.893410][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.901045][ T10] usb 5-1: can't read configurations, error -61 [ 159.907484][ T10] usb usb5-port1: attempt power cycle [ 160.244044][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 160.268093][ T10] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 160.277411][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.285277][ T10] usb 5-1: can't read configurations, error -61 [ 160.311385][ T36] audit: type=1400 audit(1776500381.571:479): avc: denied { execmem } for pid=5256 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 160.414061][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 160.434721][ T10] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 160.443621][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.451240][ T10] usb 5-1: can't read configurations, error -61 [ 160.457669][ T10] usb usb5-port1: unable to enumerate USB device [ 160.496128][ T36] audit: type=1326 audit(1776500381.761:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.6.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e98eec9 code=0x7ffc0000 [ 160.519615][ T36] audit: type=1326 audit(1776500381.761:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.6.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e98eec9 code=0x7ffc0000 [ 160.543133][ T36] audit: type=1326 audit(1776500381.761:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.6.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e98eec9 code=0x7ffc0000 [ 160.566585][ T36] audit: type=1326 audit(1776500381.761:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.6.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e98eec9 code=0x7ffc0000 [ 160.589999][ T36] audit: type=1326 audit(1776500381.761:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.6.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc3e98eec9 code=0x7ffc0000 [ 160.613231][ T36] audit: type=1326 audit(1776500381.761:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.6.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e98eec9 code=0x7ffc0000 [ 160.951244][ T5324] netlink: 'syz.6.1683': attribute type 27 has an invalid length. [ 160.959175][ T5324] lo: left promiscuous mode [ 160.963718][ T5324] lo: left allmulticast mode [ 160.968858][ T5324] tunl0: left promiscuous mode [ 160.973641][ T5324] tunl0: left allmulticast mode [ 160.978875][ T5324] gre0: left promiscuous mode [ 160.983764][ T5324] gre0: left allmulticast mode [ 160.989264][ T5324] gretap0: left promiscuous mode [ 160.994291][ T5324] gretap0: left allmulticast mode [ 160.999734][ T5324] erspan0: left allmulticast mode [ 161.005283][ T5324] ip_vti0: left promiscuous mode [ 161.010242][ T5324] ip_vti0: left allmulticast mode [ 161.015668][ T5324] ip6_vti0: left promiscuous mode [ 161.020730][ T5324] ip6_vti0: left allmulticast mode [ 161.026409][ T5324] sit0: left promiscuous mode [ 161.031102][ T5324] sit0: left allmulticast mode [ 161.036387][ T5324] ip6tnl0: left promiscuous mode [ 161.041359][ T5324] ip6tnl0: left allmulticast mode [ 161.046850][ T5324] ip6gre0: left promiscuous mode [ 161.051820][ T5324] ip6gre0: left allmulticast mode [ 161.057202][ T5324] ip6gretap0: left promiscuous mode [ 161.062407][ T5324] ip6gretap0: left allmulticast mode [ 161.068122][ T5324] vcan0: left promiscuous mode [ 161.072910][ T5324] vcan0: left allmulticast mode [ 161.078019][ T5324] dummy0: left promiscuous mode [ 161.082877][ T5324] dummy0: left allmulticast mode [ 161.088151][ T5324] veth0: left promiscuous mode [ 161.092934][ T5324] veth0: left allmulticast mode [ 161.098356][ T5324] veth1: left promiscuous mode [ 161.103123][ T5324] veth1: left allmulticast mode [ 161.108476][ T5324] wg0: left promiscuous mode [ 161.113077][ T5324] wg0: left allmulticast mode [ 161.118289][ T5324] wg1: left promiscuous mode [ 161.122889][ T5324] wg1: left allmulticast mode [ 161.128118][ T5324] wg2: left promiscuous mode [ 161.132788][ T5324] wg2: left allmulticast mode [ 161.137932][ T5324] veth0_to_bridge: left promiscuous mode [ 161.143631][ T5324] veth0_to_bridge: left allmulticast mode [ 161.149731][ T5324] bridge_slave_0: left promiscuous mode [ 161.155361][ T5324] bridge_slave_0: left allmulticast mode [ 161.161364][ T5324] veth1_to_bridge: left promiscuous mode [ 161.167060][ T5324] veth1_to_bridge: left allmulticast mode [ 161.173214][ T5324] bridge_slave_1: left promiscuous mode [ 161.179331][ T5324] bridge_slave_1: left allmulticast mode [ 161.185788][ T5324] veth0_to_bond: left promiscuous mode [ 161.191287][ T5324] veth0_to_bond: left allmulticast mode [ 161.197962][ T5324] bond_slave_0: left promiscuous mode [ 161.203376][ T5324] bond_slave_0: left allmulticast mode [ 161.209377][ T5324] veth1_to_bond: left promiscuous mode [ 161.214992][ T5324] veth1_to_bond: left allmulticast mode [ 161.221379][ T5324] bond_slave_1: left promiscuous mode [ 161.226861][ T5324] bond_slave_1: left allmulticast mode [ 161.232768][ T5324] veth0_to_team: left promiscuous mode [ 161.238392][ T5324] veth0_to_team: left allmulticast mode [ 161.244585][ T5324] team_slave_0: left promiscuous mode [ 161.250168][ T5324] team_slave_0: left allmulticast mode [ 161.256259][ T5324] veth1_to_team: left promiscuous mode [ 161.261754][ T5324] veth1_to_team: left allmulticast mode [ 161.267808][ T5324] team_slave_1: left promiscuous mode [ 161.273192][ T5324] team_slave_1: left allmulticast mode [ 161.279121][ T5324] veth0_to_batadv: left promiscuous mode [ 161.284863][ T5324] veth0_to_batadv: left allmulticast mode [ 161.291003][ T5324] batadv_slave_0: left promiscuous mode [ 161.296641][ T5324] batadv_slave_0: left allmulticast mode [ 161.302831][ T5324] veth1_to_batadv: left promiscuous mode [ 161.308549][ T5324] veth1_to_batadv: left allmulticast mode [ 161.314780][ T5324] batadv_slave_1: left promiscuous mode [ 161.320381][ T5324] batadv_slave_1: left allmulticast mode [ 161.326792][ T5324] xfrm0: left promiscuous mode [ 161.331636][ T5324] xfrm0: left allmulticast mode [ 161.337081][ T5324] veth0_to_hsr: left promiscuous mode [ 161.342506][ T5324] veth0_to_hsr: left allmulticast mode [ 161.348690][ T5324] hsr_slave_0: left promiscuous mode [ 161.354348][ T5324] hsr_slave_0: left allmulticast mode [ 161.360307][ T5324] veth1_to_hsr: left promiscuous mode [ 161.365825][ T5324] veth1_to_hsr: left allmulticast mode [ 161.371744][ T5324] hsr_slave_1: left promiscuous mode [ 161.377305][ T5324] hsr_slave_1: left allmulticast mode [ 161.383162][ T5324] veth1_virt_wifi: left promiscuous mode [ 161.388960][ T5324] veth1_virt_wifi: left allmulticast mode [ 161.395252][ T5324] veth0_virt_wifi: left promiscuous mode [ 161.401116][ T5324] veth0_virt_wifi: left allmulticast mode [ 161.407412][ T5324] veth1_vlan: left promiscuous mode [ 161.412668][ T5324] veth1_vlan: left allmulticast mode [ 161.419042][ T5324] vlan0: left promiscuous mode [ 161.423926][ T5324] vlan0: left allmulticast mode [ 161.429628][ T5324] vlan1: left promiscuous mode [ 161.434681][ T5324] vlan1: left allmulticast mode [ 161.439582][ T5324] veth0_vlan: left allmulticast mode [ 161.445659][ T5324] veth0_macvtap: left promiscuous mode [ 161.451229][ T5324] veth0_macvtap: left allmulticast mode [ 161.457356][ T5324] macsec0: left promiscuous mode [ 161.462487][ T5324] macsec0: left allmulticast mode [ 161.467808][ T5324] veth1_macvtap: left allmulticast mode [ 161.473605][ T5324] syzkaller0: left promiscuous mode [ 161.479048][ T5324] syzkaller0: left allmulticast mode [ 161.500760][ T5336] overlayfs: missing 'lowerdir' [ 162.336399][ T5369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.337320][ T5371] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 162.367251][ T5371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 162.376448][ T5371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:795 [ 162.467688][ T5370] rust_binder: Read failure Err(EAGAIN) in pid:795 [ 162.467933][ T5369] rust_binder: Read failure Err(EAGAIN) in pid:795 [ 162.638044][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1706'. [ 162.659078][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 162.675331][ T1550] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.282003][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.289185][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.296319][ T5432] bridge_slave_0: entered allmulticast mode [ 163.302694][ T5432] bridge_slave_0: entered promiscuous mode [ 163.309456][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.316561][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.323636][ T5432] bridge_slave_1: entered allmulticast mode [ 163.330003][ T5432] bridge_slave_1: entered promiscuous mode [ 163.384827][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.391894][ T5432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.399257][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.406363][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.428658][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.436123][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.446265][ T1550] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.453366][ T1550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.462875][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.469984][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.506230][ T5432] veth0_vlan: entered promiscuous mode [ 163.520280][ T5432] veth1_macvtap: entered promiscuous mode [ 163.526360][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.532883][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.539860][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.546304][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.552576][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.559790][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.566677][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.573060][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.579434][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.592074][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.598941][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.605536][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.610101][ T5450] /dev/rnullb0: Can't open blockdev [ 163.612083][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.623187][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.629467][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.635836][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.649460][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.656623][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.668693][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.675350][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.681891][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.701337][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.708289][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.715298][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.715463][ T5468] overlayfs: failed to clone upperpath [ 163.721721][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.733771][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.740163][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.746944][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.753421][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.760119][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.766977][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.773350][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.780270][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.787293][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.793616][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.801931][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.809297][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.816033][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.829860][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.836733][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.843494][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.850160][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.856772][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.863160][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.869684][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.876099][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.882549][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.889089][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.895550][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.902265][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.908989][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.915565][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.926209][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.932624][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.940794][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.947549][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.954190][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.960519][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.967428][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.973751][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.980283][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 163.986814][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 164.003663][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 164.010426][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 164.016903][ T5448] 9pnet_fd: Insufficient options for proto=fd [ 164.114907][ T5488] overlayfs: failed to clone upperpath [ 164.168555][ T5495] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 164.646159][ T1558] bridge_slave_1: left allmulticast mode [ 164.651985][ T1558] bridge_slave_1: left promiscuous mode [ 164.658372][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.666553][ T1558] bridge_slave_0: left allmulticast mode [ 164.672343][ T1558] bridge_slave_0: left promiscuous mode [ 164.678403][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.704019][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 164.714027][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.801303][ T1558] veth1_macvtap: left promiscuous mode [ 164.806963][ T1558] veth0_vlan: left promiscuous mode [ 164.857135][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.864324][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.871456][ T5538] bridge_slave_0: entered allmulticast mode [ 164.877857][ T5538] bridge_slave_0: entered promiscuous mode [ 164.884474][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.891527][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.898631][ T5538] bridge_slave_1: entered allmulticast mode [ 164.905324][ T5538] bridge_slave_1: entered promiscuous mode [ 164.962263][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.969476][ T5538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.976832][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.983880][ T5538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.006369][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.013772][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.024718][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.031797][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.046178][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.053295][ T1553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.080109][ T5538] veth0_vlan: entered promiscuous mode [ 165.091421][ T5538] veth1_macvtap: entered promiscuous mode [ 165.123008][ T5551] incfs: Can't find or create .index dir in ./cgroup [ 165.129896][ T5551] incfs: mount failed -22 [ 165.136958][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1748'. [ 165.159602][ T5553] mmap: syz.6.1750 (5553): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 165.176380][ T5553] tmpfs: Unknown parameter 'á' [ 165.494090][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 165.645089][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.656250][ T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.669272][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.676577][ T10] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 165.685765][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.694936][ T10] usb 5-1: config 0 descriptor?? [ 165.825016][ T5585] tipc: Enabling of bearer rejected, failed to enable media [ 166.001308][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 166.001326][ T36] audit: type=1400 audit(1776500387.261:577): avc: denied { mounton } for pid=5604 comm="syz.3.1764" path="/file0" dev="rootfs" ino=15031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 166.007946][ T5605] overlay: Bad value for 'index' [ 166.105173][ T10] acrux 0003:1A34:0802.0010: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 166.119634][ T10] acrux 0003:1A34:0802.0010: no inputs found [ 166.128488][ T10] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19 [ 166.185828][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 166.195389][ T5636] 9pnet_fd: Insufficient options for proto=fd [ 166.329712][ T10] usb 5-1: USB disconnect, device number 35 [ 166.354074][ T62] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 166.505158][ T62] usb 8-1: config index 0 descriptor too short (expected 255, got 18) [ 166.517176][ T62] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.527402][ T62] usb 8-1: config 0 has no interfaces? [ 166.532914][ T62] usb 8-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 166.542133][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.551861][ T62] usb 8-1: config 0 descriptor?? [ 166.755655][ T5659] overlay: ./file0 is not a directory [ 166.772532][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.781899][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.795010][ T5664] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1785'. [ 166.808411][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1785'. [ 166.818740][ T5666] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 167.057797][ T5695] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.058128][ T5695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:803 [ 167.249820][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 167.275368][ T1558] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.305226][ T479] usb 8-1: USB disconnect, device number 2 [ 167.541118][ T36] audit: type=1326 audit(1776500388.801:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.6.1802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3e98eec9 code=0x0 [ 167.739129][ T5711] sit0: entered promiscuous mode [ 167.745175][ T5711] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1803'. [ 167.755486][ T5711] 9pnet_fd: Insufficient options for proto=fd [ 167.761837][ T5712] 9pnet_fd: Insufficient options for proto=fd [ 167.917004][ T5764] /dev/sg0: Can't lookup blockdev [ 167.943230][ T36] audit: type=1400 audit(1776500389.201:579): avc: denied { nlmsg_read } for pid=5773 comm="syz.7.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.208963][ T5774] rust_binder: Write failure EINVAL in pid:23 [ 168.279013][ T5802] syz.7.1812: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 168.303369][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: syz.7.1812 Not tainted syzkaller #0 658fd523d4664e50339751640158cdc1077a64d7 [ 168.303404][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.303429][ T5802] Call Trace: [ 168.303437][ T5802] [ 168.303446][ T5802] __dump_stack+0x21/0x30 [ 168.303482][ T5802] dump_stack_lvl+0x10c/0x190 [ 168.303511][ T5802] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.303542][ T5802] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 168.303572][ T5802] dump_stack+0x19/0x20 [ 168.303600][ T5802] warn_alloc+0x1bc/0x2a0 [ 168.303630][ T5802] ? kasan_save_free_info+0x4a/0x60 [ 168.303662][ T5802] ? __cfi_warn_alloc+0x10/0x10 [ 168.303691][ T5802] ? __get_vm_area_node+0x1dc/0x3a0 [ 168.303732][ T5802] ? packet_set_ring+0x735/0x2850 [ 168.303757][ T5802] __vmalloc_node_range_noprof+0x68e/0x1420 [ 168.303805][ T5802] ? kasan_save_track+0x3e/0x80 [ 168.303828][ T5802] ? __kasan_kmalloc+0x96/0xb0 [ 168.303852][ T5802] ? __kmalloc_noprof+0x1b1/0x450 [ 168.303878][ T5802] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 168.303910][ T5802] ? __asan_memset+0x39/0x50 [ 168.303942][ T5802] ? __alloc_pages_noprof+0xbf/0x7b0 [ 168.303975][ T5802] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 168.304005][ T5802] ? packet_set_ring+0x735/0x2850 [ 168.304031][ T5802] vzalloc_noprof+0xfd/0x1d0 [ 168.304069][ T5802] ? packet_set_ring+0x735/0x2850 [ 168.304095][ T5802] ? __cfi_vzalloc_noprof+0x10/0x10 [ 168.304126][ T5802] ? packet_set_ring+0x669/0x2850 [ 168.304153][ T5802] packet_set_ring+0x735/0x2850 [ 168.304181][ T5802] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 168.304208][ T5802] ? packet_mmap+0x570/0x570 [ 168.304234][ T5802] ? __check_object_size+0xe0/0x810 [ 168.304255][ T5802] ? __asan_memcpy+0x5a/0x80 [ 168.304274][ T5802] ? __cfi___check_object_size+0x10/0x10 [ 168.304309][ T5802] ? avc_has_perm_noaudit+0x286/0x360 [ 168.304341][ T5802] ? __kasan_check_write+0x18/0x20 [ 168.304374][ T5802] ? _copy_from_user+0x8b/0xb0 [ 168.304404][ T5802] packet_setsockopt+0xc5d/0x12a0 [ 168.304431][ T5802] ? __cfi_packet_setsockopt+0x10/0x10 [ 168.304458][ T5802] ? selinux_socket_setsockopt+0x2ea/0x390 [ 168.304493][ T5802] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 168.304529][ T5802] ? do_futex+0x309/0x500 [ 168.304553][ T5802] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 168.304582][ T5802] ? security_socket_setsockopt+0x33/0xd0 [ 168.304603][ T5802] ? __cfi_packet_setsockopt+0x10/0x10 [ 168.304630][ T5802] do_sock_setsockopt+0x26a/0x400 [ 168.304660][ T5802] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 168.304693][ T5802] __x64_sys_setsockopt+0x1b8/0x250 [ 168.304724][ T5802] x64_sys_call+0x2adc/0x2ee0 [ 168.304757][ T5802] do_syscall_64+0x58/0xf0 [ 168.304783][ T5802] ? clear_bhb_loop+0x50/0xa0 [ 168.304804][ T5802] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.304839][ T5802] RIP: 0033:0x7f66e178eec9 [ 168.304863][ T5802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.304882][ T5802] RSP: 002b:00007f66e2623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.304906][ T5802] RAX: ffffffffffffffda RBX: 00007f66e19e6180 RCX: 00007f66e178eec9 [ 168.304923][ T5802] RDX: 000000000000000d RSI: 0000000000000107 RDI: 000000000000001a [ 168.304938][ T5802] RBP: 00007f66e1811f91 R08: 000000000000001c R09: 0000000000000000 [ 168.304953][ T5802] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 168.304969][ T5802] R13: 00007f66e19e6218 R14: 00007f66e19e6180 R15: 00007fff46730858 [ 168.304989][ T5802] [ 168.410357][ T36] audit: type=1400 audit(1776500389.671:580): avc: denied { nlmsg_write } for pid=5809 comm="syz.6.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 168.430329][ T5802] Mem-Info: [ 168.470551][ T5814] x_tables: duplicate underflow at hook 4 [ 168.474624][ T5802] active_anon:53041 inactive_anon:4 isolated_anon:0 [ 168.474624][ T5802] active_file:12719 inactive_file:11581 isolated_file:0 [ 168.474624][ T5802] unevictable:16426 dirty:54 writeback:0 [ 168.474624][ T5802] slab_reclaimable:6541 slab_unreclaimable:74004 [ 168.474624][ T5802] mapped:24115 shmem:47436 pagetables:1128 [ 168.474624][ T5802] sec_pagetables:0 bounce:0 [ 168.474624][ T5802] kernel_misc_reclaimable:0 [ 168.474624][ T5802] free:1456399 free_pcp:4541 free_cma:0 [ 168.510206][ T36] audit: type=1326 audit(1776500389.771:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.6.1817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3e98eec9 code=0x0 [ 168.515148][ T5802] Node 0 active_anon:212364kB inactive_anon:16kB active_file:50876kB inactive_file:46324kB unevictable:65704kB isolated(anon):0kB isolated(file):0kB mapped:96460kB dirty:216kB writeback:0kB shmem:189744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6400kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no [ 168.781161][ T5802] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:13788kB local_pcp:11376kB free_cma:0kB [ 168.782196][ T485] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 168.812064][ T5802] lowmem_reserve[]: 0 3921 3921 [ 168.823945][ T5802] Normal free:2872700kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:212444kB inactive_anon:16kB active_file:50876kB inactive_file:46324kB unevictable:65704kB writepending:216kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4540kB local_pcp:2128kB free_cma:0kB [ 168.855961][ T5802] lowmem_reserve[]: 0 0 0 [ 168.860331][ T5802] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 168.875808][ T5802] Normal: 73*4kB (UE) 559*8kB (UME) 522*16kB (UME) 572*32kB (UME) 369*64kB (UME) 411*128kB (UME) 169*256kB (UME) 68*512kB (UME) 32*1024kB (UME) 18*2048kB (UME) 639*4096kB (M) = 2872700kB [ 168.894422][ T5802] 88163 total pagecache pages [ 168.899137][ T5802] 5 pages in swap cache [ 168.903298][ T5802] Free swap = 124240kB [ 168.907487][ T5802] Total swap = 124996kB [ 168.911675][ T5802] 2097051 pages RAM [ 168.915532][ T5802] 0 pages HighMem/MovableOnly [ 168.920234][ T5802] 351537 pages reserved [ 168.924433][ T5802] 0 pages cma reserved [ 168.931987][ T5802] Memory allocations: [ 168.936095][ T5802] 0 B 0 init/main.c:1370 func:do_initcalls [ 168.943346][ T5802] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 168.951512][ T5802] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 168.961067][ T5802] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 168.969315][ T5802] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 168.977336][ T5802] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 168.985992][ T5802] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 168.993943][ T5802] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 169.001970][ T5802] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 169.010496][ T5802] 0 B 0 init/initramfs.c:101 func:find_link [ 169.041807][ T5824] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.041832][ T5824] rust_binder: Read failure Err(EFAULT) in pid:31 [ 169.068371][ T5826] rust_binder: Write failure EFAULT in pid:33 [ 169.319202][ T5835] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 169.332683][ T5835] rust_binder: 41: no such ref 3 [ 169.337746][ T5835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 169.338086][ T5835] tipc: Started in network mode [ 169.352234][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 169.354021][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.358643][ T5835] tipc: Node identity 9a82f1db024, cluster identity 4711 [ 169.371657][ T5835] tipc: Enabled bearer , priority 0 [ 169.380206][ T5835] tipc: Disabling bearer [ 169.461416][ T36] audit: type=1400 audit(1776500390.721:582): avc: denied { write } for pid=5850 comm="syz.7.1827" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.886703][ T5870] __vm_enough_memory: pid: 5870, comm: syz.4.1833, bytes: 18014402804453376 not enough memory for the allocation [ 169.899420][ T36] audit: type=1326 audit(1776500391.161:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e258eec9 code=0x7ffc0000 [ 169.923341][ T36] audit: type=1326 audit(1776500391.161:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e258eec9 code=0x7ffc0000 [ 169.947579][ T36] audit: type=1326 audit(1776500391.171:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f35e258eec9 code=0x7ffc0000 [ 169.971060][ T36] audit: type=1326 audit(1776500391.171:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.4.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e258eec9 code=0x7ffc0000 [ 170.072841][ T5875] __vm_enough_memory: pid: 5875, comm: syz.4.1835, bytes: 18014402804453376 not enough memory for the allocation [ 170.204051][ T485] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 170.253137][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1840'. [ 170.334567][ T5903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 170.356906][ T485] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.372808][ T485] usb 8-1: config 0 has no interface number 0 [ 170.379208][ T485] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.398781][ T485] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.409251][ T485] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.424300][ T485] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 170.433499][ T485] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.440922][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 170.443681][ T485] usb 8-1: config 0 descriptor?? [ 170.490777][ T5936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.665153][ T485] usbhid 8-1:0.1: can't add hid device: -71 [ 170.678319][ T485] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 170.692178][ T485] usb 8-1: USB disconnect, device number 4 [ 170.744091][ T479] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 170.754347][ T5944] netlink: 'syz.7.1857': attribute type 16 has an invalid length. [ 170.762272][ T5944] netlink: 'syz.7.1857': attribute type 2 has an invalid length. [ 170.770118][ T5944] netlink: 64086 bytes leftover after parsing attributes in process `syz.7.1857'. [ 170.894009][ T479] usb 5-1: Using ep0 maxpacket: 16 [ 170.900277][ T479] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.911882][ T479] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 170.920986][ T479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.929013][ T479] usb 5-1: Product: syz [ 170.933190][ T479] usb 5-1: Manufacturer: syz [ 170.937848][ T479] usb 5-1: SerialNumber: syz [ 170.943137][ T479] usb 5-1: config 0 descriptor?? [ 170.949009][ T479] asix 5-1:0.0: probe with driver asix failed with error -22 [ 171.155993][ T5970] 9pnet_fd: Insufficient options for proto=fd [ 171.162164][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 171.162182][ T36] audit: type=1400 audit(1776500392.421:613): avc: denied { setattr } for pid=5966 comm="syz.3.1864" name="/" dev="configfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.198541][ T5968] netlink: 'syz.4.1855': attribute type 16 has an invalid length. [ 171.206565][ T5968] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1855'. [ 171.218963][ T5968] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 171.218991][ T5968] rust_binder: Error while translating object. [ 171.229590][ T5968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.235887][ T5968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:821 [ 171.751947][ T45] usb 5-1: USB disconnect, device number 36 [ 171.767862][ T5979] netlink: 'syz.3.1867': attribute type 4 has an invalid length. [ 171.775791][ T5979] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1867'. [ 171.785570][ T5978] selinux_netlink_send: 23 callbacks suppressed [ 171.785602][ T5978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5978 comm=syz.3.1867 [ 171.867133][ T5994] batadv_slave_1: entered promiscuous mode [ 171.874141][ T5994] overlayfs: failed to clone upperpath [ 171.880825][ T5993] batadv_slave_1: left promiscuous mode [ 171.953126][ T36] audit: type=1400 audit(1776500393.211:614): avc: denied { map } for pid=6006 comm="syz.4.1878" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 171.984075][ T36] audit: type=1400 audit(1776500393.211:615): avc: denied { execute } for pid=6006 comm="syz.4.1878" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 171.987428][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 172.027435][ T1558] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.398858][ T6018] SELinux: ebitmap: high bit 8448 is not equal to the expected value 384 [ 172.408463][ T6018] SELinux: failed to load policy [ 172.432083][ T6020] binder: Bad value for 'stats' [ 172.506365][ T6032] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 172.507688][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1889'. [ 172.537148][ T6038] rust_binder: Error while translating object. [ 172.537194][ T6038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 172.543401][ T6038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 172.567206][ T36] audit: type=1400 audit(1776500393.831:616): avc: denied { name_bind } for pid=6041 comm="syz.7.1891" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 172.799869][ T36] audit: type=1400 audit(1776500394.061:617): avc: denied { bind } for pid=6059 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.827366][ T46] bridge_slave_1: left allmulticast mode [ 172.844496][ T46] bridge_slave_1: left promiscuous mode [ 172.850260][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.864391][ T46] bridge_slave_0: left allmulticast mode [ 172.874979][ T46] bridge_slave_0: left promiscuous mode [ 172.880721][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.001959][ T6070] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1904'. [ 173.017384][ T46] tipc: Left network mode [ 173.042762][ T46] veth1_macvtap: left promiscuous mode [ 173.048814][ T46] veth0_vlan: left promiscuous mode [ 173.119039][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.126191][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.133390][ T6068] bridge_slave_0: entered allmulticast mode [ 173.139784][ T6068] bridge_slave_0: entered promiscuous mode [ 173.146497][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.153568][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.160710][ T6068] bridge_slave_1: entered allmulticast mode [ 173.167225][ T6068] bridge_slave_1: entered promiscuous mode [ 173.229485][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.236653][ T6068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.243929][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.250994][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.272955][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.280557][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.290046][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.297171][ T1553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.306337][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.313424][ T1553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.350422][ T6068] veth0_vlan: entered promiscuous mode [ 173.366073][ T6068] veth1_macvtap: entered promiscuous mode [ 173.440165][ T6116] SELinux: Context system_u:object_r:etc_runtime_t:s0 is not valid (left unmapped). [ 173.440581][ T36] audit: type=1400 audit(1776500394.701:618): avc: denied { relabelfrom } for pid=6115 comm="syz.3.1915" name="XDP" dev="sockfs" ino=32522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.472601][ T36] audit: type=1400 audit(1776500394.721:619): avc: denied { relabelto } for pid=6115 comm="syz.3.1915" name="XDP" dev="sockfs" ino=32522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:etc_runtime_t:s0" [ 173.500381][ T36] audit: type=1400 audit(1776500394.721:620): avc: denied { create } for pid=6115 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.564300][ T6128] __vm_enough_memory: pid: 6128, comm: syz.8.1919, bytes: 18014402804453376 not enough memory for the allocation [ 173.729217][ T36] audit: type=1400 audit(1776500394.991:621): avc: denied { write } for pid=6129 comm="syz.8.1920" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 173.750452][ T36] audit: type=1400 audit(1776500394.991:622): avc: denied { open } for pid=6129 comm="syz.8.1920" path="/3/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 173.794191][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 174.064074][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 174.064121][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.530823][ T6179] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1936'. [ 174.774260][ T364] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 174.904093][ T65] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 174.925142][ T364] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 174.934398][ T364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.943193][ T364] usb 9-1: config 0 descriptor?? [ 174.958620][ T6191] tipc: Enabling of bearer rejected, already enabled [ 175.064060][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 175.070228][ T65] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.078586][ T65] usb 5-1: config 179 has no interface number 0 [ 175.085012][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 175.096329][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 175.108006][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.119237][ T65] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 175.130714][ T65] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.144067][ T65] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.153276][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.165631][ T6185] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 175.363077][ T364] ryos 0003:1E7D:3138.0011: unknown main item tag 0x2 [ 175.370993][ T364] ryos 0003:1E7D:3138.0011: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.8-1/input0 [ 175.394032][ T364] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input18 [ 175.568513][ T364] usb 9-1: USB disconnect, device number 2 [ 175.768425][ T6238] overlayfs: failed to clone upperpath [ 175.778955][ T6238] overlayfs: failed to clone upperpath [ 175.786159][ T6238] tipc: Enabling of bearer rejected, failed to enable media [ 175.809093][ T6240] 9pnet_fd: Insufficient options for proto=fd [ 176.089799][ T6242] binder: Bad value for 'max' [ 176.108497][ T6244] rust_binder: Write failure EFAULT in pid:22 [ 176.123203][ T6247] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 176.381099][ T6255] tipc: Enabling of bearer rejected, failed to enable media [ 176.394041][ T485] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 176.416458][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 176.416475][ T36] audit: type=1326 audit(1776500397.686:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.3.1966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dc6f8eec9 code=0x0 [ 176.467353][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 176.544066][ T485] usb 9-1: device descriptor read/64, error -71 [ 176.784242][ T485] usb 9-1: device descriptor read/64, error -71 [ 176.948988][ T6267] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 176.989577][ T6271] overlayfs: failed to clone upperpath [ 177.024264][ T485] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 177.154156][ T485] usb 9-1: device descriptor read/64, error -71 [ 177.240099][ T6280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6280 comm=syz.6.1974 [ 177.394163][ T485] usb 9-1: device descriptor read/64, error -71 [ 177.414892][ T6291] overlayfs: failed to resolve '/L': -2 [ 177.504112][ T485] usb usb9-port1: attempt power cycle [ 177.679543][ T9] usb 5-1: USB disconnect, device number 37 [ 177.679658][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 177.694107][ T9] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 177.695001][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 177.753675][ T6295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.816353][ T6297] overlayfs: failed to resolve './file0': -2 [ 177.832621][ T36] audit: type=1326 audit(1776500399.096:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.4.1982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35e258eec9 code=0x0 [ 177.844080][ T485] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 177.875302][ T485] usb 9-1: device descriptor read/8, error -71 [ 177.904849][ T36] audit: type=1400 audit(1776500399.176:626): avc: denied { accept } for pid=6302 comm="syz.4.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.005031][ T485] usb 9-1: device descriptor read/8, error -71 [ 178.244097][ T485] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 178.271810][ T485] usb 9-1: device descriptor read/8, error -71 [ 178.304047][ T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 178.405099][ T485] usb 9-1: device descriptor read/8, error -71 [ 178.455413][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.463535][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 178.471390][ T9] usb 5-1: no configurations [ 178.476105][ T9] usb 5-1: can't read configurations, error -22 [ 178.514901][ T485] usb usb9-port1: unable to enumerate USB device [ 178.604039][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 178.764203][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.772308][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 178.781951][ T9] usb 5-1: no configurations [ 178.787122][ T9] usb 5-1: can't read configurations, error -22 [ 178.793712][ T9] usb usb5-port1: attempt power cycle [ 179.134050][ T9] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 179.155778][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.171395][ T6345] tipc: Started in network mode [ 179.176346][ T6345] tipc: Node identity 5ec44f1343cb, cluster identity 4711 [ 179.183582][ T6345] tipc: Enabled bearer , priority 0 [ 179.184457][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 179.198148][ T9] usb 5-1: no configurations [ 179.202886][ T9] usb 5-1: can't read configurations, error -22 [ 179.203555][ T6345] tipc: Disabling bearer [ 179.334026][ T9] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 179.355727][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.363913][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 179.371756][ T9] usb 5-1: no configurations [ 179.376452][ T9] usb 5-1: can't read configurations, error -22 [ 179.382820][ T9] usb usb5-port1: unable to enumerate USB device [ 179.808803][ T6366] overlayfs: failed to clone upperpath [ 180.240055][ T6395] tipc: Enabling of bearer rejected, already enabled [ 180.474108][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 180.625215][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 180.636503][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 180.649415][ T9] usb 9-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 180.658514][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.667493][ T9] usb 9-1: config 0 descriptor?? [ 180.672752][ T6393] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 180.680769][ T9] usbhid 9-1:0.0: can't add hid device: -22 [ 180.686826][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 180.722101][ T6415] x_tables: unsorted entry at hook 2 [ 180.828591][ T6428] futex_wake_op: syz.3.2027 tries to shift op by -1; fix this program [ 180.837537][ T36] audit: type=1400 audit(1776500402.106:627): avc: denied { remount } for pid=6427 comm="syz.3.2027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 180.882219][ T36] audit: type=1400 audit(1776500402.146:628): avc: denied { read write } for pid=6392 comm="syz.8.2011" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.882799][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.906591][ T36] audit: type=1400 audit(1776500402.146:629): avc: denied { open } for pid=6392 comm="syz.8.2011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.915671][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.939574][ T36] audit: type=1400 audit(1776500402.146:630): avc: denied { ioctl } for pid=6392 comm="syz.8.2011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.971549][ T65] usb 9-1: USB disconnect, device number 7 [ 181.157883][ T36] audit: type=1400 audit(1776500402.426:631): avc: denied { search } for pid=6450 comm="syz.3.2034" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 181.193014][ T36] audit: type=1400 audit(1776500402.446:632): avc: denied { write } for pid=6450 comm="syz.3.2034" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 181.240371][ T36] audit: type=1326 audit(1776500402.506:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.6.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e98eec9 code=0x7ff00000 [ 181.283508][ T6471] erofs: dax options not supported [ 181.394024][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 181.405713][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2037'. [ 181.516599][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 181.516620][ T36] audit: type=1326 audit(1776500402.786:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.8.2042" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f7d78eec9 code=0x0 [ 181.565098][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.576077][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.585358][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.594012][ T9] usb 5-1: config 0 descriptor?? [ 181.623467][ T6480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 181.639688][ T36] audit: type=1400 audit(1776500402.906:647): avc: denied { mounton } for pid=6481 comm="syz.8.2044" path="/file0" dev="ramfs" ino=33610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 181.701846][ T6484] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 181.741837][ T6486] rust_binder: Error while translating object. [ 181.741874][ T6486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 181.748258][ T6486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:50 [ 181.884719][ T6497] rust_binder: Failed copying remainder into alloc: EFAULT [ 181.896378][ T6497] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 181.903729][ T6497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 181.912375][ T6497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:59 [ 182.001102][ T9] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 182.029034][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input20 [ 182.098230][ T9] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 182.259149][ T36] audit: type=1400 audit(1776500403.526:648): avc: denied { append } for pid=6536 comm="syz.8.2061" name="pfkey" dev="proc" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.507879][ T6449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.508298][ T6449] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 182.514896][ T6449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 182.515086][ T364] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 182.522952][ T6449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:871 [ 182.541227][ T65] usb 5-1: USB disconnect, device number 42 [ 182.674038][ T364] usb 9-1: Using ep0 maxpacket: 32 [ 182.680387][ T364] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.691541][ T364] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.701522][ T364] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 182.701677][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2064'. [ 182.710944][ T364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.728675][ T364] usb 9-1: config 0 descriptor?? [ 182.734984][ T364] hub 9-1:0.0: USB hub found [ 182.935152][ T364] hub 9-1:0.0: 1 port detected [ 183.136206][ T6542] fuse: Unknown parameter '0x00000000000000050x0000000000000004' [ 183.155525][ T364] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 183.161923][ T364] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 183.170841][ T364] usbhid 9-1:0.0: can't add hid device: -71 [ 183.176889][ T364] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 183.205312][ T364] usb 9-1: USB disconnect, device number 8 [ 183.347327][ T1558] tipc: Resetting bearer [ 183.380979][ T1558] tipc: Disabling bearer [ 183.466206][ T1558] tipc: Left network mode [ 183.564964][ T36] audit: type=1326 audit(1776500404.836:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz.6.2073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3e98eec9 code=0x0 [ 183.658698][ T6574] netlink: 'syz.6.2073': attribute type 27 has an invalid length. [ 183.676179][ T6574] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.789118][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2073'. [ 183.881390][ T36] audit: type=1400 audit(1776500405.146:650): avc: denied { setattr } for pid=6586 comm="syz.3.2078" name="RAW" dev="sockfs" ino=34462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.885409][ T6589] tipc: New replicast peer: 139.255.255.255 [ 183.910297][ T6589] tipc: Enabled bearer , priority 10 [ 184.184035][ T364] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 184.234013][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 184.334012][ T364] usb 9-1: Using ep0 maxpacket: 8 [ 184.340288][ T364] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 184.349410][ T364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.358151][ T364] usb 9-1: config 0 descriptor?? [ 184.384217][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 184.390664][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.402073][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.412166][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.425530][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.434967][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.446715][ T9] usb 5-1: config 0 descriptor?? [ 184.469818][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 184.479894][ T6602] overlayfs: failed to clone upperpath [ 184.486461][ T6602] overlayfs: failed to clone upperpath [ 184.564223][ T364] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 184.856478][ T9] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 184.866367][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.873624][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.880925][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.888303][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.895601][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.902892][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.910194][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.917465][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.924758][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.932451][ T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 184.956941][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input21 [ 184.974370][ T9] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 185.024027][ T9] tipc: Node number set to 487542547 [ 185.058155][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.066771][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.080464][ T65] usb 5-1: USB disconnect, device number 43 [ 185.096372][ T6620] rust_binder: 886: no such ref 1 [ 185.101599][ T6620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:886 [ 185.121868][ T1558] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.547349][ T36] audit: type=1400 audit(1776500406.816:651): avc: denied { create } for pid=6624 comm="syz.3.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 185.568334][ T36] audit: type=1400 audit(1776500406.816:652): avc: denied { write } for pid=6624 comm="syz.3.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 185.591390][ T364] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 185.603251][ T364] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 185.614659][ T364] asix 9-1:0.0: probe with driver asix failed with error -71 [ 185.623304][ T364] usb 9-1: USB disconnect, device number 9 [ 185.687742][ T6627] 9pnet_fd: Insufficient options for proto=fd [ 185.687742][ T6628] 9pnet_fd: Insufficient options for proto=fd [ 186.313583][ T36] audit: type=1400 audit(1776500407.576:653): avc: denied { append } for pid=6659 comm="syz.8.2103" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.396667][ T6662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 186.421140][ T36] audit: type=1326 audit(1776500407.686:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.8.2106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f7d78eec9 code=0x0 [ 186.523543][ T6669] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 186.523566][ T6669] rust_binder: Error while translating object. [ 186.534224][ T6669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.540414][ T6669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 187.184190][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 187.184302][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.279900][ T6698] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2116'. [ 187.289372][ T6698] rust_binder: 131: no such ref 2 [ 187.294500][ T6698] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 187.294519][ T6698] rust_binder: Read failure Err(EFAULT) in pid:131 [ 187.737312][ T6711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.751359][ T6711] rust_binder: Write failure EFAULT in pid:890 [ 187.963775][ T6717] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 187.982574][ T6717] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 187.991108][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.8.2122 Not tainted syzkaller #0 658fd523d4664e50339751640158cdc1077a64d7 [ 188.002678][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.012753][ T6717] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 188.019038][ T6717] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 188.038688][ T6717] RSP: 0018:ffffc90002f1f820 EFLAGS: 00010202 [ 188.044794][ T6717] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888117682600 [ 188.052787][ T6717] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 188.060774][ T6717] RBP: ffffc90002f1fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 188.068770][ T6717] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 188.076776][ T6717] R13: 7ffffffffffff9b7 R14: ffff888120677038 R15: ffff888120677028 [ 188.084779][ T6717] FS: 00007f5f7e5df6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 188.093734][ T6717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.100331][ T6717] CR2: 000000110c347037 CR3: 000000011328c000 CR4: 00000000003526b0 [ 188.108313][ T6717] Call Trace: [ 188.111599][ T6717] [ 188.114547][ T6717] ? __cfi_iter_file_splice_write+0x10/0x10 [ 188.120477][ T6717] ? __kasan_kmalloc+0x96/0xb0 [ 188.125250][ T6717] ? __kasan_check_write+0x18/0x20 [ 188.130402][ T6717] ? __cfi_iter_file_splice_write+0x10/0x10 [ 188.136302][ T6717] direct_splice_actor+0x276/0x4b0 [ 188.141434][ T6717] splice_direct_to_actor+0x4fe/0xbc0 [ 188.146815][ T6717] ? __cfi_direct_splice_actor+0x10/0x10 [ 188.152461][ T6717] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 188.158389][ T6717] do_splice_direct+0x182/0x270 [ 188.163267][ T6717] ? __cfi_do_splice_direct+0x10/0x10 [ 188.168665][ T6717] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 188.174576][ T6717] ? security_file_permission+0x2e/0xc0 [ 188.180139][ T6717] ? rw_verify_area+0xac/0x230 [ 188.184929][ T6717] do_sendfile+0x5c8/0xfb0 [ 188.189400][ T6717] ? vfs_writev+0xcf0/0xcf0 [ 188.193930][ T6717] ? __se_sys_futex+0x28f/0x300 [ 188.198785][ T6717] __x64_sys_sendfile64+0x193/0x1f0 [ 188.204031][ T6717] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 188.209767][ T6717] ? switch_fpu_return+0x12/0x20 [ 188.214729][ T6717] x64_sys_call+0xa26/0x2ee0 [ 188.219341][ T6717] do_syscall_64+0x58/0xf0 [ 188.223771][ T6717] ? clear_bhb_loop+0x50/0xa0 [ 188.228455][ T6717] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.234372][ T6717] RIP: 0033:0x7f5f7d78eec9 [ 188.238795][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.258447][ T6717] RSP: 002b:00007f5f7e5df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 188.266900][ T6717] RAX: ffffffffffffffda RBX: 00007f5f7d9e5fa0 RCX: 00007f5f7d78eec9 [ 188.274881][ T6717] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 188.282859][ T6717] RBP: 00007f5f7d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.290835][ T6717] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 188.298813][ T6717] R13: 00007f5f7d9e6038 R14: 00007f5f7d9e5fa0 R15: 00007ffd83742d28 [ 188.306798][ T6717] [ 188.309844][ T6717] Modules linked in: [ 188.313875][ T6717] ---[ end trace 0000000000000000 ]--- [ 188.320000][ T36] audit: type=1400 audit(1776500409.576:655): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 188.341839][ T36] audit: type=1400 audit(1776500409.576:656): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.344224][ T6717] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 188.363197][ T36] audit: type=1400 audit(1776500409.576:657): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.363237][ T36] audit: type=1400 audit(1776500409.576:658): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.369783][ T6717] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 188.391097][ T36] audit: type=1400 audit(1776500409.576:659): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.411357][ T6717] RSP: 0018:ffffc90002f1f820 EFLAGS: 00010202 [ 188.431107][ T36] audit: type=1400 audit(1776500409.576:660): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.451757][ T6717] [ 188.457943][ T36] audit: type=1400 audit(1776500409.576:661): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 188.480736][ T6717] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888117682600 [ 188.480768][ T6717] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffff9b7 [ 188.480787][ T6717] RBP: ffffc90002f1fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 188.480807][ T6717] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 188.480827][ T6717] R13: 7ffffffffffff9b7 R14: ffff888120677038 R15: ffff888120677028 [ 188.480847][ T6717] FS: 00007f5f7e5df6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 188.480871][ T6717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.480890][ T6717] CR2: 00005555561da4a8 CR3: 000000011328c000 CR4: 00000000003526b0 [ 188.480914][ T6717] Kernel panic - not syncing: Fatal exception [ 188.481227][ T6717] Kernel Offset: disabled