last executing test programs: 1m10.186823985s ago: executing program 0 (id=167): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x30, 0x6, 0x1, 0xa0, 0x4, 0x8, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x800, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x0, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x3, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f4bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4b, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x3000, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0xc, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0xa, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x8010000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffc, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="360fae886ceb97c63eff2e0fc72ac4c13de2b80000008066baa000b000eef30f09440f20c0350b000000440f22c0263e0f300fc71cba0f20c035000000400f22c0", 0x41}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0xd000000}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001140)={{0x1, 0x0, 0x80, {0x1, 0xffff1000}}, "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", "88d550c0d020bb25f9e124d57cb16eda462dd3fb2b03307dd3133186ad00c7caf0a2088665ebbc09b35f7568b1634a0989b8cbf5e7cfed4de5df3f29bec183e73dc33ce60c6253e1d7fb011f797270f8bf78b19b3b4bf180107f9422db5eef48c8941f32621e97b05f0d09ece8ee20e09e081009efdb65c37437a15a2e819d92f080f95d47a014beb63db6a0d0768ab9750673dd7d176caee22335a99c9815a669778d04e528aa2c0c876ba618f41c7dcc89feff315b83055f39fcfb8af1213dfd589cf8540c04cdf32be7671351009915ce3f5359f68496df3ba20d2be8b2abc4207c958e7923439935e95e42ad920df6e5c9d1917eda992908a37331a6bc6fee8ca6bded800321032b04955db3a0a53602dd10129d5f802658eb842717b719c295254932ff7fcfacd90571f7e146567fe5befea032a6654973bf5b42bcc62f9696b852793e03827e9f0f38bbff52013475bd82ed8aed949ca7c27f5ae15ba08acd4d4733d33ff9af624307e5d191cf3a26e1a45ca0434a4bba4f84769230cf3e49d215186dd4928781e9b53a03d0e9327791a793aa4791053f7f0241630ef69dd30dc822ecd1ff6b9f4d1fd95ba545421ab246d84eabb194813cf46f5ff6ca289718ddd1820f1b86ba1a4dbad3c20cb683574f61b82980d76d5fdba24868b6a1482ebcb2303a25e02033db7609d996b4309728b298bc5d0375fd9016736ea8d487b58e794bdb77d2d468de8a09a15c97021c444cea10e680abafe6e5a23ab4243a0741cb50fb9d88fdfd8aa37ab57d542b04e8aee7a2ae582b05fee1da8bbeb1283185b548e5c626aff69b929d75dc75fcb122f8ab316323ef1adf341c53dbd784368da3a9b0e776c07c3f31c9bca2ce5dc8794b6450120de1e8f008ad9b817143ac478f18aaf7aac02200e7c19bba87093fbae406bbb971c6aba876beea0ead6f5d9d0ae68c1f8c075ef974b25cce6e4e6e4914146de27effc2297ec8a46dda614d156570ff0bbe9e6d25e3904094d339a108b937458453271449ce5866b38cb0e09ff07677e0be8e0e2f522c01ddbc1425abd31ede1c4915c9d0738bb0430e42357d515cc4c8e46f1c168433f03b32d386e7eafd513ab1ced0f3d0ac479eb433fa715050b703126713c237e63b5083648d613850e6dbd82a0a297355257a9ed0c19261d22b3be3428947ac74e882a47afac3038fe20fcfca2228414e0d64691cb99ea2fccd348f27857792d4c18adeb595492b022ad63f6144a456e8e27e37f4a7fa78ca34fcec1352e0d14e031b6730424c7a357df46b6a1c64bdaef132503f5cb9f9e8883a5980ff66a8c9c01e846af14b28f87b28c74f87b9dad053e69bbc96a21c540e1c44c206a8fa0f97df93bc06aab6a9ba4ac50e22e4b7135f7edea54eb9758dc9cc053cdd4e4c9f42992a1d58734a38077c1f3e904f9360239eb1cadd4898a51e49bc9735a32c18d1f25ec0890eccfd0e594a21638b757afd19d34ab05769f918d7f5cb1b8bc693b8fd220c835c2a7ad18f717242b50b9f9ddd98b1203f917276c7fb0c0581334cecdaab35f9732b1d2f2eb0e1d2a0bb1b1cbd095908740ede07b4e437a9ac31e3aba46686600589b2e24de03e0e6b1acc89e6c4e5f76099269fb3d43dece71e0b6636aa3bdc55e21a788d27f21234bb5d0cb54398b6f79560fca4a36105af02338a672e016155652a4cab2974603382fca497a3baf895f5d8dff2e9448eb882967221446335e1076c661cfd2cb20f55969109223f0396c361a0650be80f0aa653cee7881d5f33c031473a93b0e5530d37adef0888bb625ad65894847d370402ef2e91ed2013f15c05879d487ec0b46bd085ab54abd6ee7ecb08cdf7b746461bb60fd0537453698eaf7e6bff0914eae32c4644ae02ab74d2a15a901d7fa294e20c7d59f1be5cf45e6f8fc0dcc4dc790de490fa1ce0b34bd0efe6149dccf757d3ac564e908f41f2715f19b882b42a795879825fd860f7b15640b6f4b4f3004551561c0c4b51472fb1800178dede67603d448604076bce3d280d565ccfb13abea8a3dfb02f3e5bb986776fcb6fc58a46fe0f97f483e8a00451325fdbd3afecf2074486824d380323971faf1f542ee8e4a16415a916eb5eaeac3b68532f500d845d58b1f83a648c7ecb41550bcf274ccdb897851e26e4d7591c486ba1bb92178d1ccd55315afad3e45bd6fe1fe30b3611d556d6ca4d83c230456b22cb5f4f26bbc303af18675b568c973915cedc199cfe5a7b34ed76a22ec8f7577c83a8dc58618926c671620675f5add91d79ceaecf35f505ab2e24ce06f5997cb94b5712680991ded7eebba5ef7f48de48303601586cd1d1c62a9941e7abec8a370e849e3ff10c1176a46c5cbd222b28d02767f6a90ce5ee33b5bd6c91d8a12847fc85e3609bad291e313a00def95b583c063da251f5d9c460e90a38b26a988e2b54031872bc2aa9b3fe7ae4ee29b6337f3f19e11a06bf912b4a6844999c4937d2835d411507f0079bbfe5f24141c925c990454184c8e26a0df591f05b21dec8e6f96dd4d64e0043ffb42088393c8368f394151bc69989c164f9ec528fc8bc3ac8e86371c3b9a847781b2e8365ca9cac871ff8125e7c51540dd2586bf119ee379e21b6eb2342512863bc0bd6d6eefa3f9210348d2f65983615cef91e68d0cb056ea2f705b3d2252496994f38c063fa201901ca17c6d3d916892b9a92936e4a51ac3fe87d477423e1a21a9eecab765b6af536189888231e535524a618d08fc385b8eda7098b8b19634825741a60ef4830e824c1625c6d7f3d243b12ed4bafe8416cdad334f925a23013f1794c2b23cab147ad082e91cb35ac098c5f7295446a6d2834331a276b5cdc9d769caf734b1d4bb0b062c5a1534b760ca22bb32f694f1f81984180002c6bc21b3d33ecaae2984e9355bff71bd55e9837829cc18d8a6ee243c744010ecede0f43b232ef7627e86b5a1d164b56641ebef18e068c3112060500b76f0596bcd4024c4837e4e9bd5a43436e4903b9dbdad7478aa1e22ff23665e04ea24b1b4c33ee686fc8cc02c4a6ca2451ad2e168828fbeee41d126806cf1dec7851f1d28ad7892ff186f01e2ba7601f8859847ba2f057ce18bccdb5a3ced7ee9e1371f91149e4c4b82b1c0d7e69e1ff869b773e8190c4926df37a10fa6b017c3f36296bee4b562be0e0016c948e3171a3db2ca1caf6685aac3360f717ad02c0cb4c48209edcac5075e81c94c06d3a948f2adc260d5a90915be22d88157364473594c2604f7d6aa747a30aac8bc28b26bf3a9375d9f1ccab2675e5574271c4a2976d31b4457e1297b1668beb43beee225da95e08cd5f095aacf7cb8cc05ebbefb85e2c52466cb97ed68048cefa37cf9646f8f4cd7927e2f8dd389206c885413cb0422052b91ed98c6712da1fb25a2afaf66969e5a40d98e754c25795befe6fb388c371e7bfcfa0161c6782dc05b3563ce58bb06d24dee45c885c780a0c634681d6737cc7ccca5314daee93bbafe260e7232b43d691485fb2bdd694ecd983d783f78c4e4a63a5275ee1a5b4de0b1b85034757fdfd4505d582c672736fb7e53a715a2023a0c4ab9882f999ded75282a338d863d46c3ef132d1f78db9ac584625283c98b6684070a3b50576431dd1465b890897f12fe08ca2a5b934efb995cc2f66f9f333b8180a05bd2472a10922f4b872abc6fffde9f2879ef624fbcf56b0e7225677d1c965a9fd7ff65c6a17a90b0f6c517d007f9ebc795ca98ab0b21d19b968d8c6f820393b42202bcae3759f161896fba85ef5b052565c29299f658e959ef23ef77837c3b4514a1944397e7e2a598cc9d419d5057dc12f1da99894e30bb30eacea226c42272b2c936c46356550a6b5cbda2c58a2a411ddb6bc1d85f215c2af8a6e468f0a7fb0cf7a8ad85892a4a8293025a3d7725f930b7bf30ebaad2808fe55392a87d4ce34c609b6919f171705c2cadf9bc5901c7ab13fc64e82a52a70414b495de6b522b5ebfc139b37153946acc4b4d737f9040310a980863d89d3c39ac03203e07b37b88285bba18348c73ed2422595feaf8065b1f0856ab9b724b483bef4e69dda9643fc8613b9bc3d9045764d339ede24f53b596223e5808a0e53450013de4ffd0963c0ffb3373b74a93f78a26b3cd21205e66896112225e763b9b0042d5ca473c3e908c2b414e3237cb8fb9b9c004597cc0efe41e5d0f9dd391a11ebf6265f42bffb97af657893ccb2a1fa06a0b89b93251f096526730ebaa68d57f7eb2ce6767c3079f090dcd0e01d0fb819f454eb9da2670592d21f9756015730eca10c62a61376b073fdd0136d0464ed8905a64e66b92abc2381c19e025e99db3646a66890e331549fd282fe640612936d8e20ef2e15d472c190ff74baedbc3d3813fe3bdd2063e4b65d5e91590ed60af2bd2f48e551ba7ef5f92b5868823998f265c65aaa48035e4bcf5cbd3b5a5d8de79260248e0d673a8a40c0110362b9820f049bde4fc7ab41cfa541b6c6e6975bdcf243bedc9faf1df5ef6dcc08a310396cd62454dd17c30bdb371a451a9fd56576032b4696fa61e02cbe846a940a9f0e726d6665ef944b045aacfc7a04eca56b8eeb76c51cbc1ba422601896ac851a79c0ffc1f2d6d6454ad4489b1225d33d89ff56e0dd39cdd859a28ff66a657e0f4db0912b179feeec8149cb519dc2b08e2104057712df6742935a0c92b31e211211d8ab72e97592e6be2969b626efa91364b5639e490ca1c0e711bd58751327b59d02b41e2a6fdfe44ffd9ae892196316ed62dcea719a712cded8c4180cb9610d2c431c4503171a17c3358799436f6d4503778e2b567725f94225995202e7ac9ca9d64578164644f8634e2577d64a4a0f7d37e63b94e352d854c155e3ca8a8981578ee0d2bff6942235d89672b5944675525e02d5d4d542c9b39046f0d16ace2393595ca005dcdaf7e8f4e57bc1fbda81ec41114b8a5a2aedad283f2c87885731a67f6c3a73cf7f7c1b58599c8c40ecfebde5fdd2d3f7bd3fdb5cf76e8375df8341b75bfa54a023d59b0db77319e61e79abeab0d7c2e4adec2e661ac42ed7dcc179172b65bad2dbfff2f9d29f5f66c01b19b29047060e949c4be49c7871cc7d000b4fe24a15c53d1bb078ed8d389222e0ce9156a0bbccd6e476221c323f947094028f6f3e918510219fdca8d786111e4e9631ea6aacbd42d63a45f6269ba108497b4a1ef6bc3aa87a9915a897b608f9400a37f734a72b1bb6baf44e9932c307884891362118b546378eb120e73cd960947314bd28b810b013172e03eedb37cdde68b8255c801cd8a11483ed032b2cc75b0b26b9802f1243148128b4f67f24b55c90f0dcef9b52056bbc5369f6f36d20b30e99c32b17127e9d710ac526a42f50256a940a51afeabac91b13763d88234a44fa44e2a1914e0203025a92220724862cec185015c65730b247da6395c91b7c4850648df18176ee7f215211684ce58039dc1974821edc54df719480ae9d440906006230c083e39e97bd406e57f3b7a2709060bc6e3faab9572e4173baf4ef2292980807821ef8c8a47bac6f5bf6a724302642a4d3df3ea30000a4fc1c1545b56dffdfe967035dfb908b576d1daaddbe9642be5621a3860f6bb454dce0b395d9f4eb247ba8bc89e1240f53ca2da09ee68cd78f5ac13fd22874489fc8475d497dd156f6e47bd3a5161bc6add5efead8c87032509fcfc7730ba762a69f8a41ca333294772c71d2ed2b5a2d123634807cee7741ef6c8222ab34b375077d7bbaeaa5a2846d6ade26f2b36e5a61"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x90040, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x400001000001fe) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace(0x4207, r6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x13, r5, 0x66053000) 1m10.126301731s ago: executing program 0 (id=168): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'vlan1\x00', {0x4}, 0xc92}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = gettid() ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000100)={{r0}, "e3cd5e437dab8531fe5a1e6cd863e8d3bed5ffdc7963afe7f89844838f9f5a509d7c97ac68919fa9367962ab97d568f7285097c76ee9b50af5e1fb164be594ecda352c32682c8c6b82f1817f580f078c70cac7a5b5d74399a46f8e15a6228ca83872ceda2f29677e893c6b957de2232ee46f3387dd27c2c23151ace1d9b04b4df3878cfdec1497f84d2fd49272554eda46f4ccf043c848ea11855146af6c90601f0f0374ae6072a2fd696f594781f5217ebab2d43a6c3747c55781b3de3b06ce9ad2cb52c5832934c4ee7df21b4caa598bb38a52db3ef7dea612cdfa48c8a33cc52bd8ef74920c93ea1ff5d8fc0267a685d5e6f3195bdf9d4fac828a1230aefcb6b60b4d8a281c7d1bf8c8467c9f22eca9a576723becc45e329711c7b152325c8b2e30d3e8d6c00e49920f3da66b63399333349f38c029e7fd34d81d5ef5520f37e3ba5cc5441bc2943de1ff06dd81969517321f214f628a6591856004f836f6356e5bae376c6f9f80756f8d43e5fafe28ade9cd2a4db28617400aaf307f4314ce8a6e74fea564bf0b2c8ebda4520325f9a796323652abfbf7c73cff7f4e77a76d3638e81385e7c4dc19d585cb8f88f98558877d97ed50fa58a06e354887a4acc7478fe7138bde303d69031a83725f39eccfd81bae823b6cc060ee2da0b6c4fb928e19a396a210421cf7efef544b7f6bd6facd7453ee42ee02238af1c2266af578989733c7456f49cfcffb7bbfaf94986f601f561af61bab4f1c97f646998147519ef6ce4af634ce702b86a8eb383c92f3a0c1e6ed364844b7eeb5f84ecc6c1f9f4ad69d735b805dc799d0fcdc12dca669d9d2055aa49f816bf7b61668dfe96463f35bafcba78060e583fe5ec4edcbf4cc354bd512e7546737c5f9ff2c9d36977bbf59515ecaf6e9ff79eca18498766b656652dc5eb4b059a00642d9a3383ede5a25d9ff5fc2bd2dec7847950f87dae87234dcedbf561f8c336b2e7ba85738c16b5433b7a6ff6bd937c435ec186bb5891cfbcf6c0ed54e1082ea4addcacec052c178cdc530467a899c95f26083ee910bef5e7f5c6cde8c22c86e3d9e5ce5ab9e7bd96f7cd4c5904057717dd273b847e8b02b6dd29ffe8c35a15182dab7c67e2f6a3bb3e5da442be09acc0fb343f1f30cfadcf1d20d42d5dae13d25cf718f7401bdcc8f3578faca3363adc6b1fab673f1f5863df0f853f8cf0a4924e32d8a0f925c74275c2d7621ba79343d32b68bcc9309da65969c8f05b2f7f64bafb0f6495723fc0934acd2f69ef946029f6b90d6cacbaf5f911288b1f31dd8964a97d6a7ae4e1fc217207a764496810549b724cfd4f58c45fb4ec14d23be72d84b8d457e1056cee314592ef6a001a3f87261a256606e55215e045986821a4173666b5b7f84138a70cd127295593c10a8ee2fcef3b9fa57ab0417dc417151d99472affa96fe42274692e153a3693b9df4082ee5de31f60357076a25bfe9e0c6a6c55917650f303f12805e7e2fca9ea56b054c17006aff4356616716b0ec4089faaf6908ec859b137f88741e84f1d1d02d7a1af0fa4bfc8b40e323bbe8cc57ee9f89d765aceb8a8db90436689cc89e05c5e493c1227ef27ccb4253492271d7112a84cc37d21d3200a9b08dd15d76de7e9f37e7ec893cf7e4e2f76bf516ad8daf3e516cd7b07614a24cd2ed92e5788deed5725d737d118820241cbbc0fbe23c4d986e29a18932c7513c10a2cf2132a7bdd09d3859394a46a2a3f5fbae952d65faa2250f973ad120c8a78028fb4285fc06e3f7ffe2c7e4ea6567ce81c3cc355f7fea4b276eac4edfd4570ac6d5092eea986ea3f989e209331e1405e901e0d6d56a199c6067a64a852abafd06d5fef6ad15b2bf310fa0820affab2056ac8eb1b4e98236d40d6ac1e3cc0887a7e29f4d8232ea7d9efb13dbe41b6fec6601404d600f6f8a60c58e76256b0715a8b4fc403ed4c012421f4d5c17f7605903c29d3e1921df7caa11f18db9a561a5867e29bd3ee6c46e75c044ccf924d2b6f262ab3fb3044d10c65cee4709871a5bf135287a5a53603907dfc9a6fc51924525e661f0c1b2d102fc6c05d985af7d5193dd7a74167a7f4ef9f634920d2de8d99fa8821928f26c809482b05d4650d650c7f24d8f74689a0db6e66106817f5ab908daef5f5e92517acea7901603ad7c8748f80862b765c9a170f642a2da24cfa5cc14f8c8a0c3e4fce9779939d716326e34dfa1e17acedc7a3fb6c8159fa788bf578c581938217b1d1ab093b30c7bcdbe93eb05cbc15cd8b205c7c664198ed02063e953f02616a5997834f955032bad51400a6a7cea54189d6f3ef785797c72713a679ddc06e59a1a29a72e7e9b2977bed7328d3ce385272c94aa7bf0d11007c9bc366b694738962e766145e0e079ac47d477547d0fe17e6800c1a8ebd2496a3d17da027f68f9dd389fb3cb5333b555c9adc2af00f5879664c41febf85550f2d09ab64e518541fe4c86cb146792b6dd75aafd1f6098c729546d1dbea74128474145de9fda3eb3b906e5665c76a8ce52474cee527c4e3305aeed4bb8193728c9384744da44af50d3f242f9290af417347275ee469f8570601d5523c1dfdb7b0b2d1dc90d07dc1cf3eb127a87e8dd4727b1ba9912551f1b187bffe1957e1973494e815f21654aaca80020b216a538709997f56d173e8894ba9f225b3d2c731731975320e040e603f1780416897caf337a7947395e4bf1b8a4cb29ca29397d474ace6b66e4422566bbfb39fe6c5ebdda98afab5c83ed9c31b634298a3d2afb5066134815c4b58d7e6bdf2e8f37cd56da5e12f2131a4154280b1f58ed10e24a940f588c4b00c822d5034076b5ada59eb7f6784fc4738c384aaf740cca980e8b656dd0d8563dd264e6d8efb15c64c72f5c8339776d58fa2d9fedc1e5af0d59c73b13782dadde142e2035011bf3253dc9b47a5d15c2b8f0bf2f9fcce8778c3737dcf0d41bf7076f92f2f0f49f0680082fb2cbd3206a59826f762aaad2748008683800308ba9f971e77096e72290f8992b96fb924789c2d9ca134d19f66354f1ca081665abee35b7016d91a417bc941443a6866576f5025a0ec37e302ecd2b292438f3d105a052966c6dd6bf7bbd7e36b44b05ddb97131a69ffe18c0c3006386ed8dfafc98ff4caa0442cb2e6922df4055a9a2a61db391af0aa51cda1d2515b04ac94c997a90ef2126ee4235c7866bab0bc253e68b1987e44e490297ebf1a67fb6a680b3afba2dbac5ce7825d552ab798737ac42482cd34cb4e34ed9b05a473711999a9b1379edc1f30bd88c75b002410f1d04c13adcaed49bc485f92106ec7b8ebb84141364133e31bd7c2598fdde1fed15529ad23a57a037bb475d125eaec23077f310b2bf449735297d10112fea28d6ba7f4c1fde2648a4ec1e8333daa92fc1f5cf43d621ce72299d069013206e4908ff7b8b53f28dbb27618ae6c7d89c6f8f4fd4a32f84fcdf7701af91abb6b509704be9ad6b18f571b285e9d6a1113b97aafd9a873ddbd67c5247fe3972d9a69cf78725f069af3dd53fbee1ee8aa64f53578640f5c7fef378b3fb1d21f1a6a2c5e4c54294d2d9dce1d9cbb96cfff0bfe9f35591be4c6f5bad4a09453c96575063594e552b0f33a7caec7b03a1af127da6c9ee4af5570ce260cb1fc27c69e7289d1170ac8cae2ebb41e9ff2a307986924dd51e75900c3ba5d0aa9f05fbafcfac8b328533d3d887f04c88e03189f0310b69845be62af0100dbc860fabf8ba7725dd1eb4b06b7e0ab9723722eb62bf1e88b163ea32adfafef25468d9ee3a77591872e33b52e4058f118da1c86aef079f57a625f9d497825b6120ae185629ed47e1cc215b23f40e88066c55a2ab81052bbe1d41717c74566589dde1486d0b6799ab672da590e110ffb4a18f9f61f59dc7ca70a50decd0de9f663e43d063f8aa1ebb93f9deecb7eac959013c312c4cee1dcfc6fdd7974835246f484fb08b352a7d277334f9334b307e15faab62ca083df9de3df1544bed2a5bddab0cb7aa6cc48f52d24f6b9568a8e9bcec06e8fae0a17e9872665e09261c9d4fe12f2c34f1b6e4329e10280401aa941ff31aad37f0ec554e6231b338e28e0642b51b000607dc9baa93a1319d2e57c45cc1a0d5e95b5301ae3776b84fc4e56bcbad7e0fae6113c25f97cf68ab6d8aa9d28e19edd3104163d4a72d6750654919ce434b1eee03ece5bf45bb7793a7d2dafc99dbf57669879b091143156bd5b3531f3b95d3b3bcb0ef5395d8c1bd9b537cad2eca00cca0e610c86d5cfce96602df71dd3f952f74160b10d370209940c26c5b8ea0cdb72ad1478e4ae2cd821b3be7a8d003ebc2d702a4264012e78402602b9621ce38872c466615d171ce80702607fa6742aa9c3de2e395d5c41644b49c68311c6aeda6341214e3aa598f615c669c616fe72409eb8644437c38a8f2db00f87f29ade99934e276cd25f4a1e75170054169fd5fe9ce483cb9a8b186df481535d12e311ea2b51a59417381eb26f53b392528e0625152437b9ec0a72344fef3a0adb5ada93f27e7a51034b544f8b8a830797d2e1fe883dfedee072d613b29ed396556247ca7de34f74f43a1a1a284b7df9783a886ee30e0ad7828c6f481e9e06dc6565e803572db38a1b7800b6eb89a46d11508b93a43f9fe83aba9aee1eef6146c13a6aa8536146db136cc44b81c9c248c09a6f7f7a471b213b0a505c290a34253fe73af6dc802c1c167b18e5cdb68ea08786a3b43eec6f2cd437701af9170daa88a07a49f3904ad543be3b1e6235403a674eccde65053cea7dd8845464c25bf9e9da11470f808560a4154cff027006f41ced9381ec3b20ae9011e27ec17d08500edccc86726c7277aabfcfc7309a4f3e1dde6db8b66456c2c91df1654cfdef7252b10db43f3d0dced051eb04a619c4381dde2e19bf60c1944205db946a24cc724932a6610d5d82e5020ba6543c9302fef80572a84837ade8af0743ed0f94914a0375892e241318fe5efe016b96655ab1b44660ce248353ad0701f2b78f9616dd4eb03dbc97ba7cea6b113fa142a08c457b73194ad711cd3b36dae60eb8af799bd68ff1c607f3f7bc457c511db75e4c37de9d1266c1db756579a296f2aaf581618d27936dc29ff8e5f29406067b170e1b8e8203619b5441580c45b7df2a98faf914742a4f8b798e11889ab0b618233ce90a18963eb739c2f961d28d9d2515297910f0760656529c7db5acf9f98131ecaed439868054a0a5dfc3fc141b11072d50f4ccb8c109e7a281785214073ba6b40660d4f19c7c937145825ae118c4a5a1b6c2fc67b167d6cd93e38c2440bb6a88e3121f31434581292d601a69aae59ff015e209ffae09eddbc520bdc9b340b336f3c819aaae426bcd04f8c122514ad060361c8eda634c9ee456f85b518e32029dbea030aeb5ea96996d5d3124e2301646d1b7b34d973e2686b17540f50e5a2698e1c66efed4c412db8a48a4c47fbbbe3aa1adc6a07994756590ed7a59727c4f52a2c208bb379d628823a08d8214f5ec5ddf55f92a56d2d23f64c4c0814998fcd1bb8373e3948696aab91be8f6d9b04c487cc0450f62cee345e9747ab85b43a3b5b10fb4b4b4f2b57f70a525b7f3008eec755f4e738a209f75e98e0f1a8640513194afc1ab1dd636c2205a0cb688d987a09de0722c011cf204255acf59f398dba9bea4667e53fc88756db5d60af5cdb3ca97cfde95b3bfc7f8c3dd3fe1aa4524ce0de44fb2a61260b094d3222306a1202599a4c5ddd9db502aad66e3d5c87b0f088e143"}) connect$unix(r1, &(0x7f0000001100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mount$cgroup2(0x0, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), 0x2200421, &(0x7f0000001200)={[{@pids_localevents}, {@subsystem='cpu'}, {@memory_hugetlb_accounting}, {@memory_localevents}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@memory_recursiveprot}, {@subsystem='blkio'}], [{@appraise_type}, {@fsname={'fsname', 0x3d, 'pipefs\x00'}}, {@euid_lt={'euid<', 0xee00}}, {@obj_type={'obj_type', 0x3d, '%4)^&'}}]}) capset(&(0x7f0000001300)={0x20080522, r3}, &(0x7f0000001340)={0x7, 0x1, 0x8, 0x5, 0x7, 0xbdf}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001380)=0x0) capget(&(0x7f00000013c0)={0x20071026, r4}, &(0x7f0000001400)={0xfff, 0x9, 0x3, 0x9, 0x0, 0x9}) capset(&(0x7f0000001440)={0x20080522, r4}, &(0x7f0000001480)={0x7, 0x7, 0x0, 0xf6, 0x5, 0x3}) fcntl$lock(r1, 0x6, &(0x7f00000014c0)={0x2, 0x1, 0x5, 0x6, r4}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001500), 0x1, 0x0) faccessat2(r5, &(0x7f0000001540)='./file0\x00', 0x10c, 0x1100) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001580)="201b5afe99b77aa1469c26efb1c53d99c90066227ff6182b734a9297081f45f072a5a1e0e64089b94e9ecb26c62ae21edaa5c4046b3d53629e58de9b2a387d74b93dabfd9dd1f4bff96c0222f67fe006411b992e11dd6bc52b09f7731f0f6cdc9fc6e97cd321d6443b1e4731af48340efc5e97fc680c96ff0b033a022de73547f73cf6f8a26099b60d2a2d00b142fb1ed34c09f89da3f35cbda779b43d2f7258475baf6f35fe54c35bd6002e64e0316f89ab78f4c7181f08c524b858617db5a31f8dfd888e5ff67dcbd86e26ef0d3a1658bd6499f35f0781b977ce39fcf834d46fb8cead6344f645216891daecd73840ea3dbd92fb96258ddd173265a33c360b") setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000001680)=[{{0x1, 0x0, 0x0, 0x1}, {0x4}}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x10) splice(r5, &(0x7f00000016c0)=0x7fffffffffffffff, r5, &(0x7f0000001700)=0x1ff, 0x7, 0xd) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000001740)={0x0, 'ip6_vti0\x00', {0x4}, 0x5a}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000001780)={'bridge_slave_0\x00', {0x2, 0x0, @private}}) recvmsg$unix(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000017c0)=""/223, 0xdf}, {&(0x7f00000018c0)=""/127, 0x7f}, {&(0x7f0000001940)=""/142, 0x8e}, {&(0x7f0000001a00)=""/68, 0x44}, {&(0x7f0000001a80)=""/41, 0x29}, {&(0x7f0000001ac0)=""/236, 0xec}, {&(0x7f0000001bc0)}], 0x7, &(0x7f0000001c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) capget(&(0x7f0000001d00)={0x19980330, r3}, &(0x7f0000001d40)={0x1, 0x9, 0x6, 0x2, 0x8, 0xf1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001dc0)={0x1, &(0x7f0000001d80)=[{0x9, 0x1, 0x5, 0x7}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001e00)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f0000001e40)={0x1d, r8}, 0x10) tee(r7, r7, 0x0, 0xd) connect$802154_dgram(r5, &(0x7f0000001e80), 0x14) 1m10.125549931s ago: executing program 0 (id=169): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (rerun: 32) fchdir(r1) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x800) (rerun: 32) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000021c0)='pagemap\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000500)={&(0x7f0000000000), 0x5, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x9, 0x0, 0x2, 0x0, 0x2}) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 64) 1m9.43114824s ago: executing program 0 (id=171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') pidfd_getfd(r0, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, 0x0) 1m9.357662947s ago: executing program 0 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000088) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/warn_count', 0x40000, 0x120) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = getpgrp(0x0) syz_pidfd_open(r4, 0x0) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80800) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000001c0)=0xa, &(0x7f0000000280)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1m9.353603107s ago: executing program 0 (id=174): r0 = socket$inet6(0xa, 0x3, 0xa5) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0]) 1m9.304295662s ago: executing program 32 (id=174): r0 = socket$inet6(0xa, 0x3, 0xa5) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0]) 28.465124292s ago: executing program 2 (id=977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x5, 0x1}, 0x7, 0x2, &(0x7f0000000040)="acd529a05af8a4d60008", 0xa, 0x8, 0x0, 0x12, 0x0, 0x1, &(0x7f0000000200)="3df9b25511187fcac8b4b6c52e9525aea628376ae6becf5faf28927c92e5230e91522b2ef0ec0ceecb15956f7a8f3f29279f9a3c10f621fed1053066a37b9eb1110856919e3b5054b33a174c1186912aa476c1376065a27fba40decb4d970d014fa4a7f2ab9fbdd71e2c1cb41455d78df0436fea526119566ab43c107ee5b90cdadf2e44f9cdbe65a7aabfde64be96958500a028d035874f5be02a69c64a5bab73514a364b381fd45e509243ad3ed8f27311e5cc8841942d7a56a307a640bd6a11c39fe07e89477ff0101733c4377f6deb03b0c731432c6a45d6ae59116de2", [{0x133, 0xd4, 0x5}, {0x4, 0x4, 0x80}, {0x4, 0x8457, 0x2a8740}, {0xc30, 0x8, 0x7}, {0xb, 0x6, 0xb06e}, {0x8, 0x5, 0x1}, {0x79, 0x9978, 0x100}, {0x8da9, 0x8, 0x3}, {0x8, 0xb, 0x6}, {0x4, 0x4, 0xc95}, {0x7, 0xf052, 0xc5}, {0x6, 0x7ff, 0x100000}, {0x8, 0x6138, 0x80000000}, {0x7, 0x5, 0x2a26}, {0x1, 0x9, 0x6}, {0x7ff}, {0x3, 0x3, 0x4}, {0x3, 0x3, 0xff}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 28.452646363s ago: executing program 2 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000100)={0x2, 0xf, 0x5, 0x9, 0x0, 0x10000, 0x0}) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc", 0x2) 28.394742028s ago: executing program 2 (id=979): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203010902240001000010000904020002"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) ftruncate(r1, 0xf09) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (async) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000) 27.212215275s ago: executing program 2 (id=997): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 27.083555368s ago: executing program 2 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}, [@typed={0xa, 0x120, 0x0, 0x0, @str='*\xc4\'\'%\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) write$tun(r2, &(0x7f0000000340)={@void, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x19, 0x3, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4d9998212"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9]}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) pread64(r5, &(0x7f0000000080)=""/178, 0xb2, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES32=0xffffffffffffffff], 0x1c8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r7]) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0x4020aeb2) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000180)={0x971, 0x40, 0x9, 0x9, 0x40, 0xafc9}) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) 27.083167888s ago: executing program 2 (id=1003): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)={[], [{@flag='async'}]}) 27.051574461s ago: executing program 33 (id=1003): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)={[], [{@flag='async'}]}) 805.23028ms ago: executing program 4 (id=1578): r0 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYRES32=r1], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x40000000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000440)={@private=0xa010100, @loopback, @multicast1}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r10, 0x0, 0x4040140) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r10, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="1300f900141e73cfbd577cc7bd1f7dbb1071f4000500f900e60000009200fc006a0f773fe1e14293e6e324ca7e9bfa9907d187b00c3b0be09162025a3972a553805039ab659f9aaa8634b334354cb48dfcb265e92f948e077c407fd764cb16acb1f3a01efe252323bc10c5dace36e4b139f859d558a6b908b49a183394edec0ce71c43d8c47a2ff31557719eea62bb7c2eeec11ee8648443f8571e6f3ee66be30895e18104f928b0"], 0xcc}}, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r9, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x8040) 408.304319ms ago: executing program 1 (id=1582): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000980)=[@out_dx={0xaa, 0x28, {0xc04a, 0x4, 0xe5d5}}, @uexit={0x0, 0x18, 0x10}, @wr_drn={0x6e, 0x20, {0x3, 0x9}}, @out_dx={0xaa, 0x28, {0xb054, 0x2, 0x8d8}}, @uexit={0x0, 0x18, 0x400}, @in_dx={0x82, 0x20, {0x127, 0x1}}, @wr_drn={0x6e, 0x20, {0x7, 0x9}}, @wr_crn={0x46, 0x20, {0x0, 0xd6a}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0x184}}, @uexit={0x0, 0x18, 0x3}, @out_dx={0xaa, 0x28, {0xe750, 0x4, 0x8000000000000000}}, @wr_drn={0x6e, 0x20, {0x1, 0xb}}, @out_dx={0xaa, 0x28, {0x150b, 0x2, 0x8}}, @out_dx={0xaa, 0x28, {0x86e9, 0x4}}, @wr_drn={0x6e, 0x20, {0x6, 0x7}}, @wr_drn={0x6e, 0x20, {0x2, 0x6}}, @out_dx={0xaa, 0x28, {0xeff2, 0x2, 0x6}}, @wrmsr={0x1e, 0x20, {0x821, 0x8}}, @wr_drn={0x6e, 0x20, {0x1, 0x6}}, @in_dx={0x82, 0x20, {0xe260, 0x6}}, @rdmsr={0x32, 0x18, {0xb51}}, @code={0xa, 0x70, {"0fc72b0f01d1c7442400e6000000c74424020d000000ff1c2436400f001e400fbab500680000eb48b805d10000000000000f23d80f21f835400000100f23f8f345d88d8d00000065f340a766baa100b808000000ef67410f38c890daa017d1"}}, @cpuid={0x14, 0x18, {0x4800000, 0xb04}}, @wr_drn={0x6e, 0x20, {0x3, 0x7fffffffffffffff}}, @in_dx={0x82, 0x20, {0x7ff, 0x2}}, @out_dx={0xaa, 0x28, {0x1057, 0x3, 0x9}}], 0x3b0}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000400)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5a, 0x0, &(0x7f00000005c0)="70ecc00b398fc2d305dbb8580b48d26fe73063b83c3d675b5567218fb4f08adabd83e0bd58480cf25d17c8e12984ecbf5032b43666f9d797fa58257111c4b96f2d2d70754c704fb01586622812793868a399348a39d27f4f16f0"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 354.122755ms ago: executing program 1 (id=1585): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000280)) write(r1, &(0x7f0000000380)="0627a2a372cbbbf1a0e379f48a23d5e2ab714509a6db50babf9aae994e079cb51f2a1f0eb8a7cf3e05c7aafc8c44053184512e43f8077f64cde971f4ce93fd66d3716faf31c8fa25cc409915c138b9ddf1059a79b3b5afde52a8b4051e521d2e3a3d9506dad3cf027d13ce39b2a5277a8c49f7af5dd02627523e8bbfc5e7305725fd62f9627a4a5236998318694d6594692df6c4608d0d9c35a51d293c80b60aae87974fe03a6f457ead4e64e38ce3669c03a121117100"/192, 0xc0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0xb, 0x0, &(0x7f00000002c0)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f02004754fff2a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sendfile(r7, r7, 0x0, 0x7fd) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) r8 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 351.506065ms ago: executing program 5 (id=1586): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) (async, rerun: 64) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001480)=""/89, 0x59}, {&(0x7f0000001500)=""/198, 0xc6}], 0x8}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) (rerun: 64) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x0, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff7ffe, 0x91, 0xffffffff, 0xfffffffe, 0x400, 0x2, 0x3, 0x8, 0x2, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0xb8f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0xfffffffd, 0x3ff, 0x5, 0x9dc, 0x0, 0x8, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x6, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0xb, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fdf, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) (async) ptrace(0x10, r0) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x200a063, &(0x7f0000000080)=ANY=[@ANYRES64=0x0]) 346.665595ms ago: executing program 1 (id=1589): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x167342, 0x0) ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000000)={0x7fffffffffffffff, 0x7fffffffffffffff}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 345.530726ms ago: executing program 5 (id=1590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0x0, r2, {0x6}}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) (rerun: 32) write$cgroup_subtree(r3, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) (async, rerun: 32) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (rerun: 32) pidfd_send_signal(r4, 0x2, &(0x7f0000000180)={0x1b, 0xffffffff, 0x7}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 331.809547ms ago: executing program 3 (id=1591): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) bind$inet6(r2, &(0x7f0000001dc0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80000001}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="fffe200094"], 0x15) (async, rerun: 32) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x100400, 0x0) (rerun: 32) ioctl$KVM_GET_TSC_KHZ_vm(r5, 0xaea3) r6 = openat$cgroup(r5, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = dup(r4) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r8 = syz_io_uring_setup(0x11c7, &(0x7f0000000400)={0x0, 0x5683, 0x80}, &(0x7f0000000080), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r8}, 0x0, 0x0) (async) read$FUSE(r7, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f00000001c0)='net/wireless\x00') (async, rerun: 32) ftruncate(0xffffffffffffffff, 0x3) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x6, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x4, 0x120, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0xed05, 0xd}, [@dmm={0x7, 0x24, 0x14, 0xe, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x400}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x58, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7f, 0x1, 0x17}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x13, 0x3, 0x80}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) r11 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (rerun: 32) sendfile(r11, r10, 0x0, 0xffffffff) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'vxcan1\x00', 0x2000}) 321.811318ms ago: executing program 1 (id=1592): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setresgid(0xee00, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/137, 0x89) pread64(r6, &(0x7f00000000c0)=""/17, 0x3f, 0x1c82) r7 = syz_pidfd_open(r3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000340)={0x0, 0x1000}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 141.035836ms ago: executing program 5 (id=1593): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0xe, 0x10040, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44816) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff83"], 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008804) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006480)={0x2020}, 0x2020) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x2004028, &(0x7f0000000200)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@nfs_export_on}]}) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) fcntl$setstatus(r5, 0x4, 0x42800) (async) ppoll(&(0x7f000000e200)=[{r5, 0x20}], 0x1, 0x0, 0x0, 0x0) 140.150086ms ago: executing program 3 (id=1594): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@md0, r0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc1c00, 0x53) r2 = getuid() mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x882c00, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xbc7}}, {@gid={'gid', 0x3d, r1}}], [{@euid_lt={'euid<', r0}}, {@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@audit}, {@euid_gt={'euid>', r2}}, {@smackfstransmute}, {@measure}, {@dont_appraise}]}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x100000001]}, 0x8, 0x180000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x20010, r3, 0x100000000) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000300), 0x4) read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002400)={'syztnl0\x00', &(0x7f0000002380)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x2c7, 0x8, @loopback, @mcast1, 0x7800, 0x700, 0x3ff}}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002440)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x7, 0x4e21, 0x7, 0x2, 0x20, 0x80, 0x2f, r5, r0}, {0x1, 0xff, 0x6, 0x9, 0x2, 0x6, 0x7fffffff, 0x6}, {0x3d71, 0x74, 0x4, 0x3}, 0x8000, 0x6e6bc0, 0x2, 0x1, 0x5}, {{@in=@multicast1, 0x4d2, 0x2b}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x1, 0x2, 0x80, 0xfffffff7, 0x91f, 0x3}}, 0xe8) pipe2(&(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000002580), &(0x7f00000025c0)=0x4) syz_clone(0xc000000, &(0x7f0000002600)="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", 0x1000, &(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680)="d8141149cc949978051e19b81ea17a8a165b1f30de4898b39e1f0abe7f049988c3faa55104105e05163755757278cd0ea6099d285ec2c1b23ec8e07178de195e525c08812d03ef0097f04af26f254b3206095dcb19779c6112f9c9de8d78f7808679d160aa8e910f6d516b9fc7f08dda5f8559da9b901cf6b75d8f52c5372ddde00a2e7118fa262757a705b059151eb2318e420f3414e67478e64fbd9689976b60bdba1a70be9112aa777e492d3dd909280052aa9f56ff7ab53f11b3e0b7a2c86c3f17812bf452c3d162f1dcf41993a6ce678902") r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x40, 0x40, 0x11}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000003780)='./file0\x00', r8, &(0x7f0000003840)='./file0\x00', 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000038c0), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x30, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount$cgroup2(0x0, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00), 0x9b020, &(0x7f0000003a40)={[{@memory_hugetlb_accounting}, {@favordynmods}], [{@flag='rw'}, {@permit_directio}, {@euid_lt={'euid<', r4}}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$bpf(0x0, &(0x7f0000003b00)='./file0\x00', &(0x7f0000003b40), 0x80001, &(0x7f0000003c40)={[{@gid={'gid', 0x3d, r10}}], [{@subj_user={'subj_user', 0x3d, ')*'}}, {@appraise_type}, {@uid_lt={'uid<', r0}}]}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000003cc0)='scalable', 0x8) rename(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)='./file0\x00') getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000003d80), &(0x7f0000003dc0)=0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000003e00)={0x0, 0x0}, &(0x7f0000003e40)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003e80)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x4e20, 0x8d5, 0x4e23, 0x400, 0x0, 0x0, 0xa0, 0x16, r5, r11}, {0x9, 0x8000000000000001, 0xdee2, 0x7fffffff, 0x10000, 0x0, 0x1ff, 0x7}, {0x4fc, 0xfffffffffffff522, 0xfffffffffffff800, 0x9}, 0x4, 0x6e6bbd, 0x0, 0x7ed54b66e90ac58d, 0x3, 0x2}, {{@in=@loopback, 0x4d4}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3505, 0x0, 0x1, 0x4, 0x4, 0x6, 0xa9}}, 0xe8) rename(&(0x7f0000003f80)='./file0\x00', &(0x7f0000003fc0)='./file0\x00') madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000004140)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004100)={&(0x7f0000004040)={0x84, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "0544a1bf0b7b4ff2a51534389ca3bd67173807166750e075227dc55981c092df6d2c06bff6c21bfbfc4455d516b350e2bbed7c3db0ee015baf2d1aefcf54d324cea7183d96f95672b5f30607f6708948be91db49ada8a3fd2b078def28989a25938c999d5624647b06aa404ebe547f774ba6", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x6000000}, 0x8000) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000041c0)=0x9ef) 139.691676ms ago: executing program 5 (id=1595): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) (rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 138.415566ms ago: executing program 5 (id=1596): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x4e24, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x2df, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) syz_clone3(&(0x7f0000001280)={0x10000, 0x0, 0x0, 0x0, {}, &(0x7f00000011c0), 0x0, 0x0, 0x0}, 0x58) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 136.894516ms ago: executing program 4 (id=1597): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYBLOB="fd9dfcc53eb67d2d78c22c342d3d08b8767fbe519981f447b6862f828378c9ddb527c05ad0066a0dcc59a8d2fc3c5754d1d89e813e539e487556a97d904304375222a8a868a15d", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000002c0)=0x6) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0100000071000000feffffff00000000", @ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0002000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000004c0)=[@rdmsr={0x32, 0x18, {0xb70}}, @wr_crn={0x46, 0x20, {0x2, 0x8000000000000000}}, @cpuid={0x14, 0x18, {0x9, 0xfffffff8}}, @out_dx={0xaa, 0x28, {0x2936, 0x4, 0x8}}, @rdmsr={0x32, 0x18, {0x202}}, @out_dx={0xaa, 0x28, {0x19a2, 0x4, 0x80000001}}, @cpuid={0x14, 0x18, {0x101, 0x80000001}}, @wrmsr={0x1e, 0x20, {0x983, 0x8000000000000000}}, @wr_drn={0x6e, 0x20, {0x3, 0x3}}, @rdmsr={0x32, 0x18, {0x400002ee}}, @uexit={0x0, 0x18, 0xfffffffffffffffe}, @cpuid={0x14, 0x18, {0x4}}, @code={0xa, 0x7f, {"66664f0f7ef5c4e1cb10ef66baf80cb8fc27f789ef66bafc0cedc74424001c010000c7442402c6000000ff1c240f7919c7442400bc8f0000c74424021d54af6cc7442406000000000f0114242ef3410fa7d0c4217a115a3dc74424003e010000c744240200000100ff1c24670f30"}}, @in_dx={0x82, 0x20, {0x879, 0x2}}, @out_dx={0xaa, 0x28, {0xf4ad, 0x3, 0x2bf01c01}}, @wr_crn={0x46, 0x20, {0x2, 0x1}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0x2, 0x5}}, @out_dx={0xaa, 0x28, {0xd8ea, 0x1, 0x2}}, @out_dx={0xaa, 0x28, {0x4320, 0x2, 0x1}}, @cpuid={0x14, 0x18, {0x0, 0x1}}, @wrmsr={0x1e, 0x20, {0x279, 0x40}}, @code={0xa, 0x6c, {"c461fd5bebb8010000000f01d9b953030000b8bdd70000ba000000000f30450f753de53452c76766660f38801c1c67f2adb9c30a0000b821990000ba000000000f30c40249454000470f01c266baf80cb8e07b848bef66bafc0ced"}}, @wr_drn={0x6e, 0x20, {0x6, 0x2}}, @code={0xa, 0x61, {"0fc7ab008000006566400f2f30f2456d66baf80cb864ccf386ef66bafc0cedd3a30000008044f6813d0612435d660fc7b3ea00000066bad104b8a5270000efb9800000c00f3235008000000f300f01c5"}}], 0x3ec}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x6, 0x8, 0x8, 0x5, 0x1, 0xb, 0x6, 0x6, 0xed, 0x0, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x3, 0x13dd, 0x2, 0x53], 0x2, 0x50100}) 135.736816ms ago: executing program 1 (id=1598): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/14, 0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500"/21], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1815800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 135.102176ms ago: executing program 3 (id=1599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x198, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7140}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xfff, 0x0, 0x0, 0x0, 0x1, 0x8]}, @CTA_NAT_DST={0xb8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x810}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x900}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x801}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4884}, 0x4000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10084015}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, {r7}}, 0x58) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x8) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 134.341966ms ago: executing program 4 (id=1600): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet(0x2, 0x6, 0x7) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="447af778", @ANYRES16=r4, @ANYBLOB="310d2dbd7000ffdbdf252500000008000300", @ANYRES32=r5, @ANYBLOB="0a00340001010101010100000800350000000000080026006c0900000a0006005050505050500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x41004) write$P9_RVERSION(r0, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x80, {0x0, 0x5000, 0x3}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020305000100000001000000000000000000080001000100"], 0xffffffffffffffba}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r8, 0x0) 134.054406ms ago: executing program 1 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x1c}}, 0x84) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x4df}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0xfb, 0x81}}}}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x2, 0x1ff}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1000007fd) 131.760947ms ago: executing program 3 (id=1602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0xf) (rerun: 64) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) 60.979354ms ago: executing program 3 (id=1603): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = getgid() rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{0x8, 0x0, r1}], {0x10, 0x2}, {0x20, 0x6}}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') socketpair(0x1d, 0x800, 0x3b, &(0x7f0000000040)) setuid(0xee01) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) (async) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r2, 0x0, r2) (async) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "3fb72a932325d560", "d2754beb616fd79605d84ccd1b3a91afae845cc075a59702f89188e0fcf97b96", "035c65b8", "ee2404089ab78eed"}, 0x38) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x102) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000080)={@mcast1, @multicast2, 0x1c, 0x19}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000080)={@mcast1, @multicast2, 0x1c, 0x19}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x100a}, @flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfffffffffffffffe}}, &(0x7f0000000000)={0x0, 0x18, 0x2a}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x100a}, @flat, @flat=@weak_binder={0x77622a85, 0x0, 0xfffffffffffffffe}}, &(0x7f0000000000)={0x0, 0x18, 0x2a}}}], 0x0, 0x0, 0x0}) 59.153004ms ago: executing program 3 (id=1604): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003525d7f0803040ae8b8000102030109022400017f04700509046a0802"], 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0) r1 = socket(0x2a, 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x5}, 0x1c) listen(r3, 0x204) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844\x00\x0044056529682432,\x00']) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000002e000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000480)={"43d064455ca79c3698dcca60005c1ba163b1d8f04d69d873792c0cbfc95dacc7cd39a49df12a052d0d8f1bd04b722b4f262437efc030e706916de618763f4600660b41f320706e06860fe29f1bb455ef507156d0a5738f130784a1aad99f74b3e592254eede14eb1b64af356cfaa8ff002c4deed28995dc5e6ee13c4a1b39ba72979c5f3ed91ff89e73e09f7f88fe58bce505f0500764c95c8bed7499213d10731b60ed6c8806ab094843295ac02f06dc46485bb56f2eb2eb3c5ef1e50a2431a2082b54c4b0e1357daaefd30e08322fb5f922f6d9fa3226faf7aeb9630aabe81617fe2849d8ab92fb80f07dfa9d831f4f7ef48923e28553f0c31cf1343d4c0d4dee937e639671ec2ceab9e5048d5bcd9f52a9c90ddd1fee1fda90a114fdf7298b7607c5294efdea04743a0045e96aae496fcb06636a8620f6e007ee5f5c24ab0d0f85cfb3a7820dbe2241b017e917eafb27d13feba7de3a28dd4c29c7959ae5c0724c848f8960fbea5f7b7a35ac32fa6bbf869030a1b61fb0d20a5631dcea68ffa7d456869c4e79f6033f38fa88ccd53dc1feb5381c01dd71ec0446e3633270b7fb961e04ad7e1f44e3fd0d96c724499e1ec2cff23a3d5a97952ec0a44dd967491dc45d4df48ad83027df0be02e35ca4c107bdf957f4c7a831dff89f998a2e1302445dc02b5fc38f7c8a6260723e535062319cb68cb309e91b88c55014bb436c5d9f6bf35cbe24605821baf9ea6aaa31cb2dd74e29863a0c71e3367846cffe17c4a29a76eb635e95c6d7f4d846f3369aedbfb70b3716c1c0234a0deb9abfac12686d45ba97952e8a50480c5f44e038b1a4d5cd9301d02b942afacfaa30b6ef315d72eaf41dddda4983608dc2f5d5e92392a141b0f2f8d34042d1a6cd45d9f9df4c83b8c8b55959d58843ab3564d3f49d81ed2ccd42bb8ad9c8e4b92c2df872c9383c88f4b1bbaf116fff233f55d99b43677eb29ad63e00ea4eee69c72a604b2cdd7641d9c682d1d4ea8e5bd0de857ac1a55b2d6374a4a18af8f27887ffb4b2168e764a5aa9b303a35873d2177de8c5a00be39726baa6d336b6a36b8ec6743454b4542f3fb3ca678a0ecca17ba7c2655931f38ed26219fde45ab8469db2a156953b028abec63c6b841c8bd9f9f0861e7aeb8195013444d2d326cad53718e40be06aea644573a9ef22b13692a17ed8a451af9e2de15b4bfce7c257063e28c07e4c3301a1bff37d72efc14d34ddabbb286f53264e0c8122f215de4f2e06f6e0472674c2476a61ad2e309abfed7e3367bc7373876507764e60b193e8c5abbe95f42adfc74dd25c9098dfba8272f7361d0000000000000000000000000000000000000000000000000000e000"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 57.218734ms ago: executing program 5 (id=1605): modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x20100000, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x1}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x40) (async) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x480, 0x0, 0xffffffffffffffff}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88402, 0x0) 56.926374ms ago: executing program 4 (id=1606): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x121024, &(0x7f00000000c0)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@max={'max', 0x3d, 0xfffffffffffff3a1}}, {@stats}, {@max={'max', 0x3d, 0x4}}], [{@smackfsfloor={'smackfsfloor', 0x3d, './binderfs\x00'}}, {@fsname={'fsname', 0x3d, './binderfs\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, './binderfs\x00'}}]}) 2.087569ms ago: executing program 4 (id=1607): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x3, 0x80a0000, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x68800, 0x20) read$FUSE(r5, &(0x7f0000002040)={0x2020}, 0x2020) bind$unix(r4, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x40000000002}], 0x0, 0x0, 0x0}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) 0s ago: executing program 4 (id=1608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r6, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f81, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setresuid(0xee00, 0xee00, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 27.397981][ T291] bridge_slave_0: entered allmulticast mode [ 27.404396][ T291] bridge_slave_0: entered promiscuous mode [ 27.420307][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.427367][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.434495][ T291] bridge_slave_1: entered allmulticast mode [ 27.440792][ T291] bridge_slave_1: entered promiscuous mode [ 27.517570][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.524651][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.531998][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.539058][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.570354][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.577432][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.584732][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.591775][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.623495][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.630575][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.637848][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.644917][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.661307][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.668368][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.675680][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.682737][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.716685][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.724238][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.731561][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.739467][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.746719][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.754104][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.761598][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.769033][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.790621][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.797680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.805311][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.812364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.821953][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.829017][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.850676][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.857739][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.865499][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.872562][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.880735][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.887788][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.895518][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.902605][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.911730][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.918800][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.973179][ T292] veth0_vlan: entered promiscuous mode [ 27.989739][ T290] veth0_vlan: entered promiscuous mode [ 28.003704][ T292] veth1_macvtap: entered promiscuous mode [ 28.017238][ T290] veth1_macvtap: entered promiscuous mode [ 28.031207][ T289] veth0_vlan: entered promiscuous mode [ 28.043013][ T291] veth0_vlan: entered promiscuous mode [ 28.066061][ T289] veth1_macvtap: entered promiscuous mode [ 28.096659][ T291] veth1_macvtap: entered promiscuous mode [ 28.107235][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.211469][ T346] netlink: 'syz.1.6': attribute type 25 has an invalid length. [ 28.338367][ T366] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.373454][ T366] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 28.511852][ T375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.511915][ T375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8 [ 28.549163][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.563333][ T377] rust_binder: Error while translating object. [ 28.565651][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.572453][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 28.708976][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 28.718126][ T390] rust_binder: Write failure EFAULT in pid:14 [ 28.735804][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.756563][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.766536][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 28.778177][ T400] rust_binder: Error in use_page_slow: ESRCH [ 28.778199][ T400] rust_binder: use_range failure ESRCH [ 28.786367][ T400] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 28.787862][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.797456][ T400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.803134][ T9] usb 2-1: config 0 descriptor?? [ 28.811930][ T400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:16 [ 28.872084][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.919405][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 28.932891][ T415] netlink: 'syz.3.27': attribute type 12 has an invalid length. [ 29.017565][ T412] hid-generic 0000:0000:0000.0001: pid 412 passed too short report [ 29.208648][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.227655][ T9] holtek_mouse 0003:04D9:A081.0002: item fetching failed at offset 6/8 [ 29.236222][ T9] holtek_mouse 0003:04D9:A081.0002: hid parse failed: -22 [ 29.243604][ T9] holtek_mouse 0003:04D9:A081.0002: probe with driver holtek_mouse failed with error -22 [ 29.269631][ T12] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 29.355978][ T429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.359694][ T45] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.377179][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 29.383891][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 29.393168][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.401962][ T45] usb 4-1: config 0 descriptor?? [ 29.586744][ T45] usb 2-1: USB disconnect, device number 2 [ 29.689910][ T31] rust_binder: get_current_thread was called from the wrong process. [ 29.738177][ T434] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 29.753588][ T434] rust_binder: 20: no such ref 2 [ 29.758977][ T434] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 29.774994][ T436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 29.826536][ T443] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 29.957543][ T447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.958104][ T447] overlayfs: unescaped trailing colons in lowerdir mount option. [ 29.972916][ T451] 9pnet_fd: Insufficient options for proto=fd [ 29.981184][ T447] rust_binder: Got transaction with invalid offset. [ 29.981223][ T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.988207][ T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 30.268672][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.312206][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 30.312224][ T36] audit: type=1400 audit(1760494187.680:175): avc: denied { create } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.315980][ T465] rust_binder: Write failure EINVAL in pid:38 [ 30.318472][ T36] audit: type=1400 audit(1760494187.680:176): avc: denied { bind } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.363275][ T36] audit: type=1400 audit(1760494187.680:177): avc: denied { listen } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.382796][ T36] audit: type=1400 audit(1760494187.680:178): avc: denied { connect } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.402314][ T36] audit: type=1400 audit(1760494187.680:179): avc: denied { write } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.421613][ T36] audit: type=1400 audit(1760494187.680:180): avc: denied { accept } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.441247][ T36] audit: type=1400 audit(1760494187.680:181): avc: denied { read } for pid=464 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.461346][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 30.483305][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 30.496197][ T9] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 30.505291][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.512980][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.521835][ T9] usb 2-1: config 0 descriptor?? [ 30.527105][ T457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.608608][ T330] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.668632][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 30.674938][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 30.684132][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.693181][ T10] usb 3-1: config 0 descriptor?? [ 30.769747][ T330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.779952][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.790011][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 30.799136][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.807176][ T330] usb 1-1: SerialNumber: syz [ 30.814295][ T330] usb 1-1: 0:2 : does not exist [ 30.899316][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 30.938085][ T9] smartjoyplus 0003:0925:8866.0003: hidraw0: USB HID vff.fa Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 30.950039][ T9] smartjoyplus 0003:0925:8866.0003: no output reports found [ 31.024020][ T330] usb 1-1: USB disconnect, device number 2 [ 31.050779][ T36] audit: type=1400 audit(1760494188.420:182): avc: denied { ioctl } for pid=473 comm="syz.0.45" path="socket:[3880]" dev="sockfs" ino=3880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.075361][ T36] audit: type=1400 audit(1760494188.420:183): avc: denied { setopt } for pid=473 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.094459][ T36] audit: type=1400 audit(1760494188.420:184): avc: denied { bind } for pid=473 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.113718][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 31.123845][ T10] asix 3-1:0.0: probe with driver asix failed with error -32 [ 31.137243][ T66] usb 2-1: USB disconnect, device number 3 [ 31.254854][ T475] usb 3-1: USB disconnect, device number 2 [ 31.276034][ T474] ======================================================= [ 31.276034][ T474] WARNING: The mand mount option has been deprecated and [ 31.276034][ T474] and is ignored by this kernel. Remove the mand [ 31.276034][ T474] option from the mount to silence this warning. [ 31.276034][ T474] ======================================================= [ 31.311624][ T474] binder: Unknown parameter 'context[7' [ 31.348264][ T484] rust_binder: Write failure EINVAL in pid:56 [ 31.380019][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58 [ 31.467530][ T514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=514 comm=syz.2.49 [ 31.533363][ T518] rust_binder: Write failure EFAULT in pid:64 [ 31.546153][ T521] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 31.552339][ T521] rust_binder: Error while translating object. [ 31.564894][ T521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.571121][ T521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 31.661184][ T526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.678820][ T526] rust_binder: Error in use_page_slow: ESRCH [ 31.678846][ T526] rust_binder: use_range failure ESRCH [ 31.690271][ T526] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 31.695778][ T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.703828][ T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:71 [ 31.936196][ T10] usb 4-1: USB disconnect, device number 2 [ 31.946433][ T548] rust_binder: Error while translating object. [ 31.951268][ T548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.965312][ T548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 31.979438][ T550] erofs: dax options not supported [ 31.996806][ T556] random: crng reseeded on system resumption [ 32.025637][ T554] tmpfs: Unknown parameter '' [ 32.064890][ T563] 9pnet_fd: Insufficient options for proto=fd [ 32.087534][ T568] rust_binder: 28: no such ref 3 [ 32.153201][ T572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=572 comm=syz.0.69 [ 32.181829][ T584] random: crng reseeded on system resumption [ 32.217525][ T584] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.859034][ T608] capability: warning: `syz.0.79' uses 32-bit capabilities (legacy support in use) [ 32.898806][ T612] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=612 comm=syz.3.82 [ 32.938472][ T616] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 32.950698][ T619] rust_binder: Error while translating object. [ 32.958800][ T619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 32.965054][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:39 [ 33.040133][ T628] netlink: 140 bytes leftover after parsing attributes in process `syz.0.87'. [ 33.043516][ T623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 33.049657][ T628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'. [ 33.126111][ T634] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 33.134026][ T634] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 33.213935][ T642] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 33.244077][ T646] rust_binder: Error while translating object. [ 33.252210][ T646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.258383][ T646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 33.280577][ T648] rust_binder: Write failure EFAULT in pid:94 [ 33.291810][ T648] serio: Serial port ptm0 [ 33.349200][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.448056][ T658] rust_binder: Got transaction with invalid offset. [ 33.448088][ T658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.454860][ T658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 33.475029][ T661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.518933][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 33.525261][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.533454][ T10] usb 4-1: config 0 has no interface number 0 [ 33.541118][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.550260][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.558319][ T10] usb 4-1: Product: syz [ 33.562540][ T10] usb 4-1: Manufacturer: syz [ 33.567143][ T10] usb 4-1: SerialNumber: syz [ 33.572911][ T10] usb 4-1: config 0 descriptor?? [ 33.579098][ T10] smsc95xx v2.0.0 [ 34.011903][ T665] rust_binder: Error while translating object. [ 34.011937][ T665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.018201][ T665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 34.042565][ T669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=669 comm=syz.2.100 [ 34.078363][ T672] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.142625][ T679] rust_binder: Error while translating object. [ 34.142659][ T679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 34.149483][ T679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:113 [ 34.230494][ T682] Zero length message leads to an empty skb [ 34.246034][ T682] >: renamed from veth0_vlan (while UP) [ 34.391720][ T689] capability: warning: `syz.0.108' uses deprecated v2 capabilities in a way that may be insecure [ 35.068622][ T475] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.218608][ T475] usb 3-1: Using ep0 maxpacket: 16 [ 35.225804][ T475] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 35.235101][ T475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 35.243333][ T475] usb 3-1: SerialNumber: syz [ 35.249046][ T475] usb 3-1: config 0 descriptor?? [ 35.255183][ T475] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 35.263179][ T475] usb 3-1: Detected FT232A [ 35.268282][ T475] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 35.463186][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 35.463206][ T36] audit: type=1400 audit(1760494192.830:224): avc: denied { read } for pid=700 comm="syz.2.112" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.463753][ T475] usb 3-1: USB disconnect, device number 3 [ 35.469670][ T36] audit: type=1400 audit(1760494192.830:225): avc: denied { open } for pid=700 comm="syz.2.112" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.494610][ T475] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 35.534167][ T475] ftdi_sio 3-1:0.0: device disconnected [ 35.538866][ T36] audit: type=1400 audit(1760494192.910:226): avc: denied { read write } for pid=706 comm="syz.2.113" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.563934][ T36] audit: type=1400 audit(1760494192.910:227): avc: denied { open } for pid=706 comm="syz.2.113" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.587818][ T36] audit: type=1400 audit(1760494192.910:228): avc: denied { ioctl } for pid=706 comm="syz.2.113" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.624090][ T711] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 35.637485][ T711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.683266][ T717] rust_binder: 65: no such ref 0 [ 35.694781][ T717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 35.715283][ T36] audit: type=1400 audit(1760494193.080:229): avc: denied { read } for pid=721 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.724981][ T722] 9pnet_fd: Insufficient options for proto=fd [ 35.773431][ T724] rust_binder: 116: no such ref 2 [ 35.778654][ T724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 35.785412][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.801051][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.924612][ T730] kvm: kvm [729]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 35.933026][ T730] kvm: kvm [729]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 35.943860][ T730] kvm: kvm [729]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 35.955057][ T730] kvm: kvm [729]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 35.963529][ T730] kvm: kvm [729]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 35.999755][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 36.010758][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 36.021848][ T10] usb 4-1: USB disconnect, device number 3 [ 36.053718][ T36] audit: type=1400 audit(1760494193.420:230): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.081117][ T36] audit: type=1400 audit(1760494193.450:231): avc: denied { create } for pid=739 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 36.082449][ T740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 36.112373][ T740] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 36.119691][ T740] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.202431][ T36] audit: type=1400 audit(1760494193.570:232): avc: denied { append } for pid=751 comm="syz.3.127" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.204883][ T752] rtc_cmos 00:00: Alarms can be up to one day in the future [ 36.225246][ T36] audit: type=1400 audit(1760494193.570:233): avc: denied { read } for pid=751 comm="syz.3.127" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.678645][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.828633][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 36.834913][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.845836][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.855648][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 36.864748][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.873568][ T10] usb 2-1: config 0 descriptor?? [ 36.892673][ T777] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 37.138659][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.278638][ T66] usb 4-1: device descriptor read/64, error -71 [ 37.286044][ T10] kye 0003:0458:0138.0004: item fetching failed at offset 0/3 [ 37.293762][ T10] kye 0003:0458:0138.0004: parse failed [ 37.299494][ T10] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 37.518790][ T66] usb 4-1: device descriptor read/64, error -71 [ 37.530265][ T330] usb 2-1: USB disconnect, device number 4 [ 37.758714][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.828686][ T725] Bluetooth: hci0: command 0x1003 tx timeout [ 37.828682][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.888651][ T66] usb 4-1: device descriptor read/64, error -71 [ 37.907774][ T786] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 38.060682][ T790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 38.071220][ T790] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 38.078783][ T790] rust_binder: Write failure EINVAL in pid:91 [ 38.107250][ T799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 38.138661][ T66] usb 4-1: device descriptor read/64, error -71 [ 38.259223][ T66] usb usb4-port1: attempt power cycle [ 38.373507][ T851] 9pnet_fd: Insufficient options for proto=fd [ 38.598649][ T66] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.619637][ T66] usb 4-1: device descriptor read/8, error -71 [ 38.750249][ T66] usb 4-1: device descriptor read/8, error -71 [ 38.847656][ T861] tipc: Can't bind to reserved service type 2 [ 38.924174][ T868] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET) [ 38.931176][ T868] fuse: Bad value for 'fd' [ 38.988664][ T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.010218][ T66] usb 4-1: device descriptor read/8, error -71 [ 39.049906][ T885] 8021q: VLANs not supported on ip6_vti0 [ 39.139701][ T66] usb 4-1: device descriptor read/8, error -71 [ 39.248736][ T66] usb usb4-port1: unable to enumerate USB device [ 39.491980][ T892] batadv_slave_1: entered promiscuous mode [ 39.747199][ T891] batadv_slave_1: left promiscuous mode [ 39.815289][ T896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 39.819696][ T896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.828958][ T896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:131 [ 39.842766][ T12] bridge_slave_1: left allmulticast mode [ 39.857637][ T12] bridge_slave_1: left promiscuous mode [ 39.867780][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.881795][ T12] bridge_slave_0: left allmulticast mode [ 39.887475][ T12] bridge_slave_0: left promiscuous mode [ 39.893330][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.993190][ T902] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 40.003376][ T902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=902 comm=syz.3.177 [ 40.029631][ T12] veth1_macvtap: left promiscuous mode [ 40.035198][ T12] >: left promiscuous mode [ 40.048591][ T907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.109351][ T914] rust_binder: Write failure EFAULT in pid:77 [ 40.133633][ T916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 40.140404][ T916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:79 [ 40.173809][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.190269][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.197368][ T905] bridge_slave_0: entered allmulticast mode [ 40.204117][ T905] bridge_slave_0: entered promiscuous mode [ 40.211316][ T921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 40.229469][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.237045][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.245651][ T905] bridge_slave_1: entered allmulticast mode [ 40.253232][ T912] kvm: user requested TSC rate below hardware speed [ 40.256873][ T905] bridge_slave_1: entered promiscuous mode [ 40.326352][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.333460][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.340773][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.347809][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.372873][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.382382][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.389467][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.417339][ T905] veth0_vlan: entered promiscuous mode [ 40.428476][ T905] veth1_macvtap: entered promiscuous mode [ 40.488922][ T469] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 40.528694][ T66] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.639831][ T469] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 40.649062][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.657623][ T469] usb 4-1: config 0 descriptor?? [ 40.665149][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 40.665166][ T36] audit: type=1400 audit(1760494198.024:262): avc: denied { setattr } for pid=935 comm="syz.4.175" name="NETLINK" dev="sockfs" ino=8217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.694883][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 40.701134][ T66] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 40.709542][ T66] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 40.718292][ T66] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 40.727312][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.737046][ T66] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.746750][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.759923][ T66] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 40.769251][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.778057][ T66] usb 3-1: config 0 descriptor?? [ 40.865033][ T469] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 40.984572][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.993253][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.003321][ T66] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.015840][ T66] usb 3-1: USB disconnect, device number 4 [ 41.022724][ T66] usblp0: removed [ 41.438649][ T66] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.588860][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 41.595214][ T66] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 41.603625][ T66] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 41.612299][ T66] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 41.621315][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.631029][ T66] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.640785][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.653912][ T66] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.663022][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.674889][ T66] usb 3-1: config 0 descriptor?? [ 41.882758][ T66] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 42.233145][ T36] audit: type=1400 audit(1760494199.594:263): avc: denied { read write } for pid=911 comm="syz.2.180" name="lp0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.256635][ T36] audit: type=1400 audit(1760494199.594:264): avc: denied { open } for pid=911 comm="syz.2.180" path="/dev/usb/lp0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.280542][ T469] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 42.290709][ T469] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 42.300983][ T469] asix 4-1:0.0: probe with driver asix failed with error -71 [ 42.309327][ T469] usb 4-1: USB disconnect, device number 8 [ 42.381847][ T36] audit: type=1326 audit(1760494199.744:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.405365][ T36] audit: type=1326 audit(1760494199.744:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.429077][ T36] audit: type=1326 audit(1760494199.744:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.438038][ T66] usb 3-1: USB disconnect, device number 5 [ 42.458078][ T36] audit: type=1326 audit(1760494199.744:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.470564][ T66] usblp0: removed [ 42.482971][ T36] audit: type=1326 audit(1760494199.744:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.510613][ T36] audit: type=1326 audit(1760494199.744:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.536111][ T36] audit: type=1326 audit(1760494199.744:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=944 comm="syz.1.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 42.666962][ T964] batadv_slave_1: entered promiscuous mode [ 42.828051][ T966] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 42.828079][ T966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 42.836133][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:84 [ 42.874106][ T963] batadv_slave_1: left promiscuous mode [ 42.885339][ T968] /dev/rnullb0: Can't open blockdev [ 42.940756][ T977] tipc: Started in network mode [ 42.945672][ T977] tipc: Node identity 127cd7ef8db3, cluster identity 4711 [ 42.952956][ T977] tipc: Enabled bearer , priority 0 [ 42.962255][ T977] tipc: Disabling bearer [ 43.063005][ T979] /dev/rnullb0: Can't open blockdev [ 43.068366][ T980] /dev/rnullb0: Can't open blockdev [ 43.130690][ T987] rust_binder: 141: no such ref 0 [ 43.135866][ T987] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 43.143013][ T987] rust_binder: 141: no such ref 2 [ 43.148257][ T987] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 43.438599][ T469] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 43.600224][ T469] usb 4-1: not running at top speed; connect to a high speed hub [ 43.608026][ T469] usb 4-1: no configurations [ 43.612693][ T469] usb 4-1: can't read configurations, error -22 [ 43.718624][ T937] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 43.748820][ T469] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 43.868598][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 43.874722][ T937] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.887787][ T937] usb 5-1: config 1 interface 0 has no altsetting 0 [ 43.895986][ T937] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.40 [ 43.905084][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.913204][ T937] usb 5-1: Product: 齶缧緽Ƀ긶ﰺﴎﶌ戎重㺲ꄄ뚽蚫ꕐ䑆렒ኯරመ௫楇搶窜뫞ョ䰞솕糡拚䜲엁╱⃯ꟳ瓡╡姱ץ洫䈡顺诼ⲵ⑩묡Ḧ벁䎰覓㏭礿㳨ﷺ㾳駣瀀溯씋㵣ᆉ㉐ነ눊첯嫽쮫ᮎ瀻Ⱜ䀶ᆏᓈ횛㰸ᐪ瘉轷欸咺屟彍샍喃鰋嘣븢ᠡ疁蝻颗靫见딀輸മᧃ袂삨撤蕶ばꈤ滟鈰矢忖䑆甐癷ꌜ뵬꽶᭒䔎髣 [ 43.949166][ T937] usb 5-1: Manufacturer:  [ 43.953921][ T937] usb 5-1: SerialNumber: и [ 43.959914][ T469] usb 4-1: not running at top speed; connect to a high speed hub [ 43.967735][ T469] usb 4-1: no configurations [ 43.972981][ T469] usb 4-1: can't read configurations, error -22 [ 43.979448][ T469] usb usb4-port1: attempt power cycle [ 44.091690][ T1030] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 44.091736][ T1030] rust_binder: Error while translating object. [ 44.100813][ T1030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.107132][ T1030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 44.318635][ T469] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 44.350393][ T469] usb 4-1: not running at top speed; connect to a high speed hub [ 44.358275][ T469] usb 4-1: no configurations [ 44.362937][ T469] usb 4-1: can't read configurations, error -22 [ 44.377621][ T937] usbhid 5-1:1.0: can't add hid device: -71 [ 44.383648][ T937] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 44.392377][ T937] usb 5-1: USB disconnect, device number 2 [ 44.498633][ T469] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 44.520482][ T469] usb 4-1: not running at top speed; connect to a high speed hub [ 44.528286][ T469] usb 4-1: no configurations [ 44.532972][ T469] usb 4-1: can't read configurations, error -22 [ 44.539377][ T469] usb usb4-port1: unable to enumerate USB device [ 44.657847][ T1046] can: request_module (can-proto-0) failed. [ 44.723781][ T1051] 9pnet_fd: Insufficient options for proto=fd [ 44.819376][ T1059] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 44.944649][ T1068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1068 comm=syz.4.229 [ 44.957559][ T1068] rust_binder: 10: no such ref 2 [ 44.962571][ T1068] rust_binder: Write failure EINVAL in pid:10 [ 44.978274][ T1061] rust_binder: Error while translating object. [ 44.984427][ T1061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.990728][ T1061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:161 [ 45.132839][ T1073] rust_binder: Read failure Err(EAGAIN) in pid:12 [ 45.163790][ T1076] rust_binder: Write failure EFAULT in pid:14 [ 45.262175][ T424] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 45.276394][ T424] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.371326][ T1091] hid-generic 0000:0000:0000.0005: pid 1091 passed too short report [ 45.694540][ T1122] netlink: 'syz.4.245': attribute type 4 has an invalid length. [ 45.785470][ T1127] rust_binder: Write failure EFAULT in pid:43 [ 45.823898][ T1132] tipc: Started in network mode [ 45.835336][ T1132] tipc: Node identity 7f000001, cluster identity 4711 [ 45.842163][ T1132] tipc: Enabling of bearer rejected, failed to enable media [ 45.953847][ T1144] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 46.094887][ T10] rust_binder: get_current_thread was called from the wrong process. [ 46.097394][ T1153] overlayfs: empty lowerdir [ 46.266921][ T1167] rust_binder: Write failure EFAULT in pid:116 [ 46.267094][ T1167] rust_binder: 116: no such ref 2 [ 46.278420][ T1167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 46.500658][ T1174] netlink: 'syz.1.262': attribute type 46 has an invalid length. [ 46.517733][ T1174] netlink: 'syz.1.262': attribute type 28 has an invalid length. [ 46.576560][ T1183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'. [ 46.638650][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 46.751706][ T1193] 9pnet_fd: Insufficient options for proto=fd [ 46.800843][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.808500][ T10] usb 4-1: can't read configurations, error -61 [ 46.917281][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 46.917300][ T36] audit: type=1400 audit(1760494204.274:360): avc: denied { append } for pid=1195 comm="syz.4.271" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.946292][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.976104][ T1197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 47.100160][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.117026][ T10] usb 4-1: can't read configurations, error -61 [ 47.123460][ T10] usb usb4-port1: attempt power cycle [ 47.158367][ T36] audit: type=1400 audit(1760494204.514:361): avc: denied { mount } for pid=1206 comm="syz.2.275" name="/" dev="pstore" ino=2426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 47.169835][ T1209] netlink: 'syz.4.274': attribute type 46 has an invalid length. [ 47.180784][ T36] audit: type=1400 audit(1760494204.514:362): avc: denied { ioctl } for pid=1208 comm="syz.4.274" path="mnt:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.213719][ T1211] binder: Bad value for 'max' [ 47.225825][ T1213] netlink: 'syz.4.276': attribute type 20 has an invalid length. [ 47.235136][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.357953][ T36] audit: type=1326 audit(1760494204.714:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 47.381343][ T36] audit: type=1326 audit(1760494204.714:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 47.404800][ T36] audit: type=1326 audit(1760494204.724:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 47.428124][ T36] audit: type=1326 audit(1760494204.724:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 47.451716][ T36] audit: type=1326 audit(1760494204.724:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 47.474976][ T36] audit: type=1326 audit(1760494204.724:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x7ffc0000 [ 47.498220][ T36] audit: type=1326 audit(1760494204.724:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1218 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf27390de7 code=0x7ffc0000 [ 47.528604][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 47.550361][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.558076][ T10] usb 4-1: can't read configurations, error -61 [ 47.688620][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.706473][ T1234] incfs: Options parsing error. -22 [ 47.711827][ T1234] incfs: mount failed -22 [ 47.713678][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.723764][ T10] usb 4-1: can't read configurations, error -61 [ 47.730186][ T10] usb usb4-port1: unable to enumerate USB device [ 48.288166][ T1245] batadv_slave_1: entered promiscuous mode [ 48.437225][ T1248] tc_dump_action: action bad kind [ 48.528656][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 48.678597][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 48.684830][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 48.693371][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 48.702031][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 48.711040][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.720795][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.730468][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.743459][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.752527][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.761525][ T10] usb 3-1: config 0 descriptor?? [ 48.970894][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 48.983345][ T10] usb 3-1: USB disconnect, device number 7 [ 48.990053][ T10] usblp0: removed [ 49.268824][ T725] Bluetooth: hci0: command 0x1003 tx timeout [ 49.268833][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.278829][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 49.302883][ T1261] rust_binder: Write failure EFAULT in pid:74 [ 49.415817][ T1269] SELinux: policydb string length 1836477231 does not match expected length 8 [ 49.431126][ T1269] SELinux: failed to load policy [ 49.448609][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 49.455007][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.466393][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.475940][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.485647][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.495545][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.506111][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.519723][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.530344][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.543859][ T10] usb 3-1: config 0 descriptor?? [ 49.622509][ T1297] futex_wake_op: syz.1.308 tries to shift op by 144; fix this program [ 49.760029][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 49.765885][ T1244] batadv_slave_1: left promiscuous mode [ 49.784463][ T10] usb 3-1: USB disconnect, device number 8 [ 49.791252][ T10] usblp0: removed [ 49.843331][ T1302] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 50.233989][ T1313] batadv_slave_1: entered promiscuous mode [ 50.256771][ T1313] batadv_slave_1: left promiscuous mode [ 50.274201][ T1317] rust_binder: Read failure Err(EAGAIN) in pid:125 [ 50.328599][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 50.460380][ T1335] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 50.489896][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.501257][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.511653][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 50.521007][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.531475][ T10] usb 5-1: config 0 descriptor?? [ 50.776756][ T1337] exFAT-fs (rnullb0): invalid boot record signature [ 50.783651][ T1337] exFAT-fs (rnullb0): failed to read boot sector [ 50.790371][ T1337] exFAT-fs (rnullb0): failed to recognize exfat type [ 50.943951][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.951167][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.957981][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.964810][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.971667][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.978462][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.985275][ T10] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 50.992774][ T10] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 51.219526][ T1342] tipc: Enabling of bearer rejected, failed to enable media [ 51.290217][ T1364] 9pnet_fd: Insufficient options for proto=fd [ 51.298114][ T1364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 51.342552][ T1367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 51.360815][ T10] usb 5-1: USB disconnect, device number 3 [ 51.941600][ T1384] input: syz1 as /devices/virtual/input/input7 [ 51.947813][ T1384] input: failed to attach handler leds to device input7, error: -6 [ 51.956602][ T36] kauditd_printk_skb: 132 callbacks suppressed [ 51.956619][ T36] audit: type=1400 audit(1760494209.314:502): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=502 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.969650][ T1384] rust_binder: Write failure EFAULT in pid:91 [ 51.985262][ T36] audit: type=1400 audit(1760494209.314:503): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=502 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.987096][ T1385] rust_binder: Write failure EFAULT in pid:91 [ 51.991597][ T36] audit: type=1400 audit(1760494209.314:504): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=502 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.262546][ T1391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:161 [ 52.291998][ T36] audit: type=1400 audit(1760494209.654:505): avc: denied { wake_alarm } for pid=1392 comm="syz.2.342" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.431346][ T1402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.431374][ T1402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 52.489503][ T1404] fuse: Bad value for 'user_id' [ 52.503616][ T1404] fuse: Bad value for 'user_id' [ 52.570289][ T36] audit: type=1400 audit(1760494209.934:506): avc: denied { read } for pid=1403 comm="syz.3.345" path="socket:[11929]" dev="sockfs" ino=11929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.598364][ T36] audit: type=1400 audit(1760494209.954:507): avc: denied { write } for pid=1403 comm="syz.3.345" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.621503][ T36] audit: type=1400 audit(1760494209.954:508): avc: denied { ioctl } for pid=1403 comm="syz.3.345" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.648614][ T424] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.657622][ T36] audit: type=1400 audit(1760494210.014:509): avc: denied { create } for pid=1405 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.679935][ T36] audit: type=1400 audit(1760494210.044:510): avc: denied { mount } for pid=1405 comm="syz.4.346" name="/" dev="configfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.702519][ T36] audit: type=1400 audit(1760494210.044:511): avc: denied { search } for pid=1405 comm="syz.4.346" name="/" dev="configfs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.798645][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 52.805222][ T424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.814037][ T424] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 52.825485][ T424] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 52.835719][ T424] usb 3-1: config 12 interface 0 has no altsetting 0 [ 52.844088][ T424] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 52.853300][ T424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.861443][ T424] usb 3-1: Product: syz [ 52.865642][ T424] usb 3-1: Manufacturer: syz [ 52.870290][ T424] usb 3-1: SerialNumber: syz [ 52.877207][ T1400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.956328][ T1418] process 'syz.3.350' launched '/dev/fd/4' with NULL argv: empty string added [ 52.970995][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 53.108701][ T1433] binder: Unknown parameter 'fscontext?}' [ 53.133966][ T1436] syzkaller0: entered allmulticast mode [ 53.141975][ T1436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.356'. [ 54.293298][ T1443] cgroup2: Unknown parameter 'permit_directio' [ 54.316782][ T1445] fuse: Unknown parameter '0x000000000000000b' [ 55.311002][ T424] usb 3-1: selecting invalid altsetting 0 [ 55.322166][ T424] usb 3-1: USB disconnect, device number 9 [ 55.362101][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.380132][ T1456] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 55.389849][ T1456] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 55.739644][ T424] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 55.740593][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 55.755671][ T10] usb 5-1: can't read configurations, error -71 [ 55.888616][ T424] usb 3-1: device descriptor read/64, error -71 [ 56.128592][ T424] usb 3-1: device descriptor read/64, error -71 [ 56.206047][ T1477] overlayfs: failed to clone upperpath [ 56.342419][ T1491] fuse: Unknown parameter '' [ 56.359375][ T1493] GUP no longer grows the stack in syz.3.373 (1493): 200000001000-200000c01000 (200000000000) [ 56.368622][ T424] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 56.369818][ T1493] CPU: 0 UID: 0 PID: 1493 Comm: syz.3.373 Not tainted syzkaller #0 191302df6d6fdbd2296e318140211a30501528e1 [ 56.369856][ T1493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.369880][ T1493] Call Trace: [ 56.369890][ T1493] [ 56.369900][ T1493] __dump_stack+0x21/0x30 [ 56.369951][ T1493] dump_stack_lvl+0x10c/0x190 [ 56.369985][ T1493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.370019][ T1493] ? find_vma+0xcd/0x110 [ 56.370046][ T1493] dump_stack+0x19/0x20 [ 56.370078][ T1493] __get_user_pages+0x1e34/0x22d0 [ 56.370110][ T1493] ? __kasan_check_write+0x18/0x20 [ 56.370153][ T1493] ? down_read_killable+0x79/0xf0 [ 56.370180][ T1493] ? populate_vma_page_range+0x230/0x230 [ 56.370212][ T1493] ? kernel_text_address+0xa9/0xe0 [ 56.370244][ T1493] ? unwind_get_return_address+0x51/0x90 [ 56.370276][ T1493] __gup_longterm_locked+0xcb1/0x1580 [ 56.370312][ T1493] ? stack_depot_save_flags+0x38/0x800 [ 56.370340][ T1493] gup_fast_fallback+0x12ae/0x14a0 [ 56.370385][ T1493] ? kasan_save_track+0x3e/0x80 [ 56.370411][ T1493] ? __kmalloc_cache_noprof+0x24c/0x490 [ 56.370436][ T1493] ? futex_lock_pi+0x77a/0xa10 [ 56.370469][ T1493] ? get_user_pages_fast_only+0xc0/0xc0 [ 56.370529][ T1493] get_user_pages_fast+0x73/0xb0 [ 56.370562][ T1493] get_futex_key+0x24d/0x930 [ 56.370585][ T1493] ? __cfi_get_futex_key+0x10/0x10 [ 56.370609][ T1493] ? futex_lock_pi+0x77a/0xa10 [ 56.370638][ T1493] ? futex_setup_timer+0xb4/0xd0 [ 56.370662][ T1493] futex_lock_pi+0x1c0/0xa10 [ 56.370690][ T1493] ? futex_unqueue+0x136/0x160 [ 56.370716][ T1493] ? __cfi_futex_lock_pi+0x10/0x10 [ 56.370746][ T1493] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.370778][ T1493] ? futex_setup_timer+0xb4/0xd0 [ 56.370801][ T1493] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.370835][ T1493] ? __kasan_check_write+0x18/0x20 [ 56.370872][ T1493] ? up_read+0x26/0x1d0 [ 56.370904][ T1493] do_futex+0x25c/0x500 [ 56.370930][ T1493] ? __cfi_do_futex+0x10/0x10 [ 56.370954][ T1493] ? vm_mmap_pgoff+0x145/0x4e0 [ 56.370979][ T1493] __se_sys_futex+0x28f/0x300 [ 56.371006][ T1493] ? __x64_sys_futex+0x110/0x110 [ 56.371033][ T1493] ? __kasan_check_write+0x18/0x20 [ 56.371072][ T1493] __x64_sys_futex+0xe9/0x110 [ 56.371099][ T1493] x64_sys_call+0x227f/0x2ee0 [ 56.371137][ T1493] do_syscall_64+0x58/0xf0 [ 56.371169][ T1493] ? clear_bhb_loop+0x50/0xa0 [ 56.371198][ T1493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.371224][ T1493] RIP: 0033:0x7fd9bc58eec9 [ 56.371253][ T1493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.371273][ T1493] RSP: 002b:00007fd9bd475038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.371311][ T1493] RAX: ffffffffffffffda RBX: 00007fd9bc7e5fa0 RCX: 00007fd9bc58eec9 [ 56.371330][ T1493] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 56.371353][ T1493] RBP: 00007fd9bc611f91 R08: 0000000000000000 R09: 0000000000000002 [ 56.371370][ T1493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.371385][ T1493] R13: 00007fd9bc7e6038 R14: 00007fd9bc7e5fa0 R15: 00007ffd82228778 [ 56.371407][ T1493] [ 56.402416][ T1497] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.405297][ T1498] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.773853][ T1510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1510 comm=syz.4.378 [ 56.828968][ T424] usb 3-1: device descriptor read/64, error -71 [ 56.864880][ T1512] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 56.883617][ T1512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.883653][ T1512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 56.912121][ T1514] netlink: 'syz.4.380': attribute type 28 has an invalid length. [ 56.976506][ T1514] mmap: syz.4.380 (1514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.068615][ T424] usb 3-1: device descriptor read/64, error -71 [ 57.178712][ T424] usb usb3-port1: attempt power cycle [ 57.300608][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 57.300625][ T36] audit: type=1400 audit(1760494214.664:521): avc: denied { mounton } for pid=1515 comm="syz.4.381" path="/proc/116/task" dev="proc" ino=13335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 57.403599][ T1534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 57.456407][ T1541] overlayfs: failed to clone upperpath [ 57.488996][ T1532] 9pnet_fd: Insufficient options for proto=fd [ 57.513227][ T36] audit: type=1400 audit(1760494214.874:522): avc: denied { write } for pid=1544 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.519120][ T424] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 57.557162][ T1547] tipc: Enabling of bearer rejected, failed to enable media [ 57.569671][ T424] usb 3-1: device descriptor read/8, error -71 [ 57.597190][ T1557] 9pnet_fd: Insufficient options for proto=fd [ 57.699664][ T424] usb 3-1: device descriptor read/8, error -71 [ 57.873294][ T36] audit: type=1400 audit(1760494215.234:523): avc: denied { connect } for pid=1589 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.905160][ T36] audit: type=1400 audit(1760494215.264:524): avc: denied { bind } for pid=1579 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.948649][ T424] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 57.969682][ T424] usb 3-1: device descriptor read/8, error -71 [ 58.021994][ T36] audit: type=1400 audit(1760494215.384:525): avc: denied { ioctl } for pid=1592 comm="syz.4.410" path="socket:[12583]" dev="sockfs" ino=12583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.099801][ T424] usb 3-1: device descriptor read/8, error -71 [ 58.206460][ T36] audit: type=1400 audit(1760494215.564:526): avc: denied { mounton } for pid=1599 comm="syz.3.412" path="/92/file0" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.206472][ T1600] cgroup: No subsys list or none specified [ 58.208969][ T424] usb usb3-port1: unable to enumerate USB device [ 58.309835][ T36] audit: type=1400 audit(1760494215.674:527): avc: denied { nlmsg_write } for pid=1599 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 58.552758][ T36] audit: type=1400 audit(1760494215.914:528): avc: denied { getopt } for pid=1629 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.828626][ T424] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 58.978634][ T424] usb 3-1: Using ep0 maxpacket: 16 [ 58.985012][ T424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.996131][ T424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.005937][ T424] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 59.015030][ T424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.023734][ T424] usb 3-1: config 0 descriptor?? [ 59.126980][ T1648] syz.4.429 (1648): attempted to duplicate a private mapping with mremap. This is not supported. [ 59.131248][ T36] audit: type=1400 audit(1760494216.494:529): avc: denied { write } for pid=1650 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.171975][ T36] audit: type=1400 audit(1760494216.524:530): avc: denied { getopt } for pid=1650 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.199410][ T1662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1662 comm=syz.3.434 [ 59.431157][ T424] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 59.438330][ T424] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 59.445443][ T424] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 59.452570][ T424] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 59.459656][ T424] appleir 0003:05AC:8241.0007: unknown main item tag 0x0 [ 59.466937][ T424] appleir 0003:05AC:8241.0007: No inputs registered, leaving [ 59.475654][ T424] appleir 0003:05AC:8241.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 59.743646][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.759485][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.800577][ T10] usb 3-1: USB disconnect, device number 14 [ 59.863217][ T1693] batadv_slave_1: entered promiscuous mode [ 59.893579][ T1695] /dev/loop0: Can't lookup blockdev [ 59.933680][ T1703] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 60.036046][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 60.078994][ T1718] 9pnet_fd: Insufficient options for proto=fd [ 60.084027][ T1691] batadv_slave_1: left promiscuous mode [ 60.258607][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.408606][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 60.414859][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 60.423247][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 60.431884][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 60.440906][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.450593][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.460270][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 60.473303][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 60.482431][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.491556][ T10] usb 3-1: config 0 descriptor?? [ 60.700631][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 60.716366][ T10] usb 3-1: USB disconnect, device number 15 [ 60.724363][ T10] usblp0: removed [ 60.982545][ T1763] 9pnet_fd: Insufficient options for proto=fd [ 61.138596][ T475] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.208096][ T1786] overlayfs: failed to clone upperpath [ 61.268721][ T475] usb 3-1: device descriptor read/64, error -71 [ 61.393555][ T1825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=1825 comm=syz.4.491 [ 61.518606][ T475] usb 3-1: device descriptor read/64, error -71 [ 61.540088][ T1831] fuse: Bad value for 'fd' [ 61.645828][ T1847] erofs: dax options not supported [ 61.662906][ T1851] fuse: Bad value for 'fd' [ 61.758615][ T475] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 61.827960][ T1876] overlayfs: failed to clone upperpath [ 61.834058][ T1876] futex_wake_op: syz.4.513 tries to shift op by 144; fix this program [ 61.888624][ T475] usb 3-1: device descriptor read/64, error -71 [ 62.139154][ T1889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 62.158590][ T475] usb 3-1: device descriptor read/64, error -71 [ 62.269448][ T475] usb usb3-port1: attempt power cycle [ 62.275834][ T1902] netlink: 596 bytes leftover after parsing attributes in process `syz.1.523'. [ 62.608648][ T475] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 62.629704][ T475] usb 3-1: device descriptor read/8, error -71 [ 62.759642][ T475] usb 3-1: device descriptor read/8, error -71 [ 62.951285][ T1940] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 63.014453][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 63.014472][ T36] audit: type=1400 audit(1760494220.374:558): avc: denied { map } for pid=1950 comm="syz.2.540" path="socket:[14034]" dev="sockfs" ino=14034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.056961][ T36] audit: type=1400 audit(1760494220.414:559): avc: denied { getopt } for pid=1958 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.081899][ T36] audit: type=1326 audit(1760494220.434:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.3.545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9bc58eec9 code=0x0 [ 63.109499][ T1964] rust_binder: Write failure EFAULT in pid:263 [ 63.140084][ T36] audit: type=1400 audit(1760494220.504:561): avc: denied { setattr } for pid=1970 comm="syz.2.549" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 63.170397][ T1976] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 63.183504][ T36] audit: type=1400 audit(1760494220.504:562): avc: denied { audit_read } for pid=1970 comm="syz.2.549" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.077530][ T2013] rust_binder: Got transaction with invalid offset. [ 64.077561][ T2013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.084270][ T2013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 64.132899][ T2017] rust_binder: Write failure EFAULT in pid:278 [ 64.184587][ T2026] rust_binder: Error while translating object. [ 64.190892][ T2026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.197162][ T2026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 64.224374][ T36] audit: type=1400 audit(1760494221.584:563): avc: denied { nlmsg_tty_audit } for pid=2027 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 64.272998][ T2036] PM: Enabling pm_trace changes system date and time during resume. [ 64.272998][ T2036] PM: Correct system time has to be restored manually after resume. [ 64.445992][ T36] audit: type=1400 audit(1760494221.804:564): avc: denied { getopt } for pid=2039 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.792855][ T2047] 9pnet: Could not find request transport: xen [ 64.811680][ T36] audit: type=1400 audit(1760494222.174:565): avc: denied { create } for pid=2048 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.214703][ T2061] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 65.214730][ T2061] rust_binder: Error while translating object. [ 65.225465][ T2061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.231756][ T2061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 65.299990][ T36] audit: type=1326 audit(1760494222.664:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.1.581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf2738eec9 code=0x0 [ 65.518602][ T66] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 65.669709][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 65.680887][ T66] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 65.690369][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.699494][ T2079] netlink: 188 bytes leftover after parsing attributes in process `syz.4.586'. [ 65.700796][ T66] usb 3-1: config 0 descriptor?? [ 65.713833][ T2067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.123667][ T66] wacom 0003:056A:0029.0008: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 66.133813][ T66] wacom 0003:056A:0029.0008: hidraw0: USB HID v1.01 Device [HID 056a:0029] on usb-dummy_hcd.2-1/input0 [ 66.148616][ T66] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0029.0008/input/input9 [ 66.331192][ T10] hid (null): invalid report_size 31167 [ 66.338361][ T10] hid (null): invalid report_size 1887667750 [ 66.344538][ T10] hid (null): unknown global tag 0xc0 [ 66.351767][ T10] hid (null): unknown global tag 0xc [ 66.357128][ T10] hid (null): unknown global tag 0xd [ 66.362449][ T10] hid (null): report_id 0 is invalid [ 66.367771][ T10] hid (null): unknown global tag 0xd [ 66.373107][ T10] hid (null): unknown global tag 0xd [ 66.378407][ T10] hid (null): unknown global tag 0xd [ 66.383757][ T10] hid (null): invalid report_size 1674243621 [ 66.389802][ T10] hid (null): unknown global tag 0xdf [ 66.395199][ T10] hid (null): unknown global tag 0xe [ 66.400563][ T10] hid (null): invalid report_count 24155 [ 66.406314][ T10] hid (null): unknown global tag 0xd [ 66.411654][ T10] hid (null): unknown global tag 0xe [ 66.416973][ T10] hid (null): unknown global tag 0x3d [ 66.422378][ T10] hid (null): global environment stack underflow [ 66.428820][ T10] hid (null): invalid report_size 50780 [ 66.434370][ T10] hid (null): report_id 0 is invalid [ 66.439718][ T10] hid (null): unknown global tag 0xd [ 66.445083][ T10] hid (null): unknown global tag 0xc9 [ 66.450518][ T10] hid (null): report_id 0 is invalid [ 66.455865][ T10] hid (null): unknown global tag 0xe [ 66.461193][ T10] hid (null): unknown global tag 0xc [ 66.466497][ T10] hid (null): unknown global tag 0xe [ 66.471851][ T10] hid (null): unknown global tag 0xc [ 66.477329][ T10] hid (null): unknown global tag 0xd [ 66.482761][ T10] hid (null): unknown global tag 0xe [ 66.488083][ T10] hid (null): report_id 6289 is invalid [ 66.493725][ T10] hid (null): unknown global tag 0xf4 [ 66.499148][ T10] hid (null): report_id 64333 is invalid [ 66.504790][ T10] hid (null): unknown global tag 0xe [ 66.510277][ T10] hid (null): global environment stack underflow [ 66.516661][ T10] hid (null): global environment stack underflow [ 66.523020][ T10] hid (null): report_id 5419 is invalid [ 66.528642][ T10] hid (null): report_id 0 is invalid [ 66.533981][ T10] hid (null): unknown global tag 0xd [ 66.540960][ T10] hid (null): unknown global tag 0xe [ 66.546262][ T10] hid (null): unknown global tag 0xe [ 66.551660][ T10] hid (null): unknown global tag 0xc [ 66.556998][ T10] hid (null): unknown global tag 0xc [ 66.562382][ T10] hid (null): report_id 0 is invalid [ 66.567791][ T10] hid (null): report_id 0 is invalid [ 66.573151][ T10] hid (null): global environment stack overflow [ 66.579434][ T10] hid (null): report_id 51774 is invalid [ 66.585164][ T10] hid (null): invalid report_size 1693 [ 66.590677][ T10] hid (null): unknown global tag 0xd [ 66.597224][ T10] hid (null): report_id 20566 is invalid [ 66.603031][ T10] hid (null): unknown global tag 0xd [ 66.608334][ T10] hid (null): unknown global tag 0xc [ 66.613678][ T10] hid (null): unknown global tag 0xd [ 66.619024][ T10] hid (null): nested delimiters [ 66.623872][ T10] hid (null): unknown global tag 0xd [ 66.629193][ T10] hid (null): unknown global tag 0xc [ 66.634522][ T10] hid (null): unknown global tag 0xc [ 66.641250][ T10] hid-generic 0001:0009:0007.0009: invalid report_size 31167 [ 66.648669][ T10] hid-generic 0001:0009:0007.0009: item 0 2 1 7 parsing failed [ 66.656346][ T10] hid-generic 0001:0009:0007.0009: probe with driver hid-generic failed with error -22 [ 66.667058][ T66] usb 3-1: USB disconnect, device number 20 [ 67.031544][ T36] audit: type=1400 audit(1760494224.394:567): avc: denied { write } for pid=2113 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.198654][ T2116] binder: Unknown parameter 'dhrqCc+' [ 67.248034][ T2120] rust_binder: Error while translating object. [ 67.248082][ T2120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.254484][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 67.317070][ T2130] netlink: 'syz.2.606': attribute type 4 has an invalid length. [ 67.334060][ T2130] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.606'. [ 67.372158][ T2135] rust_binder: Write failure EFAULT in pid:333 [ 67.414096][ T2139] rust_binder: Write failure EINVAL in pid:337 [ 67.708593][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 67.869799][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.879974][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 67.892884][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 67.901965][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.911003][ T10] usb 3-1: config 0 descriptor?? [ 67.916884][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 68.227256][ T2177] overlayfs: failed to clone upperpath [ 68.430809][ T2206] overlayfs: failed to clone upperpath [ 68.437637][ T36] audit: type=1400 audit(1760494225.794:568): avc: denied { mount } for pid=2205 comm="syz.1.637" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.772228][ T2219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1000 sclass=netlink_tcpdiag_socket pid=2219 comm=syz.3.641 [ 68.830904][ T2231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 68.889557][ T36] audit: type=1400 audit(1760494226.254:569): avc: denied { read } for pid=2239 comm="syz.4.648" path="socket:[15482]" dev="sockfs" ino=15482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.117998][ T2263] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 69.133758][ T2263] netlink: 17 bytes leftover after parsing attributes in process `syz.4.654'. [ 69.542362][ T36] audit: type=1400 audit(1760494226.904:570): avc: denied { create } for pid=2319 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 69.562995][ T36] audit: type=1400 audit(1760494226.904:571): avc: denied { ioctl } for pid=2319 comm="syz.1.676" path="socket:[15573]" dev="sockfs" ino=15573 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.587756][ T36] audit: type=1400 audit(1760494226.904:572): avc: denied { getopt } for pid=2319 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 69.719712][ T2331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2331 comm=syz.1.680 [ 69.834890][ T36] audit: type=1400 audit(1760494227.194:573): avc: denied { create } for pid=2349 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 70.292742][ T36] audit: type=1326 audit(1760494227.654:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bc58eec9 code=0x50000 [ 70.315828][ T36] audit: type=1326 audit(1760494227.654:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bc58eec9 code=0x50000 [ 70.338882][ T36] audit: type=1326 audit(1760494227.654:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bc58eec9 code=0x50000 [ 70.361905][ T36] audit: type=1326 audit(1760494227.654:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bc58eec9 code=0x50000 [ 70.404108][ T2366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=274 sclass=netlink_route_socket pid=2366 comm=syz.3.693 [ 70.444415][ T2373] netlink: 'syz.1.696': attribute type 27 has an invalid length. [ 70.503316][ T424] usb 3-1: USB disconnect, device number 21 [ 70.818590][ T424] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 70.968567][ T424] usb 3-1: Using ep0 maxpacket: 8 [ 70.974715][ T424] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 70.983086][ T424] usb 3-1: config 0 has no interface number 0 [ 70.989319][ T424] usb 3-1: config 0 interface 66 has no altsetting 0 [ 70.996056][ T424] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87 [ 71.005313][ T424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.014533][ T424] usb 3-1: config 0 descriptor?? [ 71.137038][ T2378] veth1_virt_wifi: entered promiscuous mode [ 71.143115][ T2378] veth1_virt_wifi: entered allmulticast mode [ 71.150124][ T2378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 71.296332][ T424] usb 3-1: string descriptor 0 read error: -71 [ 71.307330][ T424] usb 3-1: MBOX3: Invalid descriptor size=18. [ 71.316530][ T424] usb 3-1: USB disconnect, device number 22 [ 71.817100][ T2407] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 71.906246][ T2417] netlink: 188 bytes leftover after parsing attributes in process `syz.3.713'. [ 72.176583][ T2445] tipc: Enabling of bearer rejected, failed to enable media [ 72.388646][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 72.538607][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 72.544971][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.556319][ T10] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 72.565399][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.575948][ T10] usb 3-1: config 0 descriptor?? [ 72.787235][ T10] hkems 0003:2006:0118.000A: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 72.798728][ T10] hkems 0003:2006:0118.000A: no inputs found [ 72.804787][ T10] hkems 0003:2006:0118.000A: force feedback init failed [ 72.985424][ T937] usb 3-1: USB disconnect, device number 23 [ 73.461554][ T2516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2516 comm=syz.1.746 [ 73.704031][ T36] kauditd_printk_skb: 144 callbacks suppressed [ 73.704051][ T36] audit: type=1400 audit(1760494231.064:722): avc: denied { getattr } for pid=2532 comm="syz.2.752" path="socket:[15978]" dev="sockfs" ino=15978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.768986][ T2544] rust_binder: Write failure EFAULT in pid:381 [ 73.795448][ T2547] rust_binder: Error while translating object. [ 73.801822][ T2547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 73.808031][ T2547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:384 [ 73.919924][ T36] audit: type=1326 audit(1760494231.284:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2553 comm="syz.4.758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f141898eec9 code=0x0 [ 73.979051][ T2565] netlink: 124 bytes leftover after parsing attributes in process `syz.3.763'. [ 74.022625][ T2572] 9pnet_fd: Insufficient options for proto=fd [ 74.662992][ T2607] overlayfs: failed to clone upperpath [ 74.698717][ T2611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=2611 comm=syz.3.781 [ 74.819058][ T2633] netlink: 72 bytes leftover after parsing attributes in process `syz.1.787'. [ 75.011693][ T36] audit: type=1400 audit(1760494232.364:724): avc: denied { mounton } for pid=2658 comm="syz.3.795" path="/216/file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 75.067236][ T36] audit: type=1400 audit(1760494232.424:725): avc: denied { bind } for pid=2662 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.086550][ T36] audit: type=1400 audit(1760494232.434:726): avc: denied { connect } for pid=2662 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.468636][ T937] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 75.598602][ T937] usb 3-1: device descriptor read/64, error -71 [ 75.676467][ T2698] overlayfs: failed to clone upperpath [ 75.712197][ T2710] fuse: Invalid rootmode [ 75.832707][ T36] audit: type=1400 audit(1760494233.203:727): avc: denied { setattr } for pid=2721 comm="syz.4.817" name="XDP" dev="sockfs" ino=17495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.855151][ T937] usb 3-1: device descriptor read/64, error -71 [ 75.887183][ T2731] raw_sendmsg: syz.4.820 forgot to set AF_INET. Fix it! [ 75.908375][ T36] audit: type=1400 audit(1760494233.273:728): avc: denied { getopt } for pid=2734 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.108590][ T937] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 76.138605][ T2770] fuse: Unknown parameter 'fd}0x0000000000000003' [ 76.156251][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.834'. [ 76.159077][ T2773] 9pnet_fd: Insufficient options for proto=fd [ 76.226378][ T2778] overlayfs: failed to clone upperpath [ 76.238746][ T937] usb 3-1: device descriptor read/64, error -71 [ 76.478610][ T937] usb 3-1: device descriptor read/64, error -71 [ 76.569506][ T2822] syz.3.849 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.588830][ T937] usb usb3-port1: attempt power cycle [ 76.871669][ T36] audit: type=1400 audit(1760494234.243:729): avc: denied { setattr } for pid=2860 comm="syz.4.862" name="file2" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.900193][ T2866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.863'. [ 76.928621][ T937] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 76.949972][ T937] usb 3-1: device descriptor read/8, error -71 [ 76.977114][ T2881] netlink: 120 bytes leftover after parsing attributes in process `syz.4.868'. [ 76.986206][ T2881] netlink: 96 bytes leftover after parsing attributes in process `syz.4.868'. [ 77.079669][ T937] usb 3-1: device descriptor read/8, error -71 [ 77.098571][ T36] audit: type=1400 audit(1760494234.463:730): avc: denied { bpf } for pid=2892 comm="syz.4.872" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.318598][ T937] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 77.340462][ T937] usb 3-1: device descriptor read/8, error -71 [ 77.388567][ T36] audit: type=1400 audit(1760494234.753:731): avc: denied { setopt } for pid=2911 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.470834][ T2927] overlayfs: failed to clone upperpath [ 77.477533][ T2927] 9pnet_fd: Insufficient options for proto=fd [ 77.484717][ T937] usb 3-1: device descriptor read/8, error -71 [ 77.598718][ T937] usb usb3-port1: unable to enumerate USB device [ 77.638763][ T2934] 9pnet_fd: Insufficient options for proto=fd [ 77.666770][ T2938] 9pnet_fd: Insufficient options for proto=fd [ 77.829669][ T2944] batadv_slave_1: entered promiscuous mode [ 78.019906][ T2946] overlay: filesystem on ./bus is read-only [ 78.047218][ T2944] veth0_to_batadv: mtu less than device minimum [ 78.215543][ T2952] batadv_slave_1: left promiscuous mode [ 78.298126][ T2986] netlink: 76 bytes leftover after parsing attributes in process `syz.4.907'. [ 78.309075][ T2990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:431 [ 78.319684][ T2992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19529 sclass=netlink_route_socket pid=2992 comm=syz.4.908 [ 78.625561][ T3014] x_tables: duplicate underflow at hook 1 [ 78.632112][ T3013] x_tables: duplicate underflow at hook 1 [ 79.161556][ T3040] fuse: Unknown parameter '* 2_Lp]!`_XS*g!a3^e>c50x0000000000000007' [ 79.481805][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 79.481821][ T36] audit: type=1400 audit(1760494236.853:736): avc: denied { execute } for pid=3053 comm="syz.2.930" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.734094][ T36] audit: type=1400 audit(1760494237.103:737): avc: denied { create } for pid=3083 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.753673][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 79.909590][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 79.916490][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.927127][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.940099][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.949207][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.957851][ T10] usb 3-1: config 0 descriptor?? [ 80.028693][ T3117] 9pnet_fd: Insufficient options for proto=fd [ 80.088508][ T3128] fuse: Bad value for 'rootmode' [ 80.167725][ T10] usb 3-1: string descriptor 0 read error: -71 [ 80.177031][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 80.189286][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 80.196888][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 80.218958][ T10] usb 3-1: USB disconnect, device number 28 [ 80.270993][ T3157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3157 comm=syz.3.967 [ 80.328428][ T36] audit: type=1400 audit(1760494237.693:738): avc: denied { setattr } for pid=3163 comm="syz.1.971" name="RAW" dev="sockfs" ino=17102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.336397][ T3167] incfs: Options parsing error. -22 [ 80.356236][ T3167] incfs: mount failed -22 [ 80.719919][ T3181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.720040][ T3180] rust_binder: Error while translating object. [ 80.726580][ T3180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.732788][ T3180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 80.890728][ T3195] sock: sock_set_timeout: `syz.4.982' (pid 3195) tries to set negative timeout [ 80.936679][ T3202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.984'. [ 81.018631][ T469] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 81.145625][ T3212] cgroup: fork rejected by pids controller in /syz3 [ 81.178596][ T469] usb 3-1: Using ep0 maxpacket: 32 [ 81.185217][ T469] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.193513][ T469] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.203948][ T469] usb 3-1: config 0 has no interface number 0 [ 81.210214][ T469] usb 3-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.224859][ T469] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 81.234168][ T469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.242359][ T469] usb 3-1: Product: syz [ 81.254512][ T469] usb 3-1: Manufacturer: syz [ 81.259410][ T469] usb 3-1: SerialNumber: syz [ 81.268059][ T469] usb 3-1: config 0 descriptor?? [ 81.404295][ T3349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 81.445055][ T3353] fuse: Bad value for 'user_id' [ 81.449974][ T3353] fuse: Bad value for 'user_id' [ 81.484984][ T10] usb 3-1: USB disconnect, device number 29 [ 81.694454][ T36] audit: type=1326 audit(1760494239.063:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3357 comm="syz.4.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f141898eec9 code=0x0 [ 81.745489][ T36] audit: type=1400 audit(1760494239.113:740): avc: denied { create } for pid=3357 comm="syz.4.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 81.772635][ T36] audit: type=1400 audit(1760494239.143:741): avc: denied { create } for pid=3362 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 81.799775][ T3365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.995'. [ 82.034461][ T36] audit: type=1400 audit(1760494239.403:742): avc: denied { unmount } for pid=3371 comm="syz.2.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.080319][ T36] audit: type=1400 audit(1760494239.453:743): avc: denied { mount } for pid=3379 comm="syz.1.1001" name="/" dev="ramfs" ino=17292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.128864][ T3385] overlayfs: failed to clone lowerpath [ 82.288155][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.295514][ T3394] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.302778][ T3394] bridge_slave_0: entered allmulticast mode [ 82.309478][ T3394] bridge_slave_0: entered promiscuous mode [ 82.319178][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.326379][ T3394] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.334927][ T3394] bridge_slave_1: entered allmulticast mode [ 82.348294][ T3394] bridge_slave_1: entered promiscuous mode [ 82.366826][ T36] audit: type=1400 audit(1760494239.733:744): avc: denied { getopt } for pid=3406 comm="syz.4.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.380844][ T3407] fuse: Bad value for 'group_id' [ 82.395656][ T3407] fuse: Bad value for 'group_id' [ 82.406606][ T3403] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 82.473966][ T3394] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.481071][ T3394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.488401][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.495460][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.521044][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.529795][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.546290][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.553368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.561375][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.568419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.623359][ T3394] veth0_vlan: entered promiscuous mode [ 82.635948][ T3394] veth1_macvtap: entered promiscuous mode [ 82.673978][ T36] audit: type=1400 audit(1760494240.043:745): avc: denied { nosuid_transition } for pid=3435 comm="syz.5.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 83.338305][ T3472] 9pnet_virtio: no channels available for device [ 83.432644][ T3489] batadv_slave_1: entered promiscuous mode [ 83.440960][ T3487] batadv_slave_1: left promiscuous mode [ 83.465980][ T3496] 9pnet_fd: Insufficient options for proto=fd [ 83.641795][ T3525] x_tables: duplicate underflow at hook 1 [ 83.857411][ T3548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.857444][ T3548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.138606][ T66] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.298620][ T66] usb 6-1: Using ep0 maxpacket: 16 [ 84.305127][ T66] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 84.316724][ T66] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 84.328051][ T66] usb 6-1: config 1 interface 0 has no altsetting 0 [ 84.336959][ T66] usb 6-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.40 [ 84.346096][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.354174][ T66] usb 6-1: Product: syz [ 84.358618][ T66] usb 6-1: Manufacturer: syz [ 84.363321][ T66] usb 6-1: SerialNumber: syz [ 84.408941][ T3566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3566 comm=syz.4.1057 [ 84.573665][ T66] usbhid 6-1:1.0: can't add hid device: -71 [ 84.579737][ T66] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 84.592066][ T66] usb 6-1: USB disconnect, device number 2 [ 85.109661][ T3600] batadv_slave_1: entered promiscuous mode [ 85.359089][ T66] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.483186][ T3607] netlink: 'syz.3.1071': attribute type 4 has an invalid length. [ 85.508813][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 85.515129][ T66] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 85.523547][ T66] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 85.532321][ T66] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 85.541380][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.551092][ T66] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.560793][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.573853][ T66] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.582974][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.594545][ T66] usb 6-1: config 0 descriptor?? [ 85.603636][ T3612] overlayfs: failed to clone upperpath [ 85.699660][ T3625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3625 comm=syz.1.1076 [ 85.729473][ T3630] 9pnet_fd: Insufficient options for proto=fd [ 85.751463][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 85.751483][ T36] audit: type=1400 audit(1760494243.123:751): avc: denied { create } for pid=3632 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 85.803116][ T3644] overlayfs: failed to clone upperpath [ 85.809441][ T3600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3600 comm=syz.5.1069 [ 85.826637][ T66] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.848203][ T66] usb 6-1: USB disconnect, device number 3 [ 85.858667][ T66] usblp0: removed [ 85.911132][ T3658] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1087'. [ 86.318621][ T66] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.353652][ T3673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1092'. [ 86.468569][ T66] usb 6-1: Using ep0 maxpacket: 32 [ 86.474879][ T66] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 86.483394][ T66] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 86.492126][ T66] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 86.501248][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.511023][ T66] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.520764][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 86.533969][ T66] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 86.543302][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.553034][ T66] usb 6-1: config 0 descriptor?? [ 86.763353][ T66] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 87.117149][ T66] usb 6-1: USB disconnect, device number 4 [ 87.123722][ T3714] batadv_slave_1: left promiscuous mode [ 87.148955][ T66] usblp0: removed [ 87.832746][ T3754] rust_binder: Write failure EFAULT in pid:44 [ 88.141787][ T3788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 88.180592][ T469] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.338577][ T469] usb 6-1: Using ep0 maxpacket: 8 [ 88.344915][ T469] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 88.353430][ T469] usb 6-1: config 179 has no interface number 0 [ 88.360056][ T469] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 88.371638][ T469] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 88.383412][ T469] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.394064][ T469] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.407684][ T469] usb 6-1: config 179 interface 65 has no altsetting 0 [ 88.420750][ T469] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 88.430102][ T469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.649112][ T469] usb 6-1: USB disconnect, device number 5 [ 88.783824][ T3823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3823 comm=syz.1.1144 [ 88.853368][ T3847] fuse: Bad value for 'fd' [ 88.877622][ T3852] 9p: Unknown Cache mode or invalid value mmapderfs/binder1 [ 89.201635][ T3866] 9pnet_fd: Insufficient options for proto=fd [ 89.398608][ T469] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 89.548620][ T469] usb 6-1: Using ep0 maxpacket: 32 [ 89.554862][ T469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.565905][ T469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.575710][ T469] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.584782][ T469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.593529][ T469] usb 6-1: config 0 descriptor?? [ 89.599504][ T469] hub 6-1:0.0: USB hub found [ 89.788872][ T3892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3892 comm=syz.4.1165 [ 89.793105][ T3895] syz.3.1166(3895): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 89.823815][ T469] hub 6-1:0.0: 1 port detected [ 89.837333][ T3897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3897 comm=syz.3.1167 [ 89.850522][ T3897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1167'. [ 89.864472][ T3897] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 89.874734][ T36] audit: type=1400 audit(1760494247.243:752): avc: denied { relabelto } for pid=3896 comm="syz.3.1167" name="331" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.901226][ T36] audit: type=1400 audit(1760494247.243:753): avc: denied { associate } for pid=3896 comm="syz.3.1167" name="331" dev="tmpfs" ino=1815 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 89.928838][ T36] audit: type=1400 audit(1760494247.243:754): avc: denied { write } for pid=3896 comm="syz.3.1167" name="331" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.955229][ T36] audit: type=1400 audit(1760494247.243:755): avc: denied { add_name } for pid=3896 comm="syz.3.1167" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.980660][ T36] audit: type=1400 audit(1760494247.243:756): avc: denied { create } for pid=3896 comm="syz.3.1167" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.001752][ T36] audit: type=1400 audit(1760494247.243:757): avc: denied { associate } for pid=3896 comm="syz.3.1167" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.023991][ T36] audit: type=1400 audit(1760494247.243:758): avc: denied { read append open } for pid=3896 comm="syz.3.1167" path="/331/memory.events" dev="tmpfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.026772][ T3860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.049439][ T36] audit: type=1400 audit(1760494247.243:759): avc: denied { map } for pid=3896 comm="syz.3.1167" path="/331/memory.events" dev="tmpfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.058824][ T3860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.094667][ T469] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 90.110289][ T469] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 90.122987][ T469] usbhid 6-1:0.0: can't add hid device: -71 [ 90.130079][ T469] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 90.137431][ T36] audit: type=1400 audit(1760494247.503:760): avc: denied { ioctl } for pid=3904 comm="syz.5.1169" path="socket:[19951]" dev="sockfs" ino=19951 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.178589][ T469] usb 6-1: USB disconnect, device number 6 [ 90.473134][ T3919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3919 comm=syz.4.1172 [ 90.501505][ T3915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3915 comm=syz.4.1172 [ 90.815639][ T3954] 9pnet_fd: Insufficient options for proto=fd [ 90.997694][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 90.997714][ T36] audit: type=1400 audit(1760494248.363:766): avc: denied { relabelfrom } for pid=3969 comm="syz.5.1192" name="NETLINK" dev="sockfs" ino=20080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.058690][ T36] audit: type=1400 audit(1760494248.393:767): avc: denied { relabelto } for pid=3969 comm="syz.5.1192" name="NETLINK" dev="sockfs" ino=20080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 91.109465][ T36] audit: type=1400 audit(1760494248.463:768): avc: denied { accept } for pid=3973 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.291908][ T3998] netlink: 'syz.1.1203': attribute type 3 has an invalid length. [ 91.299779][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 91.438588][ T31] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 91.470804][ T4028] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1213'. [ 91.524658][ T4043] tipc: Enabling of bearer rejected, failed to enable media [ 91.529305][ T4045] 9pnet_fd: Insufficient options for proto=fd [ 91.580346][ T4056] tc_dump_action: action bad kind [ 91.589854][ T31] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 91.598338][ T31] usb 6-1: config 8 has no interface number 0 [ 91.604543][ T31] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 91.615510][ T31] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 91.627971][ T31] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 91.637230][ T31] usb 6-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 91.645302][ T31] usb 6-1: Product: syz [ 91.649555][ T31] usb 6-1: Manufacturer: syz [ 91.654166][ T31] usb 6-1: SerialNumber: syz [ 91.778095][ T36] audit: type=1400 audit(1760494249.143:769): avc: denied { create } for pid=4059 comm="syz.3.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 91.798163][ T36] audit: type=1400 audit(1760494249.163:770): avc: denied { sys_admin } for pid=4059 comm="syz.3.1226" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 91.880524][ T31] usb 6-1: USB disconnect, device number 7 [ 92.129276][ T36] audit: type=1400 audit(1760494249.503:771): avc: denied { mount } for pid=4098 comm="syz.4.1238" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 92.235420][ T4115] tipc: New replicast peer: 255.255.255.255 [ 92.241770][ T4115] tipc: Enabled bearer , priority 10 [ 92.348180][ T4139] overlayfs: failed to clone upperpath [ 92.354594][ T4141] tipc: Enabling of bearer rejected, failed to enable media [ 92.484197][ T4168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 92.484231][ T4168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:76 [ 92.493943][ T4168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.503228][ T4168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.566827][ T4181] rust_binder: Error while translating object. [ 92.574250][ T4181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.587212][ T4181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:80 [ 92.617206][ T4186] rust_binder: Write failure EFAULT in pid:82 [ 92.743657][ T36] audit: type=1400 audit(1760494250.113:772): avc: denied { create } for pid=4208 comm="syz.5.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 92.792667][ T4213] 9pnet: Unknown protocol version 9 [ 92.842555][ T4221] x_tables: unsorted underflow at hook 2 [ 93.304188][ T36] audit: type=1400 audit(1760494250.673:773): avc: denied { mount } for pid=4230 comm="syz.3.1281" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 93.358575][ T31] tipc: Node number set to 2681198575 [ 93.732162][ T36] audit: type=1400 audit(1760494251.103:774): avc: denied { write } for pid=4234 comm="syz.5.1283" path="socket:[21566]" dev="sockfs" ino=21566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.762770][ T36] audit: type=1326 audit(1760494251.133:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4241 comm="syz.1.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2738eec9 code=0x0 [ 94.082091][ T4251] rust_binder: Write failure EFAULT in pid:106 [ 94.082424][ T4251] rust_binder: Write failure EFAULT in pid:106 [ 94.322463][ T4266] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 94.964688][ T4281] overlayfs: failed to clone upperpath [ 95.098752][ T4297] netlink: 'syz.5.1304': attribute type 1 has an invalid length. [ 95.108890][ T4297] binder: Bad value for 'max' [ 95.509105][ T4309] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 96.035645][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 96.035664][ T36] audit: type=1400 audit(1760494253.403:781): avc: denied { append } for pid=4367 comm="syz.5.1328" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.038825][ T4368] loop2: detected capacity change from 0 to 7 [ 96.088990][ T4369] loop2: detected capacity change from 7 to 4 [ 96.095572][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.104761][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.112748][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.122094][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.130051][ T705] loop2: unable to read partition table [ 96.137163][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.147099][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.156288][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.167433][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.176628][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.184905][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.194083][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.202214][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.211394][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.219574][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.228748][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 96.317541][ T4376] rust_binder: Write failure EFAULT in pid:142 [ 97.658656][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.697507][ T4443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4443 comm=syz.4.1356 [ 97.728992][ T4445] overlayfs: failed to clone upperpath [ 97.819755][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.831549][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 97.840806][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.849664][ T10] usb 6-1: config 0 descriptor?? [ 97.879876][ T4447] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1358'. [ 97.942269][ T4449] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 98.267233][ T10] kovaplus 0003:1E7D:2D50.000B: item fetching failed at offset 1/3 [ 98.281271][ T10] kovaplus 0003:1E7D:2D50.000B: parse failed [ 98.289370][ T10] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -22 [ 98.324307][ T4476] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 98.472494][ T4409] rust_binder: Write failure EFAULT in pid:148 [ 98.473347][ T10] usb 6-1: USB disconnect, device number 8 [ 98.537208][ T4525] tipc: Enabling of bearer rejected, failed to enable media [ 98.868814][ T4536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=4536 comm=syz.3.1384 [ 99.023626][ T4547] rust_binder: Write failure EFAULT in pid:151 [ 99.061638][ T4549] sit0: entered promiscuous mode [ 99.073944][ T4549] netlink: 'syz.5.1389': attribute type 1 has an invalid length. [ 99.081900][ T4549] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1389'. [ 99.236603][ T4567] binder: Unknown parameter 'fscontext?}' [ 99.280033][ T4574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 99.280067][ T4574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:172 [ 99.320492][ T4581] netlink: 'syz.5.1399': attribute type 11 has an invalid length. [ 99.337504][ T4581] netlink: 'syz.5.1399': attribute type 1 has an invalid length. [ 99.345315][ T4581] netlink: 3593 bytes leftover after parsing attributes in process `syz.5.1399'. [ 99.354639][ T4582] netlink: 'syz.5.1399': attribute type 11 has an invalid length. [ 99.362597][ T4582] netlink: 'syz.5.1399': attribute type 1 has an invalid length. [ 99.370387][ T4582] netlink: 3593 bytes leftover after parsing attributes in process `syz.5.1399'. [ 99.370695][ T4581] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 99.387740][ T4581] rust_binder: Write failure EINVAL in pid:180 [ 99.405288][ T4584] rust_binder: Write failure EFAULT in pid:183 [ 99.747848][ T36] audit: type=1326 audit(1760494257.113:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9bc58eec9 code=0x7fc00000 [ 99.958066][ T4608] netlink: 'syz.1.1405': attribute type 27 has an invalid length. [ 100.294129][ T4634] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 100.303792][ T36] audit: type=1400 audit(1760494257.673:783): avc: denied { relabelto } for pid=4633 comm="syz.5.1418" name="file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 100.330768][ T36] audit: type=1400 audit(1760494257.673:784): avc: denied { associate } for pid=4633 comm="syz.5.1418" name="file0" dev="tmpfs" ino=347 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 100.358014][ T36] audit: type=1400 audit(1760494257.673:785): avc: denied { mounton } for pid=4633 comm="syz.5.1418" path="/59/file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 100.444787][ T36] audit: type=1400 audit(1760494257.813:786): avc: denied { mounton } for pid=4635 comm="syz.3.1420" path="/414/file0" dev="tmpfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.467966][ T36] audit: type=1400 audit(1760494257.833:787): avc: denied { unlink } for pid=3394 comm="syz-executor" name="file0" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 100.567125][ T36] audit: type=1400 audit(1760494257.933:788): avc: denied { read } for pid=4641 comm="syz.3.1421" name="file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 100.738564][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.822727][ T4647] netlink: 'syz.1.1423': attribute type 16 has an invalid length. [ 100.830738][ T4647] netlink: 'syz.1.1423': attribute type 3 has an invalid length. [ 100.838485][ T4647] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.1423'. [ 100.889718][ T31] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 100.897853][ T31] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 100.908091][ T31] usb 6-1: config 0 has no interface number 0 [ 100.915630][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 100.924737][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.932775][ T31] usb 6-1: Product: syz [ 100.936948][ T31] usb 6-1: Manufacturer: syz [ 100.941563][ T31] usb 6-1: SerialNumber: syz [ 100.946786][ T31] usb 6-1: config 0 descriptor?? [ 101.190343][ T4649] tipc: Enabling of bearer rejected, failed to enable media [ 101.212585][ T4651] overlayfs: failed to resolve './bus': -2 [ 101.354110][ T31] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 101.361188][ T31] usb 6-1: No valid video chain found. [ 101.367933][ T31] usb 6-1: USB disconnect, device number 9 [ 101.455997][ T4679] overlayfs: failed to clone upperpath [ 101.625271][ T36] audit: type=1400 audit(1760494258.993:789): avc: denied { execute } for pid=4724 comm="syz.3.1453" path="/dev/rnullb0" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.648128][ T36] audit: type=1400 audit(1760494258.993:790): avc: denied { create } for pid=4724 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.715385][ T4749] 9pnet_fd: Insufficient options for proto=fd [ 101.716572][ T36] audit: type=1400 audit(101.699:791): avc: denied { mounton } for pid=4748 comm="syz.1.1460" path="/" dev="ramfs" ino=22453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 102.342527][ T4786] Invalid ELF header type: 2 != 1 [ 102.349755][ T36] audit: type=1400 audit(102.319:792): avc: denied { module_load } for pid=4785 comm="syz.1.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 102.473362][ T4797] overlayfs: failed to clone lowerpath [ 102.909698][ T4819] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 102.916957][ T4819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 103.037760][ T4844] fuse: Unknown parameter 'g(*i' [ 103.284118][ T4875] tmpfs: Unknown parameter 'tunl0' [ 103.338013][ T4885] tipc: Enabling of bearer rejected, failed to enable media [ 104.338375][ T4930] overlayfs: failed to clone upperpath [ 104.950423][ T4961] overlay: ./file0 is not a directory [ 104.985211][ T4970] batadv_slave_1: entered promiscuous mode [ 104.992012][ T4969] batadv_slave_1: left promiscuous mode [ 105.064053][ T36] audit: type=1326 audit(105.039:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.5.1527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98eec9 code=0x0 [ 105.374174][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 105.632499][ T4995] fuse: Bad value for 'fd' [ 105.709033][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 105.754406][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 105.756743][ T5014] 9pnet_fd: Insufficient options for proto=fd [ 106.281018][ T5027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 106.822824][ T36] audit: type=1326 audit(106.799:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.5.1560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68ce98eec9 code=0x0 [ 107.357600][ T5050] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 107.705766][ T5066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5066 comm=syz.5.1567 [ 107.728472][ T5071] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1568'. [ 108.255637][ T5092] tmpfs: Unknown parameter '1y+޾nr' [ 108.413083][ T36] audit: type=1400 audit(108.389:795): avc: denied { setattr } for pid=5098 comm="syz.4.1578" path="pipe:[22956]" dev="pipefs" ino=22956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 108.840537][ T5121] overlayfs: failed to clone upperpath [ 108.955620][ T36] audit: type=1400 audit(108.929:796): avc: denied { accept } for pid=5160 comm="syz.5.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 109.170309][ T36] audit: type=1400 audit(109.149:797): avc: denied { create } for pid=5183 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.170848][ T5191] ------------[ cut here ]------------ [ 109.195063][ T5191] WARNING: CPU: 1 PID: 5191 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 109.204535][ T5191] Modules linked in: [ 109.208706][ T5191] CPU: 1 UID: 0 PID: 5191 Comm: syz.3.1604 Not tainted syzkaller #0 191302df6d6fdbd2296e318140211a30501528e1 [ 109.211523][ T5195] tipc: Enabling of bearer rejected, failed to enable media [ 109.220349][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.239643][ T5191] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 109.241138][ T5197] /dev/loop0: Can't lookup blockdev [ 109.245678][ T5191] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 10 ee 05 00 0f 85 be 00 00 00 c6 05 95 10 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 109.245706][ T5191] RSP: 0018:ffffc900090cf860 EFLAGS: 00010246 [ 109.276838][ T5191] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 109.284944][ T5191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900090cf918 [ 109.293010][ T5191] RBP: ffffc900090cf988 R08: ffffc900090cf917 R09: 0000000000000000 [ 109.301138][ T5191] R10: ffffc900090cf900 R11: fffff52001219f23 R12: ffffc900090cf8a0 [ 109.309255][ T5191] R13: dffffc0000000000 R14: 1ffff92001219f10 R15: 0000000000000000 [ 109.317434][ T5191] FS: 00007fd9bd4756c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 109.326517][ T5191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.333235][ T5191] CR2: 0000200000001000 CR3: 000000013eb1e000 CR4: 00000000003526b0 [ 109.341261][ T5191] Call Trace: [ 109.344578][ T5191] [ 109.347512][ T5191] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.353616][ T5191] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 109.359401][ T5191] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 109.365044][ T5191] ___kmalloc_large_node+0x81/0x220 [ 109.370282][ T5191] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 109.375940][ T5191] __kmalloc_large_node_noprof+0x1e/0xe0 [ 109.381636][ T5191] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 109.387296][ T5191] __kmalloc_noprof+0x336/0x530 [ 109.392185][ T5191] ? __cfi_lockref_get+0x10/0x10 [ 109.397156][ T5191] incfs_realloc_mount_info+0xa7/0x4d0 [ 109.402658][ T5191] ? incfs_add_sysfs_node+0x118/0x240 [ 109.408066][ T5191] incfs_alloc_mount_info+0x479/0x600 [ 109.413479][ T5191] incfs_mount_fs+0x3ca/0x960 [ 109.418192][ T5191] ? __cfi_incfs_mount_fs+0x10/0x10 [ 109.423434][ T5191] ? vfs_parse_fs_string+0x102/0x170 [ 109.428795][ T5191] ? selinux_capable+0x38/0x50 [ 109.433581][ T5191] legacy_get_tree+0x103/0x1b0 [ 109.438353][ T5191] ? __cfi_incfs_mount_fs+0x10/0x10 [ 109.443596][ T5191] vfs_get_tree+0xa1/0x290 [ 109.448162][ T5191] do_new_mount+0x251/0xb40 [ 109.452718][ T5191] ? security_capable+0xcf/0xf0 [ 109.457601][ T5191] path_mount+0x688/0x1050 [ 109.462115][ T5191] ? putname+0x113/0x150 [ 109.466383][ T5191] __se_sys_mount+0x2bd/0x480 [ 109.471103][ T5191] ? __x64_sys_mount+0xf0/0xf0 [ 109.475889][ T5191] ? __kasan_check_write+0x18/0x20 [ 109.481047][ T5191] ? fpregs_restore_userregs+0x11d/0x260 [ 109.486725][ T5191] __x64_sys_mount+0xc3/0xf0 [ 109.491367][ T5191] x64_sys_call+0x2021/0x2ee0 [ 109.496097][ T5191] do_syscall_64+0x58/0xf0 [ 109.500570][ T5191] ? clear_bhb_loop+0x50/0xa0 [ 109.505278][ T5191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.511229][ T5191] RIP: 0033:0x7fd9bc58eec9 [ 109.515662][ T5191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.535335][ T5191] RSP: 002b:00007fd9bd475038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.543811][ T5191] RAX: ffffffffffffffda RBX: 00007fd9bc7e5fa0 RCX: 00007fd9bc58eec9 [ 109.551848][ T5191] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 109.559873][ T5191] RBP: 00007fd9bc611f91 R08: 0000200000000280 R09: 0000000000000000 [ 109.567950][ T5191] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 109.576143][ T5191] R13: 00007fd9bc7e6038 R14: 00007fd9bc7e5fa0 R15: 00007ffd82228778 [ 109.584272][ T5191] [ 109.587306][ T5191] ---[ end trace 0000000000000000 ]--- [ 109.592936][ T5191] incfs: Error allocating mount info. -12 [ 109.598816][ T5191] incfs: mount failed -12