last executing test programs: 2m44.595724041s ago: executing program 1 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8, 0x0, 0x1}}}, 0xb8}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000000c0)=0xd, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$netlink(r7, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x20000000}, 0x881) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}}) 2m44.564301954s ago: executing program 1 (id=264): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x30, 0x0, "d427443337084e2c155728b371e491e7767150c3194b3eef53f407cb03f98895ecd08a6031349042776e6b75b391a0b25d49d303a71729551360a53f27e07088924cd66920b0d40668542bb510bba12b"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x523, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x42, 0x3a, 0xe8, 0x40, 0x9c0, 0x204, 0x6968, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x511, 0x2, 0x4, 0x9, 0x20, 0x4, [{{0x9, 0x4, 0x2, 0x2, 0x6, 0xe2, 0x5, 0x66, 0x7, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2eb7eda879"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfff, 0x1, 0x46}, {0x6, 0x24, 0x1a, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x3, 0xa3e9}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x8, 0x1, 0xba}, @acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x6, 0x24, 0x7, 0xf4, 0xfff7}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xb, 0xa6}, @dmm={0x7, 0x24, 0x14, 0x2}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xfffe, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x2e2, 0x24}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xdd, 0xe, 0x40, 0x2}, @mdlm_detail={0x9b, 0x24, 0x13, 0x1b, "e37645871af38c1f105e4ffafb02d01110642d36e25e927a07055cf2c383cf74fd0e146679a01f9b001c9ffeb948ae4c14addfb621c6f7aa2f223810b00423d9750d3f018da3287d20ae4a5fdf55d0b2d82431f962e95b4b36ff7cdee1769a0b68d3c2cdb686cc4dd7e57012a304785d85e2f8508194a0018ec3347427747d91de01f9606ef8b98ce5acc6b833a0616abcb253d186821f"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x7}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x3, [0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x10, 0x401}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0xd7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x4}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x0, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x10, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x4, 0x1, 0x8}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x6, 0xec, 0xf}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x8, 0x6, 0x0, [@generic={0xc5, 0x0, "9265a602bc723e9f134e789fea43078a39f893ffbd68da67f9cfe80f6bbe84a1dfe7e883267d14de76643ffbf14fe0a711479fd8d0dadfbd2a95e9415907122878d3d8cbf575db6051d060503edebef647c86db4122d4da0f62b15e4cf1a9291a9d987980099f88879c0a2cbec6c8bf52fb4637959725b4f4b94f7282775f4d91f7e20853aab4398ac131260c90d5d4ddb8d2fe4bffb352dd36786927a04cfae4f7ca849ae1951509ad488a66f10949d21b150e302517d9e41a9dad4ec1e03eea705ce"}]}}]}}, {{0x9, 0x4, 0x80, 0x8, 0xb, 0x81, 0xcf, 0x45, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x60, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0x8, "bf25", "b1"}, @as_header={0x7, 0x24, 0x1, 0x43, 0x6d, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x38, 0x2, 0xb, 0x3, "ae8465", "cb8cff"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x97, "bb2ca6"}]}, @hid_hid={0x9, 0x21, 0x3d9e, 0xe, 0x1, {0x22, 0x5e3}}], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0x1, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x401}, @generic={0x1f, 0x6, "a8849455a86c33462b13ab48fe0d31240b7b3de1ed0f4964122d845f0d"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xd, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0xe, 0x1, [@generic={0x8e, 0x11, "c24d10a20db045aad6e8ce34857305c101144a40025e3cc013c3403c8fb963724ecedf440015d4f617b5a0f3df42fbf022a3a01d1cf3dddd07ff91fb2940ad02f321ff328d24f51214022a644bb1dd9f4fb9b6be2f3cc1216631ea82d2cadc641919ca2cb4c0a5b083af5fefff775243d59b2a2c4dd9a21b3d2a1ca94df2d671d1aac6aba1bf89026a9c91cd"}]}}, {{0x9, 0x5, 0x85, 0x4, 0x10, 0x4, 0x7, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x3, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xed, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x81, 0xda, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x418}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x80, 0x0, 0xa, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x4e, 0x7, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x7f, 0x0, 0xe, [@generic={0x47, 0x23, "5743070177cb4293754e6f9b6b36405505f34605f26e730f0137b3a2ef7fa1d12c5a31825d46ef038afb2c0e0d588eeeae5f863d5e1f7ba29a7d9ae7ed27b4708d1edb79a3"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x180}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x3, 0xff, 0x8, [@generic={0xd9, 0x1, "5f84a0e32faeaa407116b83deff70f48e4db114915e3f862d714bc0268d80908c8471c89c939009ca9632c803b68c109a508b0556c56efe88d0db8cfdf405702614182d6f656bf2c95618783869e309ca14ab1c032133c6dee4d3d0609422da6f568a8022880608b77f09c1ae30ca0325f4c0045a125faea257051eda6b2cf5b1adb815d82674dd99b290c142df000109b8391e1a393096daf1e9c6172dd08eb1bb094068ff4d910a1ce98b7d792e2a8454ef9d0494bc4e9d516ce0c3e1d13a05fe4213692a26358b03153ad45d431918770a0e7a6f91e"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x81, 0x3a, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xe82}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xd, 0x5, 0x7f, 0x20, 0x1}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x10, &(0x7f00000002c0)=@string={0x10, 0x3, "2e95c5c8929b766c1e088c4ec3fa"}}, {0xe3, &(0x7f0000000a80)=@string={0xe3, 0x3, "2cdc5b8f31842642dad86667e0567c9722c572cb143bec1ff6da34ccdddbfee105f95bbb81dbb4bb2327f12da567d8c81611ef5a81757adb9bf7d23e06f9e30252184165610ad40407503b71794e2efd640286b268f8df1cc2806dc26efdc1d800bbdf9d654d0c00d8ba4588d58f7117b3e98c93f8bead17e4cb8dba32cbc141745a93755262d81672653c572bc91b6be1c2945a0fdf36de482488a80a0b79253421cdaeaaae985c5ec6fd06cb05bf76af01230a001dedd34d7c77a2221a068b4f96f98ae7d07f7cfcea2f9279a083ef790cc0a504198107f203c6df5249137ce9"}}, {0x33, &(0x7f0000000300)=@string={0x33, 0x3, "0adcb299e0698fb898efede7e26b07da1c8544b3099631e877aba9c0f5728b2820716558ccc21ad257b66f2d7905f35d04"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc03885e17901b096}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x16, &(0x7f0000000400)=@string={0x16, 0x3, "cb5f4ddd960e60b1f437c425f01d095f3b5954c4"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x180c}}]}) 2m44.048066853s ago: executing program 1 (id=275): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) lstat(0x0, 0x0) timer_gettime(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) fadvise64(r0, 0x1fe, 0x7ffc, 0x3) 2m42.783957562s ago: executing program 1 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r1, 0x801, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) mkdir(&(0x7f0000000280)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x1e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a00000248001980080001000e0000003c0001802c"], 0x5c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x4, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r7, 0x0, 0x25a5, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x7c, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xff}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020}, 0x2020) 2m42.69307219s ago: executing program 1 (id=288): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68}) (async) mremap(&(0x7f0000636000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000074f000/0x2000)=nil) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f000074f000/0x3000)=nil, 0x3000}, 0x1}) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) (async, rerun: 64) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (rerun: 64) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='lock m'], 0xc) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) (async, rerun: 64) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x6f2e8c180ef45b02, 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m42.59010047s ago: executing program 1 (id=291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6c}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0x59, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6c}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0x59, 0x0, 0x0}) (async) 2m42.513498098s ago: executing program 32 (id=291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6c}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0x59, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6c}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0x59, 0x0, 0x0}) (async) 1m7.285127946s ago: executing program 0 (id=1568): unshare(0x2040400) r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) sendto$packet(r0, &(0x7f0000000000)="6bb9634a956e080f04fabf4a6a86bf82d8014c538af7072165410c91bb6a5da3d05f8edce58e01630d5d460fd0bc0f0e84ef67f90918b7644c20b839399870a96f711d4f3825a349911245dfee32b061fbd370258ac0b3b6a003f281d0e6245be8841866491c40bb14855f83e9281611717ae9b286bb5db2", 0x78, 0x880, 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) statx(r0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, r3, r3) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) ioctl$TCSETSF2(r11, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x200, 0x5, "cf17bc00", 0x5}) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x7, 0x0, 0x0, {0x1, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x8000, 0xfffffffe, r9, r10, 0x1, 0x10000101}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0xe7, 0x6, 0xfffffbfe, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r13 = getgid() setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x3}, [{0x2, 0x1, r1}], {0x4, 0x3}, [{0x8, 0x8, r3}, {0x8, 0x2, r4}, {0x8, 0x2, r5}, {0x8, 0x5, r6}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x5, r10}, {0x8, 0x6, r13}], {0x10, 0x2}, {0x20, 0x4}}, 0x64, 0x0) 1m7.284816446s ago: executing program 0 (id=1569): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1804, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) read$rfkill(r1, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000680)=ANY=[@ANYBLOB="e8000000240001002abd7000fedbdf2501000000d3000400"], 0xe8}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1m7.284178296s ago: executing program 0 (id=1570): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000425000/0x3000)=nil, 0x3000, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140), 0x10) listen(r1, 0x5) accept4$unix(r1, 0x0, 0x0, 0x0) write(r0, &(0x7f00000000c0)="547bbee68789313efe846d6698abfeac0d12a541abd5a6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec37eea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c47979885223fd1e065ba550f5c1e684b3ea49e0d7f6f38b6cb124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411eb4f5b535ab5512cef432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8eaec4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3817bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574070000001c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2cc268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5be4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e88f9ffffffffffffeb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63afc03b2cb53c91563ad6c76026ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c03cf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db71e47d4b9a4325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0edb12c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e3802e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adcb8deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d945dffffffffffffffdeb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0ff7f5cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35007674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc60718536ad9d0dd7567010ad4c59c062db35a4ba9c3ca24c", 0x9db) 1m7.282531416s ago: executing program 0 (id=1571): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000003300000000090582090002000000090503020002070000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) r1 = fsopen(0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) open(0x0, 0x143142, 0x80) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000040)={{0x5, 0x4}, 0x100, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) unlink(&(0x7f0000000040)='./file1\x00') (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000003300000000090582090002000000090503020002070000"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async) fsopen(0x0, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) open(0x0, 0x143142, 0x80) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000040)={{0x5, 0x4}, 0x100, './file0\x00'}) (async) 1m7.23681609s ago: executing program 0 (id=1572): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000014c0)=ANY=[@ANYRES64=r0, @ANYRES16]) mount$cgroup(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000003dc0), 0x800, &(0x7f0000003e00)={[{@cpuset_v2_mode}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x40048c67) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001400)={0xfffffdfffffffffc, 0x8000000, 0x1, r4, 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x15) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000001500)=0x4, 0x4) r7 = dup(r6) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0), 0x4) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x6, 0xdddd1000, 0x4, 0xffffffffffffffff, 0x1}) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) write$FUSE_BMAP(r7, &(0x7f0000001540)={0x18, 0xffffffffffffffda, r9, {0x9d}}, 0x18) r10 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) r11 = dup2(r10, r10) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f0000000040)='source', 0x0, r10) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$xdp(r7, &(0x7f00000013c0)={&(0x7f0000000080)={0x2c, 0x1, r12, 0x32}, 0x10, &(0x7f0000001380), 0x0, 0x0, 0x0, 0x44}, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x2, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.23643868s ago: executing program 0 (id=1573): syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b06f4, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xd0000, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) 52.112956469s ago: executing program 33 (id=1573): syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b06f4, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xd0000, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) 6.817664236s ago: executing program 2 (id=2598): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000380)={0x5, 0xffffffff, 0x0, 0x8, 0x0, 0x9}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) 6.817202836s ago: executing program 3 (id=2509): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68330f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="660f38824d03b9cf090080b800400000ba000000000f300f01c50f06640f01cfc4c201925c20000f20d7c4c199622c6f0f01bf684fbfb00f218b", 0x9a}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 5.1917315s ago: executing program 2 (id=2601): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000040)={{0x1}}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 5.095218839s ago: executing program 2 (id=2602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) listen(r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x40000000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.005748028s ago: executing program 2 (id=2605): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) lseek(r0, 0x7a3a, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000001c0)=0x208000b, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000000)=""/10, 0xa, 0x0) 4.955284522s ago: executing program 3 (id=2509): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68330f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="660f38824d03b9cf090080b800400000ba000000000f300f01c50f06640f01cfc4c201925c20000f20d7c4c199622c6f0f01bf684fbfb00f218b", 0x9a}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 3.192978539s ago: executing program 2 (id=2608): socket$netlink(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa3) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000140)=""/134, 0x86) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_clone(0x83d069e4f5ba88da, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x2a, 0x4, 0x0, {0x1, 0x1, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x500a8, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=0000000000000000000001400']) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0) 2.974080499s ago: executing program 3 (id=2509): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68330f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="660f38824d03b9cf090080b800400000ba000000000f300f01c50f06640f01cfc4c201925c20000f20d7c4c199622c6f0f01bf684fbfb00f218b", 0x9a}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 2.640683511s ago: executing program 2 (id=2614): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r3, 0x0, 0x8001, &(0x7f0000000e00)="129a0a", 0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00004e6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00004ec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00004ec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x14ea89, 0x0) (async) mount$binderfs(0x0, 0x0, 0x0, 0x14ea89, 0x0) close(r0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x8000000000000002}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0), 0x20000000000000dc, 0x0, 0x0, 0x53) 2.640228501s ago: executing program 34 (id=2614): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r3, 0x0, 0x8001, &(0x7f0000000e00)="129a0a", 0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00004e6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00004ec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00004ec000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x14ea89, 0x0) (async) mount$binderfs(0x0, 0x0, 0x0, 0x14ea89, 0x0) close(r0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x8000000000000002}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0), 0x20000000000000dc, 0x0, 0x0, 0x53) 2.495775844s ago: executing program 3 (id=2509): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68330f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="660f38824d03b9cf090080b800400000ba000000000f300f01c50f06640f01cfc4c201925c20000f20d7c4c199622c6f0f01bf684fbfb00f218b", 0x9a}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 571.189786ms ago: executing program 6 (id=2617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x1000001) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x94100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x7, 0x6, 0x23, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x3ff}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf251700020076657468305f746f5f627269646765000800030002000000080001000000000000000000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r0, &(0x7f0000000400)="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", 0x1f000) 506.096173ms ago: executing program 5 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 445.342438ms ago: executing program 5 (id=2625): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x0, &(0x7f0000000340)={0x0, 0x0, 0xb5, 0x95, ""/149}, &(0x7f0000000200)=0xb5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r4}, @enter_looper], 0x0, 0x0, &(0x7f00000003c0)}) mmap$binder(&(0x7f0000975000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x7) r5 = memfd_create(&(0x7f0000000400)='./binderfs/binder0\x00', 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xd4, 0x0, &(0x7f0000000780)=[@enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/10, 0xa, 0x0, 0x1}, @fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f0000000440)={0x0, 0x28, 0x40}}, 0x440}, @exit_looper, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x4, 0x33}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @register_looper, @clear_death={0x400c630f, 0x1}, @increfs_done, @release={0x40046306, 0x1}, @register_looper], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xda) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000001c0)={'veth0_vlan\x00', @random="010000201000"}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000280)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="ec10bc5d", @ANYRESHEX=r8, @ANYBLOB="00022bbd7000fddbdf256c00000005001901050000090000000500190106a63733000000080027000100000008009f00010000000800a100000000000000a047ce184a5f7fa5a71fdbaf2701dc6d639f5f37a1a54434a2ed0d08e26e32909a7d39cb742a636924265b1e4151a4cb8f63bfa5f113233311ae68fc160732cbe5cb68e2b9c6b1787586dda266b8d0275aa3a9d7527fbd427b4d8966a7908ec8e5c046651158cf4667aac19fb8190270909c858642d08c2ee0b22482a05ef955db21478688ce45629b31ecc5d745"], 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) 337.166998ms ago: executing program 3 (id=2509): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68330f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="660f38824d03b9cf090080b800400000ba000000000f300f01c50f06640f01cfc4c201925c20000f20d7c4c199622c6f0f01bf684fbfb00f218b", 0x9a}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 336.895058ms ago: executing program 5 (id=2628): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="e8ef791d3d44d20806ac3701e5e2453a844123634f7951205c48f3524b34e7f8be04a0e628ab75d802498496a8e33612ab90745084475b2e3e07e062f3e632e85906930d9efb163d63afadf2c5f8639649c87050a0f422680ee4c23f7ea5fb61a036980dee729e0390d4828c364dbeddce93be5e43904e03d17744b327056362edccb8688468952d111adf38388ac11be411799a6b92a1a5a66be3a390479f2ae95a2bdfab2c7b95e286f8370843", 0xae}, {}, {&(0x7f0000000440)="d6507e434829686aac7933b67f2df57f7be108dbc2892a10cdc9d304b5eb6b6ef07acec12d0b9e2f827f2a4dcaf13b7edc0c8ba3b755e3c3dc6e556799", 0x3d}, {&(0x7f00000004c0)="b99f482b0da5bd36a8f7f459566cf98f59c9b83dfb50ef69ce0811026505b36a91511ac625eaf0139637dad9d348ee58cc3c20e79a29b8e389ea5c1f40b6f546501c570e579ede41dd20dd062031e5af9b46b153edc30de4636862e6a963595ceb989a8528272ff75f8c1c7a7e4c877d0396e0172600a18c65bc0139b63abf0e5c3382d3f65071ffac2b7423af9ef13828d9ed6042e5a12563a54b40c8c9a99283b4fb1d3ab7b387fa67619960aba5346a05119d927244135200fa8779afc900d4d5af4460d115195b259f555362f6ba901d36aefd7888aaf097aecb8e2bc964a99fc67b090bcf75a5356d24a6c9369611ccb3568b92ac6b01896dfe16e95e62c076a4f4d87b2dbce0ec1558b45a115d2f78a4e9113551330eab4078f0ff4f30a105592d8e7f974a970c0ff16459ece652ea58aed3c3e50650fae688cc994151ee150491373a1eda4c97ce1e5fbf5bf0a7f153ef1c45107c446ef55f93577fa38d6ada70b131535ce735dfa69ad069bdbfd86452edac90c42570a6fbb3b7d64999e8a85ab2919243310b27e5dc47825f39458eaeb3a17cec948fb16c5bb7e25b77b2f153dc239da14386742c298a20f2627bcc3d1b6df5ad6de480113b5d347adbee8601c3405ebcc2b5a0a671f3b7ee4b7f43484cc7311d97705c2408af1736704c7bbf46e12a93066255dfaed5ece36b1b4a47449db5bc24223e9ab505118bad875684436186e0bed8daeb415e12c6cc6cf0d8ab58a8223b5ccd1e3377e43b6efc4277eec721bda1fe250f3a1e0aee5f2384837b5871d3c874199a951baed0aa2f58ad166cbd69c7170fea03e91e33b5bf8a3045a2faaea7b1f9ddfbd4f61590f01c6194d97cb97439c74bcc8ce6d86d46a8d6c0a19a2264f83745ac4d3afa0fda9e893cdec026fcff4a7944a10fa386b9d042836b741c2d8e2b689cd18dd37c9054e54c92e2590d7296d19e40677ea22905df16ea080109a66d1e9083e60b8afc01f5654a645439895eff5dc3da3810bc05ac0165cdc378c4ef56e130011421ce533999bdc6dd480c940bc2fae83f105dadbda5e7068d3951a21da857687098663984fff724af2485bb9e465b3a7c91be25e9f78774d8e1b960539a0b5ee79c7bb150a9c0710348dbb120802a327558a4ab3ff07671125450c9b43b0482b48d269e8e8f4bce16083598c063ccb2bf9c5d86e43fc3d8bff3341626d4614bdfaa59b463ac735edb9abd0aae380c32268e35d92e97e60c8b64b4b1b74b1cbc87dec674365557ec322e73ea9b9e98348de56788724d22e51021e288161285f3feb88b4b077ca146c1b4fbac8b28f8c234c5cf7f702b5c0f27c702d229281de4f5e87c99b7106946ef36e94c07eef940a6e3ef4feea2f50f8ac4e08511b6340d7421b816b83e94a8ffcfa0a9cb9d638f3b5ab07c07da15a95b6df978efc2a45560f202b089e143894a14ae7ecca7c94acbeb65a454f1f4a59293a596f7fb7bd5166a18bfe8295543378e815fd14652f9aa67dfc4fd18dbde0974a4ffbad09761a2c1d464f1211a0a7774aa2f788a28e7eecfd76ee22b4507f23846", 0x45a}, {&(0x7f0000000940)="388389370245e0c2f536088ebab75e2766d4637a2b5c313e1372aca581e06cb6417cc35e9e6e89ed7ba7da6fd100cff78165d84a1c523bbfc08e59ee4b8b759a83e041d614d72835fcc9762d0ddcf98503a4e8588df8806c8307992e9485adb45b9332d7577c946d7f59cbb881abef7933d908e41ec9fadcefdb6f69591d5c66d8520e9b9eed19", 0x87}], 0x5}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001c00)="b664c7", 0x3}], 0x1}}], 0x3, 0x80) write$UHID_CREATE2(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000073797a300000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000ff03a5b50000020000002cffffff060000009b3d9f5607a0ddff3f185b1bc0cc4d92a27594403ea0c7b61fb3562428e868c005a64d03b236f3f3c46a55155eb1c38ee0b4db820ff9188e98cf47803ce06c4ab749a4900a4aaa23087307737e30f198f3b88cd9acd5e75879d234efee061f3c837a9a15a663d89ae4b9a58ed691dd073ef4c292e472a21f7233c7582a70204f64d3e4e32d676e0cfdf622ee67ddc43fc6fc461063608a26bde611e7e88d3e4519875490f19fa45c77e5a0316db50b9fca12caf7a0dbff64b2c8cdc55d4494d354df6f2bbeecc8c4213c1902352dd1ab64bd482e0f5ce4993fe0605862295e415ed9f0289821"], 0x158) mkdirat(r3, &(0x7f0000002040)='./file0\x00', 0x0) sched_rr_get_interval(r1, &(0x7f0000000000)) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) getuid() socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) epoll_create(0x3) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 335.010709ms ago: executing program 4 (id=2629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150bfeffffff0000000001000000080001"], 0x28}}, 0x80) timerfd_create(0x8, 0x80000) setxattr$security_selinux(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000180)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26, 0x3) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 274.355834ms ago: executing program 5 (id=2630): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0xa, 0x8b) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r0, &(0x7f0000000040)=""/63, 0x3f, 0x100000000) (async) pwrite64(r1, &(0x7f0000000080)="35436a68d0145b8b45bf6acbc38cb3e352e3f98ada067a73a9f7323a08a8499c4caa772eeb8cf6c3c7f409116df4108724827c1b9dd0fe1eec06f05a25be47cac8f4c5394b407d8ef73b9790f95370e9234d6a7e4dc2cb39ad7633dba4ceca4f3ff73b357c88dbad8e87c408d53205e697c13249f5084ebe7cdcfbb06629606599da601c01b6e5a218", 0x89, 0x8) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) sendfile(r2, r1, &(0x7f0000000180)=0x2, 0x80000000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (async) r3 = syz_open_pts(0xffffffffffffffff, 0x60800) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000300)={0xe2f, 0x8900000, 0xfffffffc, 0x1, 0xff, "3e596f86bd53149e00a417c98cb6941877d0a6", 0x5, 0xfe}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async, rerun: 64) r6 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) recvfrom$inet(r6, &(0x7f00000004c0)=""/214, 0xd6, 0x60, &(0x7f00000005c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x274, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0x11c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x59ab}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa77}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1d84}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x134, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x936}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x11}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x85c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffe01}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x35e4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfe000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x48050}, 0x80000) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0x0, 0x1, {{0x31, 0x4, 0x1, 0x38, 0xc4, 0x67, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@generic={0x88, 0xf, "937676d93f25df861aebc077d1"}, @cipso={0x86, 0x4b, 0x2, [{0x7, 0x12, "c53758b4f1386593f1942dff41088479"}, {0x6, 0x7, "296fe9f8c5"}, {0x6, 0xe, "a7e4264a5572136897ea6d70"}, {0x6, 0x2}, {0x6, 0xf, "f5bed174b463422320d359dcf9"}, {0x1, 0xb, "d1f1690c357362fe83"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x7}, {@empty, 0x8}]}, @lsrr={0x83, 0x23, 0xe8, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x10}, @empty, @rand_addr=0x64010101, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}]}, @generic={0x86, 0xa, "acc28d1985f0cf6a"}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 64) close_range(r7, r6, 0x0) (rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000a80)={0x3, '\x00', {0x1}, 0x3ff}) (async) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000e40)={0x0, &(0x7f0000000ac0)=[@code={0xa, 0x51, {"c42211b814286564f34380dccb460f06c4c229918c1c6370b71e430f01df0f20e035040000000f22e02e3e0fc76e65f3f00fbb915d00000066660f209af30f09"}}, @cpuid={0x14, 0x18, {0x3, 0xd9e}}, @set_irq_handler={0xbe, 0x20, {0x98, 0x2}}, @code={0xa, 0x66, {"0f20d835080000000f22d80f01c4b805000000b9006000000f01c166baf80cb8fcc9da8aef66bafc0cb049ee642e3e67f3440f0966410f388051ebb95a0900000f32b8010000000f01d966b878008ec0f042fe456b"}}, @set_irq_handler={0xbe, 0x20, {0x41, 0x2}}, @out_dx={0xaa, 0x28, {0xf9e5, 0x4}}, @out_dx={0xaa, 0x28, {0x8463, 0x2, 0x33a}}, @cpuid={0x14, 0x18, {0x9, 0x5}}, @wr_drn={0x6e, 0x20, {0x0, 0xfff}}, @cpuid={0x14, 0x18, {0xf7b, 0x7}}, @rdmsr={0x32, 0x18, {0xba1}}, @set_irq_handler={0xbe, 0x20, {0x7, 0x1}}, @code={0xa, 0x57, {"c441f9116af366ba6100b81b2b679bef460f3566450f38803ccab9800000c00f3235000400000f30460f1d0eb805000000b9070000000f01c147d8ff440f015be7c42211a63e"}}, @wrmsr={0x1e, 0x20, {0x836, 0x8a}}, @code={0xa, 0x55, {"66b874000f00d0c48119ece28fe840870f08c744240034010000c744240233550000ff1c24d9fc0f01c936470f9036b8010000000f01c10ffc2f66bad10466b884f566ef"}}, @code={0xa, 0x75, {"640fc728440f20c0350e000000440f22c0c744240000680000c744240210c30000c7442406000000000f011424c4e16a58fd8f49900274900fb9000800000f32b9940300000f3266b805018ec8260f01ddc744240034000000c744240200000080ff2c24"}}, @in_dx={0x82, 0x20, {0xa447, 0x2}}, @in_dx={0x82, 0x20, {0x859d}}], 0x368}) ioctl$KVM_SMI(r10, 0xaeb7) (async) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000e80)={0x8a, 0x75, 0x2, {0x7f, "03ef1c93a2783f7862ab930f7c20383de1908b268636cdecb1ebc12b6eb0decd0add088215f3868621c52eec7394df3c05b43ac43c914795748577352312950232bdd1f17607842cdcc792f760842f88e6ea86cd277c24d656cc0505f834ca6af3a4bae58a5be4cfbe77251606120bde9db9ddce9a05de5f7b47885dfe93ed"}}, 0x8a) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x0, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000f40), {[{{@arp={@multicast2, @multicast1, 0xffffff00, 0xff000000, 0x6, 0xc, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@random="c494bf9d9656", {[0xff, 0xff, 0x0, 0x0, 0x0, 0x1fe]}}, 0xffff, 0x4, 0x9, 0x2, 0x5, 0x2, 'syzkaller1\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x2a8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010102, @multicast1, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x1}}}, {{@arp={@loopback, @multicast2, 0x0, 0xffffffff, 0xb, 0x6, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff]}}, 0x8, 0x200, 0x7ff, 0x1ff, 0x8000, 0x7, 'veth0_virt_wifi\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async, rerun: 64) socket(0x18, 0x5, 0x6) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r10, 0xc008aec1, &(0x7f0000001400)={0x2, 0x0, [{0x5, 0x75b, 0x5, 0x3, 0x100, 0x224f, 0x7}, {0xa, 0x6, 0x7, 0xffffffff, 0x651c, 0x1, 0x9}]}) (async) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0xd8001, 0x0) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f00000014c0)={0x0, 0x0, 0x1, r8}, 0xc) 273.705574ms ago: executing program 4 (id=2631): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="89000800000000000073", 0xa}], 0x1) (async) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f00000004c0)={[{@name={'name', 0x3d, '\x00yz\xe2\xd6H\xf3\x06\b\x0ff/\xe0\xde:mi\xf0h\b\r\x00\x91B\xf0&\xf4e\xdb\xffb\x06/\xf1'}}]}) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='pvfs2\x00', 0x11, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x2, 0x8}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}, 0x1000}, @transaction={0x40406300, {0xffffffff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x2}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 273.436994ms ago: executing program 6 (id=2617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x1000001) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x94100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x7, 0x6, 0x23, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x3ff}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf251700020076657468305f746f5f627269646765000800030002000000080001000000000000000000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r0, &(0x7f0000000400)="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", 0x1f000) 214.1858ms ago: executing program 4 (id=2632): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600065a2d41be00060005"], 0xe4}}, 0x4000005) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x107800, 0x9) faccessat2(r2, &(0x7f0000000100)='./file0\x00', 0x8, 0x1100) r3 = socket$inet6(0xa, 0x1, 0xfffffff9) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000200)='./file0\x00') 141.960357ms ago: executing program 4 (id=2633): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000500)=@v2={0x2000000, [{0x8}, {0x7fff, 0xcd15}]}, 0x14, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000500)=@v2={0x2000000, [{0x8}, {0x7fff, 0xcd15}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x90, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/9, 0x9, 0x1, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/243, 0xf3, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 111.79854ms ago: executing program 4 (id=2634): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(r2, 0x110) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) setuid(0xee00) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x80) openat(r3, &(0x7f0000000080)='./file0\x00', 0x109000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0x9, 0xfffffffffffffffa}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2074) 87.233652ms ago: executing program 5 (id=2635): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) add_key(0x0, 0x0, &(0x7f0000000080)="47caab47e582926f17aa32d516228fdafb0458717d16f5258f32b0ef73518850e08ece42d653c050cc9b00a4a89a5069974666839d9d7af3b63ea17510c86a9d3636d07a7df7327a69a631be249288e9e8b829d7def567faa3416b3e07babcc09f6f94fd49eb76793348da59", 0x6c, 0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf25080000001800048013000100"], 0x2c}}, 0x26008890) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 75.138743ms ago: executing program 6 (id=2617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mprotect(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x1000001) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x94100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x7, 0x6, 0x23, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x3ff}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf251700020076657468305f746f5f627269646765000800030002000000080001000000000000000000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(r0, &(0x7f0000000400)="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", 0x1f000) 5.3672ms ago: executing program 5 (id=2636): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000, 0x0, 0x2}, 0xfffffffd, [0x9, 0x2000000, 0x81, 0x0, 0x0, 0x312, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x40000000], [0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x40, 0x40, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0xfffffffc]}, 0x45c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = memfd_secret(0x80000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x10406) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r4) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r2], 0x48) r6 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) read$FUSE(r5, &(0x7f0000001bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f0000000100)={0x80, 0x0, r7, [{0x3, 0x8, 0x1, 0x91a7, ')'}, {0x5, 0x10000, 0xa, 0x2, '&[*\xee&^[&/!'}, {0x6, 0x2, 0xc, 0x2, '/dev/uinput\x00'}]}, 0x80) write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18) (async) write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x123081, 0x0) readv(r8, 0x0, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00', @ANYRES64], 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x39}, &(0x7f0000000240)=""/204, 0xcc, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) fcntl$setownex(r1, 0xf, &(0x7f0000001400)={0x2, r3}) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000001440)='/dev/ashmem\x00') (async) read(r4, &(0x7f0000001480)=""/114, 0x72) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001500)={0x0, @adiantum}) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) write$selinux_validatetrans(r0, &(0x7f0000001540)={'system_u:object_r:random_device_t:s0', 0x20, 'system_u:object_r:system_map_t:s0', 0x20, 0xa, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7a) fstat(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000037c0)=0xe8) (async) lstat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = geteuid() r10 = geteuid() (async) stat(&(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r0, &(0x7f00000015c0)='system.posix_acl_access\x00', &(0x7f00000059c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r5}, {0x2, 0x4, r6}, {0x2, 0x4, r7}, {0x2, 0x0, r8}, {0x2, 0x7, 0xee01}, {0x2, 0x0, r9}, {0x2, 0x0, r10}], {0x4, 0x6}, [{0x8, 0x2, r11}, {0x8, 0x4}, {0x8, 0x1, r12}], {0x10, 0x5}, {0x20, 0x1}}, 0x74, 0x2) (async) r13 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000005a40)={'veth0_virt_wifi\x00', 0x400}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000005a80)='./file1\x00', &(0x7f0000005ac0), 0x100) (async) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000005b40)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r14, 0x40046207, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r13, 0x8010550e, &(0x7f0000005c40)={0x20000000, &(0x7f0000005b80)="cbd708c27387f075d856cd035a6e1c86ddde8ce58bd5f7771d53d6bbb6db60e783327a85587b869d8caf92e963b676cdc66a5e5de0de3dd7bd53acbebf2e723f4b685cb7fdb6e4adf827475c7b322011999ba25866f4c99cef2f35e56d96ca6f4e5cdfe3895bd4834149709d7b531084bfeb960d36e9f4be48212959f204191a778a5acd0068cb6f47a5a6489e86a0fffb2ba508413aae496a1556ff17511296a3d22685a15ce2739ac3abf0f52c0dab8901bff88bfcfc115a59"}) 0s ago: executing program 3 (id=2509): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x68330f4c, 0x5, 0x2, 0x4, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) r5 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r5, &(0x7f0000000080)='-1\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="660f38824d03b9cf090080b800400000ba000000000f300f01c50f06640f01cfc4c201925c20000f20d7c4c199622c6f0f01bf684fbfb00f218b", 0x9a}], 0x1, 0x22, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) kernel console output (not intermixed with test programs): 83730][ T1056] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.492266][ T1056] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.501095][ T1056] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.510139][ T1056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.519989][ T1056] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.529720][ T1056] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.542984][ T1056] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.552105][ T1056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.562120][ T1056] usb 4-1: config 0 descriptor?? [ 87.567126][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 87.567143][ T36] audit: type=1400 audit(1762859239.623:2262): avc: denied { write } for pid=2778 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.570449][ T556] usb-storage 5-1:245.159: USB Mass Storage device detected [ 87.640970][ T556] usb-storage 5-1:245.180: USB Mass Storage device detected [ 87.699415][ T556] usb-storage 5-1:245.176: USB Mass Storage device detected [ 87.771014][ T556] usb 5-1: USB disconnect, device number 21 [ 87.802853][ T1056] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 89.525052][ T1056] usb 4-1: USB disconnect, device number 32 [ 89.532266][ T1056] usblp0: removed [ 103.199842][ T2810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 103.200271][ T2810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.267327][ T2821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 103.333359][ T36] audit: type=1400 audit(1762859255.393:2263): avc: denied { getopt } for pid=2829 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.389442][ T2840] overlayfs: failed to clone upperpath [ 103.557235][ T351] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 103.716505][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.728184][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.750611][ T351] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.762735][ T351] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 103.771322][ T351] usb 4-1: Manufacturer: syz [ 103.776535][ T2855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.811'. [ 103.780909][ T351] usb 4-1: config 0 descriptor?? [ 103.995737][ T2868] overlayfs: failed to clone upperpath [ 104.020819][ T36] audit: type=1400 audit(1762859256.083:2264): avc: denied { write } for pid=2874 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 104.066032][ T36] audit: type=1400 audit(1762859256.123:2265): avc: denied { read } for pid=2881 comm="syz.4.820" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.096235][ T2884] 9pnet_fd: Insufficient options for proto=fd [ 104.129385][ T36] audit: type=1400 audit(1762859256.193:2266): avc: denied { watch } for pid=2886 comm="syz.2.822" path="/350" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.155124][ T36] audit: type=1400 audit(1762859256.213:2267): avc: denied { read } for pid=2886 comm="syz.2.822" name="file0" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.427205][ T45] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 104.557265][ T45] usb 5-1: device descriptor read/64, error -71 [ 104.597575][ T351] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input15 [ 104.610351][ T351] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input16 [ 104.622129][ T351] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input17 [ 104.634980][ T351] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0012/input/input18 [ 104.647452][ T351] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 104.799850][ T65] usb 4-1: USB disconnect, device number 33 [ 104.817211][ T45] usb 5-1: device descriptor read/64, error -71 [ 105.057301][ T45] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 105.187194][ T45] usb 5-1: device descriptor read/64, error -71 [ 105.427231][ T45] usb 5-1: device descriptor read/64, error -71 [ 105.475009][ T2953] netlink: 2 bytes leftover after parsing attributes in process `syz.2.846'. [ 105.484311][ T36] audit: type=1400 audit(1762859257.543:2268): avc: denied { read } for pid=2952 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.547327][ T45] usb usb5-port1: attempt power cycle [ 105.577198][ T65] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 105.727191][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 105.733516][ T65] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.742677][ T65] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 105.753155][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.763765][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.773156][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.781330][ T65] usb 4-1: Product: ࠝ [ 105.785628][ T65] usb 4-1: Manufacturer: а [ 105.790491][ T65] usb 4-1: SerialNumber: syz [ 105.897214][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 105.928218][ T45] usb 5-1: device descriptor read/8, error -71 [ 105.999029][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.007688][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.022252][ T65] usb 4-1: 0:2 : does not exist [ 106.030744][ T65] usb 4-1: USB disconnect, device number 34 [ 106.045795][ T2799] udevd[2799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.064840][ T45] usb 5-1: device descriptor read/8, error -71 [ 106.091260][ T36] audit: type=1400 audit(1762859258.153:2269): avc: denied { bind } for pid=2956 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.133822][ T36] audit: type=1400 audit(1762859258.153:2270): avc: denied { setopt } for pid=2956 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.317633][ T45] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 106.338581][ T45] usb 5-1: device descriptor read/8, error -71 [ 106.468334][ T45] usb 5-1: device descriptor read/8, error -71 [ 106.562145][ T2981] binder: Bad value for 'max' [ 106.577432][ T45] usb usb5-port1: unable to enumerate USB device [ 106.582602][ T36] audit: type=1400 audit(1762859258.643:2271): avc: denied { accept } for pid=2982 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 106.713752][ T36] audit: type=1400 audit(1762859258.773:2272): avc: denied { ioctl } for pid=2992 comm="syz.3.857" path="socket:[15336]" dev="sockfs" ino=15336 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.870167][ T3006] overlayfs: conflicting options: nfs_export=on,index=off [ 107.507062][ T3027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.870'. [ 107.597205][ T347] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 107.767245][ T347] usb 5-1: Using ep0 maxpacket: 8 [ 107.775683][ T347] usb 5-1: config 4 has an invalid interface number: 126 but max is 1 [ 107.783943][ T347] usb 5-1: config 4 has an invalid interface number: 30 but max is 1 [ 107.792418][ T347] usb 5-1: config 4 has no interface number 0 [ 107.798592][ T347] usb 5-1: config 4 has no interface number 1 [ 107.805620][ T347] usb 5-1: config 4 interface 126 has no altsetting 0 [ 107.814589][ T347] usb 5-1: string descriptor 0 read error: -22 [ 107.821037][ T347] usb 5-1: New USB device found, idVendor=0499, idProduct=1040, bcdDevice=7e.7d [ 107.830181][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.840652][ T347] snd-usb-audio 5-1:4.126: probe with driver snd-usb-audio failed with error -2 [ 107.852855][ T347] snd-usb-audio 5-1:4.30: probe with driver snd-usb-audio failed with error -2 [ 107.856144][ T2799] udevd[2799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.30/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.007209][ T65] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 108.041157][ T3020] __vm_enough_memory: pid: 3020, comm: syz.4.867, bytes: 18014402804453376 not enough memory for the allocation [ 108.053569][ T347] usb 5-1: USB disconnect, device number 26 [ 108.158322][ T65] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.166678][ T65] usb 4-1: config 179 has no interface number 0 [ 108.173089][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 108.184579][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 108.194540][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.206034][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 108.217495][ T65] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.230908][ T65] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.240111][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.249177][ T3051] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.257100][ T65] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 108.267492][ T65] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 108.458911][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 108.458929][ T36] audit: type=1400 audit(1762859260.523:2280): avc: denied { write } for pid=3050 comm="syz.3.880" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.487999][ T36] audit: type=1400 audit(1762859260.523:2281): avc: denied { create } for pid=3050 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.508675][ T36] audit: type=1400 audit(1762859260.523:2282): avc: denied { write } for pid=3050 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.821427][ T3088] input: syz0 as /devices/virtual/input/input19 [ 108.955246][ T3101] rust_binder: Error while translating object. [ 108.955288][ T3101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 108.961628][ T3101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:250 [ 108.984784][ T36] audit: type=1400 audit(1762859261.043:2283): avc: denied { remount } for pid=3102 comm="syz.4.898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.090429][ T36] audit: type=1400 audit(1762859261.153:2284): avc: denied { create } for pid=3108 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 109.126098][ T3111] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 109.133696][ T3111] rust_binder: Write failure EINVAL in pid:260 [ 109.255092][ T36] audit: type=1400 audit(1762859261.313:2285): avc: denied { read write } for pid=3118 comm="syz.4.904" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.260034][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.269238][ T36] audit: type=1400 audit(1762859261.313:2286): avc: denied { open } for pid=3118 comm="syz.4.904" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.287417][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.322974][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.330422][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.338196][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.345676][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.353194][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.360651][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.376698][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.384221][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.391649][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.399135][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.406558][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.414064][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.421618][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.429126][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.436623][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.444114][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.451541][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.459163][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.466674][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.474159][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.481582][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.489063][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.496467][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.503950][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.511377][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.518881][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.526292][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.533779][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.541212][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.548783][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.556197][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.563701][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.571134][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.578635][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.586059][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.593547][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.601411][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.608895][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.616312][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.623836][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.631267][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.638774][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.646187][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.653674][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.661108][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.668590][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.676001][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.683490][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.691007][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.699448][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.706874][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.714502][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.722070][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.731446][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.739085][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.746674][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.754181][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.768577][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.776185][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.783766][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.792793][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.800272][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.807778][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.815209][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.822743][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.830191][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.837713][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.845140][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.852756][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.860240][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.867781][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.875213][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.882732][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.890177][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.897684][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.905107][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.912636][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.920165][ T351] hid-generic 0003:0008:000F.0013: unknown main item tag 0x0 [ 109.931973][ T351] hid-generic 0003:0008:000F.0013: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 109.957403][ T3142] fido_id[3142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.138408][ T3158] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 110.154093][ T3165] : Can't lookup blockdev [ 110.159291][ T3165] : Can't lookup blockdev [ 110.164168][ T3165] : Can't lookup blockdev [ 110.169443][ T3165] : Can't lookup blockdev [ 110.174130][ T3165] : Can't lookup blockdev [ 110.179487][ T3165] : Can't lookup blockdev [ 110.184178][ T3165] : Can't lookup blockdev [ 110.189090][ T3165] : Can't lookup blockdev [ 110.193868][ T3165] : Can't lookup blockdev [ 110.198764][ T3165] : Can't lookup blockdev [ 110.203365][ T3165] : Can't lookup blockdev [ 110.208085][ T3165] : Can't lookup blockdev [ 110.212748][ T3165] : Can't lookup blockdev [ 110.217411][ T3165] : Can't lookup blockdev [ 110.222138][ T3165] : Can't lookup blockdev [ 110.226772][ T3165] : Can't lookup blockdev [ 110.231491][ T3165] : Can't lookup blockdev [ 110.236140][ T3165] : Can't lookup blockdev [ 110.240888][ T3165] : Can't lookup blockdev [ 110.245513][ T3165] : Can't lookup blockdev [ 110.250155][ T3165] : Can't lookup blockdev [ 110.254777][ T3165] : Can't lookup blockdev [ 110.259636][ T3165] : Can't lookup blockdev [ 110.264364][ T3165] : Can't lookup blockdev [ 110.269029][ T3165] : Can't lookup blockdev [ 110.273608][ T3165] : Can't lookup blockdev [ 110.278260][ T3165] : Can't lookup blockdev [ 110.282863][ T3165] : Can't lookup blockdev [ 110.287531][ T3165] : Can't lookup blockdev [ 110.292176][ T3165] : Can't lookup blockdev [ 110.296758][ T3165] : Can't lookup blockdev [ 110.301430][ T3165] : Can't lookup blockdev [ 110.306076][ T3165] : Can't lookup blockdev [ 110.310781][ T3165] : Can't lookup blockdev [ 110.315423][ T3165] : Can't lookup blockdev [ 110.320090][ T3165] : Can't lookup blockdev [ 110.324930][ T3165] : Can't lookup blockdev [ 110.329793][ T3165] : Can't lookup blockdev [ 110.334504][ T3165] : Can't lookup blockdev [ 110.339255][ T3165] : Can't lookup blockdev [ 110.343984][ T3165] : Can't lookup blockdev [ 110.348632][ T3165] : Can't lookup blockdev [ 110.353333][ T3165] : Can't lookup blockdev [ 110.358093][ T3165] : Can't lookup blockdev [ 110.362728][ T3165] : Can't lookup blockdev [ 110.367411][ T3165] : Can't lookup blockdev [ 110.372384][ T3165] : Can't lookup blockdev [ 110.377011][ T3165] : Can't lookup blockdev [ 110.381720][ T3165] : Can't lookup blockdev [ 110.386307][ T3165] : Can't lookup blockdev [ 110.390865][ T351] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 110.391222][ T3165] : Can't lookup blockdev [ 110.403100][ T3165] : Can't lookup blockdev [ 110.407734][ T3165] : Can't lookup blockdev [ 110.412344][ T3165] : Can't lookup blockdev [ 110.416911][ T3165] : Can't lookup blockdev [ 110.421565][ T3165] : Can't lookup blockdev [ 110.426315][ T3165] : Can't lookup blockdev [ 110.430997][ T3165] : Can't lookup blockdev [ 110.435615][ T3165] : Can't lookup blockdev [ 110.440298][ T3165] : Can't lookup blockdev [ 110.444937][ T3165] : Can't lookup blockdev [ 110.449891][ T3165] : Can't lookup blockdev [ 110.454488][ T3165] : Can't lookup blockdev [ 110.459166][ T3165] : Can't lookup blockdev [ 110.463874][ T3165] : Can't lookup blockdev [ 110.557285][ T351] usb 5-1: Using ep0 maxpacket: 16 [ 110.565031][ T351] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 110.574142][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.582194][ T351] usb 5-1: Product: syz [ 110.586366][ T351] usb 5-1: Manufacturer: syz [ 110.590990][ T351] usb 5-1: SerialNumber: syz [ 110.596635][ T351] usb 5-1: config 0 descriptor?? [ 110.602535][ T351] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 110.727042][ T36] audit: type=1400 audit(1762859262.783:2287): avc: denied { create } for pid=3179 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.748908][ T3180] syz.2.926 (3180): attempted to duplicate a private mapping with mremap. This is not supported. [ 110.776624][ T351] usb 4-1: USB disconnect, device number 35 [ 110.799961][ T36] audit: type=1400 audit(1762859262.863:2288): avc: denied { create } for pid=3186 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 110.819899][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.828569][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.836701][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.854910][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.866666][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.877645][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.877770][ T36] audit: type=1400 audit(1762859262.943:2289): avc: denied { execute } for pid=3188 comm="syz.0.929" name="file1" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.887000][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.918610][ T3189] fuse: Bad value for 'rootmode' [ 110.927427][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.935575][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.949996][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.637217][ T1056] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 111.789450][ T1056] usb 4-1: config 16 has an invalid interface number: 236 but max is 1 [ 111.797998][ T1056] usb 4-1: config 16 has an invalid interface number: 175 but max is 1 [ 111.806361][ T1056] usb 4-1: config 16 has no interface number 0 [ 111.812994][ T1056] usb 4-1: config 16 has no interface number 1 [ 111.819574][ T1056] usb 4-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 111.831281][ T1056] usb 4-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 111.842513][ T1056] usb 4-1: config 16 interface 175 has no altsetting 0 [ 111.850176][ T1056] usb 4-1: language id specifier not provided by device, defaulting to English [ 111.864730][ T1056] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 111.874321][ T1056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.125849][ T3218] can: request_module (can-proto-0) failed. [ 112.339574][ T3242] netlink: 'syz.0.945': attribute type 11 has an invalid length. [ 112.401376][ T3246] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 112.439138][ T3248] netlink: 'syz.0.948': attribute type 27 has an invalid length. [ 113.243055][ T351] usb 5-1: USB disconnect, device number 27 [ 113.264966][ T3260] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 113.271923][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.411267][ T1056] usb 4-1: bad CDC descriptors [ 114.418994][ T1056] usb 4-1: USB disconnect, device number 36 [ 114.845288][ T3304] overlayfs: failed to clone upperpath [ 114.863704][ T3306] 9pnet_fd: Insufficient options for proto=fd [ 114.997886][ T1056] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 115.095592][ T3311] overlay: ./file1 is not a directory [ 115.148558][ T1056] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.159534][ T1056] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.166186][ T1056] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 115.175274][ T1056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.183866][ T1056] usb 4-1: config 0 descriptor?? [ 115.297262][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 115.297262][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.449024][ T3329] rust_binder: Error while translating object. [ 115.449070][ T3329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 115.455342][ T3329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:296 [ 115.481966][ T3333] binder: Unknown parameter 'defcontext01777777777777777777777' [ 115.766183][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 115.766203][ T36] audit: type=1326 audit(1762859267.823:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.3.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b1798f6c9 code=0x0 [ 116.538160][ T36] audit: type=1400 audit(1762859268.603:2303): avc: denied { mount } for pid=3386 comm="syz.0.995" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 116.910349][ T3393] loop2: detected capacity change from 0 to 8388607 [ 117.030656][ T3411] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 117.038138][ T3411] rust_binder: Write failure EINVAL in pid:324 [ 117.083403][ T36] audit: type=1400 audit(1762859269.143:2304): avc: denied { create } for pid=3412 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.130427][ T3421] overlay: ./file0 is not a directory [ 117.136557][ T36] audit: type=1400 audit(1762859269.193:2305): avc: denied { remount } for pid=3420 comm="syz.0.1008" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.178596][ T3430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1012'. [ 117.181570][ T3432] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1013'. [ 117.189585][ T3433] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1013'. [ 117.206202][ T3432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3432 comm=syz.2.1013 [ 117.220878][ T36] audit: type=1326 audit(1762859269.283:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3431 comm="syz.2.1013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7789f8f6c9 code=0x0 [ 117.770409][ T1056] usb 4-1: USB disconnect, device number 37 [ 117.839522][ T36] audit: type=1400 audit(1762859269.903:2307): avc: denied { execute } for pid=3467 comm="syz.0.1023" path="/cpuacct.usage_percpu" dev="rootfs" ino=17412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 117.930873][ T3485] tipc: Cannot configure node identity twice [ 118.107213][ T1056] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 118.258280][ T1056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.269337][ T1056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.279132][ T1056] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 118.288275][ T1056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.297190][ T1056] usb 4-1: config 0 descriptor?? [ 118.705721][ T1056] usbhid 4-1:0.0: can't add hid device: -32 [ 118.711761][ T1056] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 119.075748][ T3513] overlayfs: failed to clone lowerpath [ 119.376915][ T36] audit: type=1400 audit(1762859271.433:2308): avc: denied { getopt } for pid=3516 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.377530][ T3517] 9pnet_fd: Insufficient options for proto=fd [ 119.480317][ T36] audit: type=1400 audit(1762859271.543:2309): avc: denied { watch_reads } for pid=3530 comm="syz.2.1046" path="/425/file0" dev="tmpfs" ino=2288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.487181][ T3531] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1046'. [ 119.503697][ T36] audit: type=1400 audit(1762859271.543:2310): avc: denied { nlmsg_read } for pid=3530 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.716449][ T36] audit: type=1400 audit(1762859271.773:2311): avc: denied { setattr } for pid=3540 comm="syz.0.1049" name="secretmem" dev="secretmem" ino=17589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.046387][ T3566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3566 comm=syz.4.1057 [ 120.297237][ T470] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 120.323586][ T3573] overlayfs: failed to resolve './file1': -2 [ 120.448410][ T470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.459583][ T470] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 120.468756][ T470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.477548][ T470] usb 5-1: config 0 descriptor?? [ 120.823039][ T351] usb 4-1: USB disconnect, device number 38 [ 120.874956][ T36] audit: type=1400 audit(1762859272.933:2312): avc: denied { append } for pid=3582 comm="syz.3.1063" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.928210][ T3589] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 120.973246][ T3602] netlink: 'syz.2.1071': attribute type 64 has an invalid length. [ 121.099174][ T36] audit: type=1400 audit(1762859273.163:2313): avc: denied { setattr } for pid=3565 comm="syz.4.1057" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.141413][ T470] usbhid 5-1:0.0: can't add hid device: -71 [ 121.147731][ T470] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.156310][ T470] usb 5-1: USB disconnect, device number 28 [ 121.277322][ T351] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 121.427197][ T351] usb 4-1: Using ep0 maxpacket: 16 [ 121.433569][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.443965][ T351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.454816][ T351] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.464196][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.472538][ T351] usb 4-1: Product: syz [ 121.476808][ T351] usb 4-1: Manufacturer: syz [ 121.482820][ T351] usb 4-1: SerialNumber: syz [ 121.553682][ T3630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1082'. [ 121.689712][ T3603] kvm: kvm [3601]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x78945514b22341c0 [ 121.703513][ T3635] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 121.703542][ T3635] rust_binder: Error while translating object. [ 121.708113][ T351] usb 4-1: 0:2 : does not exist [ 121.737121][ T351] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 121.752503][ T3635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.752540][ T3635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 121.754434][ T351] usb 4-1: USB disconnect, device number 39 [ 121.784547][ T2799] udevd[2799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.868137][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.884969][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.527217][ T470] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 122.678677][ T470] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.686844][ T470] usb 4-1: not running at top speed; connect to a high speed hub [ 122.695831][ T470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.706169][ T470] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.717046][ T470] usb 4-1: string descriptor 0 read error: -22 [ 122.723316][ T470] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.732582][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.743068][ T470] usb 4-1: 0:2 : does not exist [ 123.551955][ T3702] overlayfs: failed to resolve './file1/file0': -2 [ 123.569596][ T470] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 123.577607][ T3701] sit0: entered promiscuous mode [ 123.584879][ T3701] netlink: 'syz.0.1105': attribute type 1 has an invalid length. [ 123.594770][ T470] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 123.605483][ T3701] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1105'. [ 123.618147][ T470] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 123.636925][ T470] usb 4-1: USB disconnect, device number 40 [ 123.937218][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 123.937218][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.328189][ T3725] binder: Unknown parameter 'defcontext01777777777777777777777' [ 124.359230][ T36] audit: type=1400 audit(1762859276.423:2314): avc: denied { getattr } for pid=3729 comm="syz.3.1115" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.414429][ T3735] binder: Bad value for 'stats' [ 124.536946][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 124.580120][ T36] audit: type=1400 audit(1762859276.643:2315): avc: denied { accept } for pid=3753 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.707226][ T351] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 124.715167][ T36] audit: type=1400 audit(1762859276.773:2316): avc: denied { setopt } for pid=3762 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.878836][ T351] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.888011][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.896903][ T351] usb 5-1: config 0 descriptor?? [ 125.567187][ T1056] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 125.714701][ T3739] rust_binder: Write failure EFAULT in pid:355 [ 125.714967][ T3739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.723393][ T1056] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 125.738085][ T351] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 125.753340][ T351] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 125.764122][ T1056] usb 4-1: config 0 has no interface number 0 [ 125.770671][ T1056] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=de.fa [ 125.779954][ T1056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.796447][ T1056] usb 4-1: config 0 descriptor?? [ 125.801584][ T351] asix 5-1:0.0: probe with driver asix failed with error -71 [ 125.811177][ T351] usb 5-1: USB disconnect, device number 29 [ 126.018610][ T1056] usb 4-1: string descriptor 0 read error: -71 [ 126.025543][ T1056] ftdi_sio 4-1:0.40: FTDI USB Serial Device converter detected [ 126.037311][ T1056] ftdi_sio ttyUSB0: unknown device type: 0xdefa [ 126.048416][ T1056] usb 4-1: USB disconnect, device number 41 [ 126.055757][ T1056] ftdi_sio 4-1:0.40: device disconnected [ 126.537198][ T1056] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 126.708326][ T1056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.718372][ T1056] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.730320][ T1056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.741706][ T1056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.751910][ T1056] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 126.765186][ T1056] usb 5-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 126.774775][ T1056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.784161][ T1056] usb 5-1: config 0 descriptor?? [ 126.827222][ T331] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 126.988315][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 127.003301][ T331] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 127.012798][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.022086][ T331] usb 4-1: config 0 descriptor?? [ 127.034205][ T3861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 127.205931][ T1056] hid-generic 0003:046D:005C.0014: hidraw0: USB HID v0.00 Device [HID 046d:005c] on usb-dummy_hcd.4-1/input0 [ 127.405657][ T1056] usb 5-1: USB disconnect, device number 30 [ 127.444725][ T331] uclogic 0003:28BD:0078.0015: interface is invalid, ignoring [ 127.645072][ T1056] usb 4-1: USB disconnect, device number 42 [ 127.784911][ T3887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1174'. [ 127.795599][ T3887] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1174'. [ 127.825615][ T3894] overlayfs: failed to clone upperpath [ 127.844080][ T3896] can: request_module (can-proto-6) failed. [ 128.016689][ T3898] overlayfs: failed to clone upperpath [ 128.167210][ T1056] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 128.204173][ T3914] netlink: 'syz.3.1183': attribute type 6 has an invalid length. [ 128.260265][ T36] audit: type=1400 audit(1762859280.323:2317): avc: denied { mounton } for pid=3918 comm="syz.3.1184" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 128.312925][ T3921] netlink: 'syz.3.1185': attribute type 4 has an invalid length. [ 128.320933][ T1056] usb 5-1: Using ep0 maxpacket: 32 [ 128.332265][ T1056] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 128.347302][ T1056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.355521][ T3921] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1185'. [ 128.365711][ T1056] usb 5-1: config 0 descriptor?? [ 128.773018][ T1056] logitech 0003:046D:C29C.0016: unknown main item tag 0x5 [ 128.791980][ T1056] logitech 0003:046D:C29C.0016: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 128.815909][ T1056] logitech 0003:046D:C29C.0016: no inputs found [ 128.838122][ T1056] usb 5-1: USB disconnect, device number 31 [ 128.904573][ T3946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.904609][ T3946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 129.306751][ T3951] Unsupported ieee802154 address type: 0 [ 130.127752][ T36] audit: type=1400 audit(1762859282.193:2318): avc: denied { create } for pid=3982 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 130.422529][ T4009] netlink: 'syz.3.1213': attribute type 4 has an invalid length. [ 130.888221][ T36] audit: type=1400 audit(1762859282.953:2319): avc: denied { connect } for pid=4012 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.905072][ T46] tipc: Subscription rejected, illegal request [ 130.916035][ T4013] netlink: 'syz.2.1215': attribute type 4 has an invalid length. [ 130.923881][ T4013] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1215'. [ 131.088127][ T4007] overlayfs: statfs failed on './file0' [ 131.127394][ T4042] binder: Unknown parameter '00000000000000001412' [ 131.447200][ T556] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 131.598218][ T556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.608436][ T556] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.618160][ T556] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.627306][ T556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 131.635382][ T556] usb 4-1: SerialNumber: syz [ 131.854079][ T556] usb 4-1: 0:2 : does not exist [ 131.863607][ T556] usb 4-1: USB disconnect, device number 43 [ 131.878205][ T2799] udevd[2799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.082307][ T4072] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1235'. [ 132.297230][ T556] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 132.432133][ T4086] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.439908][ T4086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1241'. [ 132.447413][ T556] usb 5-1: Using ep0 maxpacket: 32 [ 132.458482][ T36] audit: type=1400 audit(1762859284.523:2320): avc: denied { connect } for pid=4055 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.468627][ T556] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.489211][ T556] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 132.496841][ T556] usb 5-1: can't read configurations, error -71 [ 132.570782][ T4097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 132.570807][ T4097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:611 [ 132.654192][ T4105] loop5: detected capacity change from 0 to 7 [ 132.767621][ T4107] Invalid logical block size (1) [ 132.856180][ T4114] rust_binder: 624: no such ref 3 [ 132.861285][ T4114] rust_binder: inc_ref_done called when no active inc_refs [ 132.861306][ T4114] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.875591][ T4114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:624 [ 132.965794][ T36] audit: type=1400 audit(1762859285.023:2321): avc: denied { audit_read } for pid=4119 comm="syz.3.1251" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.000051][ T4120] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 133.043595][ T36] audit: type=1400 audit(1762859285.103:2322): avc: denied { map } for pid=4124 comm="syz.3.1253" path="/216/file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.074757][ T36] audit: type=1400 audit(1762859285.133:2323): avc: denied { name_bind } for pid=4127 comm="syz.3.1254" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 133.136369][ T4128] fuse: Bad value for 'user_id' [ 133.141297][ T4128] fuse: Bad value for 'user_id' [ 133.157917][ T36] audit: type=1400 audit(1762859285.223:2324): avc: denied { read write } for pid=4130 comm="syz.3.1255" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.181658][ T36] audit: type=1400 audit(1762859285.223:2325): avc: denied { open } for pid=4130 comm="syz.3.1255" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.205142][ T36] audit: type=1400 audit(1762859285.223:2326): avc: denied { ioctl } for pid=4130 comm="syz.3.1255" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.407213][ T331] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 133.510047][ T4144] overlay: Unknown parameter 'volatile:/' [ 133.558361][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 133.569696][ T331] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 133.578835][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.587715][ T331] usb 4-1: config 0 descriptor?? [ 133.596892][ T4131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.823266][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 133.823285][ T36] audit: type=1326 audit(1762859285.883:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.0.1267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f159378f6c9 code=0x0 [ 133.887883][ T4167] binder: Bad value for 'max' [ 133.911940][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 133.918166][ T331] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.937697][ T331] usb 4-1: USB disconnect, device number 44 [ 134.034710][ T4173] rust_binder: Error while translating object. [ 134.034778][ T4173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.047190][ T4173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 134.538372][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 134.568867][ T4207] 9pnet_fd: p9_fd_create_unix (4207): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 134.612104][ T4209] overlayfs: failed to clone lowerpath [ 134.661505][ T36] audit: type=1400 audit(1762859286.723:2329): avc: denied { mounton } for pid=4219 comm="syz.0.1285" path="/364/file0" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.671347][ T4220] netlink: 'syz.0.1285': attribute type 4 has an invalid length. [ 134.696237][ T4222] netlink: 'syz.0.1285': attribute type 4 has an invalid length. [ 135.040475][ T4241] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 135.040591][ T4241] rust_binder: Write failure EINVAL in pid:654 [ 135.274671][ T36] audit: type=1400 audit(1762859287.333:2330): avc: denied { create } for pid=4252 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.300695][ T1056] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 135.457273][ T1056] usb 4-1: Using ep0 maxpacket: 16 [ 135.463752][ T1056] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.474714][ T1056] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.481384][ T1056] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 135.490478][ T1056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.499163][ T1056] usb 4-1: config 0 descriptor?? [ 135.704848][ T4293] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1313'. [ 135.714847][ T1056] usbhid 4-1:0.0: can't add hid device: -71 [ 135.723927][ T1056] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.735346][ T1056] usb 4-1: USB disconnect, device number 45 [ 136.132627][ T4320] 9pnet_fd: Insufficient options for proto=fd [ 136.293885][ T4347] rust_binder: Write failure EFAULT in pid:660 [ 136.318268][ T4355] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 136.324497][ T4355] rust_binder: Read failure Err(EFAULT) in pid:662 [ 136.332813][ T4355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:662 [ 136.667242][ T65] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 136.807240][ T65] usb 4-1: device descriptor read/64, error -71 [ 137.047248][ T65] usb 4-1: device descriptor read/64, error -71 [ 137.128137][ T36] audit: type=1400 audit(1762859289.193:2331): avc: denied { create } for pid=4391 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 137.129501][ T4392] devtmpfs: Unknown parameter 'fuse' [ 137.230324][ T4411] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 137.236361][ T4412] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 137.239422][ T4411] overlayfs: missing 'lowerdir' [ 137.248451][ T4412] overlayfs: missing 'lowerdir' [ 137.287291][ T65] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 137.292790][ T36] audit: type=1400 audit(1762859289.353:2332): avc: denied { create } for pid=4416 comm="syz.0.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.417214][ T65] usb 4-1: device descriptor read/64, error -71 [ 137.657265][ T65] usb 4-1: device descriptor read/64, error -71 [ 137.767333][ T65] usb usb4-port1: attempt power cycle [ 138.107214][ T65] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 138.128291][ T65] usb 4-1: device descriptor read/8, error -71 [ 138.259201][ T65] usb 4-1: device descriptor read/8, error -71 [ 138.497230][ T65] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 138.514790][ T4435] fuseblk: Bad value for 'fd' [ 138.518227][ T65] usb 4-1: device descriptor read/8, error -71 [ 138.648768][ T65] usb 4-1: device descriptor read/8, error -71 [ 138.757278][ T65] usb usb4-port1: unable to enumerate USB device [ 139.357885][ T4449] futex_wake_op: syz.0.1365 tries to shift op by 32; fix this program [ 139.513753][ T4456] __vm_enough_memory: pid: 4456, comm: syz.3.1368, bytes: 21200568147968 not enough memory for the allocation [ 139.971473][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 139.980530][ T4467] bridge_slave_1: left allmulticast mode [ 139.986203][ T4467] bridge_slave_1: left promiscuous mode [ 139.991982][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.999672][ T4467] bridge_slave_0: left allmulticast mode [ 140.005415][ T4467] bridge_slave_0: left promiscuous mode [ 140.011323][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.141463][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'. [ 140.394440][ T36] audit: type=1400 audit(1762859292.453:2333): avc: denied { lock } for pid=4505 comm="syz.0.1387" path="socket:[21423]" dev="sockfs" ino=21423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.443310][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.450289][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.461568][ T36] audit: type=1400 audit(1762859292.523:2334): avc: denied { accept } for pid=4514 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.963150][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.963182][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.969832][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.976294][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.982809][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.989461][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.996063][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.002571][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.009114][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.015604][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.022183][ T4517] rust_binder: Error while translating object. [ 141.022308][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.028809][ T4517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 141.035327][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.041592][ T4517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:680 [ 141.051354][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.067083][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.074066][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.080845][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.087505][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.094281][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.101679][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.108388][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.114835][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.121475][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.128052][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.134513][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.141188][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.147683][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.154161][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.160621][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.167061][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.173524][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.179989][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.186430][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.192983][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.199473][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.205933][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.212479][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.220446][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.227962][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.234602][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.241417][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.248093][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.254667][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.261343][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.268119][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.274651][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.281431][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.288096][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.294652][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.302463][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.309182][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.315720][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.322483][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.329179][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.335748][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.342525][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.349239][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.355798][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.362584][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.369258][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.375936][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.382751][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.389471][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.395976][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.402791][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.481821][ T36] audit: type=1400 audit(1762859293.543:2335): avc: denied { accept } for pid=4545 comm="syz.3.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.727296][ T1056] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 141.785721][ T4557] fuse: Unknown parameter 'gr`oup_i00000000000000000000' [ 141.867214][ T1056] usb 4-1: device descriptor read/64, error -71 [ 142.096950][ T4582] 9pnet_fd: Insufficient options for proto=fd [ 142.107759][ T1056] usb 4-1: device descriptor read/64, error -71 [ 142.306387][ T4587] TCP: TCP_TX_DELAY enabled [ 142.332859][ T4592] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 142.347209][ T1056] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 142.420614][ T4601] overlayfs: failed to clone upperpath [ 142.477224][ T1056] usb 4-1: device descriptor read/64, error -71 [ 142.497215][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 142.497215][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.650771][ T4615] tipc: Started in network mode [ 142.655882][ T4615] tipc: Node identity 1, cluster identity 4711 [ 142.662387][ T4615] tipc: Node number set to 1 [ 142.668635][ T4615] netlink: 'syz.4.1430': attribute type 32 has an invalid length. [ 142.703046][ T36] audit: type=1326 audit(1762859294.763:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.726646][ T36] audit: type=1326 audit(1762859294.763:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.753644][ T36] audit: type=1326 audit(1762859294.773:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.753693][ T1056] usb 4-1: device descriptor read/64, error -71 [ 142.783318][ T36] audit: type=1326 audit(1762859294.773:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.806914][ T36] audit: type=1326 audit(1762859294.773:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.830422][ T36] audit: type=1326 audit(1762859294.773:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.854182][ T36] audit: type=1326 audit(1762859294.773:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 142.887766][ T1056] usb usb4-port1: attempt power cycle [ 143.227185][ T1056] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 143.249029][ T1056] usb 4-1: device descriptor read/8, error -71 [ 143.388274][ T1056] usb 4-1: device descriptor read/8, error -71 [ 143.476014][ T4656] overlayfs: failed to clone upperpath [ 143.627220][ T1056] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 143.654077][ T1056] usb 4-1: device descriptor read/8, error -71 [ 143.788208][ T1056] usb 4-1: device descriptor read/8, error -71 [ 143.897310][ T1056] usb usb4-port1: unable to enumerate USB device [ 144.432295][ T4663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 144.525166][ T4667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1448'. [ 144.997557][ T4678] fuseblk: Unknown parameter '0꽹G)WQ@' [ 145.163826][ T4691] netlink: 'syz.2.1456': attribute type 27 has an invalid length. [ 145.425977][ T4693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.429043][ T4694] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 145.479466][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 145.479486][ T36] audit: type=1400 audit(1762859297.543:2390): avc: denied { mounton } for pid=4695 comm="syz.0.1459" path="/442/file0" dev="tmpfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 145.523197][ T4702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.523230][ T4702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.531962][ T4702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.651094][ T36] audit: type=1326 audit(1762859297.713:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6bdf786567 code=0x7fc00000 [ 145.719309][ T36] audit: type=1400 audit(1762859297.783:2392): avc: denied { create } for pid=4715 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.821469][ T4720] rust_binder: Write failure EFAULT in pid:711 [ 146.087219][ T556] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 146.248296][ T556] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.257979][ T556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.268476][ T556] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.277594][ T556] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.291580][ T556] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.300682][ T556] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.308708][ T556] usb 4-1: Product: syz [ 146.312864][ T556] usb 4-1: Manufacturer: syz [ 146.319171][ T556] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 146.529344][ T1056] usb 4-1: USB disconnect, device number 54 [ 147.027243][ T1056] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 147.091458][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 147.178777][ T1056] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 147.186775][ T1056] usb 4-1: can't read configurations, error -22 [ 147.317237][ T1056] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 147.468652][ T1056] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 147.476837][ T1056] usb 4-1: can't read configurations, error -22 [ 147.483539][ T1056] usb usb4-port1: attempt power cycle [ 147.568132][ T36] audit: type=1400 audit(1762859299.633:2393): avc: denied { create } for pid=4781 comm="syz.0.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.697106][ T4806] virtiofs: Unknown parameter 'always' [ 147.729359][ T4811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1017 sclass=netlink_tcpdiag_socket pid=4811 comm=syz.0.1490 [ 147.838499][ T1056] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 147.868859][ T1056] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 147.878539][ T1056] usb 4-1: can't read configurations, error -22 [ 147.886905][ T4833] overlayfs: failed to clone lowerpath [ 147.893447][ T4833] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1495'. [ 147.931802][ T4852] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 147.939360][ T36] audit: type=1400 audit(1762859300.003:2394): avc: denied { listen } for pid=4850 comm="syz.0.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 147.993954][ T36] audit: type=1400 audit(1762859300.053:2395): avc: denied { map } for pid=4857 comm="syz.0.1500" path="socket:[21818]" dev="sockfs" ino=21818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.017291][ T1056] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 148.048876][ T1056] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 148.058380][ T1056] usb 4-1: can't read configurations, error -22 [ 148.064785][ T1056] usb usb4-port1: unable to enumerate USB device [ 148.083041][ T4860] /dev/rnullb0: Can't lookup blockdev [ 148.193175][ T4874] 9pnet: Could not find request transport: ffdno=G`c [ 148.222656][ T4880] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1508'. [ 148.232382][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 148.254895][ T4882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1509'. [ 148.276739][ T36] audit: type=1400 audit(1762859300.333:2396): avc: denied { ioctl } for pid=4886 comm="syz.0.1510" path="socket:[21869]" dev="sockfs" ino=21869 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.302942][ T36] audit: type=1400 audit(1762859300.343:2397): avc: denied { map } for pid=4886 comm="syz.0.1510" path="socket:[21870]" dev="sockfs" ino=21870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 148.333663][ T36] audit: type=1400 audit(1762859300.393:2398): avc: denied { setopt } for pid=4890 comm="syz.0.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.341652][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 148.659925][ T4921] netlink: 'syz.0.1520': attribute type 32 has an invalid length. [ 149.185051][ T36] audit: type=1326 audit(1762859301.243:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.2.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7789f8f6c9 code=0x7ffc0000 [ 149.209374][ T4935] x_tables: duplicate underflow at hook 1 [ 149.648050][ T4949] SELinux: Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped). [ 149.692983][ T4957] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 149.714039][ T4960] __vm_enough_memory: pid: 4960, comm: syz.3.1534, bytes: 18014402804453376 not enough memory for the allocation [ 149.888109][ T4981] cgroup: fork rejected by pids controller in /syz4 [ 150.044276][ T5019] 9pnet_fd: Insufficient options for proto=fd [ 150.160328][ T5035] incfs: ino conflict with backing FS 1 [ 150.210400][ T5043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5043 comm=syz.0.1550 [ 150.334095][ T5076] netlink: 'syz.3.1558': attribute type 17 has an invalid length. [ 150.869059][ T5094] vlan1: entered promiscuous mode [ 150.874272][ T5094] vlan1: entered allmulticast mode [ 150.879719][ T5094] veth0_vlan: entered allmulticast mode [ 150.913629][ T5101] syz.0.1564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.915230][ T5103] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 151.016424][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 151.016443][ T36] audit: type=1400 audit(1762859303.073:2452): avc: denied { mounton } for pid=5126 comm="syz.0.1573" path="/497/file0" dev="tmpfs" ino=2720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 151.151295][ T36] audit: type=1400 audit(1762859303.213:2453): avc: denied { map } for pid=5139 comm="syz.2.1578" path="socket:[23068]" dev="sockfs" ino=23068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 151.175665][ T36] audit: type=1400 audit(1762859303.213:2454): avc: denied { accept } for pid=5139 comm="syz.2.1578" path="socket:[23068]" dev="sockfs" ino=23068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 151.348239][ T36] audit: type=1400 audit(1762859303.413:2455): avc: denied { setattr } for pid=5147 comm="syz.4.1581" name="NETLINK" dev="sockfs" ino=23079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.888429][ T5204] netlink: 'syz.2.1600': attribute type 11 has an invalid length. [ 151.907247][ T5204] netlink: 'syz.2.1600': attribute type 2 has an invalid length. [ 151.915529][ T5204] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1600'. [ 151.928016][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1600'. [ 152.092783][ T36] audit: type=1400 audit(1762859304.153:2456): avc: denied { listen } for pid=5215 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.446854][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.454002][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.461412][ T5304] bridge_slave_0: entered allmulticast mode [ 153.468098][ T5304] bridge_slave_0: entered promiscuous mode [ 153.474707][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.483771][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.491076][ T5304] bridge_slave_1: entered allmulticast mode [ 153.497449][ T5304] bridge_slave_1: entered promiscuous mode [ 153.552632][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.560484][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.678325][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.685426][ T5304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.692770][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.699846][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.721079][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.728626][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.739386][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.746547][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.753973][ T293] tipc: Left network mode [ 153.756342][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.765407][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.830577][ T5304] veth0_vlan: entered promiscuous mode [ 153.841276][ T5304] veth1_macvtap: entered promiscuous mode [ 153.909274][ T5326] rust_binder: 2: no such ref 1 [ 154.583746][ T5346] overlayfs: failed to resolve './file1': -2 [ 154.739038][ T5377] overlayfs: missing 'workdir' [ 154.917200][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.048460][ T5427] overlayfs: failed to clone lowerpath [ 155.077594][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 155.089765][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 155.099954][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.110728][ T45] usb 3-1: Product: syz [ 155.114936][ T45] usb 3-1: Manufacturer: syz [ 155.119578][ T45] usb 3-1: SerialNumber: syz [ 155.125562][ T45] usb 3-1: config 0 descriptor?? [ 155.343339][ T45] usb 3-1: USB disconnect, device number 2 [ 155.369974][ T5324] udevd[5324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.412255][ T36] audit: type=1400 audit(1762859307.473:2457): avc: denied { read } for pid=5473 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.490040][ T5484] netlink: 'syz.4.1687': attribute type 4 has an invalid length. [ 155.499950][ T5484] netlink: 'syz.4.1687': attribute type 4 has an invalid length. [ 155.853262][ T5499] input: syz0 as /devices/virtual/input/input23 [ 156.117199][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.209166][ T5509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1696'. [ 156.278317][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 156.289214][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 156.302230][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 156.311313][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.320085][ T10] usb 3-1: config 0 descriptor?? [ 156.371538][ T36] audit: type=1400 audit(1762859308.433:2458): avc: denied { module_load } for pid=5521 comm="syz.3.1700" path="/bus" dev="ramfs" ino=24827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 156.372387][ T5523] Invalid ELF header magic: != ELF [ 156.535770][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 156.552561][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 156.566998][ T10] usb 3-1: USB disconnect, device number 3 [ 156.573903][ T5542] raw_sendmsg: syz.2.1708 forgot to set AF_INET. Fix it! [ 157.707273][ T1056] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.836941][ T5577] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1719'. [ 157.877189][ T1056] usb 3-1: Using ep0 maxpacket: 32 [ 157.883449][ T1056] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 157.894663][ T1056] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.904504][ T1056] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 157.913572][ T1056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.922267][ T1056] usb 3-1: config 0 descriptor?? [ 158.329541][ T1056] pantherlord 0003:0E8F:0003.0017: item fetching failed at offset 0/2 [ 158.338224][ T1056] pantherlord 0003:0E8F:0003.0017: parse failed [ 158.344519][ T1056] pantherlord 0003:0E8F:0003.0017: probe with driver pantherlord failed with error -22 [ 158.530463][ T5569] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 158.531507][ T65] usb 3-1: USB disconnect, device number 4 [ 159.385154][ T5627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=5627 comm=syz.3.1734 [ 159.893760][ T36] audit: type=1326 audit(1762859311.953:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5635 comm="syz.2.1738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2133d8f6c9 code=0x0 [ 160.698434][ T5663] fuse: Bad value for 'fd' [ 160.703299][ T36] audit: type=1400 audit(1762859312.763:2460): avc: denied { create } for pid=5662 comm="syz.4.1749" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 160.977204][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.128360][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.139301][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.148275][ T10] usb 3-1: config 1 has no interface number 0 [ 161.154438][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.168847][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.178016][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.186024][ T10] usb 3-1: Product: syz [ 161.190219][ T10] usb 3-1: Manufacturer: syz [ 161.194840][ T10] usb 3-1: SerialNumber: syz [ 161.201839][ T10] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 161.209307][ T10] cdc_ncm 3-1:1.1: bind() failure [ 161.250252][ T5697] fuse: Bad value for 'fd' [ 161.255384][ T5697] fuse: Bad value for 'fd' [ 161.336421][ T5702] overlayfs: failed to clone lowerpath [ 161.343321][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 161.352465][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 161.395789][ T36] audit: type=1400 audit(1762859313.453:2461): avc: denied { getopt } for pid=5708 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.402478][ T5709] tmpfs: Invalid uid '0x00000000ffffffff' [ 161.418584][ T65] usb 3-1: USB disconnect, device number 5 [ 161.846760][ T5731] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 161.855821][ T5731] overlayfs: missing 'lowerdir' [ 161.948102][ T5739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1774'. [ 162.413860][ T5760] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1780'. [ 162.424765][ T5762] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1780'. [ 162.542495][ T5775] 9pnet_fd: Insufficient options for proto=fd [ 163.030604][ T5778] can0: slcan on ptm0. [ 163.094113][ T5779] can0 (unregistered): slcan off ptm0. [ 163.365414][ T5836] 9pnet_fd: Insufficient options for proto=fd [ 163.480673][ T5852] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1799'. [ 163.490987][ T36] audit: type=1326 audit(1762859315.496:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.4.1799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bdf78f6c9 code=0x0 [ 163.495040][ T556] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 163.671073][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 163.682022][ T556] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 163.691122][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.699992][ T556] usb 3-1: config 0 descriptor?? [ 163.705371][ T5820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.128112][ T36] audit: type=1400 audit(1762859316.117:2463): avc: denied { setattr } for pid=5819 comm="syz.2.1789" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 164.133590][ T556] hid-generic 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 164.339674][ T10] usb 3-1: USB disconnect, device number 6 [ 165.025452][ T5890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5890 comm=syz.4.1812 [ 165.039780][ T5890] netlink: 'syz.4.1812': attribute type 46 has an invalid length. [ 165.047636][ T5890] netlink: 'syz.4.1812': attribute type 28 has an invalid length. [ 165.130503][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.284481][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 165.290740][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.301028][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 165.314771][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.323876][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.331943][ T65] usb 3-1: SerialNumber: syz [ 165.339381][ T65] cdc_acm 3-1:1.0: Zero length descriptor references [ 165.346133][ T65] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 165.547128][ T65] usb 3-1: USB disconnect, device number 7 [ 166.271315][ T5927] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.279052][ T5927] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.279077][ T5927] rust_binder: Read failure Err(EFAULT) in pid:69 [ 166.346976][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.360477][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.367580][ T5929] bridge_slave_0: entered allmulticast mode [ 166.374036][ T5929] bridge_slave_0: entered promiscuous mode [ 166.380418][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.387582][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.394716][ T5929] bridge_slave_1: entered allmulticast mode [ 166.401120][ T5929] bridge_slave_1: entered promiscuous mode [ 166.422899][ T5936] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1829'. [ 166.443343][ T5936] tipc: Can't bind to reserved service type 0 [ 166.451216][ T5936] rust_binder: Failed to allocate buffer. len:65352, is_oneway:false [ 166.451245][ T5936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 166.459446][ T5936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:73 [ 166.495191][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.511342][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.518694][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.525760][ T5929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.533705][ T5944] netlink: 'syz.4.1830': attribute type 12 has an invalid length. [ 166.560927][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.568557][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.578593][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.585703][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.595396][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.602491][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.656487][ T5929] veth0_vlan: entered promiscuous mode [ 166.675407][ T5929] veth1_macvtap: entered promiscuous mode [ 166.895940][ T331] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.038104][ T331] usb 3-1: device descriptor read/64, error -71 [ 167.283755][ T331] usb 3-1: device descriptor read/64, error -71 [ 167.457782][ T5993] netlink: 'syz.5.1847': attribute type 6 has an invalid length. [ 167.529683][ T331] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.672455][ T331] usb 3-1: device descriptor read/64, error -71 [ 167.918047][ T331] usb 3-1: device descriptor read/64, error -71 [ 168.031180][ T331] usb usb3-port1: attempt power cycle [ 168.152676][ T6079] fuse: Bad value for 'fd' [ 168.313585][ T6101] netlink: 'syz.5.1891': attribute type 1 has an invalid length. [ 168.321496][ T6101] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1891'. [ 168.388311][ T331] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.419944][ T331] usb 3-1: device descriptor read/8, error -71 [ 168.551942][ T331] usb 3-1: device descriptor read/8, error -71 [ 168.681212][ T6126] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1898'. [ 168.800888][ T331] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.821899][ T331] usb 3-1: device descriptor read/8, error -71 [ 168.851969][ T36] audit: type=1400 audit(1762859836.735:2464): avc: denied { setattr } for pid=6127 comm="syz.5.1900" path="socket:[26816]" dev="sockfs" ino=26816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.951842][ T331] usb 3-1: device descriptor read/8, error -71 [ 169.061836][ T331] usb usb3-port1: unable to enumerate USB device [ 169.190724][ T6163] netlink: 'syz.4.1914': attribute type 13 has an invalid length. [ 169.199122][ T6163] erspan0: refused to change device tx_queue_len [ 169.313519][ T36] audit: type=1400 audit(1762859837.195:2465): avc: denied { getopt } for pid=6164 comm="syz.4.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.778173][ T6195] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 169.779941][ T36] audit: type=1400 audit(1762859837.655:2466): avc: denied { write } for pid=65 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26185 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 169.797854][ T6198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90 [ 169.868355][ T6199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 169.877683][ T6199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:90 [ 170.362694][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.380034][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.388128][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.396189][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.404361][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.412416][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.420391][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.428502][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.436547][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.444623][ T6227] netlink: 'syz.5.1935': attribute type 12 has an invalid length. [ 170.647806][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.894833][ T6259] batadv_slave_0: mtu less than device minimum [ 171.372496][ T6271] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1948'. [ 172.311577][ T6296] fuse: Bad value for 'fd' [ 172.316876][ T6296] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 172.478109][ T6317] overlayfs: failed to resolve './file2': -2 [ 172.500699][ T6319] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1964'. [ 172.534037][ T6323] fuse: Unknown parameter 'D&`[U ʕ' [ 172.646527][ T6336] /dev/loop0: Can't lookup blockdev [ 172.670823][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 172.677045][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.966465][ T6362] tmpfs: Bad value for 'nr_blocks' [ 172.985010][ T6366] overlayfs: failed to clone upperpath [ 173.057091][ T6375] 9pnet_fd: Insufficient options for proto=fd [ 173.217296][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 173.281524][ T6383] input: syz1 as /devices/virtual/input/input24 [ 173.511222][ T6407] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 173.519338][ T6408] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 173.551528][ T36] audit: type=1400 audit(1762859841.436:2467): avc: denied { unmount } for pid=5304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 173.900966][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.040826][ T45] usb 3-1: device descriptor read/64, error -71 [ 174.075978][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 174.280827][ T45] usb 3-1: device descriptor read/64, error -71 [ 174.526615][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 174.660963][ T45] usb 3-1: device descriptor read/64, error -71 [ 174.900845][ T45] usb 3-1: device descriptor read/64, error -71 [ 175.012518][ T45] usb usb3-port1: attempt power cycle [ 175.105522][ T36] audit: type=1400 audit(1762859842.986:2468): avc: denied { sys_module } for pid=6481 comm="syz.4.2020" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 175.220888][ T6493] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2024'. [ 175.229288][ T6490] veth0: entered promiscuous mode [ 175.235989][ T6489] veth0: left promiscuous mode [ 175.360822][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 175.381800][ T45] usb 3-1: device descriptor read/8, error -71 [ 175.511851][ T45] usb 3-1: device descriptor read/8, error -71 [ 175.750851][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 175.771928][ T45] usb 3-1: device descriptor read/8, error -71 [ 175.901958][ T45] usb 3-1: device descriptor read/8, error -71 [ 175.956976][ T6517] overlayfs: failed to clone upperpath [ 176.010908][ T45] usb usb3-port1: unable to enumerate USB device [ 176.533870][ T6548] 9pnet_fd: Insufficient options for proto=fd [ 176.698802][ T6556] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2045'. [ 176.744627][ T6559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 176.892532][ T36] audit: type=1400 audit(1762859844.776:2469): avc: denied { read write } for pid=6565 comm="syz.2.2049" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.925972][ T36] audit: type=1400 audit(1762859844.776:2470): avc: denied { open } for pid=6565 comm="syz.2.2049" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.080006][ T6582] binder: Unknown parameter 'MaxɭR{yq*' [ 177.211257][ T36] audit: type=1400 audit(1762859845.097:2471): avc: denied { read } for pid=6596 comm="syz.3.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.249331][ T36] audit: type=1400 audit(1762859845.127:2472): avc: denied { map } for pid=6598 comm="syz.2.2061" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.317645][ T36] audit: type=1400 audit(1762859845.197:2473): avc: denied { map } for pid=6611 comm="syz.2.2062" path="socket:[27804]" dev="sockfs" ino=27804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.419265][ T6627] rust_binder: 151: no such ref 1 [ 177.530923][ T6637] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2068'. [ 177.591149][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2069'. [ 177.614966][ T6645] binder: Unknown parameter 'statsaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 177.753009][ T6659] rust_binder: Error in use_page_slow: ESRCH [ 177.913090][ T6668] validate_nla: 197 callbacks suppressed [ 177.913117][ T6668] netlink: 'syz.5.2079': attribute type 7 has an invalid length. [ 177.940806][ T6668] netlink: 'syz.5.2079': attribute type 5 has an invalid length. [ 177.948594][ T6668] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2079'. [ 177.990786][ T6659] rust_binder: use_range failure ESRCH [ 177.990818][ T6659] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 177.996353][ T6659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 178.020841][ T6659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:161 [ 178.303486][ T6687] netlink: 'syz.4.2085': attribute type 16 has an invalid length. [ 178.756834][ T36] audit: type=1400 audit(1762859846.637:2474): avc: denied { setattr } for pid=6717 comm="syz.3.2096" name="NETLINK" dev="sockfs" ino=27958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.787862][ T6723] 9pnet_fd: Insufficient options for proto=fd [ 178.903936][ T36] audit: type=1326 audit(1762859846.787:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.3.2100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b1798f6c9 code=0x0 [ 179.003691][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2104'. [ 179.277904][ T6779] overlayfs: failed to clone upperpath [ 179.594507][ T6784] tipc: Started in network mode [ 179.599440][ T6784] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 179.608435][ T6784] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 179.616653][ T6784] tipc: Enabled bearer , priority 10 [ 179.673919][ T6785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.673947][ T6785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 179.796911][ T6794] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2121'. [ 179.839321][ T6801] incfs: Backing dir is not set, filesystem can't be mounted. [ 179.846905][ T6801] incfs: mount failed -2 [ 179.916098][ T6817] tmpfs: Unknown parameter 'no' [ 180.096236][ T6825] overlayfs: failed to clone upperpath [ 180.159930][ T6841] fuse: Bad value for 'group_id' [ 180.164971][ T6841] fuse: Bad value for 'group_id' [ 180.333066][ T6848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.333098][ T6848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 180.355678][ T6850] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 180.442394][ T6852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 180.488843][ T6859] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 180.508177][ T36] audit: type=1400 audit(1762859848.387:2476): avc: denied { relabelto } for pid=6858 comm="syz.5.2143" name="ptp0" dev="rootfs" ino=28200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 180.536256][ T36] audit: type=1400 audit(1762859848.387:2477): avc: denied { associate } for pid=6858 comm="syz.5.2143" name="ptp0" dev="rootfs" ino=28200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 180.643929][ T6870] rust_binder: Write failure EFAULT in pid:206 [ 180.698807][ T6876] netlink: 'syz.3.2148': attribute type 6 has an invalid length. [ 180.720832][ T6879] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 180.728295][ T6879] rust_binder: Write failure EINVAL in pid:211 [ 180.730821][ T10] tipc: Node number set to 1 [ 180.772560][ T6887] binder: Bad value for 'max' [ 180.801389][ T6892] overlayfs: failed to clone upperpath [ 180.893976][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 180.912774][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 181.030887][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.184292][ T10] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.194130][ T10] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 181.207131][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.214059][ T10] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 181.223315][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.234961][ T10] usb 3-1: config 0 descriptor?? [ 181.379929][ T36] audit: type=1326 audit(1762859849.257:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdf78f6c9 code=0x7fc00000 [ 181.643768][ T10] saitek 0003:06A3:0621.0019: hidraw0: USB HID v80.01 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 181.757954][ T6933] netlink: 'syz.3.2170': attribute type 27 has an invalid length. [ 181.776363][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.783629][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.803298][ T6933] tipc: Resetting bearer [ 181.815425][ T6933] vlan0: left promiscuous mode [ 181.820302][ T6933] vlan0: left allmulticast mode [ 181.825540][ T6933] veth0_vlan: left allmulticast mode [ 181.843685][ T6894] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 181.850998][ T6894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 181.852230][ T6894] rust_binder: Error while translating object. [ 181.861681][ T6894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 181.867883][ T6894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 181.878054][ T1056] usb 3-1: USB disconnect, device number 16 [ 182.492141][ T36] audit: type=1400 audit(1762859850.377:2479): avc: denied { append } for pid=6953 comm="syz.2.2177" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.526314][ T6954] kvm: user requested TSC rate below hardware speed [ 182.552293][ T6954] kvm: kvm [6953]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 182.553163][ T36] audit: type=1400 audit(1762859850.437:2480): avc: denied { read } for pid=6963 comm="syz.3.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.561549][ T6954] kvm: kvm [6953]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 182.617317][ T6969] overlayfs: failed to clone lowerpath [ 182.623549][ T6970] overlayfs: failed to clone lowerpath [ 182.672544][ T36] audit: type=1326 audit(1762859850.557:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 182.700438][ T36] audit: type=1326 audit(1762859850.587:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 182.726411][ T36] audit: type=1326 audit(1762859850.587:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 182.749888][ T36] audit: type=1326 audit(1762859850.587:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 182.775338][ T36] audit: type=1326 audit(1762859850.587:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6982 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 183.032345][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2201'. [ 183.119950][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2205'. [ 183.198494][ T7056] input: syz0 as /devices/virtual/input/input25 [ 183.287583][ T7061] rust_binder: 248: no such ref 3 [ 183.292705][ T7061] rust_binder: inc_ref_done called when no active inc_refs [ 183.292729][ T7061] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 183.307059][ T7061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 183.307367][ T7062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.646229][ T7104] overlayfs: failed to clone lowerpath [ 183.820815][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.950901][ T45] usb 3-1: device descriptor read/64, error -71 [ 184.191773][ T45] usb 3-1: device descriptor read/64, error -71 [ 184.430848][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 184.560823][ T45] usb 3-1: device descriptor read/64, error -71 [ 184.800817][ T45] usb 3-1: device descriptor read/64, error -71 [ 184.920849][ T45] usb usb3-port1: attempt power cycle [ 185.260854][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 185.291820][ T45] usb 3-1: device descriptor read/8, error -71 [ 185.432117][ T45] usb 3-1: device descriptor read/8, error -71 [ 185.670825][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 185.691884][ T45] usb 3-1: device descriptor read/8, error -71 [ 185.705612][ T7156] overlayfs: failed to clone upperpath [ 185.713188][ T7156] overlay: ./file0 is not a directory [ 185.831886][ T45] usb 3-1: device descriptor read/8, error -71 [ 185.950827][ T45] usb usb3-port1: unable to enumerate USB device [ 186.183241][ T7197] fuse: Unknown parameter '' [ 186.254360][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 186.495457][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'. [ 186.850841][ T7229] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 186.850867][ T7229] rust_binder: Read failure Err(EFAULT) in pid:288 [ 186.922328][ T7249] tmpfs: Unknown parameter 'hnr_blyLo0f1nȥhocks' [ 186.978435][ T7265] sit0: entered promiscuous mode [ 186.994392][ T7265] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 187.010307][ T7265] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2278'. [ 187.026556][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 187.026575][ T36] audit: type=1400 audit(1762859854.907:2531): avc: denied { lock } for pid=7267 comm="syz.3.2280" path="socket:[30969]" dev="sockfs" ino=30969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 187.030878][ T7269] rust_binder: 7264 RLIMIT_NICE not set [ 187.057076][ T7269] rust_binder: 292: no such ref 0 [ 187.761178][ T7309] /dev/md0: Can't lookup blockdev [ 187.764115][ T36] audit: type=1400 audit(1762859855.637:2532): avc: denied { setattr } for pid=7308 comm="syz.2.2294" name="file0" dev="incremental-fs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 187.802817][ T7311] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 187.811208][ T7311] rust_binder: Write failure EINVAL in pid:298 [ 187.975107][ T7330] fuse: Bad value for 'fd' [ 188.030163][ T7317] netlink: 'syz.2.2298': attribute type 15 has an invalid length. [ 188.118356][ T7339] netlink: 'syz.2.2306': attribute type 6 has an invalid length. [ 188.126166][ T7339] netlink: 'syz.2.2306': attribute type 4 has an invalid length. [ 188.134130][ T7339] netlink: 'syz.2.2306': attribute type 6 has an invalid length. [ 188.142148][ T7339] netlink: 'syz.2.2306': attribute type 13 has an invalid length. [ 188.150135][ T7339] netlink: 'syz.2.2306': attribute type 15 has an invalid length. [ 188.159508][ T7339] netlink: 'syz.2.2306': attribute type 19 has an invalid length. [ 188.167581][ T7339] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.2306'. [ 188.178684][ T36] audit: type=1400 audit(1762859856.067:2533): avc: denied { execute } for pid=7338 comm="syz.2.2306" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.374863][ T7362] overlayfs: failed to clone upperpath [ 188.450831][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 188.536542][ T7370] batadv_slave_1: entered promiscuous mode [ 188.594723][ T36] audit: type=1326 audit(1762859856.477:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7369 comm="syz.5.2317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ac6d8f6c9 code=0x0 [ 188.617642][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 188.623900][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.634868][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.644672][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 188.653786][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.662397][ T10] usb 3-1: config 0 descriptor?? [ 189.263539][ T7379] overlayfs: failed to clone lowerpath [ 189.269736][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 189.283016][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.301878][ T10] usb 3-1: USB disconnect, device number 21 [ 189.346859][ T7392] 9pnet_fd: Insufficient options for proto=fd [ 189.352266][ T7393] 9pnet_fd: Insufficient options for proto=fd [ 189.368945][ T7369] batadv_slave_1: left promiscuous mode [ 189.444279][ T36] audit: type=1400 audit(1762859857.327:2535): avc: denied { listen } for pid=7397 comm="syz.4.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.548859][ T7421] fuseblk: Unknown parameter 'f' [ 189.797415][ T7433] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 189.798056][ T7433] rust_binder: Write failure EINVAL in pid:312 [ 190.086583][ T7452] netlink: 'syz.3.2347': attribute type 4 has an invalid length. [ 190.140819][ T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 190.292007][ T10] usb 3-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 190.302330][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.315367][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 190.324449][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.333422][ T10] usb 3-1: config 0 descriptor?? [ 190.339395][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 190.540438][ T7437] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 190.961868][ T7477] netlink: 456 bytes leftover after parsing attributes in process `syz.5.2356'. [ 191.033204][ T7484] overlayfs: failed to clone upperpath [ 191.246914][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'. [ 191.334457][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 191.343853][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2366'. [ 191.352947][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'. [ 191.651384][ T7521] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2370'. [ 191.923654][ T7526] 9pnet_fd: Insufficient options for proto=fd [ 191.955921][ T7532] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 192.099271][ T7546] validate_nla: 1 callbacks suppressed [ 192.099286][ T7546] netlink: 'syz.5.2379': attribute type 30 has an invalid length. [ 192.126044][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.198207][ T7563] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7563 comm=syz.5.2386 [ 192.223004][ T7567] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2388'. [ 192.248135][ T7571] tipc: Enabling of bearer rejected, failed to enable media [ 192.263992][ T36] audit: type=1400 audit(1762859860.147:2536): avc: denied { nlmsg_write } for pid=7568 comm="syz.5.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 192.285500][ T7573] incfs: mount failed -22 [ 192.286881][ T36] audit: type=1400 audit(1762859860.167:2537): avc: denied { audit_write } for pid=7568 comm="syz.5.2389" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 192.311743][ T36] audit: type=1107 audit(1762859860.167:2538): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 192.326190][ T36] audit: type=1400 audit(1762859860.167:2539): avc: denied { mounton } for pid=7572 comm="syz.4.2391" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 192.525848][ T7604] 9pnet_fd: Insufficient options for proto=fd [ 192.840107][ T556] usb 3-1: USB disconnect, device number 22 [ 192.870675][ T7610] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2402'. [ 192.879813][ T7610] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2402'. [ 192.888839][ T7610] netlink: 'syz.4.2402': attribute type 6 has an invalid length. [ 192.896737][ T7610] netlink: 'syz.4.2402': attribute type 5 has an invalid length. [ 192.904598][ T7610] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2402'. [ 193.180836][ T556] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 193.340809][ T556] usb 3-1: Using ep0 maxpacket: 32 [ 193.347238][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.358371][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.368212][ T556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 193.381209][ T556] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 193.390824][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.400213][ T556] usb 3-1: config 0 descriptor?? [ 193.406994][ T556] usbhid 3-1:0.0: can't add hid device: -22 [ 193.413249][ T556] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 193.663315][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.671930][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.890386][ T7702] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2429'. [ 194.196757][ T7717] 8021q: VLANs not supported on wg2 [ 194.947768][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2455'. [ 194.998079][ T36] audit: type=1400 audit(1762859862.877:2540): avc: denied { execute } for pid=7783 comm="syz.4.2458" path="/memory.events.local" dev="ramfs" ino=30599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 195.012981][ T7772] incfs: Options parsing error. -22 [ 195.026690][ T7772] incfs: mount failed -22 [ 195.077984][ T36] audit: type=1326 audit(1762859862.957:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.5.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 195.101598][ T36] audit: type=1326 audit(1762859862.957:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.5.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 195.113063][ T7802] /dev/loop0: Can't lookup blockdev [ 195.130838][ T36] audit: type=1326 audit(1762859862.957:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.5.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 195.154522][ T36] audit: type=1326 audit(1762859862.957:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.5.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 195.178214][ T36] audit: type=1326 audit(1762859862.967:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7795 comm="syz.5.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3ac6d8f6c9 code=0x7ffc0000 [ 195.571770][ T7849] tipc: Enabling of bearer rejected, failed to enable media [ 195.642551][ T7857] overlayfs: failed to clone upperpath [ 195.648423][ T7858] overlayfs: failed to clone upperpath [ 195.902972][ T556] usb 3-1: USB disconnect, device number 23 [ 196.263940][ T7886] netlink: 'syz.3.2492': attribute type 27 has an invalid length. [ 196.288910][ T7886] veth0_vlan: left promiscuous mode [ 196.294602][ T7886] veth0_vlan: entered promiscuous mode [ 196.301754][ T7886] veth1_macvtap: left promiscuous mode [ 196.307860][ T7886] veth1_macvtap: entered promiscuous mode [ 196.317213][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.324320][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.332396][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.332675][ T556] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 196.339514][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.490856][ T556] usb 3-1: Using ep0 maxpacket: 32 [ 196.497231][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.508244][ T556] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 196.517362][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.526561][ T556] usb 3-1: config 0 descriptor?? [ 196.742509][ T556] usbhid 3-1:0.0: can't add hid device: -71 [ 196.748814][ T556] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.760064][ T556] usb 3-1: USB disconnect, device number 24 [ 196.837709][ T7922] rust_binder: 337: no such ref 2 [ 196.842892][ T7922] rust_binder: 337: no such ref 2048 [ 196.848503][ T7922] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 196.855794][ T7922] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 196.977083][ T7931] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 196.984968][ T7931] tc_dump_action: action bad kind [ 197.242933][ T13] bridge_slave_1: left allmulticast mode [ 197.248715][ T13] bridge_slave_1: left promiscuous mode [ 197.254435][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.262046][ T13] bridge_slave_0: left allmulticast mode [ 197.267702][ T13] bridge_slave_0: left promiscuous mode [ 197.273434][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.281354][ T13] tipc: Resetting bearer [ 197.297878][ T13] tipc: Disabling bearer [ 197.386872][ T13] tipc: Left network mode [ 197.396051][ T13] veth1_macvtap: left promiscuous mode [ 197.402363][ T13] veth0_vlan: left promiscuous mode [ 198.712264][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 198.712283][ T36] audit: type=1400 audit(1762859866.597:2607): avc: denied { map } for pid=7949 comm="syz.2.2511" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.755682][ T36] audit: type=1400 audit(1762859866.597:2608): avc: denied { execute } for pid=7949 comm="syz.2.2511" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.401502][ T36] audit: type=1400 audit(1762859869.287:2609): avc: denied { mount } for pid=8024 comm="syz.4.2534" name="/" dev="pstore" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 201.456360][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.520416][ T8036] rust_binder: Error while translating object. [ 201.520465][ T8036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.530259][ T8036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 201.540828][ T8042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.507644][ T8051] netlink: 'syz.4.2540': attribute type 1 has an invalid length. [ 202.507857][ T8050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:368 [ 202.523549][ T8050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 202.532905][ T8050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:368 [ 202.568263][ T8058] rust_binder: Write failure EFAULT in pid:370 [ 202.750204][ T8069] overlayfs: failed to clone upperpath [ 202.940818][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 203.090867][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 203.097159][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.107319][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.116336][ T45] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 203.125428][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.134435][ T45] usb 3-1: config 0 descriptor?? [ 203.344399][ T45] usb 3-1: USB disconnect, device number 25 [ 203.754817][ T8076] overlayfs: failed to clone upperpath [ 205.071078][ T8094] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 205.184219][ T8114] 9pnet_fd: Insufficient options for proto=fd [ 206.569012][ T8131] batadv_slave_1: entered promiscuous mode [ 206.591153][ T8131] batadv_slave_1: left promiscuous mode [ 206.597167][ T8134] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 206.611840][ T8132] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaa [ 206.630861][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.637571][ T8134] binder: Unknown parameter 'context[7' [ 208.087085][ T8153] overlayfs: failed to clone upperpath [ 208.670892][ T380] Bluetooth: hci0: command 0x1003 tx timeout [ 208.670892][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.706486][ T8184] overlayfs: failed to clone upperpath [ 209.717698][ T8184] overlayfs: missing 'workdir' [ 209.763597][ T8186] rust_binder: Error while translating object. [ 209.763635][ T8186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.769833][ T8186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 211.285380][ T8192] __nla_validate_parse: 1 callbacks suppressed [ 211.285422][ T8192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2590'. [ 211.323575][ T8192] rust_binder: Write failure EINVAL in pid:404 [ 211.351051][ T8202] support for cryptoloop has been removed. Use dm-crypt instead. [ 211.360183][ T8200] overlayfs: failed to clone lowerpath [ 211.365529][ T8202] rust_binder: Write failure EFAULT in pid:406 [ 211.680906][ T331] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 211.842162][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.853192][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.862959][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.876558][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.885719][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.894350][ T331] usb 3-1: config 0 descriptor?? [ 212.660122][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 212.666219][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 212.675022][ T331] usb 3-1: USB disconnect, device number 26 [ 213.185270][ T36] audit: type=1400 audit(1762859881.057:2610): avc: denied { map } for pid=8214 comm="syz.5.2599" path="socket:[32375]" dev="sockfs" ino=32375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.249401][ T8231] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.260787][ T8231] overlayfs: failed to set xattr on upper [ 213.266863][ T8231] overlayfs: ...falling back to redirect_dir=nofollow. [ 213.280816][ T8231] overlayfs: ...falling back to uuid=null. [ 213.293133][ T8231] overlayfs: failed to clone lowerpath [ 215.191489][ T36] audit: type=1400 audit(1762859883.077:2611): avc: denied { create } for pid=8240 comm="syz.2.2608" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.250829][ T36] audit: type=1400 audit(1762859883.077:2612): avc: denied { link } for pid=8240 comm="syz.2.2608" name="#b" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.290539][ T36] audit: type=1400 audit(1762859883.077:2613): avc: denied { rename } for pid=8240 comm="syz.2.2608" name="#c" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.316285][ T36] audit: type=1400 audit(1762859883.097:2614): avc: denied { remount } for pid=8240 comm="syz.2.2608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 215.572031][ T8259] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2612'. [ 215.652040][ T8265] /dev/loop0: Can't lookup blockdev [ 217.722657][ T8280] tmpfs: Bad value for 'nr_blocks' [ 217.758052][ T8283] overlayfs: failed to clone upperpath [ 217.771042][ T8285] overlayfs: failed to clone upperpath [ 217.784803][ T8283] overlayfs: failed to clone upperpath [ 217.792548][ T8287] tipc: Enabled bearer , priority 10 [ 217.831830][ T8290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.839107][ T8290] IPv6: NLM_F_CREATE should be set when creating new route [ 217.846380][ T8290] IPv6: NLM_F_CREATE should be set when creating new route [ 218.015604][ T8309] cgroup: Bad value for 'name' [ 218.025374][ T8306] x_tables: duplicate underflow at hook 1 [ 218.041027][ T8306] x_tables: duplicate underflow at hook 1 [ 218.053939][ T8306] x_tables: duplicate underflow at hook 1 [ 218.059764][ T8306] x_tables: duplicate underflow at hook 1 [ 218.080832][ T8306] x_tables: duplicate underflow at hook 1 [ 218.086658][ T8306] x_tables: duplicate underflow at hook 1 [ 218.107523][ T8306] x_tables: duplicate underflow at hook 1 [ 218.122255][ T8306] x_tables: duplicate underflow at hook 1 [ 218.130822][ T8306] x_tables: duplicate underflow at hook 1 [ 218.143782][ T8306] x_tables: duplicate underflow at hook 1 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=2509 state=3 status=67 (errno 32: Broken pipe) [ 218.330985][ T36] audit: type=1400 audit(1762859886.207:2615): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2434]" dev="pipefs" ino=2434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1