last executing test programs: 2m41.812223762s ago: executing program 3 (id=2596): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x3, 0x48a, [0x200000000040, 0x0, 0x0, 0x20000000017e, 0x200000000384], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x24, 0x6, 'wlan1\x00', 'dvmrp0\x00', 'veth1_to_bridge\x00', 'pimreg\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0x97475dfba2aeb107, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xd6, 0x10e, [], [@snat={'snat\x00', 0x10, {{@multicast, 0x10}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x81}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x11, 0xa, 0x600, 'wg0\x00', 'ip6gre0\x00', 'ip6tnl0\x00', 'wg2\x00', @empty, [0xff, 0x62094572b4edea24, 0x0, 0xff], @random="efa049f7ca42", [0x0, 0xff], 0xee, 0x15e, 0x1d6, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x6, {0xfc6}}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x1, 0x9, 0x12ea3b4b3d840917, 0x2}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x10}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @common=@nflog={'nflog\x00', 0x50, {{0x6ebaa7f2, 0x5, 0x9, 0x0, 0x0, "95ce849c7c28edba04147bacab122f1dc9233108d3d7f4e58ab4a2dc758fe4730ed4440848a48d5bbc3e56fc9b569cc1d658a968e4abd89152646f8bb5e426f3"}}}}]}, {0x0, '\x00', 0x2, 0x3, 0x1, [{0x5, 0xae29ca79808319, 0x892f, 'veth1_macvtap\x00', 'veth1_to_bridge\x00', 'veth0_macvtap\x00', 'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, [0xff, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xde, 0xde, 0x116, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'veth1_macvtap\x00', {}, 'batadv0\x00', {}, 0xc, 0x11}}}], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0x2}}}}]}]}, 0x502) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000580)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0xc010) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0x610200, 0x0) read$rfkill(r2, &(0x7f0000000700), 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000740)={'ipvs\x00'}, &(0x7f0000000780)=0x1e) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000007c0)) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)="cd3c2f7bb56e0b80bfa615ce1290e79fb417c7e59604b09ec002a5accb13da0e091492e695bf2df5f5c1abf18d952dd593f905daa23af5a1e4b72f17839e8ccc35201a36c1b549e7617b21adf79db03876128c216f383825d4a60ccddd93d0728e37c29bcb307a2e4f547e3a0ca6b17ca84e4ead1543408c2c3fd41d20ab42ec7c344bf144056301e7e77058a2849513ce1c27cf60d2cf7cdbd7d1beb67afa665ad9186ddee522f9c0f106f618eb5b8fb30eb0b0dcf6b69d476ad2a431f9", 0xbe, 0x8800, &(0x7f00000008c0)={0x2, 0x4e21, @remote}, 0x10) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000940)=@attr_other={0x0, 0x3, 0x3, &(0x7f0000000900)=0x5}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r3, &(0x7f0000000980)="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", 0x1000, 0x40, &(0x7f0000001980)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000019c0)={0x3, 0x0, [{}, {}, {}]}) preadv(0xffffffffffffffff, &(0x7f0000002ac0)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/95, 0x5f}], 0x2, 0x3, 0x8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) socket$key(0xf, 0x3, 0x2) r5 = dup(r0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000002b00)=0x0) getpgid(r6) listxattr(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)=""/6, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000002bc0)=0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), r5) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x2c, r8, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x467}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x84}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40064) r9 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000002d40)) fcntl$setownex(r0, 0xf, &(0x7f0000002d80)={0x1}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8) 2m41.810882272s ago: executing program 3 (id=2597): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x98a7b4798dbc2b0b, 0x80, 0x9, 0xfffffff1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) 2m41.750792583s ago: executing program 3 (id=2598): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40854) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9, 0xd}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9, 0xd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x0, 0x3, 0x8}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x0, 0x3, 0x8}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x4206, 0x0) (async) ptrace(0x4206, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48) waitid(0x2, r0, 0x0, 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ext3\x00', 0xa18404, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a24010022000201020921"], 0x0) chdir(0x0) 2m41.27661948s ago: executing program 3 (id=2599): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000019940)=[@cpuid={0x2, 0x18, {0x800, 0x4}}, @cpuid={0x2, 0x18, {0x7, 0x4}}, @code={0x1, 0x7a, {"450f01df410f0ff990c4c3e97e90000000007f48b802000000000000000f23c80f21f8350c0010000f23f80f01cb48b808a30000000000000f23c80f21f8350c00a0000f23f83646e9464275e2653e420f4bfbb9800000c00f3235000800000f30b8010000000f01d9"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x6, 0xffe}}, @cpuid={0x2, 0x18, {0xfffffffe, 0xe79e}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0xffffff81, 0x2}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x2, 0x18, {0x1, 0x5}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x801}, @cpuid={0x2, 0x18, {0x2, 0x7}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x8000000000000001}, @code={0x1, 0x58, {"0f0098896900003664660f38826e13674a0fc7acc507000000d9fec4810c55e00f9ab7165083d5410f00945709000000472c000fc719b9340a0000b805000000ba000000000f30"}}, @code={0x1, 0x5f, {"0ff864ab00660f38dc7e8db9eb090000b82ef8ea9cba000000000f30c4017b2d40d836f2430f226766b844000f00d066baa100b0e3ee66430f38824600b9e40200000f3266ba610066b8007066ef"}}, @cpuid={0x2, 0x18, {0x7, 0x74000000}}, @code={0x1, 0x5f, {"470fdf0036660fc731440f20c0350e000000440f22c02e66470f388076780fc7252bcfa0bf0fc76e3ff343af48b857bf0000000000000f23c80f21f8350800c0000f23f866b83b008ec0420f01c9"}}, @code={0x1, 0x80, {"48b81ebc0000000000000f23c80f21f835000040000f23f8c48141676200b9800000c00f3235004000000f3066baf80cb84271e88def66bafc0c66eddb5a0048b864000000000000000f23c80f21f8350000e0000f23f8420f78a44859e878940f01f80f79ba0050000065440f01c3"}}], 0x3a8}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000240)={0x1, 0x43, [{0xd, 0x0, 0x5}]}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000540)=""/102400, 0x19000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4000000000000f3) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x88, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0xffffffffffffff5f, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8001}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) 2m41.20049147s ago: executing program 3 (id=2600): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x902, 0x10008042, 0x4, 0x6, 0x2, 0x9, 0x0, 0x0, 0x8, 0x1}}, 0x50) (rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) (async) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/22) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 2m41.138702081s ago: executing program 3 (id=2601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24000, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}}) (async) r4 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) ioctl$KVM_GET_IRQCHIP(r4, 0x40046721, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'bridge_slave_0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a2b9bcd53f8fe643b219243c05661985d696a3571f23af8ec766b0c9c3ce0658", "51d368e71a472132d09c1358e26ab32cf332569df95d1aa4b24d712a49034bb3", "91daba0993ccfdeaf0f3704b53c94dc1ac3f4ad1563a5029e9aa99f972d7e09d", "26a59d7f448f87321cbc09d2749a2f8a721f991244fcd309ba81db8b99ad7cff", "7616d739ef6c71fd7154d3e5910104cb3e5746bc381cf2e15e6f83c3ec1882ef", "488eb1031d80f7bc59038833", 0x2, 0x8, 0x2, 0x1ff}}) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) r7 = gettid() setpgid(r7, 0x0) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}], 0xfffffe0b, 0x0, 0x0}) 2m23.057845353s ago: executing program 32 (id=2601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24000, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}}) (async) r4 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) ioctl$KVM_GET_IRQCHIP(r4, 0x40046721, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'bridge_slave_0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a2b9bcd53f8fe643b219243c05661985d696a3571f23af8ec766b0c9c3ce0658", "51d368e71a472132d09c1358e26ab32cf332569df95d1aa4b24d712a49034bb3", "91daba0993ccfdeaf0f3704b53c94dc1ac3f4ad1563a5029e9aa99f972d7e09d", "26a59d7f448f87321cbc09d2749a2f8a721f991244fcd309ba81db8b99ad7cff", "7616d739ef6c71fd7154d3e5910104cb3e5746bc381cf2e15e6f83c3ec1882ef", "488eb1031d80f7bc59038833", 0x2, 0x8, 0x2, 0x1ff}}) (async, rerun: 32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32) r7 = gettid() setpgid(r7, 0x0) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}], 0xfffffe0b, 0x0, 0x0}) 1m40.262492605s ago: executing program 1 (id=3405): prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x40, 0x0, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000256000/0x2000)=nil, 0x2000}, 0x1}) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001580), 0x35c, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1000008b, 0x2, 0x7) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1002, 0x6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m40.205695426s ago: executing program 1 (id=3407): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f0000000c40)={0x2020}, 0x2020) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x62}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x40, 0xfffc, 0xb, 0x8000, 0x0, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x1, 0x8001, 0x15, 0x6, 0x1, 0x100]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x8000]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8000) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) socket$tipc(0x1e, 0x5, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 1m40.150592636s ago: executing program 1 (id=3408): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) (async) r1 = creat(0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000003c0)) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000480), 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x8, 0xfff) (async) r3 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x0, 0x110) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x802, 0x3865, 0x8, 0xdfe, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) io_setup(0x8, &(0x7f0000000400)=0x0) (async) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r8, 0x0, 0x0, 0x40001, 0x0, 0x0) (async) io_pgetevents(r7, 0x8, 0x1, &(0x7f0000000440)=[{}], &(0x7f0000000300), &(0x7f00000002c0)={&(0x7f0000000340), 0x8}) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x100000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) 1m40.150147216s ago: executing program 1 (id=3409): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4000fffffffe) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r2, 0x1) (async) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) (async) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0xb7, 0x3, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7ffd, 0x0, 0x0, 0x7f, 0x11, 0x4, 0x44, 0x28}) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)}, 0xd5c}], 0x1, 0x2302, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 1m40.142466597s ago: executing program 1 (id=3410): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x84aebfbd6349b7f2}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x100, 0x100, 0x320, 0x320, 0x210, 0x4, 0x0, {[{{@arp={@multicast1, @multicast2, 0x0, 0xffffffff, 0x10, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x7f, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x9, 0x3, 0x5, 0x1bc, 0x5, 'veth0_to_bond\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "39db3a550fcaab438400000000b64093e6072fc889bea60bdd26beacd802"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x8, 0x1}}}, {{@arp={@loopback, @empty, 0xff000000, 0xff, 0x5, 0xd, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x0, 0x6, 0x40, 0x12, 'veth1_to_bridge\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @remote, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) dup3(r0, r0, 0x80000) (async) r4 = dup3(r0, r0, 0x80000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1a) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1a) pwrite64(r2, &(0x7f0000000000)="48ed", 0x2, 0x3) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001a80)={0x6, 0x0, [{0xf000, 0x1000, &(0x7f0000000a80)=""/4096}, {0xd000, 0x98, &(0x7f0000000180)=""/152}, {0xeeee0000, 0x58, &(0x7f0000000280)=""/88}, {0x2, 0x9e, &(0x7f00000004c0)=""/158}, {0x8080000, 0x35, &(0x7f0000000100)=""/53}, {0x8000000, 0x1f, &(0x7f0000000580)=""/31}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001a80)={0x6, 0x0, [{0xf000, 0x1000, &(0x7f0000000a80)=""/4096}, {0xd000, 0x98, &(0x7f0000000180)=""/152}, {0xeeee0000, 0x58, &(0x7f0000000280)=""/88}, {0x2, 0x9e, &(0x7f00000004c0)=""/158}, {0x8080000, 0x35, &(0x7f0000000100)=""/53}, {0x8000000, 0x1f, &(0x7f0000000580)=""/31}]}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r5, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) r6 = socket$tipc(0x1e, 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000005c0)) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r7) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.094624728s ago: executing program 1 (id=3411): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10001) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x100) 1m40.043889678s ago: executing program 33 (id=3411): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10001) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x100) 39.633834955s ago: executing program 2 (id=4577): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x14c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x62, 0x5, "cc28ca90f19452b7910870eeb139d52db427ac6903899fc6f0dcd549bb0292e57594b2d8f56fde68d97cba82de48893a6ca489b640d4ffb71767d727dae0aad19effed83eaaa55b011afe36ae7c435320e5c6998eb25d7ea36151b2815d6"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mounts\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@@&\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd32}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, './binderfs/binder1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "5510976231ac2ff8fd200cf26e3d91625eeed9da95b13d37b920161048b57862bcca727014cfcf813b76975b571f529a856ca1b12c5a3756a2f151fa34e1fe9d868d8fb853bd2cd78505b4b4a85f72f516b9400f16d39733ae3b6b"}]}]}, 0xffffffffffffffb8}}, 0x2008040) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fchdir(r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast2, 0xfff}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 39.633577955s ago: executing program 2 (id=4578): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000df"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 39.623870725s ago: executing program 2 (id=4579): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000140)={0x1, 0x7, 0x1}) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat\x00') syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xa42f9200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 39.558659886s ago: executing program 2 (id=4580): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x800, &(0x7f0000000280)) r2 = socket(0x1e, 0x1, 0x6) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x7000003) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x9, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0xc38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0x0) 39.557707006s ago: executing program 2 (id=4581): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2800, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000580)={{}, {0x1}, 0x81, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x1ea, 0x0, &(0x7f0000000380)={0x2, 0xe3, {0x1, 0xc, 0x39, "0467076379fa6d929af23298c65d672c3ded9761df8d0b74e06633a73949b643841a06c79d55e5e8e11b226c1311a6a043b168600c7395d3da", 0x9d, "59b1e0a69f2837f7b534311c2ae2edf9a375ea5f462dcc4461759a63975f669c12b02b23855f20878b4696ffc893b6573d66a001678955e7b094667c9aadf3be1483b2cc7573f7e72c87a52e2b9ac748d4d62f47e85131dd75ea8f00331b2ed370ad00c1f89da4bb8a307881f9f8d1913f23aa9bb40e695043578ea316ec81482b7953cee52b578fa446e37b230d139ff10acb6d7dcb7b59b1dd8283bb"}, 0xe4, "dc65a0cc775b392defacbb0e728d15bddfb23309ed7a142171b07a9298eb2aa913afc4bc7a1b312e0646b0a9da68de5bcf42a7e784ff8cb345b1da689782c28b29f40b66389ce3c91cf81aa250434eb7f692935848cfa9574b0473cf27297ba4031726e39f0c19c6d65f85b8bb7adacf5d1d7a3ef9a47284d2156261a9aea7b0ce43fb97bd0955a540a15d32b7bc51b37cebb120a083652c8f65227ac84ff19ab3fa4a716a5b8fb1c511cb4ec76b2b5669ea704161c5457649f8775afcc3ed0ff2735ccc21bd84febd40214704509ce446143dd250090bcfdf1a3959672a4fabaa0d8d02"}, 0x1d3}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8) setuid(r1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000840)={&(0x7f0000000740)=""/194, 0xc2}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000880)) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000008c0)={{0x0, 0x100000, 0xe, 0x4, 0x6, 0x6, 0x8, 0x5, 0xa3, 0x7, 0x80, 0x8}, {0x8080000, 0xdddd1000, 0xe, 0x7, 0x0, 0x5, 0x9, 0x0, 0x5, 0x4, 0x6, 0x1}, {0x5000, 0xdddd1000, 0xbdf0ba4c641a5d68, 0x7, 0x8e, 0x9, 0xc6, 0x5, 0x3, 0x7, 0x5, 0x2}, {0x100000, 0xffff1000, 0x8, 0x72, 0x80, 0x5, 0x2, 0xd3, 0x4, 0xec, 0x6, 0x4}, {0x0, 0x1000, 0xb, 0x10, 0x5, 0x9b, 0x1, 0xc4, 0x6, 0x40, 0x6}, {0x5000, 0xf000, 0x3, 0x2, 0x6, 0x9, 0x10, 0x4, 0x5, 0x0, 0x9}, {0x0, 0x1, 0x0, 0x35, 0x8, 0x0, 0x8, 0x4, 0x1, 0x7f, 0x9, 0x9}, {0x8000000, 0x0, 0x3, 0x3, 0x6, 0x7, 0x6, 0x8, 0x2, 0xf7, 0xd, 0x3}, {0xeeee0000, 0x6}, {0x4000, 0x6}, 0x20010028, 0x0, 0x1000, 0x4080, 0x9, 0x4000, 0x10000, [0x29fc, 0x9, 0x34, 0x7fffffff]}) lsetxattr$security_capability(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), &(0x7f0000000a80)=@v1={0x1000000, [{0x3}]}, 0xc, 0x1) listxattr(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=""/4096, 0x1000) r2 = socket(0x15, 0xa, 0x6) sendmsg$nl_generic(r2, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)={0x124, 0x20, 0x200, 0x70bd29, 0x25dfdbfc, {0x14}, [@generic="31da3718edcabfecde0a6b9d2b223c04f6f68e3b95a21c55ef5e7d342913e5c09092df487c39cd5962715d9a7bd925d606485e7505f40d69c0c72b6dc8d3f2576a31d2c1c6cdf61b645ed318e406d813cb11c315bc56fbe99a260c2a65b472e9580f7b058229d0e6b4840222f4279d5bac2693c6f6f28e4b591d1acea88791318bc13bf963df30bfbff0c96d93f60a0ef78dfc5fa4f023e3519548af3b22101e2efd954b62e87b2042a2480735fd5c79bf99abf48f7d31378e34c08e7240a867b3f14eded4466a5f8737ad791b13769dc92b002c3bbf37e53ede546cc9e192024b6d", @typed={0x8, 0xf5, 0x0, 0x0, @u32=0x800}, @typed={0xc, 0xea, 0x0, 0x0, @u64=0x400}, @nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0x132}]}, @generic="96f35ccb194a30a56c2a", @typed={0x8, 0x86, 0x0, 0x0, @uid=r1}]}, 0x124}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000003d40)={0x10, 0x0, r3}, 0x10) umount2(&(0x7f0000003d80)='./file0/file0\x00', 0x2) lgetxattr(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)=@known='trusted.overlay.opaque\x00', &(0x7f0000003e40)=""/154, 0x9a) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003f00)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004140)={0x4c, 0x0, &(0x7f0000004080)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003fc0)={@ptr={0x70742a85, 0x0, &(0x7f0000003f40)=""/48, 0x30, 0x1, 0x4}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000003f80)=""/63, 0x3f, 0x0, 0x30}}, &(0x7f0000004040)={0x0, 0x28, 0x40}}}], 0xd, 0x0, &(0x7f0000004100)="a90b90e1784c682c7511c315cf"}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000004180)) umount2(&(0x7f00000041c0)='./file0/file0\x00', 0xd) getsockname$unix(r0, &(0x7f0000004200)=@abs, &(0x7f0000004280)=0x6e) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) sendmsg$nl_xfrm(r2, &(0x7f0000006740)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006700)={&(0x7f0000006340)=@delsa={0x384, 0x11, 0x300, 0x70bd27, 0x25dfdbff, {@in6=@private1, 0x4d3, 0x2, 0x33}, [@extra_flags={0x8, 0x18, 0x7}, @mark={0xc, 0x15, {0x35075b}}, @algo_comp={0x118, 0x3, {{'lzs\x00'}, 0x680, "270fba4f57f506550e3c2c38589ec8b013657cf801967dc3de1f833a254bb78e9e7998ff54aa0b4b8ad90602bc8c15fc1cbbd013d79cb76c83adb3dacfa3d58239ec1714d088dd98389e5f970efd2cd53208e7aa5105ad6a65017db606112eb99d9b0d12afdb9ded048404be369c9a3ca0418c87fc37e619e50c465ac4d5f720683a50854a64cc08aec7f8760e2ea051d1e3de71f41c127baafaa9e4019cc479b256ccbafdf6a5f96032a021eb8bca045796e94595fd9dd00017a7edd83bd6fecb2e54e4df0eecd2ec1fbfa06ebe6215"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @tmpl={0x104, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x4, 0x50, 0x81, 0x4}, {{@in=@loopback, 0x4d6, 0x3c}, 0xa, @in6=@remote, 0x3505, 0x0, 0x1, 0x6, 0x2, 0x4, 0xffffffff}, {{@in6=@remote, 0x4d5, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x3, 0x3, 0x8, 0x1c000, 0xff}, {{@in6=@private0, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010100, 0x3506, 0xfce8b4ca43143bdb, 0x3, 0x8e, 0x800, 0x1, 0x2}]}, @algo_crypt={0x11b, 0x2, {{'cbc(aes)\x00'}, 0x698, "178211c3c9a389f179916c0ecf2c9d8eb0c0bd4d92507a3087d99c6ef31c2577bef425bf5bf103cb29fa80c39b13adf8435cd94ad5b4602b7b5c4cada8b87b9d24d06e8247f80722e72d5ed86de6fa528c2691d1fbe29612db245f655ce3bb30188f7106002195ed13294dc54efd964daaa5ecd6e7223c9bf1e7dc026056e5c05eaedd37a1dbb267fb6e7af13c38664318f41f74a553255f20d4a0f94a3ef167ff91872bf60ef8090b2b21a77376cb9227f4dcadfd972f05050bd0ad8a909e9677cce72a5f6df60faa3127cda6ccc7c5d22447"}}, @tfcpad={0x8, 0x16, 0x100}]}, 0x384}, 0x1, 0x0, 0x0, 0x4008010}, 0x4010) rename(&(0x7f0000006780)='./file0/file0\x00', &(0x7f00000067c0)='./file0\x00') ioctl$FIONCLEX(r2, 0x5450) r5 = openat(r0, &(0x7f0000006800)='./file0\x00', 0x181040, 0x80) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000006840)) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000006880), &(0x7f00000068c0)=0x4) sendmsg$sock(r0, &(0x7f0000006e80)={&(0x7f0000006900)=@caif, 0x80, &(0x7f0000006d80)=[{&(0x7f0000006980)="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", 0xfc}, {&(0x7f0000006a80)="65279b7182f7f4a46a627e543342035190985a42a99611f6e20d69959e4782e86c7d24705eb91f8e8a7419af23936755b88b6e8c2845d07ce8bebd31d71fbb2ee3d5ae33e8a7865edd49f72a97dccd602eecb9d5d136515bad7ce1de8213c6484b9bd5dceaca36deb85b916623d79c5b8c11f2cfa7521e82292ad6555037395c7ef5507e5e418f3500f156f2f499606e4c09fd92229efb03217e", 0x9a}, {&(0x7f0000006b40)='\t', 0x1}, {&(0x7f0000006b80)="ac35f85b15596e24c0044009ff444dd9ed877a9508d25b181f19bea52c7617a9f39a88ff316fbdae2b09effe6eeae23002c267fc7cc0d30664904cab622831904dc700e408bc43f8edefe3ba1d126ea2b9954520d7a6f1fb3eb4b2e079f629c2bbb4195fd3dd8fa710079ece5573948ea18d5325b03147cedc7699a281b3d8d3c9676956b14753ba2ec8", 0x8a}, {&(0x7f0000006c40)="48ece2661590f849a2efd0b17cb768b7027fa201f8dad5507fd1b6b2d801d0f8f376bb852b", 0x25}, {&(0x7f0000006c80)="512b8f9f2dc0fd6193c94c7e792a6f09253905e72926964285c3a920e6e10336f8d0ad91cac4a2fd34db1c7081bd02006a6ebd1209eeee98edb03245f8fdb230f7475c2fa59cae79a3eec2c4f779b365bb06deffdf04f7362bcdc1189968e19028c729a3c1a04174a47a3d483ef4d9ba841ffacc939e90063cf277eb1a75d31b3d409ffacd7cf04be553e678e66efaff0cb72d2d56a1c252c0b3bf153211c72b38a09a3c5fbf2303ec2f4893beff810323dee05b76ea1a4df0c3f5a5ee1fc34b5dc14a5f6510e1850394777ee17b0651eeb16a02e25acd12f9906412", 0xdc}], 0x6, &(0x7f0000006e00)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0xd}}], 0x60}, 0x14004) lgetxattr(&(0x7f0000006ec0)='./file0\x00', &(0x7f0000006f00)=@known='trusted.overlay.nlink\x00', &(0x7f0000006f40)=""/179, 0xb3) 39.467413517s ago: executing program 2 (id=4582): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup2(r1, r1) connect$802154_dgram(r2, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 39.423644418s ago: executing program 34 (id=4582): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup2(r1, r1) connect$802154_dgram(r2, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 4.472039042s ago: executing program 5 (id=4803): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.465433923s ago: executing program 5 (id=4805): r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x0, 0x0, 0x1001f0) lseek(r0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_open_procfs(0x0, 0x0) setreuid(0xee01, 0xee01) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @local, 0x3}, 0x1c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0x8a, 0xd, 0xfffffffd, 0x4, 0x7, 0xfe3, 0x0, 0x152, 0x1}}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x64}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) 4.306745755s ago: executing program 5 (id=4810): socketpair(0x29, 0x5, 0xee6c, &(0x7f0000000b80)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000bc0)=0x10, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=0x64010102, 0xb, 0xb}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="0577356a067e03721c7e491be4aab8e8fff706df3510ccf937bb7d6618e741025d9eb609b380e8e16c4e895cb62c31574f04eaacd364292da9cc6857cf06946a06ca5cf160a77122e9a11fb5f198d0bd2dc009baf877dbcf7456f707199dba0539c7f2"]) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000180)={@multicast1, @remote, 0xffffffffffffffff, "387ce24c7232fed4831e925cc344414aa098f62087039d7c59f631415baac7e5", 0xb, 0x65e, 0xd, 0x7fffffff}, 0x3c) (async) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) r5 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x40, 0x20, 0xa2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0xd946, 0x3}, {0x6, 0x24, 0x1a, 0x7f, 0x1b}, [@country_functional={0x8, 0x24, 0x7, 0x0, 0x3, [0x8]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x4, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x42, 0xb, 0x2}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0x10, 0x8, 0xf}, 0x3e, &(0x7f0000000400)={0x5, 0xf, 0x3e, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0xd, 0x7}, @generic={0x32, 0x10, 0x1, "c0aa5fe4c93f302cf9b90cb7f82869624e25e4ab7325a897f1006c59a693f300128ddf1909627b106c3483a74a7b2a"}]}, 0x1, [{0x17, &(0x7f0000000440)=@string={0x17, 0x3, "bbcf0f36839bd75ffdd9f84e116eb893a91a142186"}}]}) syz_usb_control_io(r5, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x0, 0x4, 0x39, {0x39, 0x1e, "dc5f7f77802a53c36bc3fd855f569bab31aa15862c799c8d49e0cb3cfb16299f0a1bbd66da84a56475eaf1d2fdbdd709597af5a32763e0"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="32f1"], &(0x7f0000000540)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xad, 0x0, 0x3, 0xe13, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x7, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "47733b7b11e48533c74a2b757519b4e9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x9, 0x5}, @generic={0x20, 0x10, 0x0, "adb43e3856cf24c6cf4541e5b7a9e0d4ee4fcb2646f445710372408b58"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x6, 0x3c, 0x100, 0x4}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x2c, 0x4, '\"K}|', "e32597c7"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x4, 0x5, 0x9, 0x3, 0xe}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x0, 0x12, 0x3d, "0ed866081e5f70f4ecbde1308450a7a10a225cc08dab72d66c385cf3ce5611baaa91fb07eab58cbbb2eab41fe01e0da680965e3b8eb88eb3ce52685a48"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x8, 0x4, [0xf0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000880)={0x40, 0xb, 0x2, "31bc"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x259}, &(0x7f0000000900)={0x40, 0x13, 0x6}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "7710"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x1e, 0x1}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xf7}}) (async) close_range(r1, 0xffffffffffffffff, 0x0) 3.800463723s ago: executing program 6 (id=4822): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) lseek(r0, 0x1, 0x3) 3.775765403s ago: executing program 6 (id=4823): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0xc93, 0x9, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast1, @broadcast, {[@noop]}}}}}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast2, 0x4e21, 0x5, 0x4e21, 0xfffc, 0xa, 0x80, 0xa0, 0x89, r1, r2}, {0x4, 0xe41e, 0x40, 0x3, 0xee58, 0x1, 0xaf, 0x2}, {0x2, 0xff, 0xe, 0xab53}, 0x81, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in6=@loopback, 0x3504, 0x1, 0x0, 0xf7, 0x7, 0x8, 0x8001}}, 0xe8) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="65470f2b620f64430f73f36c0f21eeb9800000c00f3235008000000f30410f7833f2400fc2580f540f3066b8d1000f00d8c422d12841f3f9", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000484f"]) preadv2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)=""/220, 0xdc}], 0x1, 0xfffffffe, 0x6, 0x15) 3.065774344s ago: executing program 5 (id=4829): select(0x0, 0x0, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x77359400}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a80), 0x1, 0x0) flistxattr(r2, &(0x7f0000000240)=""/22, 0x16) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x7) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100f0ffffff07d90467a0000000000109022400010000a020090400060103000001220800090581030010fbfe090000000000003fb0d000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000040)='\x04Xk\xd5\xbe\x80\xb5R\x7f\x87\xb7jS\x97\xe89OK\xaf\x1di\x11H\xfc\xb1\xc8\xa9\xfc\xcd\xea3}C_\x83\x8c\x1e\xd6\x89i\xe3\x943\xdd\xe2r\xec\xd3\x9f\\g\x83\"') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'xfrm0\x00', 0x10}) r7 = epoll_create(0x7) r8 = epoll_create1(0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000180)) 2.750369999s ago: executing program 6 (id=4831): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x801) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.454136503s ago: executing program 6 (id=4835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.452935033s ago: executing program 6 (id=4837): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async, rerun: 32) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x3ff, 0x9, 0xfffffffffffffff9, 0x20000000, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r5, 0x0, r5, &(0x7f0000000100)=0x97, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$bt_hci(r1, &(0x7f0000000100)={0x1, @create_conn_cancel={{0x408, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r6, 0x0, 0x7ffff000) 2.452568703s ago: executing program 6 (id=4838): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0x0, 0xea60}}, 0x0) (async) setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0x0, 0xea60}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200c80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x53, 0xad, 0xbd, 0xf9, 0xa9, 0xaf, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x2, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x2b82e}], 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="66ba4300b006ee0f01c40f009b27000000b9800000c00f323500800000b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 948.937726ms ago: executing program 0 (id=4852): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x99b33000) r6 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc, &(0x7f0000000080)=0x80) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000000c0)=0x3, 0x4) 898.613167ms ago: executing program 4 (id=4853): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x533702, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000300)=0x9, 0x4) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_IOCTL(r9, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x5000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r10}, 0x10, &(0x7f0000000080)={&(0x7f00000005c0)=@canfd={{}, 0x3, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9926ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4105}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') lseek(r11, 0x80000001, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 897.885747ms ago: executing program 0 (id=4854): mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{r0, r1/1000+10000}, {r5, r6/1000+10000}}, 0x0) 897.108976ms ago: executing program 0 (id=4855): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffffffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 895.122156ms ago: executing program 0 (id=4856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="366284890eddc2f6cf0d2e0fba240d66b9f00a000066b8768b000066ba000000000f300f0f06ed14ae36f239410066b96c02000066b8dd29000066ba000000000f30660faef7660f3881ac6400", 0x4d}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 878.458187ms ago: executing program 0 (id=4857): r0 = socket$inet6(0xa, 0x3, 0x7) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) shutdown(r1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75", 0x2}], 0x1, &(0x7f0000000180)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x85c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r3, &(0x7f0000000300), 0x48) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000000c0)={0x2}) 813.914968ms ago: executing program 0 (id=4858): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010100}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "c36cecdad9a6cd972a625315adfc4e3d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "050000000000e4d860dde7d5e25200"}]}, 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x4004810) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 574.842361ms ago: executing program 4 (id=4859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 570.514801ms ago: executing program 4 (id=4860): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@loopback}, 0x14) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x4000011, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 557.839591ms ago: executing program 4 (id=4861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r5]) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0), 0x0, r8) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0xbe1, 0x0, 0x2}, {0x89d, 0x0, 0x8}]}) 445.506663ms ago: executing program 4 (id=4862): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "506ac1"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) read(r0, &(0x7f0000000000)=""/175, 0xfffffe14) 422.223323ms ago: executing program 4 (id=4863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x20, r1, 0xfaac4106a1b87a7, 0xffffffff, 0x0, {0x7}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x30b, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x6, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x199a, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x12}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xfa, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x5, 0x5, 0x3, 0x50}, 0x53, &(0x7f0000000640)={0x5, 0xf, 0x53, 0x1, [@generic={0x4e, 0x10, 0x1, "10aa7625344fd962447ee8fed06d191c3b87c96bb2c1401a2a40e4b6c906d165b59d9204a3237443c2f8d13c8558d4a3b5286ecf787e3cc97d1f7939d1c1522958b6f30a51f43727912f98"}]}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io(r3, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x40, 0x1, 0x19, {0x19, 0x7, "f868861e83eb1d1e4c34f3b13b997aebfac9a269efce8b"}}, &(0x7f0000000800)={0x0, 0x3, 0x23, @string={0x23, 0x3, "3ba0fb843d720eda221c5040dbcdcac274b439acfe42903d3ed91c9715550ea0f3"}}, &(0x7f0000000840)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xab, 0x2, 0x0, 0x8, "1504d891", "25350297"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x54, 0x3, 0x6, 0xc, 0x2, 0x0, 0x6}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000940)={0x40, 0xb, 0x76, "24d81c8b0128cdd22808dbc0398b2185dcafd48abbb3f5dcd93b57379596d0f297306aa8ef16b24182cfa213783a490561b72f85a206e23e8e3f2399cfb3fc14e9aadcfd4f4d742c2d1fc495aeb8a0501f187533d7843b6bf972c68230ed2d026b0cfb30f46ed738802ac1831c90268f1f493326ece9"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x6}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0xa0, 0x10, [0xff]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xcd}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "7af5"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xef00}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "be2f"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0xfa}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_to_bridge\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8c718b9a84134c10489c5cb6f186389c394dc8fe2014671d8e35666dbff710e4bee307591bf581de77eeea6ecb270e1fc13eaabbc818d10343f2d233376d0ad214a781440d1d224e7b480a1909138f356a3c77bb6a0563feeb567c6013a23ae7bdbfb9a19378a30b0a80b175a9006c3bf5d339ee9631cd33b4e5f349ecda0958a4464a5c74f24a9bf1d970a23744717681d72e368c6482d8f90159cbc21b677b3148625cfbbcd6b38a70a6f9d407755c66345257630fb1363a8f2a72b0845f550550cc4514a80d69ee9bbfd7245f4ae88b4471528f798397d97c20d01b9b1e719ab84219b63f318b94aec895cbc8c4273f1767", 0xf3}], 0x1, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0xf0}}], 0x1, 0x20044002) 1.732089ms ago: executing program 5 (id=4864): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x881, 0x96, &(0x7f00000000c0)="02d1020a925877936fff2bfdb9591bb412316ed18336c71eb328620ef35c4c533bcd7ea12646df975192661b859799fb356cbd172e6458275a1543bc5c2a119958216e2f44b5348edbe7de7cec6551a2557a95c142a15ec4c89ba260f67695d45f23ba2b9690be53bb389ca25f71a81923aacee37fa789840ed943af05c39d4df5c1608feea926e09322d8c2e1f6f2c4b1b6bfa3971a", 0x9, 0xb, 0x9, 0xf068, 0xe577, 0x1, 0x0, 'syz0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_seqnum', 0x408340, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="6ffca6c220db919629d34a619ba9667da303738d6d003f206d1e46282cb3046c46436ab9e9bb9cab0fce04debae1181f83b2dc62fa6fd9f10bc46f4713e3405d5b0837699e9da0fb7cb966469ae4f802adb2c01607f3", 0x56}, {&(0x7f0000000340)="53b53794ea5b9a1bf47b5d221251ba1d5b5521ff38952ed21b5394ed701366326b8d17d46dc9f5cffc58c36810a35910f63be250e3bce40718f96d73f6499885edebdded0d568a42ad726fe6b83f7bf12321422d6136c5d95490ddddbd73af9ff261190859965c339d4a3ecfe193530ea7f221ff25beb5124fb41ca86feb8f814d158d54b01ba6725a633fbb31a659f200e1468266a4359bf4dd99bf079a5407f2acf4e2365f362ae073e724cf58466388fa2f9dc277ca3275b309a1a9277cffb6d271bc11510f2955e989bba467837668d4dd7b13c553129eb1ffc0505b90ec99a09c2001aae9e722022286fead38041ddb4ff3", 0xf4}, {&(0x7f0000000440)="3dd54a35f3087ed994a6d8bbe92efa36c22222b178a0ac47b40ec3c6cd96bc5ea4ad4df2f192127db8d6b571d5116a040056511ab2a099757526c8da6a103a4796f643375ab9a20974958dd5dd85507afc367d5194ce0c8d54e218fd76452ec5b98762a6fec19f1ef8dd8973e583dbcc871cf6efa2a659160f9668f6ed677c5087ca2d08918a1a30f66d189b3b22cf8c9992f73da1b7492e3f8611b3db4a717b36610489204e547f1cd4f7d30a331c64d9330f55e537da95fa4a4e5cdd", 0xbd}], 0x3}, 0x4002) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000002600)=0xd, 0x4) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x545000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002680), 0x200280, 0x0) r8 = dup2(r2, r7) sendmsg$nl_generic(r8, &(0x7f0000002d00)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002700)={0x588, 0x2e, 0x8, 0x70bd29, 0x25dfdbfc, {0xd}, [@nested={0x12f, 0x9e, 0x0, 0x1, [@generic="4d8544e96b01e10a19ace8d2e04ab934e484b9507bbd7a4efe88ac7bb2aee7dab0e45fb60c8b829dae3c63b65d4c4ddf8d961835e42a263250697ff707d7a592ff6a33ea50ce1b2b64fec031d4b428a8d0ea4160ca46a33e16253441f9f6b96a11ec1358e679875b6456b573b14a5cefb8586e3914da4a417e843cee0574c871e7ab00a21521495bd4ca7bd5a845472383349f95cc411f83700e6a37947f93dfee1d509512fed558a3eb38b9334e81da5cf82edcc78e4db50849c04e", @generic="6dec391438019f5d8050c486b55fd6f322bf6b341a3b37833ad8b202402615a1520f2787091e2abbed59d571fcd71810b9ff3f4a37c496c2153461d94768aa6b990352eb53d549c59c97c556b30c49204f6ec525f030200fa4d1e642a43085f70727d516cbce34932fbfd49a167fb2"]}, @generic="2b81b14a77184d9efdf4429117e850bb3f58bfb3072deecf71030d22e394384078a4b03428db44eff68e3b8a4fcfabe17fc2242cb1fca8100d8012b059b3936c6ff60fef5251bd32c439148af74ae3886a0a4863ddb9a70b7b9e06bfae886349d154a75a0eaf14ed51dea64baca483f314e81517567b42879b6eb2a235d3542a2b0c4923b481414f78d8c80b6802b8fa8015ead2cc399922c6fb5172fea4bfb43547e6d34b0ac659a21f196c90addd8339de610f3e6b11e6df2769ff9c0ae47eeccad9c4eeb3d2959d3e8ce31884bf75fc7f6f6e140bd52e40228e030415d78afb8229cd11fc150352457fcfe0217de60b961b47934bb945a7", @typed={0x8, 0x11f, 0x0, 0x0, @u32=0x8000}, @nested={0x32, 0x3b, 0x0, 0x1, [@generic="35c4ba344cc2a274ede305da02349adbc00376cd9ec05ba7287da44159afc9e011ad2439b0c2", @typed={0x8, 0xa6, 0x0, 0x0, @pid=r6}]}, @nested={0xcf, 0x14a, 0x0, 0x1, [@generic="b2903d98cc5cb0afe221300529e273b318ed7f0c58cee1e9a179877635ee054d3ab7262c3c8bbc3b7e54d8c38f492c3ba4b268ad796af5f399d4c78063d73cccd5cb56685708289e968e6d381efe47d5d57ea2bb9ec6e06f9ee9429da12f43a9c55962d21ea8a2a6657307581deda0f67cc1227db0276c05e31f19e8dc46618603493578b8d45914b4b0907b3d184ed92a58037a9197b174d945683e3b143bb81d8ed0f3fa968bdf5a4824a485c5df827fa9074a1e120e99e414ef8ffcd0b6b3ad607c9b80007c", @nested={0x4, 0xe7}]}, @nested={0x23a, 0x5f, 0x0, 0x1, [@generic="fd80b022b5dda930b8eaf626d4ed5b3229d0f75074f60dc32e4f2619b29521a93c0bd77954050fc1a3308970cbbe20714444c6bb2c22b3f04314996222eb58c821a8e79cbed877dd04d746e1cf84105ee4", @generic="9bcabc9005317723b59b32b4a1baff379cb92cae5ebfca4760a6d71d2e3321ff14a43d9c4d1cc18148182a7dd9b16bb2b3314d4435ee4124235792da70b94d612f3e1417163d2b7218cb03c6e5d6fef176e4deab2a81eb9440e19bed1b02b252f7201005228e20fccd8320102b4e8558f15494f2b2f9ec189874977f9e0f5e0b7d6b07c447c1ae6a43cc4c596df6fdf1a7acd771f80813bb45b2331dce90a6552ebd4ff4a2eadcccea3b3b786db0c77635c6563fbece509eb32445df9891cc69685daf3e8ff6c05a7bc1084c7bc9e1b91c782c9d80b3cd163050fc88c963419b348852d263", @typed={0x8, 0xb3, 0x0, 0x0, @uid=r4}, @generic="b9", @nested={0x4, 0x77}, @generic="829935a0405abf175499eae1c2ae8dc572cd7007521acb45507fcf490e123714b6", @generic="aef7c56da277fe34356006aa8a31804c9c55aad5bb6bdc47725e0eb807ad440a9dad93ecdba58658adbc7e6c735e40f4e510b8a52b8e59276115acf256720bdaf08dae7d3e408c67d2a202c3cbc91565c7903ed69053292fc25dcef952bdb701b2e2de0e1c64ae4f61c08d6fd61d1d69f68bcbf05ad44e744248fc69968765ff6ae36edf70e0022aa614943ff2ff4779eb0e0cbe7df9e38b57d0b316d392285849c2a5d4e214bba0dcfb6a0f969adcef53008d1c2c7c8483c9deb078234964bec79a28399858765e26c445601f6d5279daf2"]}]}, 0x588}, 0x1, 0x0, 0x0, 0x60094}, 0x20008011) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0) r10 = getegid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000005280)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000005380)=0xe8) (async) read$FUSE(r2, &(0x7f00000053c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000002d80)="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", 0x2000, &(0x7f0000007980)={&(0x7f0000004d80)={0x50, 0x0, 0xffff, {0x7, 0x2b, 0x2, 0x400010, 0x3, 0x7, 0x40, 0x9, 0x0, 0x0, 0x80, 0x80000000}}, &(0x7f0000004e00)={0x18, 0xfffffffffffffffe, 0x2, {0x6ff}}, &(0x7f0000004e40)={0x18, 0x0, 0x6c, {0xfffffffffffffffa}}, &(0x7f0000004e80)={0x18, 0x0, 0xc340, {0x232}}, &(0x7f0000004ec0)={0x18, 0x0, 0xffffffff, {0x3}}, &(0x7f0000004f00)={0x28, 0xfffffffffffffff5, 0x7, {{0xfffffffffffffff9, 0x1, 0x0, r6}}}, &(0x7f0000004f40)={0x60, 0x0, 0x5, {{0x4, 0x41, 0x38a, 0x8000000000000000, 0x3, 0x3, 0x7, 0x6}}}, &(0x7f0000004fc0)={0x18, 0x0, 0x642, {0x7}}, &(0x7f0000005000)={0x1a, 0x0, 0x61c9e610, {'/dev/full\x00'}}, &(0x7f0000005040)={0x20, 0x0, 0x6, {0x0, 0x4}}, &(0x7f0000005080)={0x78, 0x0, 0x0, {0x23d9, 0xe, 0x0, {0x1, 0x7fffffff, 0x5, 0x101, 0xa, 0x6, 0x4, 0xfffffff8, 0xf83, 0x2000, 0x4, r4, r5, 0x5, 0xfffffff8}}}, &(0x7f0000005100)={0x90, 0xfffffffffffffffe, 0x6, {0x6, 0x2, 0x6, 0x10001, 0x9, 0x200, {0x0, 0xa, 0x5, 0xffffffff, 0x1, 0x9, 0x6, 0x9, 0x5, 0x8000, 0x4, r4, r10, 0x80000000, 0x3}}}, &(0x7f00000051c0)={0x98, 0x0, 0x0, [{0x4, 0x8, 0x2, 0x5072, '{/'}, {0x1, 0x3, 0x8, 0x8, '}}\\{*\'\x93*'}, {0x3, 0x0, 0xa, 0x80000001, '/dev/fuse\x00'}, {0x0, 0xfb1f, 0x1, 0x8, '\''}]}, &(0x7f0000007400)={0x338, 0xfffffffffffffffe, 0x2, [{{0x1, 0x2, 0xfff, 0x9, 0x1, 0x5, {0x4, 0x6, 0x4, 0xffffffffffffffff, 0x8001, 0x5, 0x601b, 0x356, 0x200, 0x1000, 0x5, r4, r5, 0x7ff, 0x1}}, {0x4, 0x5, 0xa, 0x5, '/dev/full\x00'}}, {{0x4, 0x2, 0x8, 0xa8, 0xffffff80, 0x1, {0x0, 0x3, 0x81, 0x1, 0x2, 0x6, 0x6, 0x9, 0x7ff, 0x1000, 0x1a, r4, r5, 0xd, 0x1ff}}, {0x3, 0x5, 0x1, 0x0, '-'}}, {{0x5, 0x0, 0x40, 0x401, 0xd6, 0x4, {0x3, 0x4, 0xfffffffffffffff0, 0x3, 0x6, 0xffffffffffffff01, 0x0, 0x1ff, 0x2945, 0x6000, 0x7, r4, r5, 0xcd, 0x4000000}}, {0x2, 0x6, 0x8, 0xc613, '.}#@$\x8e-*'}}, {{0x2, 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x800, {0x0, 0x3, 0x1, 0x8, 0x200, 0x6, 0x40, 0x40bb, 0x0, 0x8000, 0xac, r11, r12, 0x5, 0x200}}, {0x1, 0x40000000000000, 0x1, 0x1, ':'}}, {{0x3, 0x0, 0x5, 0x9fae, 0x3, 0x7fffffff, {0x4, 0x5, 0x0, 0xfac, 0x2, 0x401, 0x7, 0x6, 0xffff, 0x1000, 0x2, r4, r5, 0x4, 0x8}}, {0x3, 0x7ff, 0x4, 0xccd7, '-$%+'}}]}, &(0x7f0000007740)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x1, 0x5, 0x3ff, 0x7fff, 0x0, {0x4, 0xfffffffffffffffc, 0x0, 0x2, 0xc225, 0x7, 0xfff, 0x2c6, 0x38, 0x1000, 0x8, r4, r5, 0x5, 0x5}}, {0x0, 0xc}}}, &(0x7f0000007800)={0x20, 0x0, 0xf2, {0x0, 0x0, 0x6, 0x400}}, &(0x7f0000007840)={0x130, 0x0, 0x5, {0x200, 0x8001, 0x0, '\x00', {0x4000, 0xe6d7, 0x100000001, 0x4, r4, r5, 0x1000, '\x00', 0x70, 0x10000, 0x6, 0xcdf5, {0x8, 0x9}, {0xa3d8, 0xfffffffe}, {0xffffffffffffffff}, {0x0, 0x100}, 0x4, 0x8, 0x9, 0x2}}}}) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000007a40), 0x0, 0x0) recvmmsg(r13, &(0x7f00000097c0)=[{{&(0x7f0000007a80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007b00)=""/224, 0xe0}, {&(0x7f0000007c00)=""/242, 0xf2}, {&(0x7f0000007d00)=""/121, 0x79}, {&(0x7f0000007d80)=""/230, 0xe6}], 0x4, &(0x7f0000007ec0)=""/164, 0xa4}}, {{&(0x7f0000007f80)=@l2, 0x80, &(0x7f0000008000)}, 0x3}, {{&(0x7f0000008040)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000009600)=[{&(0x7f00000080c0)=""/166, 0xa6}, {&(0x7f0000008180)=""/54, 0x36}, {&(0x7f00000081c0)=""/186, 0xba}, {&(0x7f0000008280)=""/148, 0x94}, {&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000009340)=""/118, 0x76}, {&(0x7f00000093c0)=""/122, 0x7a}, {&(0x7f0000009440)=""/104, 0x68}, {&(0x7f00000094c0)=""/10, 0xa}, {&(0x7f0000009500)=""/251, 0xfb}], 0xa, &(0x7f00000096c0)=""/214, 0xd6}, 0x3}], 0x3, 0x2021, &(0x7f0000009880)={0x0, 0x3938700}) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000098c0)={0x1, 0x4}, 0x8) getsockname$inet6(r1, &(0x7f0000009900), &(0x7f0000009940)=0x1c) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000009980)={0x1, {0x26, 0x4, 0x8001, 0x9, 0x8}}) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000009c40)={&(0x7f00000099c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009c00)={&(0x7f0000009a00)={0x1d8, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_NAT_DST={0xbc, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffff001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfbf7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x8000, 0x5, 0x3, 0x5]}, @CTA_LABELS_MASK={0xc, 0x17, [0x6, 0x8ab]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc}, @CTA_TUPLE_ORIG={0xac, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async, rerun: 64) r14 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000009c80), 0x2, 0x0) (rerun: 64) write$selinux_load(r14, &(0x7f0000009cc0)={0xf97cff8c, 0x8, 'SE Linux', "ac40cbbfdb1337f71584592825c82832336bee895322acca3101e80a09c0b21d4cb6fce2963066872607962b3db703efec4686688571fcfec2b634eebe6bc230a0ea41faabb3c04ceb9d3006f691ea9f796d4c81cbf21ebcdfcc3a4595986b9ff82663efbb39b5394d5d9039adb19671675aadc0302b0b83ed3f29275cbdc7aaca9a8bdfc612df58ff69c6ee9b83d10e6d4076f6"}, 0xa4) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000009d80)) (async) setsockopt$MRT6_DEL_MFC(r13, 0x29, 0xcd, &(0x7f0000009dc0)={{0xa, 0x4e20, 0xe2, @mcast1, 0x1}, {0xa, 0x4e24, 0x879, @loopback, 0x1ff}, 0x0, {[0x9, 0xffffe7ef, 0x5, 0xfff, 0x5789, 0x6c, 0x1, 0x9]}}, 0x5c) (async, rerun: 64) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000009e40)={'wlan1', 0x32, 0x31}, 0x8) (rerun: 64) 0s ago: executing program 5 (id=4865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ] tipc: Enabling of bearer rejected, failed to enable media [ 585.041247][ T481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.054755][ T481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.067506][ T481] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 585.090316][ T481] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 585.098547][ T481] usb 3-1: Manufacturer: syz [ 585.102450][ T36] audit: type=1400 audit(2000000005.730:1141): avc: denied { create } for pid=10271 comm="syz.1.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 585.104539][ T481] usb 3-1: config 0 descriptor?? [ 585.129124][ T481] usb 3-1: Found UVC 0.00 device (18ec:3288) [ 585.136300][ T481] usb 3-1: No valid video chain found. [ 585.332880][ T481] usb 3-1: USB disconnect, device number 89 [ 585.703864][T10226] rust_binder: Error in use_page_slow: ESRCH [ 585.703886][T10226] rust_binder: use_range failure ESRCH [ 585.709946][T10226] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 585.715505][T10226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 585.723558][T10226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1719 [ 585.778503][ T306] usb 1-1: USB disconnect, device number 113 [ 586.173019][T10291] tmpfs: Bad value for 'nr_blocks' [ 586.363948][T10305] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 586.414911][ T36] audit: type=1400 audit(2000000007.040:1142): avc: denied { relabelto } for pid=10304 comm="syz.4.3306" name=E91F7189591E9233614B dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:man_t:s0" [ 586.443137][ T36] audit: type=1400 audit(2000000007.040:1143): avc: denied { associate } for pid=10304 comm="syz.4.3306" name=E91F7189591E9233614B dev="tmpfs" ino=1556 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 586.515176][T10311] incfs: Can't find or create .index dir in ./file0 [ 586.521965][T10311] incfs: mount failed -30 [ 586.674487][ T36] audit: type=1400 audit(2000000007.310:1144): avc: denied { map } for pid=10312 comm="syz.0.3308" path="socket:[66497]" dev="sockfs" ino=66497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 586.759259][ T36] audit: type=1326 audit(2000000007.390:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.2.3313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 586.869138][T10341] rust_binder: Write failure EINVAL in pid:1750 [ 586.869430][T10342] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 586.905760][T10346] erofs: Unknown parameter '/proc/asound/seq/clients' [ 586.935205][T10349] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 587.052385][ T36] audit: type=1400 audit(2000000007.690:1146): avc: granted { setsecparam } for pid=10370 comm="syz.0.3325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 587.605797][T10381] netlink: 'syz.2.3328': attribute type 9 has an invalid length. [ 587.627242][ T36] audit: type=1400 audit(2000000008.260:1147): avc: denied { ioctl } for pid=10383 comm="syz.2.3329" path="socket:[67355]" dev="sockfs" ino=67355 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 587.901923][T10405] 8021q: VLANs not supported on lo [ 588.182213][T10409] kvm: MWAIT instruction emulated as NOP! [ 588.288738][T10421] syzkaller0: entered promiscuous mode [ 588.294268][T10421] syzkaller0: entered allmulticast mode [ 588.435454][T10429] tipc: Enabled bearer , priority 0 [ 588.840165][ T482] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 588.991339][ T482] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.002612][ T482] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.012579][ T482] usb 1-1: config 0 interface 0 has no altsetting 0 [ 589.019260][ T482] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 589.028441][ T482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.037813][ T482] usb 1-1: config 0 descriptor?? [ 589.074108][T10445] 9pnet_fd: Insufficient options for proto=fd [ 589.210249][T10425] tipc: Disabling bearer [ 589.320536][T10461] exFAT-fs (rnullb0): invalid boot record signature [ 589.327247][T10461] exFAT-fs (rnullb0): failed to read boot sector [ 589.333704][T10461] exFAT-fs (rnullb0): failed to recognize exfat type [ 589.360959][T10464] 9pnet: Could not find request transport: fo=0x0000000000000003 [ 589.450740][ T482] apple 0003:05AC:029F.0022: unknown main item tag 0x0 [ 589.457695][ T482] apple 0003:05AC:029F.0022: unknown main item tag 0x0 [ 589.470368][ T482] apple 0003:05AC:029F.0022: hidraw0: USB HID v8.00 Device [HID 05ac:029f] on usb-dummy_hcd.0-1/input0 [ 589.704035][T10483] overlayfs: failed to clone upperpath [ 589.796876][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.820161][T10441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.820318][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.836794][T10441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.875981][ T306] usb 1-1: USB disconnect, device number 114 [ 589.919284][T10494] rust_binder: Write failure EFAULT in pid:1790 [ 590.242713][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 590.242734][ T36] audit: type=1400 audit(2000000010.880:1149): avc: denied { execute } for pid=10504 comm="syz.1.3370" name="file0" dev="ramfs" ino=67961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 590.310150][ T36] audit: type=1400 audit(2000000010.880:1150): avc: denied { execute_no_trans } for pid=10504 comm="syz.1.3370" path="/file0" dev="ramfs" ino=67961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 590.417541][T10529] >: renamed from wg1 (while UP) [ 590.442775][T10506] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.449905][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.458896][T10506] bridge_slave_0: entered allmulticast mode [ 590.465588][T10506] bridge_slave_0: entered promiscuous mode [ 590.472460][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.486152][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.495377][T10506] bridge_slave_1: entered allmulticast mode [ 590.502096][T10506] bridge_slave_1: entered promiscuous mode [ 590.528362][ T46] bridge_slave_1: left allmulticast mode [ 590.534612][ T46] bridge_slave_1: left promiscuous mode [ 590.541581][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.541736][T10540] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3381'. [ 590.558418][ T46] bridge_slave_0: left allmulticast mode [ 590.566218][ T46] bridge_slave_0: left promiscuous mode [ 590.571977][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.664037][T10554] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.672280][T10554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.679532][T10554] IPv6: NLM_F_CREATE should be set when creating new route [ 590.726400][ T46] tipc: Left network mode [ 590.740836][ T46] veth1_macvtap: left promiscuous mode [ 590.749593][ T46] @ÿ: left promiscuous mode [ 590.825515][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.832589][T10506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.856420][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.866072][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.873171][ T5448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.883119][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.890298][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.920402][T10506] veth0_vlan: entered promiscuous mode [ 590.932633][T10506] veth1_macvtap: entered promiscuous mode [ 590.980206][ T45] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 591.137207][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.147475][T10574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 591.147959][T10574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 591.148139][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 591.177373][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 591.187116][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.201842][ T45] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 591.211002][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.219047][ T45] usb 3-1: Product: syz [ 591.223598][ T45] usb 3-1: Manufacturer: syz [ 591.228211][ T45] usb 3-1: SerialNumber: syz [ 591.233748][ T45] usb 3-1: config 0 descriptor?? [ 591.440208][ T1923] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 591.457069][ T481] usb 3-1: USB disconnect, device number 90 [ 591.590160][ T1923] usb 1-1: device descriptor read/64, error -71 [ 591.830152][ T1923] usb 1-1: device descriptor read/64, error -71 [ 592.070130][ T1923] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 592.200151][ T1923] usb 1-1: device descriptor read/64, error -71 [ 592.354936][ T46] veth1_macvtap: left promiscuous mode [ 592.360647][ T46] veth0_vlan: left promiscuous mode [ 592.440137][ T1923] usb 1-1: device descriptor read/64, error -71 [ 592.456904][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.464131][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.471547][T10631] bridge_slave_0: entered allmulticast mode [ 592.478801][T10631] bridge_slave_0: entered promiscuous mode [ 592.485405][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.492528][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.499692][T10631] bridge_slave_1: entered allmulticast mode [ 592.506070][T10631] bridge_slave_1: entered promiscuous mode [ 592.550475][ T1923] usb usb1-port1: attempt power cycle [ 592.562614][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.569679][T10631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.576988][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.584079][T10631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.606849][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.614467][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.624653][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.631736][ T5448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.641242][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.648331][ T5448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.677907][T10631] veth0_vlan: entered promiscuous mode [ 592.689322][T10631] veth1_macvtap: entered promiscuous mode [ 592.890746][ T1923] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 592.911233][ T1923] usb 1-1: device descriptor read/8, error -71 [ 593.041554][ T1923] usb 1-1: device descriptor read/8, error -71 [ 593.141665][ T36] audit: type=1400 audit(2000000013.780:1151): avc: denied { lock } for pid=10662 comm="syz.2.3419" path="socket:[68536]" dev="sockfs" ino=68536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 593.212763][T10674] kvm: pic: non byte write [ 593.290146][ T1923] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 593.311251][ T1923] usb 1-1: device descriptor read/8, error -71 [ 593.441291][ T1923] usb 1-1: device descriptor read/8, error -71 [ 593.551344][ T1923] usb usb1-port1: unable to enumerate USB device [ 593.558744][ T36] audit: type=1326 audit(2000000014.190:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x7fc00000 [ 593.582794][ T36] audit: type=1326 audit(2000000014.190:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10678 comm="syz.2.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x7fc00000 [ 593.786354][T10709] netlink: 'syz.4.3432': attribute type 4 has an invalid length. [ 593.794847][T10709] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3432'. [ 593.822751][ T36] audit: type=1400 audit(2000000014.460:1154): avc: denied { execheap } for pid=10713 comm="syz.2.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 593.955401][T10731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 594.105806][ T36] audit: type=1400 audit(2000000014.740:1155): avc: denied { mounton } for pid=10741 comm="syz.2.3441" path="/proc/746/cgroup" dev="proc" ino=69965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 594.143902][T10747] rust_binder: Write failure EFAULT in pid:35 [ 594.590178][ T482] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 594.668470][T10760] SELinux: failed to load policy [ 594.674491][T10760] SELinux: failed to load policy [ 594.750167][ T482] usb 1-1: Using ep0 maxpacket: 16 [ 594.756358][ T482] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 594.767239][ T482] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 594.778411][ T482] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.791271][ T482] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.800462][ T482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.816363][ T482] usb 1-1: Product: syz [ 594.817693][T10773] 9pnet_fd: Insufficient options for proto=fd [ 594.825584][ T482] usb 1-1: Manufacturer: syz [ 594.828323][T10774] 9pnet_fd: Insufficient options for proto=fd [ 594.839053][ T482] usb 1-1: SerialNumber: syz [ 594.850839][T10776] rust_binder: Error while translating object. [ 594.850868][T10776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 594.857291][T10776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 595.036631][ T36] audit: type=1326 audit(2000000000.350:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10791 comm="syz.2.3458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 595.280282][ T482] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 595.820478][ T36] audit: type=1400 audit(2000000001.140:1157): avc: denied { mounton } for pid=10795 comm="syz.5.3459" path="/15/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 596.017725][T10814] 9pnet_fd: Insufficient options for proto=fd [ 596.038004][T10817] binder: Binderfs stats mode cannot be changed during a remount [ 596.059572][ T36] audit: type=1400 audit(2000000001.370:1158): avc: denied { remount } for pid=10819 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 596.066148][T10820] Bluetooth: hci0: Frame reassembly failed (-84) [ 596.086222][ T5450] Bluetooth: hci0: Frame reassembly failed (-84) [ 596.093554][ T36] audit: type=1326 audit(2000000001.400:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10819 comm="syz.2.3466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 596.176849][ T36] audit: type=1400 audit(2000000001.490:1160): avc: denied { append } for pid=10806 comm="syz.5.3462" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 596.201643][T10823] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 596.315931][ T482] usb 1-1: USB disconnect, device number 119 [ 596.821250][ T36] audit: type=1400 audit(2000000002.140:1161): avc: denied { accept } for pid=10842 comm="syz.4.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 597.023012][T10860] futex_wake_op: syz.5.3479 tries to shift op by 144; fix this program [ 597.243398][T10874] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 177) [ 597.243429][T10874] rust_binder: Error while translating object. [ 597.254158][T10874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 597.260394][T10874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 597.270733][T10875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.349245][T10880] rust_binder: Write failure EFAULT in pid:32 [ 597.427472][T10885] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3487'. [ 597.480153][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 597.630157][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 597.636929][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 597.648146][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.658119][ T45] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.672406][T10888] tmpfs: Unknown parameter '‡uge' [ 597.678409][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.687706][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.696141][ T45] usb 6-1: Product: syz [ 597.700702][ T45] usb 6-1: Manufacturer: syz [ 597.706865][ T45] usb 6-1: SerialNumber: syz [ 597.735069][ T36] audit: type=1326 audit(2000000003.050:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.0.3492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x0 [ 597.855985][T10903] netlink: 'syz.4.3495': attribute type 27 has an invalid length. [ 597.878645][ T36] audit: type=1400 audit(2000000003.190:1163): avc: denied { lock } for pid=10904 comm="syz.4.3496" path="socket:[71119]" dev="sockfs" ino=71119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 598.090264][ T4591] Bluetooth: hci0: command 0x1003 tx timeout [ 598.090275][ T622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 598.120455][ T45] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 598.234789][ T5448] Bluetooth: hci0: Frame reassembly failed (-84) [ 598.241313][ T5448] Bluetooth: hci0: Frame reassembly failed (-84) [ 598.880159][ T411] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 599.027592][T10934] netlink: 'syz.4.3507': attribute type 4 has an invalid length. [ 599.035558][T10934] netlink: 'syz.4.3507': attribute type 21 has an invalid length. [ 599.036749][ T411] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 599.043762][T10934] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3507'. [ 599.051840][ T411] usb 1-1: config 0 has no interface number 0 [ 599.063103][T10934] 9pnet_fd: Insufficient options for proto=fd [ 599.067008][ T411] usb 1-1: config 0 interface 41 has no altsetting 0 [ 599.081158][ T411] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 599.090297][ T411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.098336][ T411] usb 1-1: Product: syz [ 599.102601][ T411] usb 1-1: Manufacturer: syz [ 599.108790][ T411] usb 1-1: SerialNumber: syz [ 599.115872][ T411] usb 1-1: config 0 descriptor?? [ 599.187803][ T45] usb 6-1: USB disconnect, device number 2 [ 599.599566][T10939] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 599.609566][ T36] audit: type=1400 audit(2000000004.920:1164): avc: denied { relabelto } for pid=10938 comm="syz.4.3509" name="file0" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 599.637094][ T36] audit: type=1400 audit(2000000004.920:1165): avc: denied { associate } for pid=10938 comm="syz.4.3509" name="file0" dev="tmpfs" ino=1917 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:public_content_t:s0" [ 599.665058][ T36] audit: type=1400 audit(2000000004.960:1166): avc: denied { unlink } for pid=8241 comm="syz-executor" name="file0" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 599.669906][T10941] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 599.796239][T10955] overlayfs: missing 'workdir' [ 599.861486][T10959] netlink: 'syz.4.3519': attribute type 11 has an invalid length. [ 599.883238][T10962] tmpfs: Unknown parameter 'hug_' [ 599.888553][T10962] tmpfs: Unknown parameter 'hug_' [ 599.924502][ T411] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 599.950185][ T1923] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 599.970449][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 600.101288][ T1923] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.112324][ T1923] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 600.122998][ T1923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.129628][ T1923] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 600.138883][ T1923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.147648][ T1923] usb 6-1: config 0 descriptor?? [ 600.152929][T10943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 600.195998][ T411] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 600.206848][ T411] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 600.210525][T10974] FAT-fs (rnullb0): bogus number of reserved sectors [ 600.217282][ T411] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 600.223551][T10974] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 600.234668][ T411] usb 1-1: USB disconnect, device number 120 [ 600.243107][T10976] FAT-fs (rnullb0): bogus number of reserved sectors [ 600.251524][ T2456] Bluetooth: hci0: command 0x1003 tx timeout [ 600.251568][ T622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 600.257907][ T4591] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 600.263848][ T2456] Bluetooth: hci1: command 0x1003 tx timeout [ 600.269835][T10976] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 600.376918][ T1923] usbhid 6-1:0.0: can't add hid device: -71 [ 600.396156][ T1923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 600.425305][ T1923] usb 6-1: USB disconnect, device number 3 [ 600.460209][T11003] 9pnet_fd: Insufficient options for proto=fd [ 600.485772][T11006] rust_binder: Write failure EINVAL in pid:73 [ 600.586145][T11011] rust_binder: Write failure EINVAL in pid:88 [ 600.598356][T11013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 600.620139][ T45] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 600.751968][T11024] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 600.770661][T11026] overlayfs: failed to clone upperpath [ 600.785836][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 600.797403][ T45] usb 3-1: config 0 has no interfaces? [ 600.809957][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.819273][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.823903][T11034] rust_binder: Error in use_page_slow: ESRCH [ 600.827287][T11034] rust_binder: use_range failure ESRCH [ 600.827420][ T45] usb 3-1: Product: syz [ 600.838843][ T45] usb 3-1: Manufacturer: syz [ 600.847629][ T45] usb 3-1: SerialNumber: syz [ 600.850153][T11034] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 600.852244][T11034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 600.855907][ T45] usb 3-1: config 0 descriptor?? [ 600.874732][T11034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:87 [ 600.921498][T11044] binder: Bad value for 'max' [ 600.944526][T11046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=11046 comm=syz.0.3546 [ 601.077532][ T481] usb 3-1: USB disconnect, device number 91 [ 601.210192][ T1923] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 601.360238][ T1923] usb 1-1: Using ep0 maxpacket: 16 [ 601.367408][ T1923] usb 1-1: config 6 has an invalid interface number: 154 but max is 3 [ 601.375796][ T1923] usb 1-1: config 6 has an invalid interface number: 11 but max is 3 [ 601.383985][ T1923] usb 1-1: config 6 has an invalid interface number: 39 but max is 3 [ 601.392125][ T1923] usb 1-1: config 6 has no interface number 1 [ 601.398200][ T1923] usb 1-1: config 6 has no interface number 2 [ 601.404301][ T1923] usb 1-1: config 6 has no interface number 3 [ 601.410422][ T1923] usb 1-1: config 6 interface 154 altsetting 168 endpoint 0x1 has invalid maxpacket 54082, setting to 64 [ 601.421672][ T1923] usb 1-1: config 6 interface 154 altsetting 168 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 601.432822][ T1923] usb 1-1: config 6 interface 154 altsetting 168 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 601.443974][ T1923] usb 1-1: config 6 interface 154 altsetting 168 endpoint 0x4 has an invalid bInterval 221, changing to 7 [ 601.455333][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has an invalid descriptor for endpoint zero, skipping [ 601.466386][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0x4, skipping [ 601.474565][T11050] /dev/rnullb0: Can't lookup blockdev [ 601.477286][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0xF, skipping [ 601.493564][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has an endpoint descriptor with address 0x53, changing to 0x3 [ 601.505342][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0x3, skipping [ 601.516229][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0xB, skipping [ 601.527132][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0xB, skipping [ 601.538022][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0xB, skipping [ 601.548915][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0x3, skipping [ 601.559798][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has an endpoint descriptor with address 0x63, changing to 0x3 [ 601.571554][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has a duplicate endpoint with address 0x3, skipping [ 601.582440][ T1923] usb 1-1: config 6 interface 154 altsetting 168 has 16 endpoint descriptors, different from the interface descriptor's value: 14 [ 601.595862][ T1923] usb 1-1: config 6 interface 11 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 601.606820][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 601.625063][ T1923] usb 1-1: config 6 interface 39 altsetting 5 endpoint 0x2 has invalid maxpacket 1479, setting to 64 [ 601.635998][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 601.646696][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 601.657549][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 601.668484][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 601.679342][ T1923] usb 1-1: config 6 interface 39 altsetting 5 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 601.690379][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 601.701297][ T1923] usb 1-1: config 6 interface 39 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 601.712318][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 601.722883][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 601.733454][ T1923] usb 1-1: config 6 interface 0 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 601.744290][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has an invalid endpoint descriptor of length 4, skipping [ 601.755297][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 601.766028][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 601.776901][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 601.787734][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 601.798319][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 601.808874][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 601.819610][ T1923] usb 1-1: config 6 interface 0 altsetting 4 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 601.832586][ T1923] usb 1-1: config 6 interface 154 has no altsetting 0 [ 601.839373][ T1923] usb 1-1: config 6 interface 11 has no altsetting 0 [ 601.846090][ T1923] usb 1-1: config 6 interface 39 has no altsetting 0 [ 601.853171][ T1923] usb 1-1: config 6 interface 0 has no altsetting 0 [ 601.861513][ T1923] usb 1-1: Dual-Role OTG device on HNP port [ 601.867633][ T1923] usb 1-1: New USB device found, idVendor=1485, idProduct=0002, bcdDevice=a8.9b [ 601.876735][ T1923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.880145][ T45] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 601.884790][ T1923] usb 1-1: Product: syz [ 601.896558][ T1923] usb 1-1: Manufacturer: Ó¿ [ 601.901114][ T1923] usb 1-1: SerialNumber: syz [ 601.906990][T11048] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.914273][T11048] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 602.040149][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 602.046607][ T45] usb 3-1: config 0 has no interfaces? [ 602.053665][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 602.062857][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.070907][ T45] usb 3-1: Product: syz [ 602.075154][ T45] usb 3-1: Manufacturer: syz [ 602.079766][ T45] usb 3-1: SerialNumber: syz [ 602.085212][ T45] usb 3-1: config 0 descriptor?? [ 602.127922][ T1923] usb 1-1: Found UVC 0.00 device syz (1485:0002) [ 602.134390][ T1923] usb 1-1: No valid video chain found. [ 602.144281][ T1923] usb 1-1: USB disconnect, device number 121 [ 602.292438][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.301053][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.309991][ T45] usb 3-1: USB disconnect, device number 92 [ 602.699015][T11079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 602.699045][T11079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:107 [ 602.708584][T11079] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 602.717746][T11079] rust_binder: Read failure Err(EFAULT) in pid:107 [ 602.746889][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.761919][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.770581][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.780203][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.788732][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.797135][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.805610][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.820939][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.829510][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.838148][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.842522][T11088] tun0: tun_chr_ioctl cmd 1074025675 [ 602.847049][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.851977][T11088] tun0: persist enabled [ 602.862031][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.872839][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.874455][T11088] tun0: tun_chr_ioctl cmd 1074025675 [ 602.886909][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.887072][T11088] tun0: persist enabled [ 602.903823][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.922127][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.953147][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.968464][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.986047][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 602.996604][T11109] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 603.004052][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.023037][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.040166][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3567'. [ 603.059392][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.073768][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.090251][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.106717][T11120] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 603.108881][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.133811][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.142421][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.151192][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.159869][T11122] fuse: Unknown parameter 'rootde' [ 603.168467][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.176942][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.189974][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.198811][T11127] tmpfs: Unknown parameter 'usrquota' [ 603.204404][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 603.204432][ T36] audit: type=1400 audit(2000000008.520:1169): avc: denied { map } for pid=11125 comm="syz.5.3571" path="socket:[72911]" dev="sockfs" ino=72911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 603.233988][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.242665][T11083] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 603.302833][T11137] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 603.302865][T11137] rust_binder: Error while translating object. [ 603.324344][T11137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 603.334423][T11137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 603.590151][ T306] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 603.771729][ T306] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 603.782067][ T306] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 603.793523][ T306] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 603.802622][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.810724][ T306] usb 3-1: Product: syz [ 603.814916][ T306] usb 3-1: Manufacturer: syz [ 603.819510][ T306] usb 3-1: SerialNumber: syz [ 603.824904][ T306] usb 3-1: config 0 descriptor?? [ 603.830245][T11145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 603.837430][T11145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.014599][T11172] /dev/rnullb0: Can't lookup blockdev [ 604.045016][T11144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.053658][T11144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.265712][ T306] Error reading MAC address [ 604.273167][ T45] usb 3-1: USB disconnect, device number 93 [ 604.558815][ T36] audit: type=1400 audit(2000000009.870:1170): avc: denied { remount } for pid=11204 comm="syz.2.3597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 604.600226][T11209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 604.600275][T11209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 604.609729][ T36] audit: type=1400 audit(2000000009.920:1171): avc: denied { create } for pid=11210 comm="syz.2.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 604.665580][T11211] syz.2.3600: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 604.683670][T11211] CPU: 1 UID: 0 PID: 11211 Comm: syz.2.3600 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 604.683708][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.683724][T11211] Call Trace: [ 604.683733][T11211] [ 604.683744][T11211] __dump_stack+0x21/0x30 [ 604.683780][T11211] dump_stack_lvl+0x10c/0x190 [ 604.683807][T11211] ? __cfi_dump_stack_lvl+0x10/0x10 [ 604.683836][T11211] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 604.683861][T11211] dump_stack+0x19/0x20 [ 604.683887][T11211] warn_alloc+0x1bc/0x2a0 [ 604.683912][T11211] ? x64_sys_call+0x2adc/0x2ee0 [ 604.683942][T11211] ? __cfi_warn_alloc+0x10/0x10 [ 604.683966][T11211] ? __get_vm_area_node+0x1dc/0x3a0 [ 604.683992][T11211] ? xt_alloc_entry_offsets+0x56/0xe0 [ 604.684023][T11211] __vmalloc_node_range_noprof+0x68e/0x1420 [ 604.684050][T11211] ? __kernel_text_address+0x11/0x40 [ 604.684075][T11211] ? unwind_get_return_address+0x51/0x90 [ 604.684104][T11211] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 604.684132][T11211] ? __kmalloc_large_node_noprof+0x1e/0xe0 [ 604.684162][T11211] ? __kmalloc_node_noprof+0x2a5/0x450 [ 604.684192][T11211] ? nf_setsockopt+0x28d/0x2b0 [ 604.684221][T11211] __kvmalloc_node_noprof+0xfc/0x300 [ 604.684250][T11211] ? xt_alloc_entry_offsets+0x56/0xe0 [ 604.684272][T11211] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 604.684303][T11211] xt_alloc_entry_offsets+0x56/0xe0 [ 604.684326][T11211] translate_table+0x1a9/0x1f90 [ 604.684359][T11211] ? cred_has_capability+0x281/0x380 [ 604.684395][T11211] ? kasan_save_alloc_info+0x40/0x50 [ 604.684422][T11211] ? __kasan_kmalloc+0x96/0xb0 [ 604.684456][T11211] ? arpt_register_table+0x930/0x930 [ 604.684487][T11211] ? __kvmalloc_node_noprof+0x168/0x300 [ 604.684515][T11211] ? check_stack_object+0x82/0x140 [ 604.684546][T11211] ? __kasan_check_write+0x18/0x20 [ 604.684574][T11211] ? _copy_from_user+0x8b/0xb0 [ 604.684608][T11211] ? copy_from_sockptr_offset+0x77/0xb0 [ 604.684639][T11211] do_arpt_set_ctl+0x712/0xa00 [ 604.684673][T11211] ? __asan_memcpy+0x5a/0x80 [ 604.684702][T11211] ? release_sock+0x171/0x1f0 [ 604.684736][T11211] ? __cfi_do_arpt_set_ctl+0x10/0x10 [ 604.684766][T11211] ? sockopt_release_sock+0x5c/0x70 [ 604.684789][T11211] ? do_ip_setsockopt+0x1bb2/0x29e0 [ 604.684816][T11211] ? __cfi_avc_has_perm+0x10/0x10 [ 604.684841][T11211] ? futex_wake+0x5fb/0x900 [ 604.684866][T11211] ? selinux_socket_setsockopt+0x2ea/0x390 [ 604.684897][T11211] nf_setsockopt+0x28d/0x2b0 [ 604.684927][T11211] ip_setsockopt+0xf6/0x100 [ 604.684953][T11211] udp_setsockopt+0xa3/0xc0 [ 604.684978][T11211] sock_common_setsockopt+0xb8/0xd0 [ 604.685015][T11211] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 604.685048][T11211] do_sock_setsockopt+0x26a/0x400 [ 604.685074][T11211] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 604.685103][T11211] __x64_sys_setsockopt+0x1b8/0x250 [ 604.685129][T11211] x64_sys_call+0x2adc/0x2ee0 [ 604.685160][T11211] do_syscall_64+0x58/0xf0 [ 604.685181][T11211] ? clear_bhb_loop+0x50/0xa0 [ 604.685209][T11211] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 604.685235][T11211] RIP: 0033:0x7f3749b8e929 [ 604.685256][T11211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.685278][T11211] RSP: 002b:00007f374a96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 604.685305][T11211] RAX: ffffffffffffffda RBX: 00007f3749db5fa0 RCX: 00007f3749b8e929 [ 604.685324][T11211] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000005 [ 604.685342][T11211] RBP: 00007f3749c10b39 R08: 0000000000000438 R09: 0000000000000000 [ 604.685359][T11211] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.685376][T11211] R13: 0000000000000000 R14: 00007f3749db5fa0 R15: 00007fffcf068008 [ 604.685397][T11211] [ 604.685461][T11211] Mem-Info: [ 605.061572][T11211] active_anon:7891 inactive_anon:28 isolated_anon:0 [ 605.061572][T11211] active_file:7981 inactive_file:16651 isolated_file:0 [ 605.061572][T11211] unevictable:0 dirty:51 writeback:0 [ 605.061572][T11211] slab_reclaimable:6852 slab_unreclaimable:77275 [ 605.061572][T11211] mapped:29706 shmem:421 pagetables:1126 [ 605.061572][T11211] sec_pagetables:0 bounce:0 [ 605.061572][T11211] kernel_misc_reclaimable:0 [ 605.061572][T11211] free:1487851 free_pcp:7228 free_cma:0 [ 605.108440][T11211] Node 0 active_anon:31656kB inactive_anon:112kB active_file:31924kB inactive_file:66604kB unevictable:52kB isolated(anon):0kB isolated(file):0kB mapped:118824kB dirty:204kB writeback:0kB shmem:1684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6236kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no [ 605.147591][T11211] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:13868kB local_pcp:8352kB free_cma:0kB [ 605.181940][T11211] lowmem_reserve[]: 0 3921 3921 [ 605.186933][T11211] Normal free:3004436kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31636kB inactive_anon:112kB active_file:31924kB inactive_file:66604kB unevictable:52kB writepending:204kB present:5242880kB managed:4016120kB mlocked:52kB bounce:0kB free_pcp:13916kB local_pcp:1088kB free_cma:0kB [ 605.234782][T11211] lowmem_reserve[]: 0 0 0 [ 605.239202][T11211] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 605.270187][T11211] Normal: 90*4kB (UE) 4*8kB (U) 369*16kB (UME) [ 605.273752][T11238] rust_binder: Error while translating object. [ 605.280317][T11211] 656*32kB (UME) 460*64kB (UME) 334*128kB (UME) 108*256kB (UME) 49*512kB (UME) 24*1024kB (UM) 19*2048kB (UME) 681*4096kB (UME) = 3005080kB [ 605.302343][T11211] 25104 total pagecache pages [ 605.307234][T11211] 55 pages in swap cache [ 605.310149][T11238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 605.311510][T11238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:136 [ 605.312354][T11211] Free swap = 124396kB [ 605.337559][T11211] Total swap = 124996kB [ 605.340111][ T36] audit: type=1326 audit(2000000010.660:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.341980][T11211] 2097051 pages RAM [ 605.369303][T11211] 0 pages HighMem/MovableOnly [ 605.380939][T11211] 351517 pages reserved [ 605.385169][T11211] 0 pages cma reserved [ 605.392559][T11211] Memory allocations: [ 605.396636][T11211] 0 B 0 init/main.c:1370 func:do_initcalls [ 605.400128][ T36] audit: type=1326 audit(2000000010.660:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.410517][T11211] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 605.446976][T11211] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 605.454920][T11211] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 605.462949][ T36] audit: type=1326 audit(2000000010.660:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.464992][T11211] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 605.494636][T11211] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 605.517800][T11243] SELinux: security_context_str_to_sid () failed with errno=-22 [ 605.517949][T11211] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 605.527032][ T36] audit: type=1326 audit(2000000010.660:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.535072][T11211] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 605.565136][T11211] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 605.573257][ T36] audit: type=1326 audit(2000000010.660:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.574082][T11211] 0 B 0 init/initramfs.c:101 func:find_link [ 605.610131][ T36] audit: type=1326 audit(2000000010.660:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.653727][ T36] audit: type=1326 audit(2000000010.660:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.4.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fb7d8e929 code=0x7ffc0000 [ 605.958768][T11256] overlayfs: failed to resolve './file1': -2 [ 606.048201][T11256] kvm: pic: non byte write [ 606.070545][T11262] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3614'. [ 606.178544][T11281] overlayfs: conflicting options: userxattr,verity=require [ 606.660156][ T1923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 606.790172][ T1923] usb 6-1: device descriptor read/64, error -71 [ 607.030180][ T1923] usb 6-1: device descriptor read/64, error -71 [ 607.270198][ T1923] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 607.400164][ T1923] usb 6-1: device descriptor read/64, error -71 [ 607.659281][T11324] rust_binder: Error in use_page_slow: ESRCH [ 607.659302][T11324] rust_binder: use_range failure ESRCH [ 607.660187][ T1923] usb 6-1: device descriptor read/64, error -71 [ 607.665696][T11324] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 607.677148][T11324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 607.685362][T11324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:151 [ 607.780328][ T1923] usb usb6-port1: attempt power cycle [ 607.878073][T11335] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3639'. [ 607.887147][T11335] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3639'. [ 607.896202][T11335] netlink: 'syz.4.3639': attribute type 6 has an invalid length. [ 607.904043][T11335] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3639'. [ 607.940150][ T45] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 608.091758][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 608.100350][ T45] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.113271][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 608.121361][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.130259][ T1923] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 608.130438][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.145907][ T45] usb 3-1: Product: syz [ 608.150119][ T45] usb 3-1: Manufacturer: syz [ 608.154743][ T45] usb 3-1: SerialNumber: syz [ 608.160544][T11327] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 608.168583][ T1923] usb 6-1: device descriptor read/8, error -71 [ 608.302196][ T1923] usb 6-1: device descriptor read/8, error -71 [ 608.492252][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3642'. [ 608.540207][ T1923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 608.561371][ T1923] usb 6-1: device descriptor read/8, error -71 [ 608.570277][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 608.580028][ T45] usb 3-1: USB disconnect, device number 94 [ 608.691207][ T1923] usb 6-1: device descriptor read/8, error -71 [ 608.800287][ T1923] usb usb6-port1: unable to enumerate USB device [ 609.096320][T11355] sock: sock_timestamping_bind_phc: sock not bind to device [ 609.334145][T11365] 9p: Unknown uid 00000000004294967295 [ 609.555889][T11390] overlayfs: missing 'workdir' [ 609.582285][ T5450] tipc: Subscription rejected, illegal request [ 609.723712][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 609.723732][ T36] audit: type=1400 audit(2000000015.040:1192): avc: denied { create } for pid=11397 comm="syz.2.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 609.830147][ T1923] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 609.981234][ T1923] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 609.991621][ T1923] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 610.000712][ T1923] usb 6-1: config 220 interface 0 has no altsetting 0 [ 610.008944][ T1923] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 610.018093][ T1923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.026265][ T1923] usb 6-1: Product: syz [ 610.030485][ T1923] usb 6-1: Manufacturer: syz [ 610.035111][ T1923] usb 6-1: SerialNumber: syz [ 610.248572][ T1923] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 610.255107][ T1923] usb 6-1: No valid video chain found. [ 610.261472][ T1923] usb 6-1: USB disconnect, device number 8 [ 610.293205][T11421] binfmt_misc: register: failed to install interpreter file ./file0 [ 610.384848][T11430] 9pnet_fd: Insufficient options for proto=fd [ 610.470211][T11438] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 610.910708][T11466] 8021q: VLANs not supported on lo [ 610.925033][T11466] overlayfs: failed to clone upperpath [ 611.230175][ T411] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 611.380137][ T411] usb 6-1: Using ep0 maxpacket: 16 [ 611.386489][ T411] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 611.397422][ T411] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 611.407141][ T411] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.419715][ T411] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.428844][ T411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.437076][ T411] usb 6-1: Product: syz [ 611.445841][ T411] usb 6-1: Manufacturer: syz [ 611.450851][ T411] usb 6-1: SerialNumber: syz [ 611.455833][T11470] cgroup: Invalid name [ 611.565901][T11485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 611.647266][T11488] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 611.658080][ T36] audit: type=1400 audit(2000000016.970:1193): avc: denied { listen } for pid=11487 comm="syz.0.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 611.880036][ T411] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 612.237940][T11504] tmpfs: Bad value for 'huge' [ 612.334064][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3709'. [ 612.618879][T11515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 612.618917][T11515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:207 [ 612.642414][T11517] 9pnet_fd: Insufficient options for proto=fd [ 612.766066][T11523] /dev/rnullb0: Can't lookup blockdev [ 612.927648][ T411] usb 6-1: USB disconnect, device number 9 [ 612.992734][T11565] tipc: Enabling of bearer rejected, failed to enable media [ 613.021194][T11570] netlink: 'syz.0.3723': attribute type 4 has an invalid length. [ 613.040663][T11570] netlink: 'syz.0.3723': attribute type 4 has an invalid length. [ 613.093112][T11587] fuse: Bad value for 'user_id' [ 613.099396][T11587] fuse: Bad value for 'user_id' [ 613.133393][ T36] audit: type=1326 audit(2000000018.463:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.0.3734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x0 [ 613.195583][T11617] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3740'. [ 613.373706][ T5448] bridge_slave_1: left allmulticast mode [ 613.379454][ T5448] bridge_slave_1: left promiscuous mode [ 613.386889][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.394727][ T5448] bridge_slave_0: left allmulticast mode [ 613.400423][ T5448] bridge_slave_0: left promiscuous mode [ 613.406132][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.511904][ T5448] tipc: Left network mode [ 613.738424][ T36] audit: type=1400 audit(2000000019.063:1195): avc: denied { map } for pid=11644 comm="syz.4.3750" path="socket:[74369]" dev="sockfs" ino=74369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.789029][T11657] overlayfs: failed to clone upperpath [ 613.847821][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 614.053587][T11685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3764'. [ 614.116047][T11691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 614.387967][T11702] /dev/rnullb0: Can't lookup blockdev [ 614.450251][T11707] overlayfs: failed to resolve './file0/file0': -2 [ 614.626567][ T36] audit: type=1400 audit(2000000019.953:1196): avc: denied { setattr } for pid=11713 comm="syz.4.3776" path="socket:[74455]" dev="sockfs" ino=74455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 614.741280][ T36] audit: type=1326 audit(2000000020.073:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11721 comm="syz.2.3779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 614.793344][ T36] audit: type=1400 audit(2000000020.123:1198): avc: denied { read } for pid=11726 comm="syz.2.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 614.863970][T11734] overlayfs: missing 'workdir' [ 614.870540][T11734] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 614.883317][ T36] audit: type=1400 audit(2000000020.213:1199): avc: denied { relabelto } for pid=11733 comm="syz.2.3782" name="file0" dev="tmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 614.926911][ T36] audit: type=1400 audit(2000000020.233:1200): avc: denied { associate } for pid=11733 comm="syz.2.3782" name="file0" dev="tmpfs" ino=1747 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ppp_device_t:s0" [ 615.105836][ T36] audit: type=1326 audit(2000000020.423:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x7ffc0000 [ 615.137333][ T36] audit: type=1326 audit(2000000020.433:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x7ffc0000 [ 615.168557][ T36] audit: type=1326 audit(2000000020.433:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3749b8e929 code=0x7ffc0000 [ 615.196802][ T36] audit: type=1326 audit(2000000020.433:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x7ffc0000 [ 615.250124][ T36] audit: type=1326 audit(2000000020.433:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x7ffc0000 [ 615.289877][ T36] audit: type=1326 audit(2000000020.463:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11766 comm="syz.2.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3749b8e929 code=0x7ffc0000 [ 615.345659][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 615.355542][T11800] tipc: Enabling of bearer rejected, media not registered [ 615.365100][T11802] tipc: Enabling of bearer rejected, media not registered [ 615.394975][T11808] /dev/rnullb0: Can't lookup blockdev [ 615.418513][T11819] /dev/rnullb0: Can't lookup blockdev [ 617.162176][T11892] tmpfs: Bad value for 'nr_blocks' [ 617.369932][ T4591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 617.376085][ T622] Bluetooth: hci0: command 0x1003 tx timeout [ 617.434421][T11932] fuseblk: Bad value for 'fd' [ 617.496887][T11947] overlayfs: failed to clone upperpath [ 617.496975][T11946] overlayfs: failed to clone upperpath [ 617.528224][ T5448] Bluetooth: hci0: Frame reassembly failed (-84) [ 617.611296][T11964] overlay: ./file0 is not a directory [ 617.617399][T11964] 9pnet_fd: Insufficient options for proto=fd [ 618.033641][T12022] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3874'. [ 618.044555][T12022] veth1_macvtap: left promiscuous mode [ 618.050098][T12022] macsec0: entered allmulticast mode [ 618.642921][T12037] overlayfs: failed to resolve './file1': -2 [ 619.464064][T12079] overlayfs: failed to clone upperpath [ 619.530840][ T622] Bluetooth: hci0: command 0x1003 tx timeout [ 619.539659][ T4591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 619.636263][T12098] FAT-fs (rnullb0): bogus number of reserved sectors [ 619.653238][T12098] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 619.790619][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 619.790639][ T36] audit: type=1400 audit(2000000281.123:1227): avc: denied { map } for pid=12103 comm="syz.5.3904" path="pipe:[75954]" dev="pipefs" ino=75954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 619.818363][T12104] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 619.901720][T12115] overlayfs: failed to clone upperpath [ 619.986641][ T36] audit: type=1326 audit(2000000281.313:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.2.3912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 620.140013][T12130] netlink: 37 bytes leftover after parsing attributes in process `syz.2.3913'. [ 620.259145][ T36] audit: type=1326 audit(2000000281.583:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12138 comm="syz.2.3916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 620.637475][T12160] overlayfs: failed to clone upperpath [ 620.658701][T12162] /dev/kvm: Can't lookup blockdev [ 620.726134][T12180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 620.726163][T12180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:213 [ 620.851056][T12189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16409 sclass=netlink_route_socket pid=12189 comm=syz.5.3934 [ 621.076153][ T36] audit: type=1400 audit(2000000282.403:1230): avc: denied { read } for pid=12197 comm="syz.5.3937" path="socket:[76179]" dev="sockfs" ino=76179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 621.310804][T12224] 9pnet_fd: Insufficient options for proto=fd [ 621.793150][T12264] overlayfs: failed to clone upperpath [ 621.829439][T12271] fuse: Bad value for 'fd' [ 622.332833][T12321] kvm: pic: non byte write [ 622.440278][T12343] binder: Unknown parameter 'fscontext?}' [ 622.559659][T12371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 622.559702][T12371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:269 [ 622.578224][T12373] tc_dump_action: action bad kind [ 622.602482][T12376] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 622.613891][T12376] rust_binder: Write failure EINVAL in pid:271 [ 622.615121][T12376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 622.719931][T12380] rust_binder: Error while translating object. [ 622.749318][T12380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 622.755547][T12380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:273 [ 622.886176][ T36] audit: type=1400 audit(2000000284.213:1231): avc: denied { map } for pid=12386 comm="syz.5.3996" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 622.921264][T12384] netlink: 'syz.2.3995': attribute type 4 has an invalid length. [ 622.946385][T12384] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3995'. [ 622.999230][T12391] @: renamed from vlan0 (while UP) [ 623.068487][T12397] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3998'. [ 623.070315][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3984'. [ 623.419203][ T306] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 623.458655][T12435] netlink: 'syz.4.4011': attribute type 46 has an invalid length. [ 623.579236][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 623.585896][ T306] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1024 [ 623.598295][ T306] usb 6-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 623.621425][ T306] usb 6-1: config 1 interface 0 has no altsetting 0 [ 623.631837][ T306] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.643803][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.651863][ T306] usb 6-1: Product: à  [ 623.656038][ T306] usb 6-1: Manufacturer: ä¤â¿ìŸŠï”䛨á¨ë¯¦ï¹›î„Šï†—쿎渄柼뀊ꙇá€ë’䲦셻èŠè›â³Žé–崹ã¬åµå¯£å¨˜í‡„á­œë³ä‘•ë‰î†î¨á¬€ê „棅ꈑ╘ [ 623.671108][ T306] usb 6-1: SerialNumber: Ð [ 623.677546][T12410] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 623.684778][T12410] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 624.096800][ T306] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 624.106387][ T306] usb 6-1: USB disconnect, device number 10 [ 624.999063][ T306] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 625.150217][ T306] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 625.158589][ T306] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 625.167518][ T306] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 625.177823][ T306] usb 6-1: config 220 has no interface number 2 [ 625.184157][ T306] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 625.197356][ T306] usb 6-1: config 220 interface 0 has no altsetting 0 [ 625.204170][ T306] usb 6-1: config 220 interface 76 has no altsetting 0 [ 625.211081][ T306] usb 6-1: config 220 interface 1 has no altsetting 0 [ 625.219442][ T306] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 625.228557][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.236605][ T306] usb 6-1: Product: syz [ 625.240827][ T306] usb 6-1: Manufacturer: syz [ 625.245440][ T306] usb 6-1: SerialNumber: syz [ 625.451529][T12524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 625.452667][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.467713][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.489187][ T306] usb 6-1: selecting invalid altsetting 0 [ 625.495336][ T306] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 625.496081][T12534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 625.501909][T12534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 625.502870][ T306] usb 6-1: No valid video chain found. [ 625.530430][T12537] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 625.542702][ T306] usb 6-1: USB disconnect, device number 11 [ 625.879090][T12578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12578 comm=syz.0.4059 [ 625.998859][ T482] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 626.092969][T12586] @: renamed from vlan0 (while UP) [ 626.148859][ T482] usb 6-1: Using ep0 maxpacket: 16 [ 626.155388][ T482] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 626.170871][ T482] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 626.180796][ T482] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.193441][ T482] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.202752][ T482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.211033][ T482] usb 6-1: Product: syz [ 626.215286][ T482] usb 6-1: Manufacturer: syz [ 626.220180][ T482] usb 6-1: SerialNumber: syz [ 626.628940][ T482] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 626.786403][T12591] overlayfs: failed to clone upperpath [ 627.435500][T12625] tmpfs: Unknown parameter 'quota' [ 627.503801][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 627.527964][T12642] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4084'. [ 627.656896][ T482] usb 6-1: USB disconnect, device number 12 [ 627.665755][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 628.133403][T12699] bpf: Bad value for 'mode' [ 628.183628][T12704] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 628.353963][T12729] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4114'. [ 628.363577][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4114'. [ 628.386081][ T36] audit: type=1326 audit(2000000289.714:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12725 comm="syz.4.4113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fb7d8e929 code=0x0 [ 628.618544][ T482] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 628.769318][ T482] usb 6-1: not running at top speed; connect to a high speed hub [ 628.779550][ T482] usb 6-1: config 255 has an invalid interface number: 161 but max is 0 [ 628.788062][ T482] usb 6-1: config 255 has no interface number 0 [ 628.794421][ T482] usb 6-1: config 255 interface 161 has no altsetting 0 [ 628.803119][ T482] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=bc.7e [ 628.812258][ T482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.820301][ T482] usb 6-1: Product: syz [ 628.824511][ T482] usb 6-1: Manufacturer: syz [ 628.829139][ T482] usb 6-1: SerialNumber: syz [ 628.942751][T12740] netlink: 'syz.2.4117': attribute type 12 has an invalid length. [ 629.073334][ T36] audit: type=1326 audit(2000000290.404:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.2.4119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 629.174240][T12745] 9pnet_fd: Insufficient options for proto=fd [ 629.180450][T12750] overlayfs: failed to clone upperpath [ 629.180665][T12748] 9pnet_fd: Insufficient options for proto=fd [ 629.193102][T12750] overlayfs: failed to clone upperpath [ 629.216250][T12752] overlayfs: failed to clone lowerpath [ 629.367518][T12774] /dev/rnullb0: Can't lookup blockdev [ 629.839097][ T36] audit: type=1326 audit(2000000291.174:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12783 comm="syz.2.4135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3749b8e929 code=0x0 [ 630.115931][ T36] audit: type=1400 audit(2000000291.444:1235): avc: denied { write } for pid=12829 comm="syz.4.4151" name="file0" dev="tmpfs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 630.142070][ T36] audit: type=1400 audit(2000000291.444:1236): avc: denied { open } for pid=12829 comm="syz.4.4151" path="/526/file0" dev="tmpfs" ino=2899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 630.202514][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4154'. [ 630.288385][T12848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=12848 comm=syz.0.4157 [ 630.288419][T12849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=12849 comm=syz.0.4157 [ 630.365191][T12860] sock: sock_timestamping_bind_phc: sock not bind to device [ 630.696099][T12868] netlink: 'syz.4.4164': attribute type 4 has an invalid length. [ 630.936474][T12913] 9pnet_virtio: no channels available for device ./bus [ 631.319021][ T482] snd-usb-audio 6-1:255.161: probe with driver snd-usb-audio failed with error -71 [ 631.329235][ T482] usb 6-1: USB disconnect, device number 13 [ 631.398257][T12924] rust_binder: Error while translating object. [ 631.398338][T12924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 631.404621][T12924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:340 [ 631.615403][T12943] netlink: 'syz.5.4194': attribute type 4 has an invalid length. [ 631.632354][T12943] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4194'. [ 631.675186][ T36] audit: type=1400 audit(631.661:1237): avc: denied { lock } for pid=12947 comm="syz.5.4195" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 631.679551][T12948] SELinux: failed to load policy [ 631.821642][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4199'. [ 632.126439][T12969] bpf: Bad value for 'mode' [ 632.640731][T13008] /dev/loop0: Can't lookup blockdev [ 632.844114][T13030] overlayfs: failed to clone upperpath [ 632.850404][ T36] audit: type=1400 audit(632.841:1238): avc: denied { create } for pid=13029 comm="syz.2.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 632.878662][T13032] overlayfs: failed to clone upperpath [ 632.885204][ T36] audit: type=1400 audit(632.871:1239): avc: denied { rename } for pid=13031 comm="syz.2.4224" name="file0" dev="tmpfs" ino=2337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 633.165685][T13036] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 633.186580][T13038] binder: Bad value for 'max' [ 633.508356][ T306] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 633.658365][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 633.664636][ T306] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 633.675577][ T306] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 633.685287][ T306] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.697716][ T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.706891][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.714927][ T306] usb 6-1: Product: syz [ 633.719140][ T306] usb 6-1: Manufacturer: syz [ 633.723730][ T306] usb 6-1: SerialNumber: syz [ 633.847415][T13065] overlayfs: failed to clone upperpath [ 634.131884][ T306] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 634.431508][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'. [ 634.475503][T13097] 9pnet_fd: Insufficient options for proto=fd [ 635.097385][ T306] usb 6-1: USB disconnect, device number 14 [ 635.610080][T13155] netlink: 679 bytes leftover after parsing attributes in process `syz.5.4265'. [ 635.687116][ T36] audit: type=1400 audit(635.671:1240): avc: denied { attach_queue } for pid=13161 comm="syz.5.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 635.763463][ T36] audit: type=1400 audit(635.751:1241): avc: denied { mounton } for pid=13165 comm="syz.4.4269" path="/file0" dev="ramfs" ino=79955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 636.032573][T13184] tmpfs: Unknown parameter 'no' [ 636.288366][ T482] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 636.418389][ T482] usb 6-1: device descriptor read/64, error -71 [ 636.560933][T13194] overlayfs: failed to clone upperpath [ 636.605826][T13201] overlayfs: failed to resolve './file1': -2 [ 636.666760][ T482] usb 6-1: device descriptor read/64, error -71 [ 636.706592][T13212] binder: Unknown parameter 's' [ 636.908394][ T482] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 637.038382][ T482] usb 6-1: device descriptor read/64, error -71 [ 637.269616][T13259] netlink: 'syz.2.4302': attribute type 27 has an invalid length. [ 637.278390][ T482] usb 6-1: device descriptor read/64, error -71 [ 637.389008][ T482] usb usb6-port1: attempt power cycle [ 637.728371][ T482] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 637.749428][ T482] usb 6-1: device descriptor read/8, error -71 [ 637.879521][ T482] usb 6-1: device descriptor read/8, error -71 [ 637.992850][T13307] cgroup: Unknown subsys name 'measure' [ 638.037788][ T36] audit: type=1326 audit(638.021:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13313 comm="syz.2.4320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 638.118397][ T482] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 638.139345][ T482] usb 6-1: device descriptor read/8, error -71 [ 638.183142][ T36] audit: type=1400 audit(638.171:1243): avc: denied { associate } for pid=13319 comm="syz.0.4322" name="fuse" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 638.204048][ T36] audit: type=1400 audit(638.171:1244): avc: denied { mounton } for pid=13319 comm="syz.0.4322" path="/file0" dev="rootfs" ino=41574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 638.269351][ T482] usb 6-1: device descriptor read/8, error -71 [ 638.378502][ T482] usb usb6-port1: unable to enumerate USB device [ 639.232693][T13380] rust_binder: Write failure EINVAL in pid:408 [ 639.232844][T13380] rust_binder: Read failure Err(EAGAIN) in pid:408 [ 639.251820][T13383] netlink: 'syz.5.4346': attribute type 4 has an invalid length. [ 639.266199][T13383] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4346'. [ 639.528722][ T306] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 639.595010][T13391] overlayfs: failed to resolve './file1': -2 [ 639.660958][ T36] audit: type=1400 audit(639.651:1245): avc: denied { create } for pid=13402 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 639.679770][ T306] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 639.690942][ T306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 639.702001][ T306] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 639.715192][ T306] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 639.724452][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.733234][ T306] usb 6-1: config 0 descriptor?? [ 639.740501][T13386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 640.151067][ T306] uclogic 0003:5543:0004.0023: No inputs registered, leaving [ 640.159457][ T306] uclogic 0003:5543:0004.0023: hidraw0: USB HID v1.01 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0 [ 640.804353][T13431] 9pnet_fd: Insufficient options for proto=fd [ 640.909502][ T412] usb 6-1: USB disconnect, device number 19 [ 640.950571][T13452] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 640.990419][ T36] audit: type=1400 audit(640.981:1246): avc: denied { getopt } for pid=13454 comm="syz.4.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 641.034563][T13459] /dev/loop0: Can't lookup blockdev [ 641.128704][T13489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4385'. [ 641.139702][ T36] audit: type=1400 audit(641.131:1247): avc: denied { getopt } for pid=13475 comm="syz.5.4380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 641.155403][T13492] 9pnet_fd: Insufficient options for proto=fd [ 641.256530][ T36] audit: type=1400 audit(641.241:1248): avc: denied { setattr } for pid=13504 comm="syz.2.4391" name="PACKET" dev="sockfs" ino=80705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 641.433894][ T36] audit: type=1400 audit(641.421:1249): avc: denied { create } for pid=13529 comm="syz.5.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 641.462527][ T36] audit: type=1326 audit(641.451:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13539 comm="syz.2.4401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3749b8e929 code=0x0 [ 641.504310][T13544] /dev/loop0: Can't lookup blockdev [ 641.561700][T13553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=13553 comm=syz.0.4405 [ 641.574609][T13553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=13553 comm=syz.0.4405 [ 641.587540][T13553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=13553 comm=syz.0.4405 [ 641.605617][T13553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=13553 comm=syz.0.4405 [ 641.619000][T13553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=13553 comm=syz.0.4405 [ 641.898346][ T306] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 642.028371][ T306] usb 6-1: device descriptor read/64, error -71 [ 642.268776][ T306] usb 6-1: device descriptor read/64, error -71 [ 642.345204][T13599] netlink: 'syz.0.4424': attribute type 4 has an invalid length. [ 642.518669][ T306] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 642.668348][ T306] usb 6-1: device descriptor read/64, error -71 [ 642.923056][ T36] audit: type=1326 audit(642.911:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13631 comm="syz.2.4437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 642.945806][ T306] usb 6-1: device descriptor read/64, error -71 [ 643.058468][ T306] usb usb6-port1: attempt power cycle [ 643.398373][ T306] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 643.419426][ T306] usb 6-1: device descriptor read/8, error -71 [ 643.549406][ T306] usb 6-1: device descriptor read/8, error -71 [ 643.745041][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.752144][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.759321][T13648] bridge_slave_0: entered allmulticast mode [ 643.769214][T13648] bridge_slave_0: entered promiscuous mode [ 643.775543][T13653] veth0_to_batadv: mtu less than device minimum [ 643.783416][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.788530][ T306] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 643.790502][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.805284][T13648] bridge_slave_1: entered allmulticast mode [ 643.811634][T13648] bridge_slave_1: entered promiscuous mode [ 643.817807][ T5448] bridge_slave_1: left allmulticast mode [ 643.823619][ T5448] bridge_slave_1: left promiscuous mode [ 643.825222][ T306] usb 6-1: device descriptor read/8, error -71 [ 643.829351][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.842898][ T5448] bridge_slave_0: left allmulticast mode [ 643.848687][ T5448] bridge_slave_0: left promiscuous mode [ 643.854301][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.883490][T13656] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 643.893024][T13657] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 643.912921][ T36] audit: type=1326 audit(643.901:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.0.4446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x0 [ 643.964293][ T306] usb 6-1: device descriptor read/8, error -71 [ 643.975776][ T5448] tipc: Left network mode [ 643.984615][T13665] tipc: Enabling of bearer rejected, failed to enable media [ 643.994750][ T5448] veth0_vlan: left promiscuous mode [ 644.052369][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.059447][T13648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.066720][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.073841][T13648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.081406][ T306] usb usb6-port1: unable to enumerate USB device [ 644.104208][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.111619][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.121193][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.128281][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.137959][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.145043][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.172541][T13648] veth0_vlan: entered promiscuous mode [ 644.184298][T13648] veth1_macvtap: entered promiscuous mode [ 644.566212][T13682] 9pnet_fd: Insufficient options for proto=fd [ 644.566212][T13683] 9pnet_fd: Insufficient options for proto=fd [ 644.721809][T13696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 644.734161][T13698] rust_binder: Write failure EINVAL in pid:456 [ 644.815754][ T36] audit: type=1400 audit(644.801:1253): avc: denied { search } for pid=13713 comm="syz.0.4466" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 644.843814][ T36] audit: type=1400 audit(644.801:1254): avc: denied { write } for pid=13713 comm="syz.0.4466" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 644.865249][ T36] audit: type=1400 audit(644.801:1255): avc: denied { read } for pid=13713 comm="syz.0.4466" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 645.088408][ T412] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 645.108832][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4472'. [ 645.228409][ T412] usb 6-1: device descriptor read/64, error -71 [ 645.468404][ T412] usb 6-1: device descriptor read/64, error -71 [ 645.708377][ T412] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 645.717698][T13742] netlink: 'syz.2.4475': attribute type 4 has an invalid length. [ 645.728034][T13742] netlink: 'syz.2.4475': attribute type 4 has an invalid length. [ 645.838352][ T412] usb 6-1: device descriptor read/64, error -71 [ 646.078383][ T412] usb 6-1: device descriptor read/64, error -71 [ 646.188571][ T412] usb usb6-port1: attempt power cycle [ 646.316171][T13777] x_tables: duplicate underflow at hook 1 [ 646.439377][T13783] incfs: Options parsing error. -22 [ 646.444631][T13783] incfs: mount failed -22 [ 646.538382][ T412] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 646.559512][ T412] usb 6-1: device descriptor read/8, error -71 [ 646.689473][ T412] usb 6-1: device descriptor read/8, error -71 [ 646.861991][T13788] 9pnet_fd: Insufficient options for proto=fd [ 646.880222][T13791] tipc: Enabling of bearer rejected, failed to enable media [ 646.928410][ T412] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 646.949521][ T412] usb 6-1: device descriptor read/8, error -71 [ 647.079408][ T412] usb 6-1: device descriptor read/8, error -71 [ 647.188501][ T412] usb usb6-port1: unable to enumerate USB device [ 647.893939][T13850] input: syz1 as /devices/virtual/input/input41 [ 647.915468][T13852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 647.915621][T13852] rust_binder: inc_ref_done called when no active inc_refs [ 647.966706][T13858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 647.975357][T13858] rust_binder: Error while translating object. [ 647.984718][T13858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 647.991197][T13858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 648.188694][T13865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13865 comm=syz.0.4520 [ 648.325694][T13875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13875 comm=syz.0.4524 [ 648.338996][T13875] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4524'. [ 648.923748][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 648.923769][ T36] audit: type=1400 audit(648.911:1257): avc: denied { map } for pid=13890 comm="syz.0.4531" path="socket:[83313]" dev="sockfs" ino=83313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 648.952449][ T36] audit: type=1400 audit(648.911:1258): avc: denied { read } for pid=13890 comm="syz.0.4531" path="socket:[83313]" dev="sockfs" ino=83313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 649.008386][ T306] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 649.159534][ T306] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 649.170626][ T306] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 649.181489][ T306] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.188128][ T306] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 649.197375][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.206106][ T306] usb 6-1: config 0 descriptor?? [ 649.211812][T13883] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.621100][ T306] logitech-djreceiver 0003:046D:C71F.0024: unknown main item tag 0x7 [ 649.629300][ T306] logitech-djreceiver 0003:046D:C71F.0024: item fetching failed at offset 4/8 [ 649.638433][ T306] logitech-djreceiver 0003:046D:C71F.0024: logi_dj_probe: parse failed [ 649.646781][ T306] logitech-djreceiver 0003:046D:C71F.0024: probe with driver logitech-djreceiver failed with error -22 [ 649.825027][ T411] usb 6-1: USB disconnect, device number 28 [ 649.836490][T13904] fuse: Bad value for 'rootmode' [ 649.923925][T13913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 650.228375][ T306] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 650.347122][T13927] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4543'. [ 650.387366][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4545'. [ 650.396415][ T306] usb 6-1: Using ep0 maxpacket: 16 [ 650.403105][ T306] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 650.414690][ T306] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 650.426414][ T306] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.439584][ T306] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.456375][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.464838][ T306] usb 6-1: Product: syz [ 650.471397][ T306] usb 6-1: Manufacturer: syz [ 650.476036][T13943] netlink: 'syz.2.4549': attribute type 27 has an invalid length. [ 650.478163][ T36] audit: type=1326 audit(650.461:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13940 comm="syz.2.4549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3749b8e929 code=0x0 [ 650.485220][ T306] usb 6-1: SerialNumber: syz [ 650.523479][T13947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 650.542536][T13952] binder: Bad value for 'max' [ 650.612171][T13958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 650.613212][T13958] rust_binder: Error in use_page_slow: ESRCH [ 650.619707][T13958] rust_binder: use_range failure ESRCH [ 650.625718][T13958] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 650.631273][T13958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 650.639324][T13958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49 [ 650.668917][ T36] audit: type=1326 audit(650.661:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.0.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x7fc00000 [ 650.700833][ T36] audit: type=1326 audit(650.661:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13903 comm="syz.0.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bc058e929 code=0x7fc00000 [ 650.921096][ T306] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 651.683312][ T306] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 651.694746][ T306] usb 6-1: USB disconnect, device number 29 [ 652.158501][T14024] /dev/rnullb0: Can't lookup blockdev [ 652.164330][T14025] /dev/rnullb0: Can't lookup blockdev [ 652.478366][ T481] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 652.629665][ T481] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 652.640594][ T481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.651559][ T481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.661346][ T481] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 652.675262][ T481] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 652.684428][ T481] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 652.693031][ T481] usb 6-1: Manufacturer: syz [ 652.700624][ T481] usb 6-1: config 0 descriptor?? [ 653.060104][T14047] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.067189][T14047] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.074335][T14047] bridge_slave_0: entered allmulticast mode [ 653.080905][T14047] bridge_slave_0: entered promiscuous mode [ 653.087655][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.094815][T14047] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.102271][T14047] bridge_slave_1: entered allmulticast mode [ 653.108924][T14047] bridge_slave_1: entered promiscuous mode [ 653.110177][ T481] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 653.122713][ T481] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 653.133187][ T481] appleir 0003:05AC:8243.0025: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 653.196378][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.203465][T14047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.210806][T14047] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.217860][T14047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.240532][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.247904][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.257695][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.264806][ T5448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.274271][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.281350][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.308444][T14047] veth0_vlan: entered promiscuous mode [ 653.321558][T14047] veth1_macvtap: entered promiscuous mode [ 653.382398][ T36] audit: type=1400 audit(653.371:1262): avc: denied { map } for pid=14054 comm="syz.6.4584" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 653.427417][ T36] audit: type=1400 audit(653.371:1263): avc: denied { execute } for pid=14054 comm="syz.6.4584" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 653.494324][T14060] binder: Unknown parameter 'contextÀ' [ 653.500641][T14062] binder: Unknown parameter 'contextÀ' [ 653.564958][ T482] usb 6-1: USB disconnect, device number 30 [ 653.684631][T14091] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4596'. [ 653.752600][ T36] audit: type=1326 audit(653.741:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.0.4597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x0 [ 653.775096][ T306] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 653.854348][T14094] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 653.941036][ T306] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 653.950212][ T306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.958244][ T306] usb 7-1: Product: syz [ 653.962512][ T306] usb 7-1: Manufacturer: syz [ 653.967163][ T306] usb 7-1: SerialNumber: syz [ 653.996396][T14098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 654.358372][ T482] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 654.508343][ T482] usb 6-1: Invalid ep0 maxpacket: 64 [ 654.638370][ T482] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 654.798347][ T482] usb 6-1: Invalid ep0 maxpacket: 64 [ 654.804255][ T482] usb usb6-port1: attempt power cycle [ 655.148446][ T482] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 655.168751][ T482] usb 6-1: Invalid ep0 maxpacket: 64 [ 655.298375][ T482] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 655.318740][ T482] usb 6-1: Invalid ep0 maxpacket: 64 [ 655.324174][ T482] usb usb6-port1: unable to enumerate USB device [ 655.614648][T14125] overlay: ./file0 is not a directory [ 655.636750][ T36] audit: type=1400 audit(655.621:1265): avc: denied { relabelto } for pid=14126 comm="syz.0.4609" name="file0" dev="tmpfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 655.668786][ T36] audit: type=1400 audit(655.661:1266): avc: denied { unlink } for pid=10506 comm="syz-executor" name="file0" dev="tmpfs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 656.529676][ T482] usb 7-1: USB disconnect, device number 2 [ 656.639646][T14184] kernel read not supported for file /policy (pid: 14184 comm: syz.6.4629) [ 656.642096][ T36] audit: type=1400 audit(656.631:1267): avc: denied { module_load } for pid=14183 comm="syz.6.4629" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 656.682731][T14184] overlayfs: failed to resolve './cgroup': -2 [ 656.716719][T14191] /dev/rnullb0: Can't open blockdev [ 656.803296][T14208] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4636'. [ 656.881947][T14220] fuse: Bad value for 'fd' [ 657.156612][T14237] exFAT-fs (rnullb0): invalid boot record signature [ 657.163450][T14237] exFAT-fs (rnullb0): failed to read boot sector [ 657.170161][T14237] exFAT-fs (rnullb0): failed to recognize exfat type [ 657.191305][T14241] SELinux: policydb version -108398774 does not match my version range 15-33 [ 657.200243][T14241] SELinux: failed to load policy [ 657.478342][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 657.638369][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 657.644859][ T45] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.656072][ T45] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 544 [ 657.667512][ T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.676621][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.684660][ T45] usb 7-1: Product: syz [ 657.688868][ T45] usb 7-1: Manufacturer: syz [ 657.693492][ T45] usb 7-1: SerialNumber: syz [ 657.950843][T14254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14254 comm=syz.6.4649 [ 657.965342][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.974092][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.071658][T14256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4652'. [ 658.138981][T14262] fuse: Unknown parameter '' [ 658.958351][ T482] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 659.108351][ T482] usb 6-1: Using ep0 maxpacket: 16 [ 659.117413][ T482] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 659.128632][ T482] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 659.138600][ T482] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.151430][ T482] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.160621][ T482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.168917][ T482] usb 6-1: Product: syz [ 659.173203][ T482] usb 6-1: Manufacturer: syz [ 659.177906][ T482] usb 6-1: SerialNumber: syz [ 659.265830][ T36] audit: type=1400 audit(659.251:1268): avc: denied { create } for pid=14291 comm="syz.0.4665" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 659.588894][ T482] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 659.800889][T14300] rust_binder: Error while translating object. [ 659.800946][T14300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 659.807167][T14300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 659.906326][ T36] audit: type=1326 audit(659.891:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.0.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x7ffc0000 [ 659.938652][ T36] audit: type=1326 audit(659.891:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.0.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x7ffc0000 [ 659.961818][ T36] audit: type=1326 audit(659.891:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.0.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bc058e929 code=0x7ffc0000 [ 659.984887][ T36] audit: type=1326 audit(659.891:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.0.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x7ffc0000 [ 660.008051][ T36] audit: type=1326 audit(659.891:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14309 comm="syz.0.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc058e929 code=0x7ffc0000 [ 660.257858][ T45] cdc_ncm 7-1:1.0: bind() failure [ 660.264743][ T45] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 660.271848][ T45] cdc_ncm 7-1:1.1: bind() failure [ 660.280486][ T45] usb 7-1: USB disconnect, device number 3 [ 660.294361][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4673'. [ 660.303835][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4673'. [ 660.505258][T14342] tipc: Failed to remove unknown binding: 66,1,1/0:1399205735/1399205737 [ 660.513992][T14342] tipc: Failed to remove unknown binding: 66,1,1/0:1399205735/1399205737 [ 660.577827][ T482] usb 6-1: USB disconnect, device number 35 [ 660.592081][ T8238] udevd[8238]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 660.691509][T14349] binder: Unknown parameter '0000000000000000000000400000000000000000004' [ 660.998380][ T411] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 661.091648][T14372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 661.108017][T14377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 661.149428][ T411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.175853][ T411] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 661.188999][ T411] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 661.198067][ T411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.208674][ T411] usb 7-1: config 0 descriptor?? [ 661.430259][ T411] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 661.437518][ T411] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 661.444709][ T411] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 661.452078][ T411] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 661.459287][ T411] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 661.467241][ T411] kovaplus 0003:1E7D:2D50.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 661.628388][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 661.630538][T14394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.644554][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.645923][T14394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.653640][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.664280][T14396] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4686'. [ 661.679540][ T411] kovaplus 0003:1E7D:2D50.0026: couldn't init struct kovaplus_device [ 661.687747][ T411] kovaplus 0003:1E7D:2D50.0026: couldn't install mouse [ 661.695489][ T411] kovaplus 0003:1E7D:2D50.0026: probe with driver kovaplus failed with error -71 [ 661.705990][ T411] usb 7-1: USB disconnect, device number 4 [ 661.798341][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 661.804745][ T10] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 661.813326][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 661.821596][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 661.829972][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 661.838525][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 661.847758][ T10] usb 6-1: config 0 has no interface number 0 [ 661.854163][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 661.865368][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 661.875244][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 661.885293][ T10] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 661.898401][ T10] usb 6-1: config 0 interface 125 has no altsetting 0 [ 661.905192][ T10] usb 6-1: config 0 interface 125 has no altsetting 2 [ 661.913343][ T10] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 661.922494][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.930545][ T10] usb 6-1: Product: syz [ 661.934750][ T10] usb 6-1: Manufacturer: syz [ 661.939399][ T10] usb 6-1: SerialNumber: syz [ 661.944699][ T10] usb 6-1: config 0 descriptor?? [ 662.590163][ T411] usb 6-1: USB disconnect, device number 36 [ 662.785893][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4710'. [ 662.827012][T14437] fuse: Bad value for 'user_id' [ 662.832094][T14437] fuse: Bad value for 'user_id' [ 662.862646][T14442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 662.902357][T14447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3565569048 (7131138096 ns) > initial count (2827641070 ns). Using initial count to start timer. [ 662.981097][ T411] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 663.038005][ T36] audit: type=1400 audit(2000000001.340:1274): avc: denied { connect } for pid=14455 comm="syz.4.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 663.111031][ T36] audit: type=1400 audit(2000000001.420:1275): avc: denied { shutdown } for pid=14457 comm="syz.4.4720" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 663.138325][ T411] usb 6-1: Using ep0 maxpacket: 16 [ 663.151483][ T411] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 663.172412][T14461] binder: Unknown parameter '0177777777777777777777700000000000000000000000ÿÿÿÿÿÿÿÿÿÿ' [ 663.182195][ T411] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 663.207654][T14463] input: syz0 as /devices/virtual/input/input42 [ 663.214045][ T411] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.238391][T14463] input: failed to attach handler leds to device input42, error: -6 [ 663.252302][ T411] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.264940][ T411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.268455][T14468] /dev/rnullb0: Can't lookup blockdev [ 663.283197][ T411] usb 6-1: Product: syz [ 663.287412][ T411] usb 6-1: Manufacturer: syz [ 663.303381][ T411] usb 6-1: SerialNumber: syz [ 663.426346][T14491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4731'. [ 663.599640][ T36] audit: type=1400 audit(2000000001.910:1276): avc: denied { accept } for pid=14502 comm="syz.0.4736" path="socket:[84845]" dev="sockfs" ino=84845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 663.649950][T14510] fuse: Bad value for 'fd' [ 663.687182][T14520] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4741'. [ 663.690075][T14517] overlay: ./file0 is not a directory [ 663.697289][T14520] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 663.709033][T14520] 0ªî{X¹¦: entered allmulticast mode [ 663.714716][T14520] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 663.731218][ T411] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 663.948415][ T481] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 664.098348][ T481] usb 7-1: Using ep0 maxpacket: 8 [ 664.104845][ T481] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 664.113365][ T481] usb 7-1: config 179 has no interface number 0 [ 664.119702][ T481] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 664.130793][ T481] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 664.142058][ T481] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 664.153252][ T481] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 664.163339][ T481] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.176694][ T481] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 664.185808][ T481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.199831][T14522] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 664.208004][ T481] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 664.412835][ T412] usb 7-1: USB disconnect, device number 5 [ 664.697798][ T411] usb 6-1: USB disconnect, device number 37 [ 664.708702][ T8733] udevd[8733]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 664.816953][T14564] 9pnet_fd: Insufficient options for proto=fd [ 665.017063][T14576] rust_binder: Write failure EINVAL in pid:119 [ 665.017677][T14578] rust_binder: Write failure EINVAL in pid:119 [ 665.212143][T14582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 665.236204][T14580] netlink: 'syz.6.4761': attribute type 12 has an invalid length. [ 665.264965][T14593] SELinux: security_context_str_to_sid () failed with errno=-22 [ 665.538346][ T482] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 665.688441][ T482] usb 6-1: Using ep0 maxpacket: 8 [ 665.694797][ T482] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 665.703128][ T482] usb 6-1: config 179 has no interface number 0 [ 665.709480][ T482] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 665.720576][ T482] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 665.731869][ T482] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.743060][ T482] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 665.753112][ T482] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 665.766395][ T482] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 665.775745][ T482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.784970][T14595] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 665.794061][ T482] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 665.903288][ T36] audit: type=1400 audit(2000000004.210:1277): avc: denied { write } for pid=14599 comm="syz.6.4767" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 666.089169][ T481] usb 6-1: USB disconnect, device number 38 [ 666.169004][ T36] audit: type=1400 audit(2000000004.480:1278): avc: denied { map } for pid=14609 comm="syz.5.4770" path="/proc/559/pagemap" dev="proc" ino=86681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 666.228406][ T482] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 666.379629][ T482] usb 7-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 666.389972][ T482] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.399678][ T482] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 666.408872][ T482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 666.416884][ T482] usb 7-1: SerialNumber: syz [ 666.518376][ T481] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 666.668361][ T481] usb 6-1: Using ep0 maxpacket: 16 [ 666.674700][ T481] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 666.685622][ T481] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 666.695357][ T481] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 666.707888][ T481] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.717028][ T481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.725084][ T481] usb 6-1: Product: syz [ 666.729322][ T481] usb 6-1: Manufacturer: syz [ 666.733938][ T481] usb 6-1: SerialNumber: syz [ 667.141110][ T481] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 667.821466][T14616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14616 comm=syz.0.4772 [ 667.835247][T14616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14616 comm=syz.0.4772 [ 667.922604][T14624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 668.148435][ T481] usb 6-1: USB disconnect, device number 39 [ 668.165893][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 668.662135][ T36] audit: type=1400 audit(2000000006.970:1279): avc: denied { write } for pid=14636 comm="syz.5.4779" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 668.662142][T14637] random: crng reseeded on system resumption [ 668.787506][T14637] fuse: Unknown parameter 'roêaode' [ 668.787506][T14638] fuse: Unknown parameter 'roêaode' [ 668.811256][T14642] 8021q: VLANs not supported on lo [ 668.968260][ T482] usb 7-1: 0:2 : does not exist [ 668.973278][ T482] usb 7-1: unit 5: unexpected type 0x0c [ 668.991322][ T482] usb 7-1: USB disconnect, device number 6 [ 669.019095][T14304] udevd[14304]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 669.099883][T14672] tipc: Started in network mode [ 669.104808][T14672] tipc: Node identity 122e6f2ba8b4, cluster identity 4711 [ 669.112117][T14672] tipc: Enabled bearer , priority 0 [ 669.120267][T14672] tipc: Disabling bearer [ 669.120287][T14676] cgroup: subsys name conflicts with all [ 669.505818][T14706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 687.905494][ T36] audit: type=1400 audit(2000000026.210:1280): avc: denied { bind } for pid=14716 comm="syz.4.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 687.966808][T14721] rust_binder: Failed copying remainder into alloc: EFAULT [ 687.966836][T14721] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 687.974580][T14721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 687.983120][T14721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:135 [ 688.062890][T14733] fuse: Bad value for 'group_id' [ 688.069490][T14727] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4809'. [ 688.072348][T14733] fuse: Bad value for 'group_id' [ 688.274661][T14751] rust_binder: Error while translating object. [ 688.274712][T14751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 688.280967][T14751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 688.291767][T14751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 688.329278][ T411] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 688.472988][T14766] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 688.499054][ T411] usb 6-1: not running at top speed; connect to a high speed hub [ 688.507826][ T411] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 688.520831][ T411] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.535247][ T411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.543637][ T411] usb 6-1: Product: syz [ 688.547883][ T411] usb 6-1: Manufacturer: syz [ 688.552767][ T411] usb 6-1: SerialNumber: syz [ 688.571247][T14734] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 688.592632][T14772] netlink: 'syz.6.4823': attribute type 4 has an invalid length. [ 688.600516][T14772] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4823'. [ 688.788130][ T411] cdc_ncm 6-1:1.0: bind() failure [ 688.803981][ T411] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 688.811267][ T411] cdc_ncm 6-1:1.1: bind() failure [ 688.821761][ T411] usb 6-1: USB disconnect, device number 40 [ 689.355291][ T36] audit: type=1400 audit(2000000027.660:1281): avc: denied { read } for pid=14791 comm="syz.5.4829" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 689.378166][ T36] audit: type=1400 audit(2000000027.660:1282): avc: denied { open } for pid=14791 comm="syz.5.4829" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 689.459110][ T36] audit: type=1326 audit(2000000027.770:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14771 comm="syz.6.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb0d8e929 code=0x7fc00000 [ 689.647216][T14801] overlayfs: failed to clone upperpath [ 689.658345][ T482] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 689.670513][T14799] tipc: Enabled bearer , priority 0 [ 689.678808][T14799] tipc: Disabling bearer [ 689.693872][T14806] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4834'. [ 689.703042][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 689.712126][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4834'. [ 689.722225][ T36] audit: type=1400 audit(2000000028.040:1284): avc: denied { create } for pid=14805 comm="syz.0.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 689.798383][ T482] usb 6-1: device descriptor read/64, error -71 [ 690.008399][ T45] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 690.038347][ T482] usb 6-1: device descriptor read/64, error -71 [ 690.138388][ T45] usb 7-1: device descriptor read/64, error -71 [ 690.278353][ T482] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 690.299402][T14827] tipc: Enabling of bearer rejected, failed to enable media [ 690.339538][T14836] overlayfs: failed to clone upperpath [ 690.388358][ T45] usb 7-1: device descriptor read/64, error -71 [ 690.408400][ T482] usb 6-1: device descriptor read/64, error -71 [ 690.628338][ T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 690.648351][ T482] usb 6-1: device descriptor read/64, error -71 [ 690.758374][ T45] usb 7-1: device descriptor read/64, error -71 [ 690.764847][ T482] usb usb6-port1: attempt power cycle [ 691.008346][ T45] usb 7-1: device descriptor read/64, error -71 [ 691.108342][ T482] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 691.118458][ T45] usb usb7-port1: attempt power cycle [ 691.129426][ T482] usb 6-1: device descriptor read/8, error -71 [ 691.159122][T14845] 9p: Unknown access argument .: -22 [ 691.242255][T14849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.259506][ T482] usb 6-1: device descriptor read/8, error -71 [ 691.345657][T14849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 691.346113][T14849] rust_binder: Error in use_page_slow: ESRCH [ 691.355381][T14849] rust_binder: use_range failure ESRCH [ 691.361425][T14849] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 691.366945][T14849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 691.374954][T14849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:156 [ 691.399861][T14852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.458324][ T45] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 691.499325][ T45] usb 7-1: device descriptor read/8, error -71 [ 691.508561][ T482] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 691.539330][ T482] usb 6-1: device descriptor read/8, error -71 [ 691.629348][ T45] usb 7-1: device descriptor read/8, error -71 [ 691.679365][ T482] usb 6-1: device descriptor read/8, error -71 [ 691.788475][ T482] usb usb6-port1: unable to enumerate USB device [ 691.878375][ T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 691.899366][ T45] usb 7-1: device descriptor read/8, error -71 [ 691.921796][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4862'. [ 691.944194][T14885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.944755][T14886] rust_binder: Error in use_page_slow: ESRCH [ 691.951238][T14886] rust_binder: use_range failure ESRCH [ 691.957231][T14886] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 691.962800][T14886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 691.970664][T14886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:176 [ 692.029530][ T45] usb 7-1: device descriptor read/8, error -71 [ 692.148459][ T45] usb usb7-port1: unable to enumerate USB device [ 692.318037][T14888] SELinux: policydb version -1077198676 does not match my version range 15-33 [ 692.327162][T14888] SELinux: failed to load policy [ 692.345138][T14892] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 692.345138][T14892] null pointer dereference occurred [ 692.357879][T14892] ------------[ cut here ]------------ [ 692.363412][T14892] kernel BUG at rust/helpers/bug.c:7! [ 692.364512][ T36] audit: type=1400 audit(2000000030.680:1285): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 692.369361][T14892] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 692.393074][ T36] audit: type=1400 audit(2000000030.680:1286): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.397551][T14892] CPU: 1 UID: 0 PID: 14892 Comm: syz.5.4865 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 692.419420][ T36] audit: type=1400 audit(2000000030.680:1287): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.432461][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.432481][T14892] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 692.454131][ T36] audit: type=1400 audit(2000000030.680:1288): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.463806][T14892] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 35 1a af 3d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7f de e6 b1 90 90 90 90 90 90 90 90 90 [ 692.463832][T14892] RSP: 0018:ffffc9000564f1b0 EFLAGS: 00010246 [ 692.469617][ T36] audit: type=1400 audit(2000000030.680:1289): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 692.489677][T14892] [ 692.489689][T14892] RAX: 000000000000005a RBX: 1ffff92000ac9e38 RCX: f52c0655759ff100 [ 692.489709][T14892] RDX: ffffc900015f1000 RSI: 0000000000003273 RDI: 0000000000003274 [ 692.489728][T14892] RBP: ffffc9000564f1b0 R08: ffffc9000564eea7 R09: 1ffff92000ac9dd4 [ 692.562054][T14892] R10: dffffc0000000000 R11: fffff52000ac9dd5 R12: 0000000000000000 [ 692.570027][T14892] R13: dffffc0000000000 R14: ffffc9000564f1e0 R15: ffffc9000564f210 [ 692.578008][T14892] FS: 00007f77fdbeb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 692.586941][T14892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.593529][T14892] CR2: 000000110c27c063 CR3: 000000011df50000 CR4: 00000000003526b0 [ 692.601506][T14892] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 692.609480][T14892] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 692.617457][T14892] Call Trace: [ 692.620744][T14892] [ 692.623675][T14892] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 692.631144][T14892] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 692.639133][T14892] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 692.652704][T14892] ? p9pdu_vwritef+0x2720/0x2720 [ 692.657699][T14892] ? radix_tree_node_alloc+0x1af/0x400 [ 692.663163][T14892] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 692.671433][T14892] ? __asan_memcpy+0x5a/0x80 [ 692.676058][T14892] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 692.684145][T14892] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 692.692936][T14892] ? p9pdu_writef+0xdb/0x130 [ 692.697546][T14892] ? p9pdu_vwritef+0x2720/0x2720 [ 692.702499][T14892] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 692.711627][T14892] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 692.720491][T14892] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 692.728326][T14892] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 692.735972][T14892] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 692.741882][T14892] ? p9_client_prepare_req+0x732/0xa10 [ 692.747382][T14892] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 692.755657][T14892] ? __kasan_check_write+0x18/0x20 [ 692.760804][T14892] ? _raw_spin_lock+0x8c/0x120 [ 692.765582][T14892] ? __cfi__raw_spin_lock+0x10/0x10 [ 692.770798][T14892] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 692.776617][T14892] ? mon_bin_poll+0x122/0x170 [ 692.781330][T14892] ? p9_fd_request+0x374/0x500 [ 692.786109][T14892] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 692.794372][T14892] p9_fd_request+0x440/0x500 [ 692.798971][T14892] p9_client_rpc+0x2f9/0xb40 [ 692.803578][T14892] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 692.811838][T14892] ? p9_fid_create+0x3d0/0x3d0 [ 692.816613][T14892] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 692.824866][T14892] ? p9_conn_create+0x4c9/0x570 [ 692.829723][T14892] ? p9_fd_create+0x2f3/0x4c0 [ 692.834407][T14892] p9_client_create+0x96a/0x1190 [ 692.839358][T14892] ? __cfi_p9_client_create+0x10/0x10 [ 692.844744][T14892] ? kasan_save_alloc_info+0x40/0x50 [ 692.850037][T14892] ? __kasan_kmalloc+0x96/0xb0 [ 692.854818][T14892] ? kstrdup+0x7b/0x140 [ 692.858981][T14892] ? __kasan_check_write+0x18/0x20 [ 692.864101][T14892] v9fs_session_init+0x1e1/0x1820 [ 692.869135][T14892] ? __cfi_v9fs_session_init+0x10/0x10 [ 692.874607][T14892] ? kasan_save_alloc_info+0x40/0x50 [ 692.879903][T14892] ? __kasan_kmalloc+0x96/0xb0 [ 692.884693][T14892] ? v9fs_mount+0xbd/0xa00 [ 692.889156][T14892] v9fs_mount+0xd7/0xa00 [ 692.893468][T14892] ? __cfi_v9fs_mount+0x10/0x10 [ 692.898352][T14892] ? selinux_capable+0x38/0x50 [ 692.903142][T14892] legacy_get_tree+0x106/0x1b0 [ 692.908020][T14892] ? __cfi_v9fs_mount+0x10/0x10 [ 692.912898][T14892] vfs_get_tree+0x9e/0x290 [ 692.917338][T14892] do_new_mount+0x251/0xb40 [ 692.921864][T14892] ? security_capable+0xcf/0xf0 [ 692.926750][T14892] path_mount+0x688/0x1050 [ 692.931180][T14892] ? putname+0x113/0x150 [ 692.935452][T14892] __se_sys_mount+0x2bd/0x480 [ 692.940163][T14892] ? __x64_sys_mount+0xf0/0xf0 [ 692.944954][T14892] ? __kasan_check_write+0x18/0x20 [ 692.950235][T14892] ? fpregs_restore_userregs+0x11d/0x260 [ 692.955891][T14892] __x64_sys_mount+0xc3/0xf0 [ 692.960509][T14892] x64_sys_call+0x2021/0x2ee0 [ 692.965238][T14892] do_syscall_64+0x58/0xf0 [ 692.969696][T14892] ? clear_bhb_loop+0x50/0xa0 [ 692.974388][T14892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 692.980287][T14892] RIP: 0033:0x7f77fdd8e929 [ 692.984709][T14892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.004318][T14892] RSP: 002b:00007f77fdbeb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 693.012745][T14892] RAX: ffffffffffffffda RBX: 00007f77fdfb5fa0 RCX: 00007f77fdd8e929 [ 693.020724][T14892] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 0000000000000000 [ 693.028701][T14892] RBP: 00007f77fde10b39 R08: 0000200000000040 R09: 0000000000000000 [ 693.036676][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.044649][T14892] R13: 0000000000000000 R14: 00007f77fdfb5fa0 R15: 00007ffe595890d8 [ 693.052628][T14892] [ 693.055648][T14892] Modules linked in: [ 693.060139][T14892] ---[ end trace 0000000000000000 ]--- [ 693.062559][T14893] rust_binder: Error while translating object. [ 693.066374][T14893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 693.076574][T14893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 693.088864][T14892] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 693.103477][T14892] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 35 1a af 3d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 7f de e6 b1 90 90 90 90 90 90 90 90 90 [ 693.123297][T14892] RSP: 0018:ffffc9000564f1b0 EFLAGS: 00010246 [ 693.129450][T14892] RAX: 000000000000005a RBX: 1ffff92000ac9e38 RCX: f52c0655759ff100 [ 693.137485][T14892] RDX: ffffc900015f1000 RSI: 0000000000003273 RDI: 0000000000003274 [ 693.145522][T14892] RBP: ffffc9000564f1b0 R08: ffffc9000564eea7 R09: 1ffff92000ac9dd4 [ 693.153580][T14892] R10: dffffc0000000000 R11: fffff52000ac9dd5 R12: 0000000000000000 [ 693.161616][T14892] R13: dffffc0000000000 R14: ffffc9000564f1e0 R15: ffffc9000564f210 [ 693.169639][T14892] FS: 00007f77fdbeb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 693.178629][T14892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.185237][T14892] CR2: 00007f0cb0f80ab8 CR3: 000000011df50000 CR4: 00000000003526b0 [ 693.193258][T14892] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 693.201274][T14892] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 693.209286][T14892] Kernel panic - not syncing: Fatal exception [ 693.215733][T14892] Kernel Offset: disabled [ 693.220066][T14892] Rebooting in 86400 seconds..