last executing test programs: 5m35.440442243s ago: executing program 32 (id=5241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 5m34.141525873s ago: executing program 1 (id=5262): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000100)={0x80}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0xe, 0x2012, r3, 0x6000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r4, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) (async) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) readahead(r5, 0x8, 0x1) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r6, 0x0) 5m33.987569215s ago: executing program 1 (id=5267): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0x400002, 0x1) open_tree(r0, &(0x7f0000000080)='./file4\x00', 0x80001) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00f5dd9b8af4f8e13b61"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16030400000004031404cbf1e37636132e41f0c2a83ca2a437557bb32e17313c8a97e73cf61a1372f266e568d8e3d801d7793aa8feadb01e1fec4494fec85db7b6c7a9628e4ccb0e9fad80e12aa6a94b95e1feabe168c6bbc039c8798cca87ef6cccaec5e9157046429999cd48e39dad2d06fe8c6e1fc2f8474f093587973896e5521d5bcecdaf37957e56b5a53319510efbf8c4b217478138ead707b8caa37317edcec372f1770782562afa1cc9919ed96ac894a25a30dbd0a222ae50320c9d235f27e1a5e2c997136211485b02b975c7e5b9000000000000"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setuid(0x0) ioprio_set$uid(0x3, 0x0, 0x4007) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x1000, 0x6) r4 = inotify_init() r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4fea534d284fe21, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x100) 5m33.924835906s ago: executing program 33 (id=5267): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0x400002, 0x1) open_tree(r0, &(0x7f0000000080)='./file4\x00', 0x80001) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00f5dd9b8af4f8e13b61"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16030400000004031404cbf1e37636132e41f0c2a83ca2a437557bb32e17313c8a97e73cf61a1372f266e568d8e3d801d7793aa8feadb01e1fec4494fec85db7b6c7a9628e4ccb0e9fad80e12aa6a94b95e1feabe168c6bbc039c8798cca87ef6cccaec5e9157046429999cd48e39dad2d06fe8c6e1fc2f8474f093587973896e5521d5bcecdaf37957e56b5a53319510efbf8c4b217478138ead707b8caa37317edcec372f1770782562afa1cc9919ed96ac894a25a30dbd0a222ae50320c9d235f27e1a5e2c997136211485b02b975c7e5b9000000000000"], 0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setuid(0x0) ioprio_set$uid(0x3, 0x0, 0x4007) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x1000, 0x6) r4 = inotify_init() r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4fea534d284fe21, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x100) 5m32.716330924s ago: executing program 5 (id=5278): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x2, 0x5, 0x7fffffff, 0x6, 0x200002, 0x80000001, 0x5, 0x3, 0xffffffffffffffff], 0x0, 0x98302}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x2, 0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7ff, 0x1}, 0xe) 5m32.560715637s ago: executing program 5 (id=5281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000000000001f0001c0"]) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x1, @thr={&(0x7f0000000840)="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", &(0x7f0000000180)="9ff9ff0c3b30de5cf0a808c8841855d25e945db47aad06379eb47351847d4f10879d92750871d25b59cdeaa112a30d38948154111fa76a4a7da168872be8733c9905312641dc72abb6738b57029e190c47f859bca54958292aa37b8d006d226f"}}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000300)={{r6, r7+10000000}, {0x77359400}}, &(0x7f0000000340)) r8 = epoll_create1(0x80000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x20040, 0x1a) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0xe000001a}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x4000) ioctl$KVM_RUN(r12, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000000)={0x2000000}) r13 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000c1000000000000ffffff7f0000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x80, 0x0) r14 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r14, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r14, 0x0) ioctl$ASHMEM_SET_NAME(r14, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r14, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 5m32.259931701s ago: executing program 34 (id=5286): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = eventfd(0x1) r3 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0x0, 0x6, 0x6, 0x9, 0xfff, 0x26, 0x4}, {0x7, 0xe08, 0x4, 0xdfd4, 0x1, 0x0, 0xffffffc1}, {0x1, 0x40, 0x7, 0x2, 0x24, 0xfffffff7, 0xfffffffc}, {0x40000000, 0x2, 0x2, 0xb5, 0x9, 0x3, 0x9b}, {0x2, 0x7, 0x5, 0x7, 0x7fff, 0x5, 0x9}]}) read$eventfd(r2, &(0x7f0000000040), 0x8) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(r8, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000a6231306e53f671e8565230d84f707000000"], 0x0}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(r9, 0x40047438, 0xf0ff1f00000000) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f00000000c0)) 5m32.172143662s ago: executing program 5 (id=5289): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) close(0x3) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 5m32.120724783s ago: executing program 5 (id=5291): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x9, 0x0, 0xff, '\x00', 0xf7}, {0x0, 0x2a, 0x0, '\x00', 0x7e}, {0xfc, 0x12, 0x5, '\x00', 0xba}, {0x11, 0xb, 0x0, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xa}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xef}, {0x0, 0x1, 0x5, '\x00', 0x3}, {0x2, 0x0, 0x8, '\x00', 0x3}, {0xc3, 0xfd, 0x0, '\x00', 0x2}, {0x0, 0x21, 0x88, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xb, 0x9, 0x3}, {0x1, 0xbb}, {0x0, 0x4, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x6, 0x9}, {0x7f, 0xff, 0x3}]}}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x21, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x0, 0x200a, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) 5m32.005814685s ago: executing program 5 (id=5294): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0xf) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "6805753e8c2d7d52", "e479344f09ad2000", "09031737", "d16cc515a64e385f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x1228000, &(0x7f0000000000)={[{@max={'max', 0x3d, 0x2}}]}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000400)="8972fc891630a311bf292cd0a4cc39e7da6e281f8e8b81555bba10af9cc185667a3e7dfb608dacb0688cecdd7997970774dc037a69140765589ae3ac7327a476d13646d53613200ddbe121b76f66120deab28a5a7c9701d5504d55f89bdb3823bf4e5e159e5522f2b988e0d4dece1d438868bb5047e4a3b78e2cfdd31f8f74732a62898d0369e11d933c866990fcf639cc0f59b3452efa2e84407371b0b1abe6afac6c98002b8ca1a6bd90b9d0e8141f37ef5262ad4cc8749c8508a69d87743d93d8a7de8ca38690837d58f9ce6405e9ebc0fe457f6d", 0xd6}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) 5m31.923673476s ago: executing program 5 (id=5296): r0 = open(&(0x7f0000000040)='./file0\x00', 0x400080, 0x188) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e23, @loopback}}) 5m31.821682568s ago: executing program 35 (id=5296): r0 = open(&(0x7f0000000040)='./file0\x00', 0x400080, 0x188) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e23, @loopback}}) 4m14.855685182s ago: executing program 6 (id=6237): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244000101004012020e0000052406000005240000000d240f010000000000000000000905810300028105040905820200020000000905030200020000000000000000"], 0x0) (async) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090244000101004012020e0000052406000005240000000d240f010000000000000000000905810300028105040905820200020000000905030200020000000000000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000200)={0x40, 0x1, 0x100, {0x100, 0x6, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0xa0, 0x6, 0xd1, "343e1fa56d677f81fd89c3ab66ad67b76a4fe1fa707a88f36d046800be3fda8acc97c1ec5890a414334b24b1c5b3c23bddb50852256e7fac5c4d1fb12cb370fb0910632517231a66b000d3d0e8e3385400a50125fe68d7bbf1ba7166eb0ad6d9bcfe0d0fa7badcd6d61dbbd08046c64b12ccad0d45a02fa632370445bf17d316e178894f2a769ea4ba418192dd356f872011630e06b3b4625859fcd8ebb675c2ce5c39170e5ba87224ad6e5675e09758f9eb830dfa68daed9b77f0be6c58119246a1505f70970e21190008c7832701d4cb"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 4m13.305046855s ago: executing program 6 (id=6261): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000159e99eabc6934d950002"], 0x48}}, 0x4000) 4m13.283950945s ago: executing program 6 (id=6264): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1) 4m11.648692109s ago: executing program 6 (id=6289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c859, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x100000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 4m11.64776866s ago: executing program 6 (id=6290): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x6, 0x0, 0x82, 0x9, @mcast2, @loopback={0x2, 0x460c6}, 0xff00, 0x0, 0x2, 0x80}}) 4m11.6474427s ago: executing program 6 (id=6291): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001500000126bd7000fcdbdf250b0900009b7d0127f2d5b525511b8a12feb542eb92c81aedb2032579"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f00000002c0)) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @local}, 0x6, {0x2, 0x4e24, @loopback}, 'veth0_virt_wifi\x00'}) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000700)={0x2}) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152222e06045ec0b7ec1ed4", 0xd2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) (async) r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$reject(0x13, r5, 0x124d20c4, 0x3, r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x0, 0x1, @mcast2, @remote, 0x80, 0x8, 0x80, 0x1ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x0, 0x1, @mcast2, @remote, 0x80, 0x8, 0x80, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', r9, 0x700, 0x10, 0xfffffffd, 0x6, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x65, 0x0, 0x4e, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0x77, 0x0, 0x3, [0x4]}, @timestamp_prespec={0x44, 0x34, 0x21, 0x3, 0x6, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfff}, {@multicast1, 0x4}, {@loopback}, {@remote, 0xc}, {@local, 0x1}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', r9, 0x700, 0x10, 0xfffffffd, 0x6, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x65, 0x0, 0x4e, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0x77, 0x0, 0x3, [0x4]}, @timestamp_prespec={0x44, 0x34, 0x21, 0x3, 0x6, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfff}, {@multicast1, 0x4}, {@loopback}, {@remote, 0xc}, {@local, 0x1}]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000540)={'erspan0\x00'}) sendto$inet(r10, &(0x7f00000004c0)="f9a005298801c864720db84cc6676c9efb42", 0x12, 0xc0, &(0x7f0000000500)={0x2, 0x4e20, @multicast2}, 0x10) read$hiddev(0xffffffffffffffff, &(0x7f0000000580)=""/138, 0x8a) keyctl$reject(0x13, r7, 0x0, 0x1, r7) getsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) getsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000640), &(0x7f0000000680)=0x4) keyctl$setperm(0x5, r5, 0x42200) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) read(r2, &(0x7f0000000180)=""/95, 0xffffff51) (async) read(r2, &(0x7f0000000180)=""/95, 0xffffff51) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)={0x111000, 0x113, 0x8}, 0x67) openat(r12, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) (async) openat(r12, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) 3m55.349182514s ago: executing program 36 (id=6291): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001500000126bd7000fcdbdf250b0900009b7d0127f2d5b525511b8a12feb542eb92c81aedb2032579"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f00000002c0)) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @local}, 0x6, {0x2, 0x4e24, @loopback}, 'veth0_virt_wifi\x00'}) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000700)={0x2}) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152222e06045ec0b7ec1ed4", 0xd2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) (async) r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$reject(0x13, r5, 0x124d20c4, 0x3, r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x0, 0x1, @mcast2, @remote, 0x80, 0x8, 0x80, 0x1ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x0, 0x1, @mcast2, @remote, 0x80, 0x8, 0x80, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', r9, 0x700, 0x10, 0xfffffffd, 0x6, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x65, 0x0, 0x4e, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0x77, 0x0, 0x3, [0x4]}, @timestamp_prespec={0x44, 0x34, 0x21, 0x3, 0x6, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfff}, {@multicast1, 0x4}, {@loopback}, {@remote, 0xc}, {@local, 0x1}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', r9, 0x700, 0x10, 0xfffffffd, 0x6, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x65, 0x0, 0x4e, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0x77, 0x0, 0x3, [0x4]}, @timestamp_prespec={0x44, 0x34, 0x21, 0x3, 0x6, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfff}, {@multicast1, 0x4}, {@loopback}, {@remote, 0xc}, {@local, 0x1}]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000540)={'erspan0\x00'}) sendto$inet(r10, &(0x7f00000004c0)="f9a005298801c864720db84cc6676c9efb42", 0x12, 0xc0, &(0x7f0000000500)={0x2, 0x4e20, @multicast2}, 0x10) read$hiddev(0xffffffffffffffff, &(0x7f0000000580)=""/138, 0x8a) keyctl$reject(0x13, r7, 0x0, 0x1, r7) getsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async) getsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000640), &(0x7f0000000680)=0x4) keyctl$setperm(0x5, r5, 0x42200) sendmsg$tipc(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) read(r2, &(0x7f0000000180)=""/95, 0xffffff51) (async) read(r2, &(0x7f0000000180)=""/95, 0xffffff51) r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)={0x111000, 0x113, 0x8}, 0x67) openat(r12, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) (async) openat(r12, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) 3m5.870207916s ago: executing program 7 (id=6982): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)='E', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) 3m5.831495346s ago: executing program 7 (id=6984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000080) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv_slave_0\x00', {0x3}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8c880, 0x0) 3m5.831325366s ago: executing program 7 (id=6985): mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) (fail_nth: 4) 3m5.62419307s ago: executing program 7 (id=6986): socket$inet(0x2, 0x1, 0x5) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r2, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x18, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) flistxattr(r4, 0x0, 0x0) ioctl$BLKRASET(r2, 0x1262, &(0x7f0000000040)=0x7) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) 3m5.572199251s ago: executing program 7 (id=6988): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fe, &(0x7f0000000000)={'vlan0\x00', @local}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x1, &(0x7f00000001c0)=[r3]) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x17) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x6, 0x4, 0x3, 0x4, 0x7f}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4041}, 0x2040005) 3m5.513093361s ago: executing program 7 (id=6989): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) fchmod(r0, 0x40) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 2m49.211243035s ago: executing program 37 (id=6989): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) fchmod(r0, 0x40) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) 1m3.91604345s ago: executing program 2 (id=8849): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) 1m3.90518315s ago: executing program 2 (id=8850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1100, 0x20000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0xf, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2100}, {r1, 0x2210}, {r4, 0x4784}, {r2, 0x1101}, {r1, 0x400}, {r3, 0x140}], 0x6, 0x10) read$FUSE(r4, &(0x7f0000002200)={0x2020}, 0x2020) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x8000) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=""/154, 0x9a) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x8db) 1m3.796786882s ago: executing program 2 (id=8851): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xf9a3d000) statx(r4, &(0x7f0000000000)='./file0\x00', 0x800, 0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, r5, &(0x7f0000000240)={0xffffffffffffffff, 0xa, 0x7, 0x3, 0x40, 0xd, 0x401, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_buf(r0, 0x107, 0x5, 0x0, 0x0) 1m3.755632392s ago: executing program 2 (id=8852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000080)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x119, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {0xffff, 0x7}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1804}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x385cf186d8d94302) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 1m3.735371803s ago: executing program 2 (id=8853): ptrace(0x10, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m3.676155233s ago: executing program 2 (id=8856): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 1m3.644878054s ago: executing program 38 (id=8856): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 27.967507384s ago: executing program 3 (id=9756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1001, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = userfaultfd(0x80801) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1001, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) userfaultfd(0x80801) (async) close(r2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) (async) 27.912467745s ago: executing program 3 (id=9758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/183, 0xb7}], 0x1) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 27.231395015s ago: executing program 3 (id=9765): syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000dc0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x3, 0x9, 0xff, 0x2}, 0xec, &(0x7f0000000c40)={0x5, 0xf, 0xec, 0x1, [@generic={0xe7, 0x10, 0xb, "9c246a07719974230ceb62bfc5368a5bee0b637a7a9a47f23ae91677ab7c2a7dda608de064a1d20dad5ee2b3e7dfe5466f396ab20e0ef75a1af94ca745a255d96d1c5b2b9e5f1cc7a2178d12f40190f0835f5b38069de3f4eae52cc8cdde581e4e58f4690702af4e16a9eb8defe13f3be8e88c597a1462b99042afb7cfe592f90a2b9f65adaf733cc08b924fa3470ee32c3b5403ffd0abb54a6d27d8f2dc34c6c58a0ab76d087ebb853ebb1687f22e64042fce0c56174d346696a3c44154b22ac7d200317a6d30649d7e19410755bc44e9ca193a25315357cf93ef50bb1d2c810d1a40f2"}]}, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x455}}]}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 26.375877708s ago: executing program 3 (id=9788): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x18, 0xda, 0x5, 0x6, {0x4e21, 0x4e22, [0x8ae3, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xffffffff, 0x7f]}, 0x8, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x8, r9}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)={0x1074, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, {0x5, 0x38, 0x8, 0x1, {0x4e23, 0x4e22, [0x8, 0x2, 0x8000, 0x6], [0x8, 0xb69, 0x7f69e42d, 0x200], r9, [0x3, 0x636c]}, 0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x23, 0x1, "ab9b17dc258ca25f167ea310e975e78631b4b772b9aee2757f4b592f806515"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "a25cd5c51352df95a268704e0af96b50e5f4ce11b6e3f7d649d253c04f35a06ae081b84b9a6c63c9b7b1b6bd38baf31193a200306a1972c9f386e14388091f9533f4f26cfe99fd9fd1524096606a8768c81bc67fdc95fc443047611903425874a9c8b6f8f7a7e4b83704117e889c36ba93129b58ffd299d0f424297c36e65c13b65cd13c3025454fea8425445170e276e826aff88b3f147a40083af53040034554ebf3b7a3d18395864bcab3a9fcdd9d786be22f945ea31a17e086abe2d693dd9a3debbc2a957abd104bd05d2bc3e7b41ea8b3c1935ff29efbc5ed359a4bc7c4f02bb79744d4a8ff84f128f6117aad78f31def2a340271fe39d0be5a7fc64b090c67989be029f3e206fe65665c751305e31b3f172f13615f93bdd3be74a5d109d62737180ad61dd58ffc3918a6530dad3605993fac9be35680c1fa730ba93efa1b078c95b41027d9d36b24a4dc824d4bfa3afa5d37a2d0fb90533d5c954ac42dbf7e3b16ebb372f8b22466218b7889312c6eef88f926b91b192f2da1bf0b0bf0e3a3da325f4eff1032f8cefb1c678be33a09ecc6b444abfa11d3732ed869694bd8a2b3543c25041ac1c49a2f22d78fc30fe8ae329cde24190ed547790fc8e24ce4ce7dde3b0c010b2bd08a81d8ae099604e284ab283ad148990dbcae71c44b87576d12dfe6d730fe551c08366f15e211c39b1b2575fcdb873bf057662aa0f37cb4cbbb17f881cfb85398cb963217632a9e5a2d9b897117650f628707ff7140171e22cdeee3d5eba31cc4231803d73f1ab86a77b8a35c7318ccafa7d53083799950961b18e2bc85583d06f2ae2b7d62ecdc9087d8efe4918cef466cfdfc2c32efa8d0000daf1637726400a24856019ba9218e8ff1fae28abcca05e4b5562be269b2e4ba89f45cf071cdd0ec655bb31c9e93e4d3444cd117f397143b57043bfcbfd72c76eb5fb1e47c4d5169d3985fd232679f228fe9396a346123de9e717b4b388cc6e0a5da80965c1d2054d0154582755e80267cb1d4dcf630554dc06735c1c0f2d51fb5d06e8abbccbf510d1f543b33ae07659e1efa5171068f123976735a37fcb752bef6f89261d205a40163073d6be796fa4f769c9ce799d943ad6cc5f5fd6889165830042e28b0e0c0b3cbe7265fc0d2e4614dd673e76809f9be63ca9b30457001bc8d4c5bf809f5a5b94fddfb6cb740c0501a54bbbe28fb61727577876e53752c6701e2c6978a54acc8731031160be8e72f211076ca3037bf16ed280a72d159a699c817b719b8041e8b0964d9196e4b246625d8b37032c744f80e99ae38a61f7a885573abea5fbbb818da5287f6f9d289ad8d2fad75d08aadff1e5d8c92b0a2b50d435c311c58c8456916faac78a77b4ed9cc939cb08c4ac113db2036661838b385cbb0e50eeeff516a28f318fccadf9bd4f97b689b8e40ed2977889f14d6615ba2c423151336a1be351005376a20abe9ef9d1b12a0371a7fb3c9465322396475365c78a7c8b8235a1c5b765cf9e0ec343f92024cc7356d8f3277166e7eccd3b1ca387ed4c804713f69d346db5fcc609577b968d396e9615cd0594259af387357b9d2ea0d0e57f4929389d8a125c98011b5d81848d6fa115bac3ab3285039d9d6cb040db3928e544fc2ee2d42c3dc481149f63c2f84c960d94f0e82fe2ab08a630623aa30f07725766f7670868ac92df7696de6009a31cbb9b5450d422fc7fae038c4c5a2127672d20300ba06ae204094afefcd19fb223d7d9b95f9635f5d62044336bc04698078af1dc7f7bfc94aec7dff57e2a47c222a5656a624b2f02840cbfb85def8b5ecf81486884aba06b3f9f145db2e587637153f30b15c3ec3300050c47033772fc18bea94f94cbbb1a35fe1260b386ed71e05e4c2511d364fcf00a105ad1cbe1986867aae86b24a1d853271d0c58af0db5817aab6dc2d7dd8161f1f8b704bcaa59c8d62c0d796ad404533c3ce556ed2a6e89ba1fe597fd609aedfd841b90740f9b6bac527936113e8221d3a23a177f41c9b8812b38c8a5d8734de059e955135397a6e19282c09efb66a70da7e5bdf6959ecd997ece7fddfd900f595f94b337e8aeede942cc676234d18ae2902493a8fd24a3589c02b0b2cd807c6da5dc7a7e7d20041c886006f12d2ab81c9291be92d3631c471bdb7753065e9c575d37202cd0338db4231a82d1bacc3b2ee582a3354c8409af832e315dc6ba9690634a10c4ab13f7c7f552a5dd4e53e7fda1d570ce30379839ec5b52fb3d4ea56e5acd6f0465cd66f700cb56919002f6bd49b8016b84d5974b0f23726c7207ee1d435f4da9e277c174dbbbc14979d83000ebda782ec01bf1b412b072bb9e7a5ba691f46fc378bca43b7fd74b678b6f6e31f6b4406cf756645ed3c3d01dfdfbbd4e773a2753ff88ddaf1e5f968e929e8c955be0768e71e9ad63e726a86b82729c12aac6968eec14e7e6d21c58922a85911ab6e11940a789c4a8bcfe0eec75c26ee7a2d0ffccc1e269af878ed6dce09201910d09af72bb032d990d609fe99c25d0e88ecd44cdaa45ca834e72e3d00f992e02ee2ba729dffcff291883eeb5de2a6a4ebb21dcc46cb3b129ef8edeac4fcab3d18f601bb086deebc18144e8ebd314842c211da5c76647c29a166bd75f8fec167553d8f7b6d69862dc51631675a4240fa665a7a79cba4466dfa393cf22c7a1a7026b0634c51d63cbb47fe17fad7c89ed4c47ff01fb1ae8caab03a78c3dd5c4686e07457b4d45591af05091aab0548b798e8cd87021f55fce1f373ef871e65122ca5adfe9250980f3891ce12774100480855c60ad10e83acfc97160918c7fe5aec8f7f1b3b0fd65cef7cc7a09b93d18832536575528dc03361711e30f3d6e97961121ba5031968a6384d84024bf502e726b8a621cf30a61e4b02bce0f8b40333378de3cb3ea6c67df3941ce40e1600ef27d97a1638fd8cde641e57fe61387591cfa634edad9f9000c4d3ca0419c2ccc3869be09ee88d09aeb7431884616168b2116cddfb0793a829eee758dbeddae2c3363ac8405c7ea544c95e6e434c141df52f53908ece410b3f3ea0de4e185dd5e320a4c8bdaefe9052bb11715cebe0154779f21c8bd4232b312b6f66692b98c7b22c33b7659e10abc501bbbb7234ab35b38b3469e43f5079caacd32a99b6a89d46e66299879cb9cdaf5df44de2aa15c50057c5fc48f7d2ce9fed289e41c2ff6cb9c40bd67c53c6da1914edf17d195289b5a89d976c44c7f406209eaf2010d392be61d4b491e5fca743971e47edec74decc3de5bf0e09eeca7d5dbe6d439820ddc55de4f64cb9fff444ea155aa507b670129b95eb0e20b19ad76933ff46c5be5f630bfdb531baccc52af93dc038d222e3e5d45635d7ca98bfe23e8d4d161d24be763afe402ad5abef505ed51696dbe76cc2f219f43bdd5c4e97d6519d5aa02fbac1e0e2715dd4997c1edd378dc812150913fc17a683c61bed4d6bd06000191c2958098acc780239a055d2912ddb6229592e0869c233d20796d98b17ed23cc77ec2f19e5aee2afe496e6c5e5101cc631c20d6d97c6e6d872f688f65b0b48b973b39ac5d6b61cfaa55f784f28a0611e1f46f39a39638a51a857891f1d089c836109219e76259a8c9ac4d5fa948e373f76e5bf640fd247e17d0bdfd46531bf2eedbde72103ef911d8c9ac61473c8850a977bca54dd00325c905ce4c1b1b5f538d83ea265000a3d9ce0e5fc488864f21caf38c07626a2b84a2272fe787d400b2dd50a099e7a78050770b70be5fb6d45cb2058f6041ec97fd09c29e3e57aba24addcd6949c6c2f2d39693ab2b62e50fe9216c08a6715cf1ffc649a41f1a73ba78aded98fafddb68e10cfc9a4908354c26181ce3ac5e786d30baa628e3c2b6c1bb544ed9069d1a91fb1784c6038fa5a3a37ea6c1b83aa747d24bb24d487a334287a9c15e3b2365475e569c5b19a68b7f629cfba2c8ce1628a3f26d68ae8b592ccf9e5d17226519e019afc6e5844da903c48b8159456075a65eb056470a9252d45dfddbdcc21fe966f01af2d69d42148dbd4f4ee15ac1e4ce764eb2b88efb3b58b8577503fd52a5953f836aa71d1b32fcf48c28ee740fd6d4f0590e6059bf8a874c6af6e99952bb787b4f1650a1dc06b2c800ca147ee5d8881f3d2ed15ca523e0665a9e5b6dafa6a837ec4e114f83f20c1da1eee712a887b4fded440a4e5b57416bcf27acc871c468aebc28f937fb2df0dca6dc4ade6e5b48027d0b10831de9a71e720f8093805115c7ffbfbc06453c148022207dfa95d0d877bff0f22b2d554fb69f1ab4cfdf4074817a1da010b146b463e83af11fb58b91a91d2b63082fa69d0135227c4b7595965c4df7ca91b1690f4f55314dadce984700831d6f97032fd5db434e72e7a04ea094981ec2956b941f477a2eb2a63e8e56fe2f73823c4df69014e878eb3ec633a468cc3647bb08f14d3aacb6aea7838b5aafc50bfc98ed950b23051e42c5d6598f9e9ca65e19a2a2fe8ebab6ed2a867739905c0d13a704e7f9a1a3ef3c34bdeefa60e8e99018993d8499ee0733a94db2cc714dba8a3c6ad35589a19c0537234c6172fc3d0892c4aa891c6f4b3f0f22ad590ad5ec10711bfbd0de3d47762275eeabcf0dfdb97039f2366923f16fc270285e2f8a8dee03b1e776f24d9b6a44bd88b46f0b6b2c65102d3e7112a7b1361cd1303adb1e3cca946bbf52517135feeb1e7cae95b7647b4d7bcca51e28cecac3d2d650f266db9d488314639e2e37dab860836e855920ef4cb6c354720506ad8ee810fc56e5673cc8ae2bc908c869d60b85dcad8a8a9d28c7bd692d009b41b954fed796d634e4d31435c0eb97c3e913c16394fa76aa904a41e16986a45e63a34b7ca83fe4e3a0f06c76f0fc5a8788fd13fd774493229a55bb82a538e0853a0e297c553923a1788b43e1e5dc0ee204865ed2e25fdbe4c7a56f57c7e1b28000150df84cca816c96c82d5be6e40358e481caab289821268dec77cec3e1a851c66c0b0e0de8eddf4a6e941a6890f78f6f1f7928604a6dabcd6205bdf518d124be02cc727691a315a987cc51990d98cf60330a857ffc63c45627e89548563eac5fa44a3310f9b9b63a8254e49a4eb4aebc5f2be99ac600be7d10c96d0346841c18ddbb80d8336f87844e348c6d526f36d4d5fe03798b09f6f618838d02040409e81f51ad2ee9c8fd82bcdf54ce9e4f8cd6b74eeb4b259e90d6963c1375162cd561b7ac18742817d641936a27ccacc5274613e1fc11404ea7890c847bce7b1b0d2db77b6aeb96b8156ed84c5ba78db1dbc40031dde5217f7b5c817c912c9292bd999811a982a76bd88db54a6a8adcfff555d66e9d86e960ef76396b1bdaa1aae0837b08f44b74a544cd92c4716067c0d496744b057ee6d27de7d39c28a446a82b28acc23599adf4f7d828456b47a6b4e65be15f3df572debbb86e22456df858c7ce92d0539045d874357223c97375ada4ded582f5f21ee7732664849b4dbe3014613c777a092553eeb22ef8306f40e1fe50d6666fffe3ae9bfc946b62fd800a206cf1b73e3e44a946b19a8432ef638539f8c33dde5bc4912d68d028ac09dcc71e579a9a254c4d8c7a2e1f195077134454b02a183f87097138b58e4a2d7c3ea1cbd4d50c02e86825a5e441aaa044c73384e3393d58087621553e2695b588a828f38518ff1974bb66544e60b73d8cb4568bd16afbb6a3f951fc12cfa6a3e13f3b63a8915316cd7bcd11dfd2b06c08352923ed97787038dea74f9a892569aa50fd0ad2bfe0a03e92884af93bc581f4a338acb"}]}, 0x1074}, 0x1, 0x0, 0x0, 0x4048010}, 0x2004c000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000c00)={0x1, 0x0, [{0x4000009c}]}) setgid(r1) 26.321689509s ago: executing program 3 (id=9790): writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000000)="d82b9e9d41a9fa3e6536d29e8b9626c8e275f07dbf12af7ca7f26689f2451b3409e8202ce281208f47e65766407107f15029e09466eb40cc56908d9f5a09a9c7b0ad8eca25fe9df7c3a8d7a2325ac54f41e0ecba4ed9633769eebd3a42ced8512d60a25a761a35117754795542fe0d9dbac6b08151cdbff29bc293c6cdad150b89c06be2f19c1f9898de8ea01e1aae450c6f8c02adbf6b3b28432193e28a245921ee76b15b29b7af8e3cac6ed170170007", 0xb1}, {&(0x7f00000000c0)="780ca1b08c0bc8eced0273bd7a5ea4c42c382edf3caa0feb5b79464bbf147b754796cb27a73f3b61dbc6a340bd150bd0751d4df8aefb96b3b925e539f890", 0x3e}, {&(0x7f0000000100)="56f95f7ff9f5a554c26c9797baa229a38fe5d33a41780559566476dd0f62f48df32483ee9e4272f79d294a00ed95886b94b1108b463b3f1bcefd4364448730789f1448c316afc6ea79338ed83e0926e9dfd21069c2a4b012a9580c18cb660bf9532a79294c4c80cc67d00d776c1cd761f5bfae896f1ff30447b054d12a038f284f1af2ee4ff62c3efc074a8600ff65e93c240a1d4b6ca318c9fe8d445f8f9b4958683d8dbd4882807e6f654b", 0xac}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="e3c1e14eed1dbe1b1be5b64d00e665a33ebd7d49a7455a563f6fd5486102eb85e81f0a4b38c7aa71dc599a0497ef36ca12e237b766705a29ed1e73b44f4746a95b08851435f66b7b60d31d6c5ffcf45b1f2e73adb7fb948a8429bb93a840a31e255ed9e1b1aec5445dbde4e516b6ffb5c2be71d2b31953c7dd6721f868567dff05211da02eabd2087fd8f736f260bafe706009a35cf095f2af4a2c7fd5ddbd01cfba0e29f819c16a5bbb3667ee163739b697315da6358f5a3037b668a7b4f39290b0fbead716f230b28267e9dbea117167a1f0f912391f7cba3df257e61048df62d846b6379d45ed5873679466502a097b9babeac6adc191af", 0xf9}, {&(0x7f0000000300)="b49ae6502be6645f7bdc45ceb145375a9b3e821063d27e1b90bbf50f497b8810c31b1c771a9237d28ca5", 0x2a}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="ddb28cdc8d27c8c3ab390d974fc1c244c984c66ef98e8f8e14ce979bd6dc8e8266c96314f8502139783052001cae50960761aacf24616af5bbd2bad2ee6ff6e51b1b8245a966ad44dfe7c5912e482601c4005812ec0aaeaefba5bdd8c27561b27b624d10d1a5820988ad6118c7041924232cf286567b851067fb60b66f5835bb2105e3e1ca2257574f329e754542163de03fec40265eed5cba04e4c75dfec812", 0xa0}, {&(0x7f0000001400)="b34c9c894d5165bb2af84bdc3ffac9d98de0a5efe8f6e96ad5ac980f56cd32a8d02cf373135cc8b5e670a4e8b04e55c66d375512db8aff13e86d09693bba5aeeb8490d01bf10e09ab58ff5840fcdee787df73ec4ce83cbf819028af57d152e79eb62b3ba51101491d676c50abac6ca4df4f4f8ba152f21fb9d47adaa9ae2bf4bd52353c8b54369c86e3872ffed2e3cbadc05a068aebaa0885983ab54af76b1773b8e0d70670ae75cc83ec3adb2209ebc3c9f09f78ec78defa40964432f3b76222685ba98f9da90ce5ba734ff2db2ba23694dde83e2cbcce6f45cddeb2a45e0a3c7ae154abeb47442e6b53158", 0xec}, {&(0x7f0000001500)="04100905e79e2f46985a4707bb96f4ff5d7d8e478dcc557d031797b4a061", 0x1e}], 0xa) r0 = accept(0xffffffffffffffff, &(0x7f0000001600)=@can={0x1d, 0x0}, &(0x7f0000001680)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000016c0)=@ccm_128={{0x303}, "e202d70fcb73452a", "673b88443b773109acbe283e9f4703ea", "f3678402", "ef2474f4ec6be30d"}, 0x28) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001700)=0x6, &(0x7f0000001740)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000001780)=0x2, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x2488c0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2b}}}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc800) openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x18a03, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000019c0)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000001a00)) ioctl$int_in(r3, 0x0, &(0x7f0000001a40)=0x80000001) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001a80)=0x8000) ioctl$FIOCLEX(r3, 0x5451) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0xa0000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001b00)={'geneve0\x00'}) close_range(r6, r2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000001e00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x230, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000001, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x1}}}}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x839}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4685}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x74e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x2404c004}, 0xc0ff2e101b4609a8) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001e40), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000001e80)={0x4, 0x1}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001ec0)={@multicast1, @remote, r1}, 0xc) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001f00), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001f40)=0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001f80)={0x0, 0x9, 0x3, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000002380)={{r5}, r10, 0xa, @unused=[0x4, 0xfffffffffffffffd, 0x0, 0x7], @devid=r11}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 26.24082274s ago: executing program 3 (id=9791): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x1fa}], 0x1, 0x0) 26.23670994s ago: executing program 39 (id=9791): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x1fa}], 0x1, 0x0) 24.92658685s ago: executing program 1 (id=9792): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x0, 0x16, 0x14, 0x50, &(0x7f0000000240)}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000680)={'\x00', 0x8, 0x1, 0x92, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000700)={0x0, 0x41, 0x4, @tid=r1}, &(0x7f0000000740)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 24.852659761s ago: executing program 1 (id=9815): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) bind$pptp(r0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) 24.806994782s ago: executing program 1 (id=9817): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x4c, 0x14, 0x403, 0x70bd2c, 0x25dfdbff, {0x18, 0xda, 0x5, 0x6, {0x4e21, 0x4e22, [0x8ae3, 0x5, 0x2000000, 0x6], [0x2182, 0xfffffff4, 0x3ff, 0x128f], 0x0, [0xffffffff, 0x7f]}, 0x8, 0x200}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x8, r9}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)={0x1074, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, {0x5, 0x38, 0x8, 0x1, {0x4e23, 0x4e22, [0x8, 0x2, 0x8000, 0x6], [0x8, 0xb69, 0x7f69e42d, 0x200], r9, [0x3, 0x636c]}, 0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x23, 0x1, "ab9b17dc258ca25f167ea310e975e78631b4b772b9aee2757f4b592f806515"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1074}, 0x1, 0x0, 0x0, 0x4048010}, 0x2004c000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000c00)={0x1, 0x0, [{0x4000009c}]}) setgid(r1) 24.642772854s ago: executing program 1 (id=9822): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x33) 8.615620702s ago: executing program 40 (id=9822): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x33) 3.34054183s ago: executing program 9 (id=10177): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) (fail_nth: 6) 3.323394541s ago: executing program 9 (id=10178): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000003d00)=[{{&(0x7f00000001c0)=@generic={0x21, "d70770d08450dd33ec1cea1587b4f5fac31ffbe34368dc615e970e474b72f6f1114fef32b14e441fd7f266312051c99e73d8adbd1eb72369a9c60b7e3afe551f0c23f63105eb1d6d8f2b174f77cb7397dae0ea8d6a4a9e3223f54e850fea293632f28af9eb7bbf2bf105d9a26bb646d0e905185f431eaf9b84c62f0d2852"}, 0x80, 0x0}}], 0x1, 0x4002000) 3.154110203s ago: executing program 9 (id=10181): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)) setuid(0x0) sendmsg$netlink(r0, 0x0, 0xc0) 3.116672114s ago: executing program 9 (id=10182): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') flock(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 2.204767817s ago: executing program 9 (id=10211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa718}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x4840, 0x0) 1.806684053s ago: executing program 8 (id=10216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x1, 0x2, r5}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008e"]) 1.488779278s ago: executing program 9 (id=10217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='hfs\x00', 0x10410a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000007501"]) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x20180, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000040)='\x80l\x03\x00\xc5\x10\xaa\xc1D\xc8U\x9e>\xcd\xdd\xa2g\xec\x11\xe5\xc7:') r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000002200)=@ethtool_sset_info={0x37, 0x6, 0x102}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bc9cbf40480b0320"], 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) write$UHID_CREATE(r8, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/213, 0xd5, 0x1ff, 0x4, 0x400, 0x5, 0x2}}, 0x120) quotactl$Q_GETFMT(0x0, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004a00)={0x2020}, 0xfffffffffffffefe) 1.461546389s ago: executing program 8 (id=10218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x4, 0x0, 0x0, 0x4, 0x2, 0x0, 0x401}, {0x0, 0x2, 0x200000000000}, 0x892, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@updpolicy={0xec, 0x19, 0x100, 0x70bd28, 0x25dfdbfe, {{@in6=@mcast2, @in=@local, 0x4e23, 0xe000, 0x4e22, 0x9, 0x2, 0x80, 0x80, 0xff, r1, r2}, {0x2, 0x9, 0x1, 0x100000000, 0x0, 0x2, 0x7fffffffffffffff, 0x6}, {0x1, 0x2, 0x4735e7b1, 0xffffffffffffffff}, 0x1, 0x6e6bb0, 0x2, 0x0, 0x4, 0x2}, [@replay_thresh={0x8, 0xb, 0x6}, @lifetime_val={0x24, 0x9, {0x2, 0xfffffffffffffff0, 0x0, 0xfffffffffffffe2e}}, @replay_thresh={0x8, 0xb, 0x40}]}, 0xec}}, 0x4040040) 1.417165379s ago: executing program 8 (id=10219): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') flock(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 632.55918ms ago: executing program 0 (id=10228): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d72646d61202b6e65745f7072696f202b7069642f5da2c82f753a342b63742044aa1148ad6a9f05224f84402547b905326f5f876c8ffd7ebc9544c583286e9e0a2d9df7b3cff86bd4a77e69cb94ee7c7ae2261a02650dd277bc0640acbad690dd8c521f843bfd042743e70108e1af5b32443652149d206a081a261f5709da2502aad073ccd4798f2b7b1203f0edba90d65c93f0bd58d1a2e19494cb78862fe423a0de4073a8c10f526c9b44a7f94059589049a3e9396526a8db630ee1b76f25763a85dd7b93761d08aa7d1d21976c18e350f992401f2b349bd95ab631"], 0x25) 606.373791ms ago: executing program 0 (id=10229): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (fail_nth: 6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 601.434871ms ago: executing program 0 (id=10231): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(0x0) sendmsg$netlink(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x60, 0x40045}, 0xc0) 545.157352ms ago: executing program 0 (id=10232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000002c0)={0x21, 'veth0_vlan\x00', {0xffe}, 0x40}) 543.383022ms ago: executing program 0 (id=10233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x18, r1, 0x901, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 543.138022ms ago: executing program 0 (id=10234): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1014}], 0x1, 0x0, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) recvfrom$inet6(r0, 0x0, 0x0, 0x10140, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) r5 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x80800) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140), 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}}) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000000)={0x1, 0x2, 0xfffffffffffffffd, 0x8}) r8 = syz_clone(0x8000011, 0x0, 0xfffffffffffffe61, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) waitid(0x1, r8, 0x0, 0x2, 0x0) 511.801282ms ago: executing program 8 (id=10235): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x1, 0x2, r6}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008e"]) r8 = syz_open_pts(0xffffffffffffffff, 0x82) syz_open_pts(r8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 343.392465ms ago: executing program 8 (id=10236): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) eventfd(0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x0, 0x10000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4140aecd, &(0x7f0000000dc0)={{0x1, 0x0, 0x80, {0x4000, 0xf000, 0x1}}, "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", "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"}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c010000150001"], 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 284.440236ms ago: executing program 4 (id=10238): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) r2 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357) close(r3) socket(0x18, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) read(r5, &(0x7f0000000440)=""/119, 0x77) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fa56fb0d733d66646e6f3d16894677f646d119d6d8561210e0353e68851ba7de718b719618f04136ec41f024c99faea6e17f08eeeb7293235e577a7642e8d4b206862c345959651a79625b1c0691eff0166e004f1b69331573ebdaf8e311ca537df74bdb48f4942e053e70debd756ca499a91352d703854636abeb7a737d300b04385ff120a7dd38fc0d006c845b31abd6e0e82c", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRES16=r3, @ANYRESOCT=0x0, @ANYRES8=r3]) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x6b8, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x5d0, 0x8, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "acc11f66f7106337728a00b4bfde9785ab4441f44d9660a6f9b4d7e3fae5b541"}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e6dadf77b41525560e36b7f8e92b7950e049ede43325b6df5b0a2aa7ca2e4950"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @remote, 0xfffff81f}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x478, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7e11f82c701b63e9a44fe3eb6a1b031f0f2b2a4c5a4643c774155edfae55a1c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010101}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0b537d1bc437427813bb754643edf394ca204ec94423aaa4a9e82390543ba6c8"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0xc4, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "104c6e2f476ae3ac0e60b66e6be0df60fe1b39874336b9a59f1c6ec12676877e"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x6b8}, 0x1, 0x0, 0x0, 0xc4}, 0x90) 230.973957ms ago: executing program 8 (id=10239): syz_usb_connect(0x3, 0x1b9, &(0x7f0000001c40)={{0x12, 0x1, 0x250, 0x2c, 0xb1, 0x69, 0x10, 0x1bc7, 0x10a9, 0x450c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a7, 0x2, 0x0, 0xc6, 0x20, 0x41, [{{0x9, 0x4, 0xa7, 0xdd, 0x2, 0xff, 0xa1, 0x7c, 0x4, [], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0xb6, 0x8, 0x8}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0xc1, 0xf, 0x6, 0xff, 0xff, 0xff, 0x10, [], [{{0x9, 0x5, 0x5, 0x10, 0x0, 0x3, 0xe, 0x5}}, {{0x9, 0x5, 0x3, 0x5, 0x10, 0x0, 0x0, 0x6, [@generic={0x61, 0x8, "7b8d501f0108b36d0bd05c9659885af7dd4f90907081e15cb44de93f71de70b57d6c6da0ddbf9c58ec83c3afa1254d094e242e4cff41710dc6edc4b38d0e59401016e94e73761dde1a2e0f598bea0cba81689c507bf587ec0522089f3367b6"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x800}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x4, 0xf0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}, @generic={0xc0, 0x21, "241005a9dcca4ca2edd0a28e5b9fce04dab0a3de2320856add470d048397b9a6c387cc43be445c0012688924a6aeb746dcee0f8f5bc17eb28633e931ff71bd8333a3519a93a9649dd348a7b8c2c024f9affc1d68bc4386ae0e316613eb809b3eadac53e92a47d65385d9e1c7deaed5b2a9c017e1019473d4c6aa0ab38f66064558275f7dcd2e355ec24f84ba09d174104377213966891cfcfcbcf107f14fbea34aa1a9613a968b1acbaa018db7dd2907140e3af64d13de3dae1fc807b90b"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x5, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x228, 0xd, 0x7, 0x40}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x3, 0x9, 0xff, 0x2}, 0xec, &(0x7f0000000c40)={0x5, 0xf, 0xec, 0x1, [@generic={0xe7, 0x10, 0xb, "9c246a07719974230ceb62bfc5368a5bee0b637a7a9a47f23ae91677ab7c2a7dda608de064a1d20dad5ee2b3e7dfe5466f396ab20e0ef75a1af94ca745a255d96d1c5b2b9e5f1cc7a2178d12f40190f0835f5b38069de3f4eae52cc8cdde581e4e58f4690702af4e16a9eb8defe13f3be8e88c597a1462b99042afb7cfe592f90a2b9f65adaf733cc08b924fa3470ee32c3b5403ffd0abb54a6d27d8f2dc34c6c58a0ab76d087ebb853ebb1687f22e64042fce0c56174d346696a3c44154b22ac7d200317a6d30649d7e19410755bc44e9ca193a25315357cf93ef50bb1d2c810d1a40f2"}]}, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x455}}]}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 157.935468ms ago: executing program 4 (id=10240): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x341}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00006e7000/0x1000)=nil, 0x1000}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1800001, 0x28011, r1, 0x0) 100.742009ms ago: executing program 4 (id=10241): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_clone3(&(0x7f0000000480)={0x300040200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x0, 0x101, 0x3, 0x0, 0x80000000, 0x100100, r2}) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x3, 0x4) 69.327899ms ago: executing program 4 (id=10242): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x4000, 0x404c080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 31.9111ms ago: executing program 4 (id=10243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x131) flock(r1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 0s ago: executing program 4 (id=10244): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0xa, 0x8a, {0x8a, 0xa, "9d9e10fc91be2965911373205b4ca6e3b778939ef2885f7ea3063a87d92de3f90fdaf129e539b6d6d7978a5158bf518997d3e9f60a65ea92d340848a47a7f2df1f6fee3ddd10f551af99d76d2e25ba2b3b905b9620b04f5a6f07ab279f7b9cf978d404ff8dcc5ad5d547e53ab45737229bd775ad16b238fda09461098bf32f751afb41c64209fbc4"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f0000000580)={0x0, 0xf, 0x102, {0x5, 0xf, 0x102, 0x2, [@generic={0xfa, 0x10, 0x2, "020b78723abd2202129d45dd1d977653a6e4fd5371a159d80f021d450277e11a92432855deda351acff812c07da580420f28174116281a80dc4468ef173d5093756cdebfbffa2ba1005c82e9ef0aa50adf6eb43dd819ecd8148079cb6a33bb1eb7386bc1c6d3fd3bd3140214dff2b59af218cfc549473001ea58c529bb255eaae8780c94810a9425883afdd1b422364a2020555ddcd4028206cf4d2547c8ec5c31b415b5253a976b18871940424ace1637a473877877f3841c80d6b26894e23e30118cd47e3265eb0f4b56286e8ef89025951a047611be6427f0664fa89a1ab98e3b5eeeea8a6fc68eec46547fb1ac2516725cef212a51"}, @ptm_cap={0x3}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x28, 0x9, "234ba6db", 'BN5$'}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x6, 0x40, 0x6, 0xf0, 0x6}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000700)={0x20, 0x3, 0x2c, "74f317a600d2f15925bc4143b984bccdb82ccfe6089a0d595b69694bdc79c9199fbf308e87d2a855ff344342"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x1, 0x10, [0xf00]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xd4}, &(0x7f0000000980)={0x40, 0xb, 0x2, "a331"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "3e19"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xad}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x13}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x141}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x0, 0x7, 0x5e, {0x5e, 0x3, "179e5e47350404532f28d14c89afad23ab149af0367ce4e3c6d656cba2489a62619107204c2286fba34951ba0dce7f8fdb75bdc9c97efaf3b6ba7eaba1c367d3dbf05332a5fbe90250ec9b129d0fddb8f7de61eb12d0760b030068b0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x40, 0x18, 0x3c, "dc63902eeba62b9031f0a0b59826f3c65bcbb4f11c93737d6e85e2d1c603ad00e1cb9c86b56db8030ea09eaf2036f6d25be82de3d6171bd06a6f7a64"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}}) splice(r4, 0x0, r1, 0x0, 0xa929, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffcb) kernel console output (not intermixed with test programs): 0x20 [ 696.122029][T20533] should_fail_usercopy+0x1e/0x30 [ 696.122047][T20533] _copy_from_user+0x22/0xb0 [ 696.122068][T20533] ___sys_sendmsg+0x159/0x2a0 [ 696.122093][T20533] ? __sys_sendmsg+0x280/0x280 [ 696.122116][T20533] ? proc_fail_nth_write+0x17e/0x210 [ 696.122131][T20533] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 696.122152][T20533] __x64_sys_sendmsg+0x1eb/0x2c0 [ 696.122166][T20533] ? fput+0x1a5/0x240 [ 696.122189][T20533] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 696.122203][T20533] ? ksys_write+0x1ef/0x250 [ 696.122225][T20533] ? __kasan_check_read+0x15/0x20 [ 696.122243][T20533] x64_sys_call+0x2a4c/0x2ee0 [ 696.122263][T20533] do_syscall_64+0x58/0xf0 [ 696.122283][T20533] ? clear_bhb_loop+0x35/0x90 [ 696.122307][T20533] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 696.122329][T20533] RIP: 0033:0x7f0aac58e929 [ 696.122343][T20533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.122357][T20533] RSP: 002b:00007f0aad34f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.122375][T20533] RAX: ffffffffffffffda RBX: 00007f0aac7b5fa0 RCX: 00007f0aac58e929 [ 696.122387][T20533] RDX: 000000000000c804 RSI: 0000200000000380 RDI: 0000000000000003 [ 696.122397][T20533] RBP: 00007f0aad34f090 R08: 0000000000000000 R09: 0000000000000000 [ 696.122408][T20533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.122417][T20533] R13: 0000000000000000 R14: 00007f0aac7b5fa0 R15: 00007ffc5e475ec8 [ 696.122431][T20533] [ 696.343159][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 696.343177][ T36] audit: type=1326 audit(1750464952.469:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20499 comm="syz.8.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce62b8e929 code=0x7fc00000 [ 696.349139][ T372] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 696.381627][T20537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 696.386616][T20538] rust_binder: Error while translating object. [ 696.387167][ T372] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.408854][T20538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 696.408891][T20538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1048 [ 696.568562][T20557] input: syz0 as /devices/virtual/input/input166 [ 696.608368][ T36] audit: type=1400 audit(1750464952.712:2235): avc: denied { lock } for pid=20560 comm="syz.8.8093" path="socket:[189595]" dev="sockfs" ino=189595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 696.633145][ T36] audit: type=1400 audit(1750464952.712:2236): avc: denied { setopt } for pid=20560 comm="syz.8.8093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 697.434762][ T36] audit: type=1326 audit(1750464953.489:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20552 comm="syz.2.8090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aac58e929 code=0x7fc00000 [ 697.472274][ T372] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 697.483796][ T372] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 697.493381][ T372] usb 10-1: USB disconnect, device number 32 [ 697.583587][T20570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 697.711401][T20584] binder: Unknown parameter 'maxÿÿÿÿÿÿÿÿÿÿÿ' [ 697.923980][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 698.024052][T20586] input: syz0 as /devices/virtual/input/input167 [ 698.057661][T20589] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 698.070060][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 698.084348][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 698.092362][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 698.099361][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 698.108841][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.117646][ T9] usb 3-1: config 0 descriptor?? [ 698.314830][T20594] input: syz0 as /devices/virtual/input/input168 [ 698.552985][ T9] uclogic 0003:5543:0522.004B: collection stack underflow [ 698.560344][ T9] uclogic 0003:5543:0522.004B: item 0 0 0 12 parsing failed [ 698.568117][ T9] uclogic 0003:5543:0522.004B: parse failed [ 698.574267][ T9] uclogic 0003:5543:0522.004B: probe with driver uclogic failed with error -22 [ 698.767641][ T3936] usb 3-1: USB disconnect, device number 88 [ 699.051379][ T36] audit: type=1326 audit(1750464954.999:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20590 comm="syz.9.8104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c498e929 code=0x7fc00000 [ 699.117166][T20604] FAULT_INJECTION: forcing a failure. [ 699.117166][T20604] name failslab, interval 1, probability 0, space 0, times 0 [ 699.129879][T20604] CPU: 0 UID: 0 PID: 20604 Comm: syz.9.8109 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 699.129918][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.129932][T20604] Call Trace: [ 699.129941][T20604] [ 699.129950][T20604] __dump_stack+0x21/0x30 [ 699.129982][T20604] dump_stack_lvl+0x10c/0x190 [ 699.130000][T20604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 699.130025][T20604] ? unwind_get_return_address+0x51/0x90 [ 699.130040][T20604] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 699.130059][T20604] dump_stack+0x19/0x20 [ 699.130076][T20604] should_fail_ex+0x3d9/0x530 [ 699.130093][T20604] should_failslab+0xac/0x100 [ 699.130114][T20604] __kmalloc_cache_noprof+0x41/0x3c0 [ 699.130133][T20604] ? sel_netnode_sid+0x585/0xd50 [ 699.130151][T20604] sel_netnode_sid+0x585/0xd50 [ 699.130169][T20604] selinux_socket_bind+0x6e3/0xb80 [ 699.130186][T20604] ? __cfi_selinux_socket_bind+0x10/0x10 [ 699.130207][T20604] ? __fget_files+0x2c5/0x340 [ 699.130227][T20604] ? check_stack_object+0x107/0x140 [ 699.130246][T20604] security_socket_bind+0x56/0xd0 [ 699.130265][T20604] __sys_bind+0x286/0x3f0 [ 699.130285][T20604] ? __cfi___sys_bind+0x10/0x10 [ 699.130307][T20604] ? __kasan_check_read+0x15/0x20 [ 699.130324][T20604] __x64_sys_bind+0x7e/0x90 [ 699.130343][T20604] x64_sys_call+0x1ffd/0x2ee0 [ 699.130363][T20604] do_syscall_64+0x58/0xf0 [ 699.130384][T20604] ? clear_bhb_loop+0x35/0x90 [ 699.130408][T20604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 699.130430][T20604] RIP: 0033:0x7f41c498e929 [ 699.130444][T20604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.130458][T20604] RSP: 002b:00007f41c57dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 699.130475][T20604] RAX: ffffffffffffffda RBX: 00007f41c4bb5fa0 RCX: 00007f41c498e929 [ 699.130487][T20604] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000005 [ 699.130498][T20604] RBP: 00007f41c57dd090 R08: 0000000000000000 R09: 0000000000000000 [ 699.130508][T20604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.130518][T20604] R13: 0000000000000000 R14: 00007f41c4bb5fa0 R15: 00007ffca2519328 [ 699.130531][T20604] [ 699.392837][T20609] input: syz0 as /devices/virtual/input/input169 [ 699.429258][ T36] audit: type=1400 audit(1750464955.345:2239): avc: denied { accept } for pid=20611 comm="syz.9.8112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 699.554523][T20624] tipc: Started in network mode [ 699.559697][T20624] tipc: Node identity 52c7fcfb9d1c, cluster identity 4711 [ 699.567124][T20624] tipc: Enabled bearer , priority 0 [ 699.574789][T20622] tipc: Resetting bearer [ 699.588202][T20622] tipc: Disabling bearer [ 699.675233][ T36] audit: type=1400 audit(1750464955.579:2240): avc: denied { write } for pid=20635 comm="syz.8.8123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 699.710587][ T36] audit: type=1400 audit(1750464955.617:2241): avc: denied { listen } for pid=20639 comm="syz.9.8125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.720352][T20642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 699.735998][T20642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 699.743152][ T36] audit: type=1400 audit(1750464955.654:2242): avc: denied { connect } for pid=20639 comm="syz.9.8125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.770291][T20642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1087 [ 699.770430][T20642] rust_binder: Read failure Err(EAGAIN) in pid:1087 [ 699.774047][ T36] audit: type=1400 audit(1750464955.673:2243): avc: denied { write } for pid=20639 comm="syz.9.8125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.869716][ T9] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 699.999026][T20675] can0: slcan on ttyS3. [ 700.031740][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.049909][T20675] can0 (unregistered): slcan off ttyS3. [ 700.068931][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.100065][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.126219][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.248536][T20716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 700.305714][T20727] overlayfs: failed to clone lowerpath [ 700.583191][T20763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 700.584068][T20763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 700.591194][T20763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1143 [ 700.841415][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8180'. [ 701.002227][T20802] tipc: Enabling of bearer rejected, failed to enable media [ 701.025096][T20806] overlayfs: failed to clone upperpath [ 701.032440][T20806] overlay: ./file1 is not a directory [ 702.834485][ T9] usb 3-1: USB disconnect, device number 89 [ 702.867542][T20827] tipc: Started in network mode [ 702.872628][T20827] tipc: Node identity 42bb285c318d, cluster identity 4711 [ 702.880102][T20827] tipc: Enabled bearer , priority 0 [ 702.890018][T20826] tipc: Resetting bearer [ 702.907491][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8206'. [ 702.908111][T20826] tipc: Disabling bearer [ 703.022304][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8211'. [ 703.076284][T20860] tmpfs: Unknown parameter 'usrquota' [ 703.121640][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8217'. [ 703.419470][ T45] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 703.602495][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 703.612854][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.643461][ T45] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 703.663518][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.687174][ T45] usb 9-1: config 0 descriptor?? [ 703.736714][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 703.736734][ T36] audit: type=1400 audit(1750464959.377:2257): avc: denied { append } for pid=20882 comm="syz.4.8225" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 704.113803][ T36] audit: type=1400 audit(1750464959.732:2258): avc: denied { mounton } for pid=20896 comm="syz.2.8232" path="/proc/1263" dev="proc" ino=190923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 704.138208][ T45] appleir 0003:05AC:8241.004C: unknown main item tag 0x0 [ 704.139283][ T36] audit: type=1400 audit(1750464959.760:2259): avc: denied { unmount } for pid=16002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 704.146478][ T45] appleir 0003:05AC:8241.004C: unknown main item tag 0x0 [ 704.172993][ T45] appleir 0003:05AC:8241.004C: unknown main item tag 0x0 [ 704.180354][ T45] appleir 0003:05AC:8241.004C: unknown main item tag 0x0 [ 704.187918][ T45] appleir 0003:05AC:8241.004C: unknown main item tag 0x0 [ 704.195838][ T45] appleir 0003:05AC:8241.004C: No inputs registered, leaving [ 704.204984][ T45] appleir 0003:05AC:8241.004C: hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 704.424468][ T305] usb 9-1: USB disconnect, device number 29 [ 705.929176][T20950] overlay: Unknown parameter '/dev/cpu/#/msr' [ 705.967834][T20959] netlink: 'syz.9.8260': attribute type 4 has an invalid length. [ 705.977859][T20959] netlink: 'syz.9.8260': attribute type 4 has an invalid length. [ 706.219868][ T305] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 706.381442][ T305] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.392598][ T305] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 706.404304][ T305] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.413497][ T305] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.421537][ T305] usb 9-1: Product: syz [ 706.425768][ T305] usb 9-1: Manufacturer: syz [ 706.430392][ T305] usb 9-1: SerialNumber: syz [ 706.651802][T20960] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 707.301845][T20960] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 707.523817][ T305] cdc_mbim 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 707.530549][ T305] cdc_mbim 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 707.538412][ T305] cdc_mbim 9-1:1.0: setting rx_max = 2048 [ 707.720691][ T36] audit: type=1400 audit(1750464963.109:2260): avc: denied { write } for pid=20985 comm="syz.9.8272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 707.744752][ T305] cdc_mbim 9-1:1.0: setting tx_max = 184 [ 707.752672][ T305] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 707.768075][ T305] wwan wwan0: port wwan0mbim0 attached [ 707.781338][ T305] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 42:42:42:42:42:42 [ 707.848691][T21003] tipc: Enabled bearer , priority 10 [ 707.964175][ T7386] usb 9-1: USB disconnect, device number 30 [ 707.970733][ T7386] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 708.043400][ T7386] wwan wwan0: port wwan0mbim0 disconnected [ 708.620516][T21053] overlayfs: failed to clone lowerpath [ 708.632957][T21053] overlayfs: failed to clone upperpath [ 709.052912][ T305] tipc: Node number set to 1932929116 [ 709.100037][ T36] audit: type=1400 audit(1750464964.400:2261): avc: denied { create } for pid=21057 comm="syz.8.8290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 710.736066][T21120] overlayfs: failed to clone lowerpath [ 711.653406][T21136] futex_wake_op: syz.9.8324 tries to shift op by 32; fix this program [ 711.704521][ T36] audit: type=1400 audit(1750464966.841:2262): avc: denied { setattr } for pid=21139 comm="syz.4.8326" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 711.728251][ T36] audit: type=1400 audit(1750464966.841:2263): avc: denied { write } for pid=21139 comm="syz.4.8326" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 711.749629][ T36] audit: type=1400 audit(1750464966.841:2264): avc: denied { open } for pid=21139 comm="syz.4.8326" path="/34/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 711.773866][ T36] audit: type=1400 audit(1750464966.907:2265): avc: denied { watch } for pid=21137 comm="syz.9.8325" path="/323/file0" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 711.815067][T21145] tipc: Enabling of bearer rejected, failed to enable media [ 712.205697][ T36] audit: type=1400 audit(1750464967.300:2266): avc: denied { create } for pid=21161 comm="syz.8.8334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 712.738037][ T36] audit: type=1400 audit(1750464967.795:2267): avc: denied { mount } for pid=21166 comm="syz.9.8336" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 712.811825][ T36] audit: type=1400 audit(1750464967.870:2268): avc: denied { getopt } for pid=21179 comm="syz.9.8343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 712.931513][T21197] netlink: 92 bytes leftover after parsing attributes in process `syz.9.8351'. [ 712.993333][ T36] audit: type=1400 audit(1750464968.039:2269): avc: denied { unmount } for pid=16208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 713.972817][T21228] overlayfs: failed to clone lowerpath [ 714.904350][T21263] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8380'. [ 715.203056][ T36] audit: type=1400 audit(1750464970.106:2270): avc: denied { unmount } for pid=20392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 715.284466][ T36] audit: type=1326 audit(1750464970.181:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21252 comm="syz.9.8376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c498e929 code=0x7fc00000 [ 715.512550][ T36] audit: type=1400 audit(1750464970.396:2272): avc: denied { setattr } for pid=21304 comm="syz.4.8399" name="RFCOMM" dev="sockfs" ino=191450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 715.513799][T21305] rust_binder: Write failure EINVAL in pid:104 [ 715.552541][ T36] audit: type=1400 audit(1750464970.433:2273): avc: denied { read } for pid=21311 comm="syz.9.8401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 715.678655][ T36] audit: type=1400 audit(1750464970.546:2274): avc: denied { setopt } for pid=21329 comm="syz.4.8408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 715.705774][ T36] audit: type=1400 audit(1750464970.555:2275): avc: denied { map } for pid=21329 comm="syz.4.8408" path="socket:[192203]" dev="sockfs" ino=192203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 715.735496][ T36] audit: type=1400 audit(1750464970.555:2276): avc: denied { read accept } for pid=21329 comm="syz.4.8408" path="socket:[192203]" dev="sockfs" ino=192203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 715.792136][ T36] audit: type=1400 audit(1750464970.658:2277): avc: denied { create } for pid=21335 comm="syz.8.8411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 716.983675][T21400] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 717.005090][ T36] audit: type=1400 audit(1750464971.789:2278): avc: denied { getopt } for pid=21401 comm="syz.9.8439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 717.276324][T21424] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 717.474857][ T36] audit: type=1400 audit(1750464972.229:2279): avc: denied { audit_write } for pid=21462 comm="syz.8.8468" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 717.971286][T21531] fuse: Bad value for 'fd' [ 720.175211][T21645] overlayfs: failed to resolve './file1': -2 [ 720.350052][T21658] xfrm0: mtu less than device minimum [ 720.659305][T21679] fuse: Bad value for 'fd' [ 720.987875][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8576'. [ 721.658973][T21726] binder: Unknown parameter '/dev/rtc0' [ 721.699709][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 721.699729][ T36] audit: type=1400 audit(1750464976.177:2284): avc: denied { shutdown } for pid=21731 comm="syz.4.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.733362][ T36] audit: type=1326 audit(1750464976.223:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21735 comm="syz.4.8590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb2418e929 code=0x0 [ 721.804426][T21747] rust_binder: Error while translating object. [ 721.804462][T21747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 721.810782][T21747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:175 [ 722.279505][ T13] bridge_slave_1: left allmulticast mode [ 722.294643][ T13] bridge_slave_1: left promiscuous mode [ 722.300392][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.307975][ T13] bridge_slave_0: left allmulticast mode [ 722.313720][ T13] bridge_slave_0: left promiscuous mode [ 722.319436][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.404815][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.412202][T21752] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.419543][T21752] bridge_slave_0: entered allmulticast mode [ 722.426308][T21752] bridge_slave_0: entered promiscuous mode [ 722.433273][T21752] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.442804][T21752] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.450140][T21752] bridge_slave_1: entered allmulticast mode [ 722.456632][T21752] bridge_slave_1: entered promiscuous mode [ 722.463145][ T13] tipc: Left network mode [ 722.471556][ T13] veth1_macvtap: left promiscuous mode [ 722.477152][ T13] veth0_vlan: left promiscuous mode [ 722.588182][T21752] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.595283][T21752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.602750][T21752] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.609854][T21752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.640324][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.648203][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.658140][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.665233][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.674831][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.681890][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.717070][T21752] veth0_vlan: entered promiscuous mode [ 722.732295][T21784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 722.736527][T21752] veth1_macvtap: entered promiscuous mode [ 722.742377][T21784] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 2896, limit: 2912, size: 89) [ 722.746840][T21784] rust_binder: Error while translating object. [ 722.758731][T21784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 722.768531][T21784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 722.944222][T21801] fuse: Bad value for 'fd' [ 723.664928][ T36] audit: type=1326 audit(1750464978.019:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21788 comm="syz.2.8611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aac58e929 code=0x7fc00000 [ 723.690039][T21819] tipc: Started in network mode [ 723.695066][T21819] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 723.712165][T21819] tipc: Enabling of bearer rejected, failed to enable media [ 723.825571][T21844] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8634'. [ 723.966147][T21856] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8639'. [ 723.999787][T21860] fuse: Bad value for 'fd' [ 724.017557][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8642'. [ 724.028131][T21862] netlink: 104 bytes leftover after parsing attributes in process `syz.8.8642'. [ 724.271888][T21885] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8651'. [ 724.280991][T21885] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8651'. [ 725.344625][T21917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8666'. [ 725.353807][T21917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8666'. [ 725.539139][T21921] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.546297][T21921] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.554255][T21921] bridge_slave_0: entered allmulticast mode [ 725.561271][T21921] bridge_slave_0: entered promiscuous mode [ 725.567927][T21921] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.575109][T21921] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.582515][T21921] bridge_slave_1: entered allmulticast mode [ 725.589066][T21921] bridge_slave_1: entered promiscuous mode [ 725.777031][ T304] bridge_slave_1: left allmulticast mode [ 725.782756][ T304] bridge_slave_1: left promiscuous mode [ 725.788460][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.796020][ T304] bridge_slave_0: left allmulticast mode [ 725.801668][ T304] bridge_slave_0: left promiscuous mode [ 725.807452][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.914115][ T304] tipc: Disabling bearer [ 725.919653][ T304] tipc: Left network mode [ 725.925759][T21921] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.933092][T21921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.940456][T21921] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.947655][T21921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.971792][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.979966][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.993644][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.000755][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.009623][ T304] veth1_macvtap: left promiscuous mode [ 726.015344][ T304] veth0_vlan: left promiscuous mode [ 726.067033][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.074327][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.104124][T21921] veth0_vlan: entered promiscuous mode [ 726.115527][T21921] veth1_macvtap: entered promiscuous mode [ 726.372478][T21952] overlayfs: missing 'lowerdir' [ 726.660873][ T45] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 726.675269][ T36] audit: type=1400 audit(1750464980.835:2287): avc: denied { write } for pid=21972 comm="syz.4.8687" name="/" dev="incremental-fs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.699252][ T36] audit: type=1400 audit(1750464980.835:2288): avc: denied { add_name } for pid=21972 comm="syz.4.8687" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.721032][ T36] audit: type=1400 audit(1750464980.835:2289): avc: denied { create } for pid=21972 comm="syz.4.8687" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 726.737011][T21984] incfs: Error accessing: ./file1. [ 726.747700][T21984] incfs: mount failed -2 [ 726.748292][ T36] audit: type=1400 audit(1750464980.835:2290): avc: denied { associate } for pid=21972 comm="syz.4.8687" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 726.781128][T21988] overlayfs: failed to clone upperpath [ 726.870652][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 726.895520][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 726.911741][ T45] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.923269][ T45] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 726.936661][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 726.943336][ T45] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 726.959639][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.971506][ T45] usb 3-1: config 0 descriptor?? [ 727.275831][ T36] audit: type=1400 audit(1750464981.396:2291): avc: denied { ioctl } for pid=22020 comm="syz.9.8706" path="socket:[195366]" dev="sockfs" ino=195366 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.391095][T22031] overlayfs: failed to clone upperpath [ 727.408722][T21948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.414626][T22033] overlayfs: missing 'workdir' [ 727.417372][T21948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.431977][T21948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.440598][T21948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.485902][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 727.492068][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 727.503403][ T45] usb 3-1: USB disconnect, device number 90 [ 727.675255][ T36] audit: type=1326 audit(1750464981.770:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22057 comm="syz.8.8723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3278e929 code=0x0 [ 727.816733][ T36] audit: type=1400 audit(1750464981.911:2293): avc: denied { mount } for pid=22068 comm="syz.9.8728" name="/" dev="ramfs" ino=195951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 727.953912][T22086] tipc: Enabling of bearer rejected, failed to enable media [ 728.084033][T22097] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 728.115405][T22101] FAULT_INJECTION: forcing a failure. [ 728.115405][T22101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.132685][T22101] CPU: 1 UID: 0 PID: 22101 Comm: syz.4.8743 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 728.132724][T22101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.132749][T22101] Call Trace: [ 728.132758][T22101] [ 728.132767][T22101] __dump_stack+0x21/0x30 [ 728.132799][T22101] dump_stack_lvl+0x10c/0x190 [ 728.132825][T22101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 728.132853][T22101] dump_stack+0x19/0x20 [ 728.132876][T22101] should_fail_ex+0x3d9/0x530 [ 728.132900][T22101] should_fail+0xf/0x20 [ 728.132922][T22101] should_fail_usercopy+0x1e/0x30 [ 728.132947][T22101] _copy_to_user+0x24/0xa0 [ 728.132976][T22101] simple_read_from_buffer+0xed/0x160 [ 728.133011][T22101] proc_fail_nth_read+0x19e/0x210 [ 728.133033][T22101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 728.133054][T22101] ? l2cap_sock_setsockopt+0x136e/0x1c10 [ 728.133088][T22101] ? bpf_lsm_file_permission+0xd/0x20 [ 728.133112][T22101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 728.133133][T22101] vfs_read+0x278/0xb60 [ 728.133158][T22101] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 728.133191][T22101] ? __cfi_vfs_read+0x10/0x10 [ 728.133214][T22101] ? __kasan_check_write+0x18/0x20 [ 728.133238][T22101] ? mutex_lock+0x92/0x1c0 [ 728.133258][T22101] ? __cfi_mutex_lock+0x10/0x10 [ 728.133278][T22101] ? __fget_files+0x2c5/0x340 [ 728.133309][T22101] ksys_read+0x141/0x250 [ 728.133334][T22101] ? __cfi_ksys_read+0x10/0x10 [ 728.133360][T22101] ? __kasan_check_write+0x18/0x20 [ 728.133383][T22101] ? __kasan_check_read+0x15/0x20 [ 728.133406][T22101] __x64_sys_read+0x7f/0x90 [ 728.133431][T22101] x64_sys_call+0x2638/0x2ee0 [ 728.133459][T22101] do_syscall_64+0x58/0xf0 [ 728.133486][T22101] ? clear_bhb_loop+0x35/0x90 [ 728.133518][T22101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 728.133550][T22101] RIP: 0033:0x7feb2418d33c [ 728.133567][T22101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 728.133584][T22101] RSP: 002b:00007feb24f35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 728.133607][T22101] RAX: ffffffffffffffda RBX: 00007feb243b5fa0 RCX: 00007feb2418d33c [ 728.133624][T22101] RDX: 000000000000000f RSI: 00007feb24f350a0 RDI: 0000000000000003 [ 728.133637][T22101] RBP: 00007feb24f35090 R08: 0000000000000000 R09: 0000000000000000 [ 728.133651][T22101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.133663][T22101] R13: 0000000000000000 R14: 00007feb243b5fa0 R15: 00007ffd923aeb28 [ 728.133680][T22101] [ 728.648898][ T45] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 728.809182][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 728.815978][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 728.822754][ T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 728.835544][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.844868][ T45] usb 3-1: config 0 descriptor?? [ 729.085181][ T36] audit: type=1400 audit(1750464983.089:2294): avc: denied { execute } for pid=22152 comm="syz.4.8764" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.281554][ T45] uclogic 0003:5543:0522.004D: collection stack underflow [ 729.289461][ T45] uclogic 0003:5543:0522.004D: item 0 0 0 12 parsing failed [ 729.297930][ T45] uclogic 0003:5543:0522.004D: parse failed [ 729.304091][ T45] uclogic 0003:5543:0522.004D: probe with driver uclogic failed with error -22 [ 729.418421][ T36] audit: type=1400 audit(1750464983.398:2295): avc: denied { create } for pid=22181 comm="syz.8.8776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 729.505399][ T45] usb 3-1: USB disconnect, device number 91 [ 729.893303][ T36] audit: type=1400 audit(1750464983.847:2296): avc: denied { nlmsg_read } for pid=22200 comm="syz.8.8785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 729.966412][T22214] fuse: Unknown parameter 'root0000000000' [ 730.093887][T22222] netlink: 'syz.8.8794': attribute type 5 has an invalid length. [ 730.178542][T22232] FAULT_INJECTION: forcing a failure. [ 730.178542][T22232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 730.192316][T22232] CPU: 1 UID: 0 PID: 22232 Comm: syz.2.8799 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 730.192353][T22232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.192368][T22232] Call Trace: [ 730.192376][T22232] [ 730.192385][T22232] __dump_stack+0x21/0x30 [ 730.192416][T22232] dump_stack_lvl+0x10c/0x190 [ 730.192440][T22232] ? __cfi_dump_stack_lvl+0x10/0x10 [ 730.192468][T22232] dump_stack+0x19/0x20 [ 730.192491][T22232] should_fail_ex+0x3d9/0x530 [ 730.192515][T22232] should_fail_alloc_page+0xeb/0x110 [ 730.192546][T22232] __alloc_pages_noprof+0x19d/0x6c0 [ 730.192576][T22232] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 730.192599][T22232] ? filemap_get_entry+0x3fb/0x460 [ 730.192621][T22232] ? alloc_file_pseudo+0x18b/0x1e0 [ 730.192652][T22232] __folio_alloc_noprof+0x14/0x80 [ 730.192673][T22232] __filemap_get_folio+0x461/0x7c0 [ 730.192695][T22232] aio_setup_ring+0x389/0xc60 [ 730.192726][T22232] ? free_ioctx_reqs+0x170/0x170 [ 730.192758][T22232] ioctx_alloc+0x344/0x860 [ 730.192787][T22232] __se_sys_io_setup+0x6f/0x230 [ 730.192814][T22232] __x64_sys_io_setup+0x5f/0x80 [ 730.192840][T22232] x64_sys_call+0x26a4/0x2ee0 [ 730.192867][T22232] do_syscall_64+0x58/0xf0 [ 730.192895][T22232] ? clear_bhb_loop+0x35/0x90 [ 730.192926][T22232] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 730.192956][T22232] RIP: 0033:0x7fce4c58e929 [ 730.192973][T22232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.192992][T22232] RSP: 002b:00007fce4d4d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 730.193016][T22232] RAX: ffffffffffffffda RBX: 00007fce4c7b5fa0 RCX: 00007fce4c58e929 [ 730.193032][T22232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000000000e4 [ 730.193047][T22232] RBP: 00007fce4d4d1090 R08: 0000000000000000 R09: 0000000000000000 [ 730.193075][T22232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 730.193089][T22232] R13: 0000000000000001 R14: 00007fce4c7b5fa0 R15: 00007ffe0ac77b98 [ 730.193107][T22232] [ 730.433001][ T36] audit: type=1400 audit(1750464984.352:2297): avc: denied { bind } for pid=22242 comm="syz.8.8804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 730.454930][ T36] audit: type=1400 audit(1750464984.352:2298): avc: denied { ioctl } for pid=22242 comm="syz.8.8804" path="socket:[196407]" dev="sockfs" ino=196407 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 730.514332][T22257] 9pnet_virtio: no channels available for device syz [ 730.556922][T22262] bpf: Bad value for 'mode' [ 730.786906][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 730.925919][ T9] usb 3-1: device descriptor read/64, error -71 [ 731.182543][ T9] usb 3-1: device descriptor read/64, error -71 [ 731.439052][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 731.545023][ T36] audit: type=1326 audit(1750464985.390:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22290 comm="syz.9.8825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c498e929 code=0x0 [ 731.578027][ T9] usb 3-1: device descriptor read/64, error -71 [ 731.834587][ T9] usb 3-1: device descriptor read/64, error -71 [ 731.952342][ T9] usb usb3-port1: attempt power cycle [ 732.315671][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 732.338115][ T9] usb 3-1: device descriptor read/8, error -71 [ 732.477156][ T9] usb 3-1: device descriptor read/8, error -71 [ 732.732615][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 732.755046][ T9] usb 3-1: device descriptor read/8, error -71 [ 732.894175][ T9] usb 3-1: device descriptor read/8, error -71 [ 733.010646][ T9] usb usb3-port1: unable to enumerate USB device [ 733.898691][T22351] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 733.898711][T22351] rust_binder: Read failure Err(EFAULT) in pid:41 [ 734.050644][T22356] rust_binder: Write failure EINVAL in pid:46 [ 734.276144][ T13] bridge_slave_1: left allmulticast mode [ 734.288225][ T13] bridge_slave_1: left promiscuous mode [ 734.294106][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.301735][ T13] bridge_slave_0: left allmulticast mode [ 734.307612][ T13] bridge_slave_0: left promiscuous mode [ 734.313251][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.422849][T22373] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 734.433022][ T36] audit: type=1400 audit(1750464988.103:2300): avc: denied { relabelto } for pid=22372 comm="syz.8.8862" name="cgroup" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 734.460311][ T36] audit: type=1400 audit(1750464988.103:2301): avc: denied { associate } for pid=22372 comm="syz.8.8862" name="cgroup" dev="tmpfs" ino=718 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 734.488305][ T36] audit: type=1400 audit(1750464988.122:2302): avc: denied { unlink } for pid=21752 comm="syz-executor" name="cgroup" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 734.516706][ T13] veth1_macvtap: left promiscuous mode [ 734.522310][ T13] veth0_vlan: left promiscuous mode [ 734.570022][T22368] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.577298][T22368] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.584554][T22368] bridge_slave_0: entered allmulticast mode [ 734.590871][T22368] bridge_slave_0: entered promiscuous mode [ 734.597390][T22368] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.604476][T22368] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.611544][T22368] bridge_slave_1: entered allmulticast mode [ 734.618098][T22368] bridge_slave_1: entered promiscuous mode [ 734.677064][T22368] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.684152][T22368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.691461][T22368] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.698551][T22368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.721275][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.728553][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.738435][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.745529][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.755056][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.762193][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.789663][T22368] veth0_vlan: entered promiscuous mode [ 734.801672][T22368] veth1_macvtap: entered promiscuous mode [ 735.080558][T22385] rust_binder: Write failure EINVAL in pid:5 [ 735.426692][ T305] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 735.464071][T22419] overlayfs: failed to clone upperpath [ 735.576441][ T305] usb 4-1: device descriptor read/64, error -71 [ 735.665645][T22427] fuse: Bad value for 'fd' [ 735.832905][ T305] usb 4-1: device descriptor read/64, error -71 [ 735.986455][T22448] syzkaller0: entered allmulticast mode [ 736.089526][ T305] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 736.239112][ T305] usb 4-1: device descriptor read/64, error -71 [ 736.261047][ T36] audit: type=1400 audit(1750464989.805:2303): avc: denied { accept } for pid=22462 comm="syz.8.8899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 736.466433][ T36] audit: type=1400 audit(1750464990.002:2304): avc: denied { read } for pid=22464 comm="syz.9.8900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 736.495865][ T305] usb 4-1: device descriptor read/64, error -71 [ 736.613389][ T305] usb usb4-port1: attempt power cycle [ 736.977055][ T305] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 736.999381][ T305] usb 4-1: device descriptor read/8, error -71 [ 737.138139][ T305] usb 4-1: device descriptor read/8, error -71 [ 737.395063][ T305] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 737.416337][ T305] usb 4-1: device descriptor read/8, error -71 [ 737.555435][ T305] usb 4-1: device descriptor read/8, error -71 [ 737.671769][ T305] usb usb4-port1: unable to enumerate USB device [ 738.479358][T22560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 738.479472][T22560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 738.518289][ T36] audit: type=1400 audit(1750464991.919:2305): avc: denied { read } for pid=22565 comm="syz.3.8942" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 738.571347][ T36] audit: type=1400 audit(1750464991.966:2306): avc: denied { append } for pid=22565 comm="syz.3.8942" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 738.839197][T22584] ip6_vti0: entered promiscuous mode [ 738.869013][ T7386] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 738.902359][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8951'. [ 738.934902][T22592] fuse: Bad value for 'user_id' [ 738.939815][T22592] fuse: Bad value for 'user_id' [ 739.030775][ T7386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 739.041977][ T7386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.052067][ T7386] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 739.061468][ T7386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.070101][ T7386] usb 4-1: config 0 descriptor?? [ 739.202761][T22611] fuse: Bad value for 'user_id' [ 739.207939][T22611] fuse: Bad value for 'user_id' [ 739.245285][T22613] overlayfs: failed to clone upperpath [ 739.506870][ T7386] savu 0003:1E7D:2D5A.004E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 739.726800][ T36] audit: type=1400 audit(1750464993.051:2307): avc: denied { write } for pid=22625 comm="syz.4.8968" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 739.778277][ T305] usb 4-1: USB disconnect, device number 50 [ 739.904310][T22633] fuse: Bad value for 'user_id' [ 739.909308][T22633] fuse: Bad value for 'user_id' [ 739.949880][ T36] audit: type=1400 audit(1750464993.257:2308): avc: denied { setopt } for pid=22634 comm="syz.8.8972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 740.039575][ T36] audit: type=1400 audit(1750464993.341:2309): avc: denied { ioctl } for pid=22648 comm="syz.4.8979" path="socket:[198740]" dev="sockfs" ino=198740 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 740.066696][T22652] fuse: Bad value for 'fd' [ 740.176617][T22663] block device autoloading is deprecated and will be removed. [ 740.205115][T22663] syz.4.8986: attempt to access beyond end of device [ 740.205115][T22663] loop0: rw=2048, sector=48, nr_sectors = 8 limit=0 [ 740.238009][T22670] FAULT_INJECTION: forcing a failure. [ 740.238009][T22670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.258826][T22670] CPU: 0 UID: 0 PID: 22670 Comm: syz.4.8987 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 740.258866][T22670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.258881][T22670] Call Trace: [ 740.258888][T22670] [ 740.258898][T22670] __dump_stack+0x21/0x30 [ 740.258928][T22670] dump_stack_lvl+0x10c/0x190 [ 740.258953][T22670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 740.258978][T22670] ? vsnprintf+0x7b4/0x1aa0 [ 740.259005][T22670] ? __asan_memcpy+0x5a/0x80 [ 740.259029][T22670] dump_stack+0x19/0x20 [ 740.259052][T22670] should_fail_ex+0x3d9/0x530 [ 740.259076][T22670] should_fail+0xf/0x20 [ 740.259098][T22670] should_fail_usercopy+0x1e/0x30 [ 740.259122][T22670] _copy_from_user+0x22/0xb0 [ 740.259149][T22670] kstrtouint_from_user+0xc2/0x150 [ 740.259171][T22670] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 740.259194][T22670] ? selinux_file_permission+0x309/0xb30 [ 740.259226][T22670] ? __cfi_selinux_file_permission+0x10/0x10 [ 740.259257][T22670] proc_fail_nth_write+0x89/0x210 [ 740.259278][T22670] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 740.259299][T22670] ? bpf_lsm_file_permission+0xd/0x20 [ 740.259323][T22670] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 740.259344][T22670] vfs_write+0x3c0/0xe80 [ 740.259370][T22670] ? __cfi_vsock_connectible_setsockopt+0x10/0x10 [ 740.259402][T22670] ? __cfi_vfs_write+0x10/0x10 [ 740.259426][T22670] ? __kasan_check_write+0x18/0x20 [ 740.259449][T22670] ? mutex_lock+0x92/0x1c0 [ 740.259468][T22670] ? __cfi_mutex_lock+0x10/0x10 [ 740.259498][T22670] ? __fget_files+0x2c5/0x340 [ 740.259528][T22670] ksys_write+0x141/0x250 [ 740.259553][T22670] ? __cfi_ksys_write+0x10/0x10 [ 740.259578][T22670] ? __kasan_check_write+0x18/0x20 [ 740.259601][T22670] ? __kasan_check_read+0x15/0x20 [ 740.259625][T22670] __x64_sys_write+0x7f/0x90 [ 740.259650][T22670] x64_sys_call+0x271c/0x2ee0 [ 740.259678][T22670] do_syscall_64+0x58/0xf0 [ 740.259704][T22670] ? clear_bhb_loop+0x35/0x90 [ 740.259735][T22670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 740.259764][T22670] RIP: 0033:0x7feb2418d3df [ 740.259783][T22670] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 740.259801][T22670] RSP: 002b:00007feb24f35030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 740.259824][T22670] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feb2418d3df [ 740.259840][T22670] RDX: 0000000000000001 RSI: 00007feb24f350a0 RDI: 0000000000000004 [ 740.259855][T22670] RBP: 00007feb24f35090 R08: 0000000000000000 R09: 0000000000000000 [ 740.259870][T22670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 740.259883][T22670] R13: 0000000000000000 R14: 00007feb243b5fa0 R15: 00007ffd923aeb28 [ 740.259902][T22670] [ 740.580667][ T36] audit: type=1400 audit(1750464993.846:2310): avc: denied { setcheckreqprot } for pid=22677 comm="syz.4.8991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 740.655260][T22681] fuse: Bad value for 'fd' [ 740.730495][ T36] audit: type=1400 audit(1750464993.987:2311): avc: denied { getopt } for pid=22688 comm="syz.3.8996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 740.771716][ T36] audit: type=1400 audit(1750464994.015:2312): avc: denied { create } for pid=22691 comm="syz.3.8997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 741.099528][T22702] fuse: Bad value for 'fd' [ 741.453331][T22738] overlayfs: failed to clone upperpath [ 741.462385][T22740] overlayfs: failed to clone upperpath [ 741.955736][T22762] netlink: 124 bytes leftover after parsing attributes in process `syz.9.9028'. [ 741.966018][T22762] netlink: 192 bytes leftover after parsing attributes in process `syz.9.9028'. [ 742.220421][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9036'. [ 742.257949][ T305] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 742.298861][T22789] bpf: Bad value for 'mode' [ 742.430120][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.440968][ T305] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.453901][ T305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.467094][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.475192][ T305] usb 4-1: Product: syz [ 742.479391][ T305] usb 4-1: Manufacturer: syz [ 742.484392][ T305] usb 4-1: SerialNumber: syz [ 742.490759][ T305] usb 4-1: selecting invalid altsetting 1 [ 742.515426][T22795] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 742.536069][T22797] fuse: Bad value for 'fd' [ 742.883791][T22838] overlayfs: missing 'lowerdir' [ 742.919476][ T305] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 742.925708][ T305] cdc_ncm 4-1:1.0: bind() failure [ 742.932176][ T305] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 742.939117][ T305] cdc_ncm 4-1:1.1: bind() failure [ 743.127052][ T36] audit: type=1400 audit(1750464996.231:2313): avc: denied { create } for pid=22877 comm="syz.9.9080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 743.860331][ T36] audit: type=1400 audit(1750464996.905:2314): avc: denied { bind } for pid=22921 comm="syz.9.9098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.894932][ T36] audit: type=1400 audit(1750464996.952:2315): avc: denied { setattr } for pid=22921 comm="syz.9.9098" name="UDPLITEv6" dev="sockfs" ino=200209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 744.430948][T22931] fuse: Bad value for 'rootmode' [ 744.475517][T22935] overlayfs: failed to clone upperpath [ 744.481875][ T36] audit: type=1400 audit(1750464997.494:2316): avc: denied { create } for pid=22934 comm="syz.8.9104" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 744.504153][ T36] audit: type=1400 audit(1750464997.522:2317): avc: denied { link } for pid=22934 comm="syz.8.9104" name="file1" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 744.647696][T22950] fuse: Bad value for 'rootmode' [ 745.224527][ T372] usb 4-1: USB disconnect, device number 52 [ 745.524863][T22974] fuse: Unknown parameter 'use00000000000000000000' [ 745.582749][ T372] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 745.743071][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 745.750530][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.761856][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.775226][ T372] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 745.784313][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.793001][ T372] usb 4-1: config 0 descriptor?? [ 746.228128][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.235430][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.242669][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.249951][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.257233][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.264628][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.271922][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.279215][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.286625][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.294256][ T372] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 746.304238][ T372] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.004F/input/input170 [ 746.317056][ T372] microsoft 0003:045E:07DA.004F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 746.444864][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 746.444886][ T36] audit: type=1400 audit(1750464999.328:2320): avc: denied { getopt } for pid=22971 comm="syz.3.9119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 746.494358][T22994] fuse: Unknown parameter 'use00000000000000000000' [ 746.524409][ T372] usb 4-1: USB disconnect, device number 53 [ 746.629366][T23006] overlayfs: failed to clone upperpath [ 746.708559][T23014] fuse: Unknown parameter 'use00000000000000000000' [ 746.764145][ T36] audit: type=1400 audit(1750464999.627:2321): avc: denied { setattr } for pid=23023 comm="syz.9.9143" name="KEY" dev="sockfs" ino=199373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 746.801285][T23030] overlayfs: failed to clone upperpath [ 746.926330][T23040] fuse: Unknown parameter 'user_i00000000000000000000' [ 747.239242][T23058] fuse: Unknown parameter 'user_i00000000000000000000' [ 747.426985][T23077] fuse: Unknown parameter 'user_i00000000000000000000' [ 747.605204][T23096] fuse: Unknown parameter 'user_id00000000000000000000' [ 747.785333][T23100] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.792429][T23100] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.799873][T23100] bridge_slave_0: entered allmulticast mode [ 747.806268][T23100] bridge_slave_0: entered promiscuous mode [ 747.812744][T23100] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.819858][T23100] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.827525][T23100] bridge_slave_1: entered allmulticast mode [ 747.833963][T23100] bridge_slave_1: entered promiscuous mode [ 748.116212][T23117] fuse: Unknown parameter 'user_id00000000000000000000' [ 748.160729][ T13] bridge_slave_1: left allmulticast mode [ 748.166514][ T13] bridge_slave_1: left promiscuous mode [ 748.172305][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.179883][ T13] bridge_slave_0: left allmulticast mode [ 748.185664][ T13] bridge_slave_0: left promiscuous mode [ 748.191679][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.275326][T23100] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.282456][T23100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.289959][T23100] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.297035][T23100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.333273][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.340860][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.351998][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.358868][T23135] overlayfs: failed to clone upperpath [ 748.359195][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.374876][ T13] veth1_macvtap: left promiscuous mode [ 748.380425][ T13] veth0_vlan: left promiscuous mode [ 748.449054][T23145] fuse: Unknown parameter 'user_id00000000000000000000' [ 748.458008][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.465110][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.508271][T23100] veth0_vlan: entered promiscuous mode [ 748.528450][ T36] audit: type=1107 audit(1750465001.283:2322): pid=23148 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='A' [ 748.535489][T23100] veth1_macvtap: entered promiscuous mode [ 748.568286][T23153] fuse: Bad value for 'user_id' [ 748.573229][T23153] fuse: Bad value for 'user_id' [ 748.579026][ T36] audit: type=1400 audit(1750465001.329:2323): avc: denied { write } for pid=23152 comm="syz.3.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 748.702754][T23164] fuse: Bad value for 'fd' [ 749.110616][ T7386] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 749.281662][ T7386] usb 10-1: Using ep0 maxpacket: 32 [ 749.288377][ T7386] usb 10-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 749.301404][ T7386] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.312535][ T7386] usb 10-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 749.325852][ T7386] usb 10-1: config 0 interface 0 has no altsetting 0 [ 749.332934][ T7386] usb 10-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 749.342527][ T7386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.352102][ T7386] usb 10-1: config 0 descriptor?? [ 749.689930][T23237] fuse: Unknown parameter '00000000000000000003' [ 749.786839][T23182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.795403][T23182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.892805][T23256] fuse: Unknown parameter '00000000000000000003' [ 749.899709][ T7386] usbhid 10-1:0.0: can't add hid device: -71 [ 749.906277][ T7386] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 749.918026][ T7386] usb 10-1: USB disconnect, device number 33 [ 749.980242][ T36] audit: type=1326 audit(1750465002.639:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23261 comm="syz.8.9251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3278e929 code=0x7ffc0000 [ 750.004214][ T36] audit: type=1326 audit(1750465002.639:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23261 comm="syz.8.9251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3278e929 code=0x7ffc0000 [ 750.035511][T23267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23267 comm=syz.3.9250 [ 750.048528][ T36] audit: type=1326 audit(1750465002.639:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23261 comm="syz.8.9251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4b3278e929 code=0x7ffc0000 [ 750.074800][ T36] audit: type=1326 audit(1750465002.639:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23261 comm="syz.8.9251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3278e929 code=0x7ffc0000 [ 750.075957][T23272] overlayfs: failed to clone upperpath [ 750.098459][ T36] audit: type=1326 audit(1750465002.639:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23261 comm="syz.8.9251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4b3278e929 code=0x7ffc0000 [ 750.127642][ T36] audit: type=1326 audit(1750465002.639:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23261 comm="syz.8.9251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3278e929 code=0x7ffc0000 [ 750.162499][T23276] overlayfs: failed to clone upperpath [ 750.179671][T23278] fuse: Unknown parameter '00000000000000000003' [ 750.454415][T23304] new mount options do not match the existing superblock, will be ignored [ 750.673459][T23318] fuse: Unknown parameter '00000000000000000003' [ 750.912690][T23336] fuse: Unknown parameter '00000000000000000003' [ 751.038046][T23353] overlayfs: failed to clone upperpath [ 751.121870][T23361] fuse: Unknown parameter 'fd00000000000000000003' [ 751.665717][ T7386] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 751.768134][T23381] fuse: Unknown parameter 'fd00000000000000000003' [ 751.836707][ T7386] usb 10-1: Using ep0 maxpacket: 32 [ 751.843238][ T7386] usb 10-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 751.854800][ T7386] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.868593][ T7386] usb 10-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 751.889517][ T7386] usb 10-1: config 0 interface 0 has no altsetting 0 [ 751.905188][ T7386] usb 10-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 751.916648][T23403] fuse: Unknown parameter 'fd00000000000000000003' [ 751.920867][ T7386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.933305][ T7386] usb 10-1: config 0 descriptor?? [ 751.954465][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 751.954484][ T36] audit: type=1400 audit(1750465004.491:2377): avc: denied { accept } for pid=23406 comm="syz.4.9316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 752.012127][T23415] can: request_module (can-proto-0) failed. [ 752.064994][ T36] audit: type=1400 audit(1750465004.585:2378): avc: denied { mount } for pid=23420 comm="syz.8.9323" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 752.370008][T23369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.378796][T23369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.415673][ T7386] usbhid 10-1:0.0: can't add hid device: -71 [ 752.421894][ T7386] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 752.430931][ T7386] usb 10-1: USB disconnect, device number 34 [ 752.580390][T23451] overlayfs: failed to clone upperpath [ 753.036585][T23516] rust_binder: Write failure EINVAL in pid:21 [ 753.037929][ T36] audit: type=1326 audit(1750465005.501:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23517 comm="syz.4.9367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7feb2418e929 code=0x0 [ 753.071988][T23516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 753.088651][ T36] audit: type=1400 audit(1750465005.548:2380): avc: denied { bind } for pid=23515 comm="syz.9.9365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 753.242600][T23539] fuse: Bad value for 'group_id' [ 753.247706][T23539] fuse: Bad value for 'group_id' [ 753.253837][T23539] overlayfs: failed to clone upperpath [ 753.493778][ T7386] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 753.657278][ T7386] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.667766][ T7386] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.678947][ T7386] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 753.694151][ T7386] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.703600][ T7386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.711970][ T7386] usb 10-1: Product: syz [ 753.716258][ T7386] usb 10-1: Manufacturer: syz [ 753.721151][ T7386] usb 10-1: SerialNumber: syz [ 753.955475][ T36] audit: type=1400 audit(1750465006.362:2381): avc: denied { read } for pid=23563 comm="syz.4.9386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 754.232218][ T36] audit: type=1326 audit(1750465006.614:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23580 comm="syz.3.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864638e929 code=0x7ffc0000 [ 754.256913][ T36] audit: type=1326 audit(1750465006.614:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23580 comm="syz.3.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864638e929 code=0x7ffc0000 [ 754.281635][ T36] audit: type=1326 audit(1750465006.614:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23580 comm="syz.3.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f864638e929 code=0x7ffc0000 [ 754.305730][ T36] audit: type=1326 audit(1750465006.614:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23580 comm="syz.3.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864638e929 code=0x7ffc0000 [ 754.329882][ T36] audit: type=1326 audit(1750465006.614:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23580 comm="syz.3.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f864638e929 code=0x7ffc0000 [ 754.799450][ T7386] cdc_ncm 10-1:1.0: bind() failure [ 754.807802][ T7386] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 754.818180][ T7386] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 754.829315][ T7386] usb 10-1: USB disconnect, device number 35 [ 755.367345][T23660] binder: Bad value for 'max' [ 755.621186][ T7162] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 755.781531][ T7162] usb 10-1: Using ep0 maxpacket: 32 [ 755.793470][ T7162] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 755.802923][ T7162] usb 10-1: config 0 has no interface number 0 [ 755.813636][ T7162] usb 10-1: config 0 interface 2 has no altsetting 0 [ 755.823214][ T7162] usb 10-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 755.836190][ T7162] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.847867][ T7162] usb 10-1: Product: syz [ 755.853361][ T7162] usb 10-1: Manufacturer: syz [ 755.859377][ T7162] usb 10-1: SerialNumber: syz [ 755.867300][ T7162] usb 10-1: config 0 descriptor?? [ 756.096148][ T7162] usb 10-1: invalid MIDI out EP 0 [ 756.110107][ T7162] snd-usb-audio 10-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 756.124840][ T7162] usb 10-1: USB disconnect, device number 36 [ 756.137589][T21816] udevd[21816]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 756.957518][ T7162] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 756.999207][T23704] 9pnet_virtio: no channels available for device syz [ 757.118010][ T7162] usb 10-1: Using ep0 maxpacket: 16 [ 757.124503][ T7162] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 757.134884][ T7162] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 757.149055][ T7162] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.158489][ T7162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 757.166913][ T7162] usb 10-1: SerialNumber: syz [ 757.172903][T23700] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 757.182260][ T7162] usb 10-1: bad CDC descriptors [ 757.244519][T23731] xfrm0: mtu less than device minimum [ 757.397202][ T7386] usb 10-1: USB disconnect, device number 37 [ 757.632354][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 757.632395][ T36] audit: type=1400 audit(1750465009.795:2397): avc: denied { read } for pid=23762 comm="syz.4.9473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 757.955740][ T36] audit: type=1400 audit(1750465010.094:2398): avc: denied { create } for pid=23766 comm="syz.9.9474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 758.203108][ T36] audit: type=1326 audit(1750465010.328:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23786 comm="syz.9.9483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bda58e929 code=0x0 [ 758.304887][ T36] audit: type=1400 audit(1750465010.431:2400): avc: denied { sqpoll } for pid=23797 comm="syz.8.9487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 758.324365][ T36] audit: type=1400 audit(1750465010.431:2401): avc: denied { lock } for pid=23797 comm="syz.8.9487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=202639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 759.123832][T23852] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9509'. [ 759.433250][ T36] audit: type=1400 audit(1750465011.479:2402): avc: denied { shutdown } for pid=23880 comm="syz.3.9522" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 759.544658][ T7162] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 759.685907][ T7162] usb 10-1: device descriptor read/64, error -71 [ 759.940208][ T7162] usb 10-1: device descriptor read/64, error -71 [ 760.196822][ T7162] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 760.261504][ T36] audit: type=1400 audit(1750465012.255:2403): avc: denied { create } for pid=23914 comm="syz.8.9536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 760.357139][ T7162] usb 10-1: device descriptor read/64, error -71 [ 760.449627][ T36] audit: type=1400 audit(1750465012.433:2404): avc: denied { getopt } for pid=23940 comm="syz.3.9549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 760.613714][ T7162] usb 10-1: device descriptor read/64, error -71 [ 760.731394][ T7162] usb usb10-port1: attempt power cycle [ 761.094853][ T7162] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 761.117362][ T7162] usb 10-1: device descriptor read/8, error -71 [ 761.256350][ T7162] usb 10-1: device descriptor read/8, error -71 [ 761.511739][ T7162] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 761.534143][ T7162] usb 10-1: device descriptor read/8, error -71 [ 761.673154][ T7162] usb 10-1: device descriptor read/8, error -71 [ 761.678188][ T36] audit: type=1326 audit(1750465013.583:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23984 comm="syz.4.9568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb2418e929 code=0x0 [ 761.702589][ T36] audit: type=1326 audit(1750465013.593:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23961 comm="syz.3.9558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f864638e929 code=0x0 [ 761.789787][ T7162] usb usb10-port1: unable to enumerate USB device [ 762.626697][T24017] FAULT_INJECTION: forcing a failure. [ 762.626697][T24017] name failslab, interval 1, probability 0, space 0, times 0 [ 762.639560][T24017] CPU: 0 UID: 0 PID: 24017 Comm: syz.9.9580 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 762.639598][T24017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.639613][T24017] Call Trace: [ 762.639621][T24017] [ 762.639630][T24017] __dump_stack+0x21/0x30 [ 762.639661][T24017] dump_stack_lvl+0x10c/0x190 [ 762.639687][T24017] ? __cfi_dump_stack_lvl+0x10/0x10 [ 762.639713][T24017] dump_stack+0x19/0x20 [ 762.639737][T24017] should_fail_ex+0x3d9/0x530 [ 762.639760][T24017] should_failslab+0xac/0x100 [ 762.639797][T24017] kmem_cache_alloc_noprof+0x42/0x3a0 [ 762.639821][T24017] ? security_inode_alloc+0x51/0x200 [ 762.639846][T24017] security_inode_alloc+0x51/0x200 [ 762.639870][T24017] inode_init_always_gfp+0x756/0x9e0 [ 762.639899][T24017] ? __cfi_sock_alloc_inode+0x10/0x10 [ 762.639924][T24017] alloc_inode+0xc5/0x270 [ 762.639952][T24017] ? bpf_lsm_socket_create+0xd/0x20 [ 762.639984][T24017] new_inode_pseudo+0x19/0x40 [ 762.640012][T24017] __sock_create+0x130/0x810 [ 762.640037][T24017] __sys_socket+0xe2/0x1c0 [ 762.640062][T24017] __x64_sys_socket+0x7e/0x90 [ 762.640088][T24017] x64_sys_call+0x2608/0x2ee0 [ 762.640114][T24017] do_syscall_64+0x58/0xf0 [ 762.640142][T24017] ? clear_bhb_loop+0x35/0x90 [ 762.640174][T24017] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 762.640205][T24017] RIP: 0033:0x7f1bda58e929 [ 762.640223][T24017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.640241][T24017] RSP: 002b:00007f1bdb39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 762.640265][T24017] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58e929 [ 762.640281][T24017] RDX: 00000000000000fb RSI: 0000000000000003 RDI: 0000000000000017 [ 762.640295][T24017] RBP: 00007f1bdb39b090 R08: 0000000000000000 R09: 0000000000000000 [ 762.640310][T24017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.640323][T24017] R13: 0000000000000001 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 762.640341][T24017] [ 762.640357][T24017] socket: no more sockets [ 762.887075][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9585'. [ 762.987482][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 762.987501][ T36] audit: type=1400 audit(1750465014.809:2409): avc: denied { create } for pid=24044 comm="syz.8.9591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 763.016158][ T36] audit: type=1400 audit(1750465014.809:2410): avc: denied { getopt } for pid=24044 comm="syz.8.9591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 763.037360][ T36] audit: type=1400 audit(1750465014.809:2411): avc: denied { ioctl } for pid=24044 comm="syz.8.9591" path="socket:[204003]" dev="sockfs" ino=204003 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 763.067250][T24049] rust_binder: Write failure EFAULT in pid:70 [ 763.103601][T24055] binder: Bad value for 'stats' [ 763.204695][T24070] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9603'. [ 763.214104][T24070] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9603'. [ 763.489493][ T62] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 763.655604][ T62] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 763.665720][ T62] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 763.677553][ T62] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.686790][ T62] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.695112][ T62] usb 10-1: Product: syz [ 763.699611][ T62] usb 10-1: Manufacturer: syz [ 763.704692][ T62] usb 10-1: SerialNumber: syz [ 764.139248][T24072] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 764.146676][T24072] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 765.226918][ T62] cdc_ncm 10-1:1.0: bind() failure [ 765.233013][ T62] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 765.239983][ T62] cdc_ncm 10-1:1.1: bind() failure [ 765.246340][ T62] usb 10-1: USB disconnect, device number 42 [ 766.065917][ T62] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 766.226400][ T62] usb 10-1: Using ep0 maxpacket: 16 [ 766.232941][ T62] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 766.243235][ T62] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 766.257394][ T62] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.266759][ T62] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 766.275383][ T62] usb 10-1: SerialNumber: syz [ 766.285559][T24199] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 766.514139][ T62] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 766.523889][ T62] usb 10-1: USB disconnect, device number 43 [ 767.127804][T24252] 9pnet_virtio: no channels available for device syz [ 767.142072][T24252] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 767.167278][ T36] audit: type=1400 audit(1750465018.709:2412): avc: denied { relabelto } for pid=24251 comm="syz.4.9681" name="file0" dev="tmpfs" ino=1794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/usr/lib/telepathy/mission-control-5" [ 767.195235][ T36] audit: type=1400 audit(1750465018.709:2413): avc: denied { associate } for pid=24251 comm="syz.4.9681" name="file0" dev="tmpfs" ino=1794 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/usr/lib/telepathy/mission-control-5" [ 767.223361][ T36] audit: type=1400 audit(1750465018.709:2414): avc: denied { rmdir } for pid=20392 comm="syz-executor" name="file0" dev="tmpfs" ino=1794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="/usr/lib/telepathy/mission-control-5" [ 767.250553][ T36] audit: type=1400 audit(1750465018.719:2415): avc: denied { read } for pid=24257 comm="syz.4.9684" path="socket:[204294]" dev="sockfs" ino=204294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 767.281117][ T36] audit: type=1400 audit(1750465018.775:2416): avc: denied { setopt } for pid=24265 comm="syz.9.9687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 767.292535][T24272] cgroup: Unknown subsys name 'rlimit' [ 767.355232][T24279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9693'. [ 767.443404][ T36] audit: type=1400 audit(1750465018.971:2417): avc: denied { write } for pid=24293 comm="syz.4.9699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 768.208458][T24330] FAULT_INJECTION: forcing a failure. [ 768.208458][T24330] name failslab, interval 1, probability 0, space 0, times 0 [ 768.221169][T24330] CPU: 0 UID: 0 PID: 24330 Comm: syz.9.9714 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 768.221209][T24330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.221225][T24330] Call Trace: [ 768.221232][T24330] [ 768.221243][T24330] __dump_stack+0x21/0x30 [ 768.221275][T24330] dump_stack_lvl+0x10c/0x190 [ 768.221304][T24330] ? __cfi_dump_stack_lvl+0x10/0x10 [ 768.221326][T24330] dump_stack+0x19/0x20 [ 768.221345][T24330] should_fail_ex+0x3d9/0x530 [ 768.221365][T24330] should_failslab+0xac/0x100 [ 768.221389][T24330] __kmalloc_cache_noprof+0x41/0x3c0 [ 768.221409][T24330] ? __se_sys_mount+0x15f/0x480 [ 768.221431][T24330] __se_sys_mount+0x15f/0x480 [ 768.221451][T24330] ? ksys_write+0x1ef/0x250 [ 768.221472][T24330] ? __x64_sys_mount+0xf0/0xf0 [ 768.221494][T24330] __x64_sys_mount+0xc3/0xf0 [ 768.221514][T24330] x64_sys_call+0x2021/0x2ee0 [ 768.221537][T24330] do_syscall_64+0x58/0xf0 [ 768.221560][T24330] ? clear_bhb_loop+0x35/0x90 [ 768.221587][T24330] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 768.221621][T24330] RIP: 0033:0x7f1bda58e929 [ 768.221642][T24330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.221663][T24330] RSP: 002b:00007f1bdb39b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 768.221684][T24330] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58e929 [ 768.221697][T24330] RDX: 0000200000002300 RSI: 0000200000000200 RDI: 0000000000000000 [ 768.221709][T24330] RBP: 00007f1bdb39b090 R08: 0000200000002400 R09: 0000000000000000 [ 768.221728][T24330] R10: 0000000000808000 R11: 0000000000000246 R12: 0000000000000001 [ 768.221740][T24330] R13: 0000000000000000 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 768.221755][T24330] [ 768.437495][T24342] rust_binder: Write failure EFAULT in pid:106 [ 768.630027][T24366] netlink: 164 bytes leftover after parsing attributes in process `syz.9.9731'. [ 768.647318][ T36] audit: type=1400 audit(1750465020.103:2418): avc: denied { lock } for pid=24365 comm="syz.9.9731" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 768.773795][ T36] audit: type=1400 audit(1750465020.215:2419): avc: denied { write } for pid=24370 comm="syz.9.9733" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 768.852545][T24374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 768.852878][T24373] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 768.862473][T24373] rust_binder: Error in use_page_slow: EBUSY [ 768.872947][T24373] rust_binder: use_range failure EBUSY [ 768.879305][T24373] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 768.884800][T24373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 768.892622][T24373] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 768.902059][T24373] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:118 [ 769.251238][T24399] cgroup: Unknown subsys name 'rlimit' [ 769.435948][T24418] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 769.445234][T24418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 769.445256][T24418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:135 [ 769.490448][T24422] FAULT_INJECTION: forcing a failure. [ 769.490448][T24422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.512954][T24422] CPU: 0 UID: 0 PID: 24422 Comm: syz.9.9752 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 769.512991][T24422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.513004][T24422] Call Trace: [ 769.513012][T24422] [ 769.513020][T24422] __dump_stack+0x21/0x30 [ 769.513050][T24422] dump_stack_lvl+0x10c/0x190 [ 769.513075][T24422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 769.513097][T24422] dump_stack+0x19/0x20 [ 769.513114][T24422] should_fail_ex+0x3d9/0x530 [ 769.513132][T24422] should_fail+0xf/0x20 [ 769.513147][T24422] should_fail_usercopy+0x1e/0x30 [ 769.513167][T24422] _copy_to_user+0x24/0xa0 [ 769.513187][T24422] simple_read_from_buffer+0xed/0x160 [ 769.513212][T24422] proc_fail_nth_read+0x19e/0x210 [ 769.513228][T24422] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 769.513243][T24422] ? bpf_lsm_file_permission+0xd/0x20 [ 769.513260][T24422] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 769.513275][T24422] vfs_read+0x278/0xb60 [ 769.513292][T24422] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 769.513316][T24422] ? __cfi_vfs_read+0x10/0x10 [ 769.513332][T24422] ? __kasan_check_write+0x18/0x20 [ 769.513350][T24422] ? mutex_lock+0x92/0x1c0 [ 769.513364][T24422] ? __cfi_mutex_lock+0x10/0x10 [ 769.513379][T24422] ? __fget_files+0x2c5/0x340 [ 769.513401][T24422] ksys_read+0x141/0x250 [ 769.513419][T24422] ? __cfi_ksys_read+0x10/0x10 [ 769.513437][T24422] ? __kasan_check_read+0x15/0x20 [ 769.513454][T24422] __x64_sys_read+0x7f/0x90 [ 769.513472][T24422] x64_sys_call+0x2638/0x2ee0 [ 769.513498][T24422] do_syscall_64+0x58/0xf0 [ 769.513526][T24422] ? clear_bhb_loop+0x35/0x90 [ 769.513556][T24422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 769.513579][T24422] RIP: 0033:0x7f1bda58d33c [ 769.513593][T24422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 769.513607][T24422] RSP: 002b:00007f1bdb39b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 769.513625][T24422] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58d33c [ 769.513637][T24422] RDX: 000000000000000f RSI: 00007f1bdb39b0a0 RDI: 0000000000000004 [ 769.513648][T24422] RBP: 00007f1bdb39b090 R08: 0000000000000000 R09: 0000000000000000 [ 769.513658][T24422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.513667][T24422] R13: 0000000000000000 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 769.513680][T24422] [ 769.779945][T24426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 769.781003][T24427] rust_binder: Error while translating object. [ 769.790335][T24427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 769.796602][T24427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 770.750768][T24465] FAULT_INJECTION: forcing a failure. [ 770.750768][T24465] name failslab, interval 1, probability 0, space 0, times 0 [ 770.773313][T24465] CPU: 1 UID: 0 PID: 24465 Comm: syz.9.9768 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 770.773349][T24465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.773366][T24465] Call Trace: [ 770.773373][T24465] [ 770.773383][T24465] __dump_stack+0x21/0x30 [ 770.773414][T24465] dump_stack_lvl+0x10c/0x190 [ 770.773439][T24465] ? __cfi_dump_stack_lvl+0x10/0x10 [ 770.773466][T24465] dump_stack+0x19/0x20 [ 770.773488][T24465] should_fail_ex+0x3d9/0x530 [ 770.773512][T24465] should_failslab+0xac/0x100 [ 770.773542][T24465] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 770.773569][T24465] ? __d_alloc+0x42/0x8e0 [ 770.773592][T24465] __d_alloc+0x42/0x8e0 [ 770.773612][T24465] ? alloc_inode+0xdb/0x270 [ 770.773634][T24465] d_alloc_anon+0x1b/0x30 [ 770.773650][T24465] path_from_stashed+0x3ca/0x870 [ 770.773667][T24465] ? __cfi__raw_spin_lock+0x10/0x10 [ 770.773689][T24465] ? __cfi_path_from_stashed+0x10/0x10 [ 770.773705][T24465] ? _raw_spin_unlock+0x45/0x60 [ 770.773725][T24465] ns_get_path+0x7a/0xa0 [ 770.773746][T24465] proc_ns_get_link+0xf7/0x210 [ 770.773769][T24465] ? __cfi_proc_ns_get_link+0x10/0x10 [ 770.773791][T24465] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 770.773812][T24465] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 770.773827][T24465] ? security_inode_follow_link+0x74/0x140 [ 770.773848][T24465] ? __cfi_proc_ns_get_link+0x10/0x10 [ 770.773880][T24465] pick_link+0x671/0xe80 [ 770.773898][T24465] step_into+0xc58/0xf50 [ 770.773915][T24465] ? __d_add+0x639/0xaa0 [ 770.773934][T24465] ? set_root+0x420/0x420 [ 770.773952][T24465] ? __kasan_check_write+0x18/0x20 [ 770.773970][T24465] path_openat+0x19dd/0x34b0 [ 770.773997][T24465] ? do_filp_open+0x3e0/0x3e0 [ 770.774021][T24465] do_filp_open+0x1c6/0x3e0 [ 770.774044][T24465] ? __cfi_do_filp_open+0x10/0x10 [ 770.774069][T24465] ? alloc_fd+0x4e7/0x5a0 [ 770.774090][T24465] do_sys_openat2+0x12c/0x1c0 [ 770.774105][T24465] ? fput+0x1a5/0x240 [ 770.774127][T24465] ? do_sys_open+0x100/0x100 [ 770.774141][T24465] ? ksys_write+0x1ef/0x250 [ 770.774159][T24465] ? __cfi_ksys_write+0x10/0x10 [ 770.774178][T24465] __x64_sys_openat+0x13a/0x170 [ 770.774193][T24465] x64_sys_call+0xe69/0x2ee0 [ 770.774213][T24465] do_syscall_64+0x58/0xf0 [ 770.774234][T24465] ? clear_bhb_loop+0x35/0x90 [ 770.774259][T24465] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 770.774282][T24465] RIP: 0033:0x7f1bda58d290 [ 770.774295][T24465] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 770.774309][T24465] RSP: 002b:00007f1bdb39af60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 770.774326][T24465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bda58d290 [ 770.774337][T24465] RDX: 0000000000000000 RSI: 00007f1bda610c51 RDI: 00000000ffffff9c [ 770.774348][T24465] RBP: 00007f1bda610c51 R08: 0000000000000000 R09: 0000000000000000 [ 770.774358][T24465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 770.774369][T24465] R13: 0000000000000001 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 770.774382][T24465] [ 771.143145][T24486] fuse: Unknown parameter '0x0000000000000007 ' [ 771.151974][ T36] audit: type=1400 audit(1750465022.441:2420): avc: denied { setattr } for pid=24485 comm="syz.8.9777" name="" dev="pipefs" ino=205446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 771.273999][T24491] 9pnet_fd: Insufficient options for proto=fd [ 771.339304][ T36] audit: type=1400 audit(1750465022.619:2421): avc: denied { setattr } for pid=24496 comm="syz.4.9782" name="NETLINK" dev="sockfs" ino=205461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 771.752573][ T304] bridge_slave_1: left allmulticast mode [ 771.758717][ T304] bridge_slave_1: left promiscuous mode [ 771.767020][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.778930][ T304] bridge_slave_0: left allmulticast mode [ 771.791976][ T36] audit: type=1326 audit(1750465023.040:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24531 comm="syz.9.9799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bda58e929 code=0x0 [ 771.815705][ T304] bridge_slave_0: left promiscuous mode [ 771.824642][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.043264][T24532] binfmt_misc: register: failed to install interpreter file ./file0 [ 772.135211][T24545] binder: Bad value for 'max' [ 772.176428][ T304] veth1_macvtap: left promiscuous mode [ 772.194388][ T304] veth0_vlan: left promiscuous mode [ 772.408467][T24520] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.415691][T24520] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.424593][T24520] bridge_slave_0: entered allmulticast mode [ 772.432162][T24520] bridge_slave_0: entered promiscuous mode [ 772.439534][T24520] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.446818][T24520] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.454277][T24520] bridge_slave_1: entered allmulticast mode [ 772.460945][T24520] bridge_slave_1: entered promiscuous mode [ 772.541552][T24520] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.548695][T24520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.556160][T24520] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.563225][T24520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.599521][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.607131][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.617815][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.624921][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.642533][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.649740][T13378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.752268][T24520] veth0_vlan: entered promiscuous mode [ 772.772112][T24520] veth1_macvtap: entered promiscuous mode [ 772.911223][ T36] audit: type=1400 audit(1750465024.088:2423): avc: denied { bind } for pid=24575 comm="syz.1.9815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 773.128470][ T36] audit: type=1400 audit(1750465024.284:2424): avc: denied { setattr } for pid=24520 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 774.212147][ T9] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 774.361842][ T9] usb 10-1: device descriptor read/64, error -71 [ 774.618452][ T9] usb 10-1: device descriptor read/64, error -71 [ 774.896485][ T9] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 775.067445][ T9] usb 10-1: device descriptor read/64, error -71 [ 775.323984][ T9] usb 10-1: device descriptor read/64, error -71 [ 775.452416][ T9] usb usb10-port1: attempt power cycle [ 775.674863][ T36] audit: type=1326 audit(1750465026.669:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.700630][ T36] audit: type=1326 audit(1750465026.697:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.724412][ T36] audit: type=1326 audit(1750465026.697:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.748413][ T36] audit: type=1326 audit(1750465026.697:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.772213][ T36] audit: type=1326 audit(1750465026.697:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.796072][ T36] audit: type=1400 audit(1750465026.697:2430): avc: denied { watch watch_reads } for pid=24648 comm="syz.4.9845" path="/383" dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 775.819487][ T36] audit: type=1326 audit(1750465026.697:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.826464][ T9] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 775.843457][ T36] audit: type=1326 audit(1750465026.697:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.875082][ T36] audit: type=1326 audit(1750465026.697:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2418e929 code=0x7ffc0000 [ 775.891700][ T9] usb 10-1: device descriptor read/8, error -71 [ 775.899271][ T36] audit: type=1326 audit(1750465026.697:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.4.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb2418e52b code=0x7ffc0000 [ 776.062811][ T9] usb 10-1: device descriptor read/8, error -71 [ 776.318299][ T9] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 776.351317][ T9] usb 10-1: device descriptor read/8, error -71 [ 776.490391][ T9] usb 10-1: device descriptor read/8, error -71 [ 776.607302][ T9] usb usb10-port1: unable to enumerate USB device [ 777.579698][ T7162] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 777.741897][ T7162] usb 10-1: Using ep0 maxpacket: 32 [ 777.764782][ T7162] usb 10-1: unable to get BOS descriptor or descriptor too short [ 777.783748][ T7162] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.794469][ T7162] usb 10-1: config 0 has no interfaces? [ 777.815819][ T7162] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.834683][ T7162] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.851896][ T7162] usb 10-1: Product: syz [ 777.862796][ T7162] usb 10-1: Manufacturer: syz [ 777.872632][ T7162] usb 10-1: SerialNumber: syz [ 777.888602][ T7162] usb 10-1: config 0 descriptor?? [ 778.116876][T24681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.125650][T24681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.144801][ T7386] usb 10-1: USB disconnect, device number 48 [ 778.616693][ T7386] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 778.788835][ T7386] usb 10-1: config index 0 descriptor too short (expected 227, got 149) [ 778.797301][ T7386] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 778.808913][ T7386] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 778.817989][ T7386] usb 10-1: config 220 has an invalid descriptor of length 92, skipping remainder of the config [ 778.828557][ T7386] usb 10-1: config 220 has no interface number 2 [ 778.835103][ T7386] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 778.848489][ T7386] usb 10-1: config 220 interface 0 has no altsetting 0 [ 778.855463][ T7386] usb 10-1: config 220 interface 76 has no altsetting 0 [ 778.862616][ T7386] usb 10-1: config 220 interface 1 has no altsetting 0 [ 778.871231][ T7386] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 778.880568][ T7386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.888751][ T7386] usb 10-1: Product: syz [ 778.893085][ T7386] usb 10-1: Manufacturer: syz [ 778.897896][ T7386] usb 10-1: SerialNumber: syz [ 779.128354][ T7386] usb 10-1: selecting invalid altsetting 0 [ 779.141692][ T7386] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 779.161949][ T7386] usb 10-1: No valid video chain found. [ 779.179903][ T7386] usb 10-1: USB disconnect, device number 49 [ 779.721906][T24785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 779.721940][T24785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210 [ 779.752754][T24787] netlink: 'syz.8.9892': attribute type 4 has an invalid length. [ 780.948312][T24823] 9pnet_virtio: no channels available for device syz [ 781.146267][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 781.146289][ T36] audit: type=1400 audit(1750465031.786:2443): avc: denied { rename } for pid=24834 comm="syz.8.9913" name="file0" dev="tmpfs" ino=2785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 781.214539][ T36] audit: type=1400 audit(1750465031.852:2444): avc: denied { accept } for pid=24838 comm="syz.8.9915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 781.453583][T24852] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 781.891553][ T36] audit: type=1400 audit(1750465032.488:2445): avc: denied { map } for pid=24861 comm="syz.9.9926" path="socket:[207273]" dev="sockfs" ino=207273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 781.996274][T24864] ip6gre0: entered promiscuous mode [ 782.001920][T24864] FAULT_INJECTION: forcing a failure. [ 782.001920][T24864] name failslab, interval 1, probability 0, space 0, times 0 [ 782.014707][T24864] CPU: 0 UID: 0 PID: 24864 Comm: syz.9.9927 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 782.014746][T24864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 782.014761][T24864] Call Trace: [ 782.014769][T24864] [ 782.014779][T24864] __dump_stack+0x21/0x30 [ 782.014811][T24864] dump_stack_lvl+0x10c/0x190 [ 782.014838][T24864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 782.014865][T24864] ? call_rcu_nocb+0x276/0xc10 [ 782.014887][T24864] dump_stack+0x19/0x20 [ 782.014917][T24864] should_fail_ex+0x3d9/0x530 [ 782.014943][T24864] should_failslab+0xac/0x100 [ 782.014974][T24864] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 782.014999][T24864] ? __alloc_skb+0x10c/0x370 [ 782.015026][T24864] ? __cfi_fib6_info_destroy_rcu+0x10/0x10 [ 782.015051][T24864] __alloc_skb+0x10c/0x370 [ 782.015079][T24864] inet6_rt_notify+0x2a6/0x480 [ 782.015109][T24864] ? __kasan_check_read+0x15/0x20 [ 782.015133][T24864] ? fib6_purge_rt+0x6ca/0x780 [ 782.015158][T24864] ? __cfi_inet6_rt_notify+0x10/0x10 [ 782.015188][T24864] fib6_del+0xbe2/0xfa0 [ 782.015223][T24864] ? __cfi_fib6_del+0x10/0x10 [ 782.015246][T24864] ? enqueue_entity+0x448/0xf90 [ 782.015269][T24864] ? fib6_ifdown+0x2f4/0x4f0 [ 782.015299][T24864] fib6_clean_node+0x2ae/0x540 [ 782.015323][T24864] ? __cfi_fib6_clean_node+0x10/0x10 [ 782.015351][T24864] ? __kasan_check_write+0x18/0x20 [ 782.015375][T24864] fib6_walk_continue+0x518/0x740 [ 782.015403][T24864] __fib6_clean_all+0x28c/0x410 [ 782.015428][T24864] ? __cfi_fib6_ifdown+0x10/0x10 [ 782.015457][T24864] ? fib6_clean_all+0x50/0x50 [ 782.015481][T24864] ? __cfi_fib6_clean_node+0x10/0x10 [ 782.015506][T24864] ? __cfi_fib6_ifdown+0x10/0x10 [ 782.015535][T24864] ? try_to_wake_up+0xdd2/0x1aa0 [ 782.015567][T24864] ? __cfi_preempt_schedule+0x10/0x10 [ 782.015598][T24864] ? __cfi_fib6_ifdown+0x10/0x10 [ 782.015625][T24864] fib6_clean_all+0x2e/0x50 [ 782.015648][T24864] rt6_disable_ip+0x129/0x870 [ 782.015677][T24864] ? preempt_schedule_thunk+0x1a/0x40 [ 782.015711][T24864] ? __queue_work+0xb5d/0x1120 [ 782.015743][T24864] ? __cfi_rt6_disable_ip+0x10/0x10 [ 782.015773][T24864] ? __kasan_check_read+0x15/0x20 [ 782.015797][T24864] addrconf_ifdown+0x161/0x1940 [ 782.015825][T24864] ? sock_do_ioctl+0x244/0x330 [ 782.015850][T24864] ? addrconf_cleanup+0x150/0x150 [ 782.015880][T24864] ? __kasan_check_write+0x18/0x20 [ 782.015903][T24864] ? mutex_unlock+0x8b/0x240 [ 782.015923][T24864] ? __cfi_mutex_unlock+0x10/0x10 [ 782.015945][T24864] ? __cfi_device_cmp+0x10/0x10 [ 782.015971][T24864] ? masq_device_event+0xe0/0xe0 [ 782.015996][T24864] addrconf_notify+0x17a/0xea0 [ 782.016030][T24864] ? __cfi_addrconf_notify+0x10/0x10 [ 782.016062][T24864] notifier_call_chain+0x10b/0x2c0 [ 782.016092][T24864] raw_notifier_call_chain+0x31/0x40 [ 782.016121][T24864] __dev_notify_flags+0x2d3/0x530 [ 782.016148][T24864] ? dev_set_rx_mode+0x223/0x2c0 [ 782.016169][T24864] ? __cfi___dev_notify_flags+0x10/0x10 [ 782.016190][T24864] ? __dev_change_flags+0x4cf/0x6a0 [ 782.016220][T24864] ? __cfi___dev_change_flags+0x10/0x10 [ 782.016241][T24864] ? selinux_perf_event_alloc+0x110/0x110 [ 782.016271][T24864] dev_change_flags+0xe9/0x1a0 [ 782.016291][T24864] dev_ifsioc+0x6ac/0xe60 [ 782.016317][T24864] ? dev_ioctl+0x1030/0x1030 [ 782.016342][T24864] ? dev_get_by_name_rcu+0xe9/0x140 [ 782.016370][T24864] dev_ioctl+0x9fa/0x1030 [ 782.016394][T24864] sock_do_ioctl+0x244/0x330 [ 782.016415][T24864] ? sock_show_fdinfo+0xd0/0xd0 [ 782.016446][T24864] ? __cfi_vfs_write+0x10/0x10 [ 782.016468][T24864] ? __kasan_check_write+0x18/0x20 [ 782.016488][T24864] ? mutex_unlock+0x8b/0x240 [ 782.016505][T24864] sock_ioctl+0x634/0x7b0 [ 782.016524][T24864] ? __cfi_sock_ioctl+0x10/0x10 [ 782.016544][T24864] ? __fget_files+0x2c5/0x340 [ 782.016569][T24864] ? bpf_lsm_file_ioctl+0xd/0x20 [ 782.016589][T24864] ? security_file_ioctl+0x34/0xd0 [ 782.016614][T24864] ? __cfi_sock_ioctl+0x10/0x10 [ 782.016633][T24864] __se_sys_ioctl+0x132/0x1b0 [ 782.016659][T24864] __x64_sys_ioctl+0x7f/0xa0 [ 782.016683][T24864] x64_sys_call+0x1878/0x2ee0 [ 782.016706][T24864] do_syscall_64+0x58/0xf0 [ 782.016730][T24864] ? clear_bhb_loop+0x35/0x90 [ 782.016758][T24864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 782.016784][T24864] RIP: 0033:0x7f1bda58e929 [ 782.016801][T24864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.016817][T24864] RSP: 002b:00007f1bdb39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.016838][T24864] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58e929 [ 782.016853][T24864] RDX: 0000200000000a40 RSI: 0000000000008914 RDI: 0000000000000003 [ 782.016866][T24864] RBP: 00007f1bdb39b090 R08: 0000000000000000 R09: 0000000000000000 [ 782.016878][T24864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.016890][T24864] R13: 0000000000000000 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 782.016905][T24864] [ 782.591581][T24870] ip6gre0: entered promiscuous mode [ 782.698992][T24878] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 782.801799][T24892] 9pnet_virtio: no channels available for device syz [ 783.094878][T24908] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 783.180284][T24912] 9pnet_virtio: no channels available for device syz [ 783.201887][T24914] netlink: 'syz.8.9951': attribute type 4 has an invalid length. [ 783.210834][T24915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24915 comm=syz.8.9951 [ 783.223927][T24915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24915 comm=syz.8.9951 [ 783.237085][T24915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24915 comm=syz.8.9951 [ 783.250372][T24915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24915 comm=syz.8.9951 [ 783.264141][T24915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=24915 comm=syz.8.9951 [ 783.797352][ T36] audit: type=1400 audit(1750465034.265:2446): avc: denied { create } for pid=24967 comm="syz.4.9975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 784.326471][T24986] 9pnet_virtio: no channels available for device syz [ 785.294895][T25053] FAULT_INJECTION: forcing a failure. [ 785.294895][T25053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.316999][T25053] CPU: 1 UID: 0 PID: 25053 Comm: syz.9.10013 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 785.317040][T25053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.317055][T25053] Call Trace: [ 785.317064][T25053] [ 785.317073][T25053] __dump_stack+0x21/0x30 [ 785.317105][T25053] dump_stack_lvl+0x10c/0x190 [ 785.317130][T25053] ? __cfi_dump_stack_lvl+0x10/0x10 [ 785.317158][T25053] dump_stack+0x19/0x20 [ 785.317181][T25053] should_fail_ex+0x3d9/0x530 [ 785.317206][T25053] should_fail+0xf/0x20 [ 785.317227][T25053] should_fail_usercopy+0x1e/0x30 [ 785.317251][T25053] _copy_from_iter+0x1a3/0x14b0 [ 785.317278][T25053] ? __kasan_check_write+0x18/0x20 [ 785.317301][T25053] ? __build_skb_around+0x2a4/0x5a0 [ 785.317329][T25053] ? __cfi__copy_from_iter+0x10/0x10 [ 785.317358][T25053] ? check_stack_object+0x82/0x140 [ 785.317383][T25053] ? __virt_addr_valid+0x2a6/0x380 [ 785.317415][T25053] ? __check_object_size+0x455/0x620 [ 785.317441][T25053] netlink_sendmsg+0x680/0xaf0 [ 785.317473][T25053] ? __cfi_netlink_sendmsg+0x10/0x10 [ 785.317506][T25053] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 785.317538][T25053] ? security_socket_sendmsg+0x33/0xd0 [ 785.317565][T25053] ? __cfi_netlink_sendmsg+0x10/0x10 [ 785.317595][T25053] ____sys_sendmsg+0xa15/0xa70 [ 785.317629][T25053] ? __sys_sendmsg_sock+0x50/0x50 [ 785.317662][T25053] ? import_iovec+0x81/0xb0 [ 785.317692][T25053] ___sys_sendmsg+0x220/0x2a0 [ 785.317722][T25053] ? __sys_sendmsg+0x280/0x280 [ 785.317754][T25053] ? proc_fail_nth_write+0x17e/0x210 [ 785.317775][T25053] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 785.317799][T25053] __x64_sys_sendmsg+0x1eb/0x2c0 [ 785.317817][T25053] ? fput+0x1a5/0x240 [ 785.317849][T25053] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 785.317899][T25053] ? ksys_write+0x1ef/0x250 [ 785.317926][T25053] ? __kasan_check_read+0x15/0x20 [ 785.317950][T25053] x64_sys_call+0x2a4c/0x2ee0 [ 785.317976][T25053] do_syscall_64+0x58/0xf0 [ 785.318004][T25053] ? clear_bhb_loop+0x35/0x90 [ 785.318034][T25053] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 785.318063][T25053] RIP: 0033:0x7f1bda58e929 [ 785.318080][T25053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.318098][T25053] RSP: 002b:00007f1bdb39b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.318120][T25053] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58e929 [ 785.318136][T25053] RDX: 0000000004000884 RSI: 0000200000000100 RDI: 0000000000000003 [ 785.318150][T25053] RBP: 00007f1bdb39b090 R08: 0000000000000000 R09: 0000000000000000 [ 785.318164][T25053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.318176][T25053] R13: 0000000000000000 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 785.318193][T25053] [ 785.644653][T25060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276 [ 785.644751][T25061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276 [ 785.702786][T25066] FAULT_INJECTION: forcing a failure. [ 785.702786][T25066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.738859][T25066] CPU: 0 UID: 0 PID: 25066 Comm: syz.9.10019 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 785.738899][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.738914][T25066] Call Trace: [ 785.738922][T25066] [ 785.738931][T25066] __dump_stack+0x21/0x30 [ 785.738962][T25066] dump_stack_lvl+0x10c/0x190 [ 785.738988][T25066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 785.739016][T25066] ? is_bpf_text_address+0x17b/0x1a0 [ 785.739048][T25066] dump_stack+0x19/0x20 [ 785.739072][T25066] should_fail_ex+0x3d9/0x530 [ 785.739097][T25066] should_fail+0xf/0x20 [ 785.739119][T25066] should_fail_usercopy+0x1e/0x30 [ 785.739146][T25066] _copy_from_user+0x22/0xb0 [ 785.739176][T25066] __copy_msghdr+0x3ec/0x5d0 [ 785.739211][T25066] ___sys_sendmsg+0x1a6/0x2a0 [ 785.739243][T25066] ? __sys_sendmsg+0x280/0x280 [ 785.739276][T25066] ? kstrtouint+0x78/0xf0 [ 785.739305][T25066] __sys_sendmmsg+0x271/0x470 [ 785.739327][T25066] ? __cfi___sys_sendmmsg+0x10/0x10 [ 785.739353][T25066] ? __cfi_ksys_write+0x10/0x10 [ 785.739381][T25066] __x64_sys_sendmmsg+0xa4/0xc0 [ 785.739402][T25066] x64_sys_call+0xfec/0x2ee0 [ 785.739430][T25066] do_syscall_64+0x58/0xf0 [ 785.739459][T25066] ? clear_bhb_loop+0x35/0x90 [ 785.739491][T25066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 785.739520][T25066] RIP: 0033:0x7f1bda58e929 [ 785.739539][T25066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.739559][T25066] RSP: 002b:00007f1bdb39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 785.739591][T25066] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58e929 [ 785.739608][T25066] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 785.739623][T25066] RBP: 00007f1bdb39b090 R08: 0000000000000000 R09: 0000000000000000 [ 785.739637][T25066] R10: 0000000020000860 R11: 0000000000000246 R12: 0000000000000001 [ 785.739651][T25066] R13: 0000000000000000 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 785.739670][T25066] [ 786.137712][T25084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10027'. [ 786.356023][T25089] input: syz0 as /devices/virtual/input/input173 [ 786.738703][T25136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 786.897238][T25146] 9pnet_virtio: no channels available for device syz [ 786.918336][T25154] overlayfs: missing 'lowerdir' [ 786.934513][T25146] overlayfs: failed to clone lowerpath [ 786.986112][T25159] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 786.994862][T25159] overlayfs: missing 'lowerdir' [ 787.006150][T25159] fuse: Unknown parameter 'f' [ 787.140504][ T36] audit: type=1326 audit(1750465037.398:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25170 comm="syz.4.10065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb2418e929 code=0x0 [ 787.273602][T25180] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 787.281393][T25180] audit: out of memory in audit_log_start [ 787.301401][T25182] FAULT_INJECTION: forcing a failure. [ 787.301401][T25182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.314771][T25182] CPU: 0 UID: 0 PID: 25182 Comm: syz.9.10070 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 787.314810][T25182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 787.314825][T25182] Call Trace: [ 787.314833][T25182] [ 787.314841][T25182] __dump_stack+0x21/0x30 [ 787.314872][T25182] dump_stack_lvl+0x10c/0x190 [ 787.314898][T25182] ? __cfi_dump_stack_lvl+0x10/0x10 [ 787.314926][T25182] dump_stack+0x19/0x20 [ 787.314952][T25182] should_fail_ex+0x3d9/0x530 [ 787.314978][T25182] should_fail+0xf/0x20 [ 787.315000][T25182] should_fail_usercopy+0x1e/0x30 [ 787.315025][T25182] _copy_to_user+0x24/0xa0 [ 787.315055][T25182] simple_read_from_buffer+0xed/0x160 [ 787.315090][T25182] proc_fail_nth_read+0x19e/0x210 [ 787.315112][T25182] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 787.315134][T25182] ? bpf_lsm_file_permission+0xd/0x20 [ 787.315157][T25182] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 787.315178][T25182] vfs_read+0x278/0xb60 [ 787.315203][T25182] ? pipe_fasync+0x12f/0x1f0 [ 787.315228][T25182] ? _raw_spin_unlock+0x45/0x60 [ 787.315257][T25182] ? __cfi_vfs_read+0x10/0x10 [ 787.315282][T25182] ? __kasan_check_write+0x18/0x20 [ 787.315306][T25182] ? mutex_lock+0x92/0x1c0 [ 787.315325][T25182] ? __cfi_mutex_lock+0x10/0x10 [ 787.315345][T25182] ? __fget_files+0x2c5/0x340 [ 787.315376][T25182] ksys_read+0x141/0x250 [ 787.315402][T25182] ? __cfi_ksys_read+0x10/0x10 [ 787.315436][T25182] ? __kasan_check_write+0x18/0x20 [ 787.315460][T25182] ? fput+0x1a5/0x240 [ 787.315493][T25182] ? __kasan_check_read+0x15/0x20 [ 787.315517][T25182] __x64_sys_read+0x7f/0x90 [ 787.315543][T25182] x64_sys_call+0x2638/0x2ee0 [ 787.315571][T25182] do_syscall_64+0x58/0xf0 [ 787.315598][T25182] ? clear_bhb_loop+0x35/0x90 [ 787.315632][T25182] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 787.315661][T25182] RIP: 0033:0x7f1bda58d33c [ 787.315680][T25182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 787.315700][T25182] RSP: 002b:00007f1bdb39b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.315724][T25182] RAX: ffffffffffffffda RBX: 00007f1bda7b5fa0 RCX: 00007f1bda58d33c [ 787.315746][T25182] RDX: 000000000000000f RSI: 00007f1bdb39b0a0 RDI: 0000000000000005 [ 787.315760][T25182] RBP: 00007f1bdb39b090 R08: 0000000000000000 R09: 0000000000000000 [ 787.315775][T25182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.315789][T25182] R13: 0000000000000000 R14: 00007f1bda7b5fa0 R15: 00007ffec05720f8 [ 787.315807][T25182] [ 787.628340][ T36] audit: type=1400 audit(1750465037.847:2448): avc: denied { write } for pid=25183 comm="syz.9.10071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 787.807930][T25188] fuse: Bad value for 'user_id' [ 787.812885][T25188] fuse: Bad value for 'user_id' [ 787.908035][ T36] audit: type=1326 audit(1750465038.119:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25161 comm="syz.8.10062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3278e929 code=0x7fc00000 [ 788.184787][ T7162] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 788.346224][ T7162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.366507][ T7162] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.376395][ T7162] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 788.386527][ T7162] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.407251][ T7162] usb 10-1: config 0 descriptor?? [ 788.419229][ T36] audit: type=1400 audit(1750465038.596:2450): avc: denied { relabelfrom } for pid=25211 comm="syz.4.10082" name="" dev="pipefs" ino=208537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 788.442712][ T36] audit: type=1400 audit(1750465038.596:2451): avc: denied { relabelto } for pid=25211 comm="syz.4.10082" name="" dev="pipefs" ino=208537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/dev/kvm" [ 788.468176][T25212] 9pnet_virtio: no channels available for device ./file0 [ 789.137117][T25248] netlink: 'syz.8.10099': attribute type 4 has an invalid length. [ 789.427403][ T304] bridge_slave_1: left allmulticast mode [ 789.435657][ T304] bridge_slave_1: left promiscuous mode [ 789.441673][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.450274][ T36] audit: type=1400 audit(1750465039.559:2452): avc: denied { connect } for pid=25268 comm="syz.4.10109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 789.470358][ T304] bridge_slave_0: left allmulticast mode [ 789.476801][ T304] bridge_slave_0: left promiscuous mode [ 789.482951][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.601342][ T304] veth1_macvtap: left promiscuous mode [ 789.607621][ T304] veth0_vlan: left promiscuous mode [ 789.671260][T25260] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.678518][T25260] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.685843][T25260] bridge_slave_0: entered allmulticast mode [ 789.692481][T25260] bridge_slave_0: entered promiscuous mode [ 789.700188][T25260] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.707491][T25260] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.714945][T25260] bridge_slave_1: entered allmulticast mode [ 789.716954][ T7162] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0050/input/input174 [ 789.721410][T25260] bridge_slave_1: entered promiscuous mode [ 789.746474][ T7162] uclogic 0003:256C:006D.0050: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 789.814681][T25260] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.821817][T25260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.829118][T25260] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.836180][T25260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.863725][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.871215][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.881536][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.888642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.897819][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.904961][T13378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.932339][ T7386] usb 10-1: USB disconnect, device number 50 [ 789.940747][T25260] veth0_vlan: entered promiscuous mode [ 789.953252][T25260] veth1_macvtap: entered promiscuous mode [ 790.276562][T25297] 9pnet_virtio: no channels available for device syz [ 790.505775][T25320] 9pnet_virtio: no channels available for device syz [ 790.664300][ T36] audit: type=1400 audit(1750465040.691:2453): avc: denied { create } for pid=25328 comm="syz.4.10131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 790.898478][T25338] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.905673][T25338] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.913098][T25338] bridge_slave_0: entered allmulticast mode [ 790.919378][T25338] bridge_slave_0: entered promiscuous mode [ 790.925914][T25338] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.932995][T25338] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.940631][T25338] bridge_slave_1: entered allmulticast mode [ 790.947034][T25338] bridge_slave_1: entered promiscuous mode [ 791.096582][ T304] bridge_slave_1: left allmulticast mode [ 791.102284][ T304] bridge_slave_1: left promiscuous mode [ 791.108154][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.116319][ T304] bridge_slave_0: left allmulticast mode [ 791.122028][ T304] bridge_slave_0: left promiscuous mode [ 791.127878][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.226479][T25338] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.233558][T25338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.240835][T25338] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.247897][T25338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.257510][ T304] tipc: Left network mode [ 791.263274][ T304] veth1_macvtap: left promiscuous mode [ 791.268956][ T304] veth0_vlan: left promiscuous mode [ 791.344095][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.351561][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.362769][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.369870][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.385714][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.392899][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.444872][T25338] veth0_vlan: entered promiscuous mode [ 791.462039][T25338] veth1_macvtap: entered promiscuous mode [ 791.622196][T25373] overlayfs: failed to resolve './file1/file0/file0': -2 [ 791.809014][ T7386] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 791.981186][ T7386] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 791.990765][ T7386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.999570][ T7386] usb 9-1: config 0 descriptor?? [ 792.786036][ T631] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 792.952857][ T631] usb 10-1: Using ep0 maxpacket: 32 [ 792.959178][ T631] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 792.967536][ T631] usb 10-1: config 0 has no interface number 0 [ 792.973763][ T631] usb 10-1: config 0 interface 67 has no altsetting 0 [ 792.982167][ T631] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 792.991608][ T631] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 792.999967][ T631] usb 10-1: Product: syz [ 793.004771][ T631] usb 10-1: Manufacturer: syz [ 793.009525][ T631] usb 10-1: SerialNumber: syz [ 793.015032][ T631] usb 10-1: config 0 descriptor?? [ 793.021384][ T631] smsc95xx v2.0.0 [ 793.241937][ T631] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 793.254083][ T631] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 793.268302][ T631] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 793.279622][ T631] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 793.297966][ T631] usb 10-1: USB disconnect, device number 51 [ 793.350885][ T7386] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 793.366543][ T7386] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 793.377110][ T7386] asix 9-1:0.0: probe with driver asix failed with error -71 [ 793.385802][ T7386] usb 9-1: USB disconnect, device number 31 [ 794.150143][ T7386] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 794.311596][ T7386] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 794.322911][ T7386] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 794.334547][ T7386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 794.345656][ T7386] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.360657][ T7386] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 794.370077][ T7386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.377214][T25430] 9pnet_virtio: no channels available for device syz [ 794.378646][ T7386] usb 9-1: Product: syz [ 794.393297][ T7386] usb 9-1: Manufacturer: syz [ 794.401242][ T7386] usb 9-1: SerialNumber: syz [ 794.408963][ T7386] usb 9-1: config 0 descriptor?? [ 794.418864][T25416] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 794.429256][ T7386] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input175 [ 794.651707][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.661468][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.698985][T25449] 9pnet_virtio: no channels available for device syz [ 794.870200][ T36] audit: type=1400 audit(1750465044.629:2454): avc: denied { read } for pid=25465 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 794.918884][T25475] overlay: ./file0 is not a directory [ 794.974904][T25483] overlayfs: failed to clone upperpath Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK [ 795.219392][ T631] usb 9-1: USB disconnect, device number 32 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 795.488379][ T36] audit: type=1400 audit(1750465045.200:2455): avc: denied { read write } for pid=25525 comm="ip" path="/dev/console" dev="rootfs" ino=1063 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 795.529798][ T36] audit: type=1400 audit(1750465045.228:2456): avc: denied { unlink } for pid=148 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 795.649918][ T36] audit: type=1400 audit(1750465045.359:2457): avc: denied { read write } for pid=25540 comm="iptables" path="/dev/console" dev="rootfs" ino=1063 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 795.698856][ T36] audit: type=1400 audit(1750465045.359:2458): avc: denied { search } for pid=25540 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.721083][T25536] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 795.721123][T25536] rust_binder: Error in use_page_slow: EBUSY [ 795.723533][ T36] audit: type=1400 audit(1750465045.359:2459): avc: denied { write } for pid=25540 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 795.742946][T25536] rust_binder: use_range failure EBUSY [ 795.772213][T25531] tmpfs: Invalid uid '0x00000000ffffffff' [ 795.773122][T25536] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 795.815946][T25536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 795.815996][ T36] audit: type=1400 audit(1750465045.359:2460): avc: denied { add_name } for pid=25540 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.834587][ T36] audit: type=1400 audit(1750465045.359:2461): avc: denied { create } for pid=25540 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 795.879156][T25536] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 795.903162][T25553] FAULT_INJECTION: forcing a failure. [ 795.903162][T25553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.930534][T25553] CPU: 1 UID: 0 PID: 25553 Comm: syz.8.10215 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 795.930572][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 795.930587][T25553] Call Trace: [ 795.930595][T25553] [ 795.930604][T25553] __dump_stack+0x21/0x30 [ 795.930635][T25553] dump_stack_lvl+0x10c/0x190 [ 795.930660][T25553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 795.930686][T25553] ? kstrtoull+0x13b/0x1e0 [ 795.930708][T25553] dump_stack+0x19/0x20 [ 795.930736][T25553] should_fail_ex+0x3d9/0x530 [ 795.930769][T25553] should_fail+0xf/0x20 [ 795.930790][T25553] should_fail_usercopy+0x1e/0x30 [ 795.930815][T25553] _copy_from_user+0x22/0xb0 [ 795.930845][T25553] ___sys_sendmsg+0x159/0x2a0 [ 795.930877][T25553] ? __sys_sendmsg+0x280/0x280 [ 795.930910][T25553] ? proc_fail_nth_write+0x17e/0x210 [ 795.930932][T25553] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 795.930960][T25553] __x64_sys_sendmsg+0x1eb/0x2c0 [ 795.930980][T25553] ? fput+0x1a5/0x240 [ 795.931010][T25553] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 795.931030][T25553] ? ksys_write+0x1ef/0x250 [ 795.931057][T25553] ? __kasan_check_read+0x15/0x20 [ 795.931083][T25553] x64_sys_call+0x2a4c/0x2ee0 [ 795.931110][T25553] do_syscall_64+0x58/0xf0 [ 795.931137][T25553] ? clear_bhb_loop+0x35/0x90 [ 795.931169][T25553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 795.931200][T25553] RIP: 0033:0x7f20b918e929 [ 795.931217][T25553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.931236][T25553] RSP: 002b:00007f20b9f26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.931259][T25553] RAX: ffffffffffffffda RBX: 00007f20b93b5fa0 RCX: 00007f20b918e929 [ 795.931276][T25553] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 795.931290][T25553] RBP: 00007f20b9f26090 R08: 0000000000000000 R09: 0000000000000000 [ 795.931304][T25553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.931317][T25553] R13: 0000000000000000 R14: 00007f20b93b5fa0 R15: 00007ffefd395058 [ 795.931335][T25553] [ 795.935489][ T36] audit: type=1400 audit(1750465045.359:2462): avc: denied { read open } for pid=25540 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=24476 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.172219][T25536] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:374 [ 796.172223][ T36] audit: type=1400 audit(1750465045.359:2463): avc: denied { lock } for pid=25540 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=24476 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.279206][T25561] overlayfs: failed to resolve './file1': -2 Stopping klogd: [ 796.386836][T25568] 9pnet_virtio: no channels available for device syz OK Stopping acpid: [ 796.566285][ T631] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 796.737277][ T631] usb 10-1: Using ep0 maxpacket: 32 [ 796.743665][ T631] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 796.753931][ T631] usb 10-1: config 0 has no interfaces? [ 796.759554][ T631] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 796.768703][ T631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.777536][ T631] usb 10-1: config 0 descriptor?? [ 796.999190][T25561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.007760][T25561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.017859][ T62] usb 10-1: USB disconnect, device number 52 [ 797.496316][ T372] usb 10-1: new full-speed USB device number 53 using dummy_hcd OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 797.668595][ T372] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 797.677121][ T372] usb 10-1: config 0 has no interface number 0 [ 797.683490][ T372] usb 10-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 797.696919][ T372] usb 10-1: config 0 interface 184 has no altsetting 0 [ 797.705750][ T372] usb 10-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=69.ee umount: can't remount debugfs read-only [ 797.721191][ T372] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.729393][ T372] usb 10-1: Product: syz [ 797.733781][ T372] usb 10-1: Manufacturer: syz [ 797.740140][ T372] usb 10-1: SerialNumber: syz [ 797.745739][ T372] usb 10-1: config 0 descriptor?? [ 797.776680][T25631] 9pnet_virtio: no channels available for device syz [ 797.817063][ T631] usb 9-1: new high-speed USB device number 33 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.27 closed by remote host. Sent SIGTERM to all processes [ 797.882027][ T372] usb 10-1: USB disconnect, device number 53 [ 798.534027][ T13] bridge_slave_1: left allmulticast mode [ 798.539695][ T13] bridge_slave_1: left promiscuous mode [ 798.545484][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.552984][ T13] bridge_slave_0: left allmulticast mode [ 798.558680][ T13] bridge_slave_0: left promiscuous mode [ 798.564410][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.572499][ T13] bridge_slave_1: left allmulticast mode [ 798.578246][ T13] bridge_slave_1: left promiscuous mode [ 798.583899][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.591423][ T13] bridge_slave_0: left allmulticast mode [ 798.597121][ T13] bridge_slave_0: left promiscuous mode [ 798.602877][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.015691][ T13] veth1_macvtap: left promiscuous mode [ 799.021249][ T13] veth0_vlan: left promiscuous mode [ 799.026802][ T13] veth1_macvtap: left promiscuous mode [ 799.032292][ T13] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 800.263057][T25634] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 800.270257][T25634] ACPI: PM: Preparing to enter system sleep state S5 [ 800.277454][T25634] kvm: exiting hardware virtualization [ 800.282972][T25634] reboot: Power down serialport: VM disconnected.